Edit tour

Windows Analysis Report
Madisonwellsmedia546.pdf

Overview

General Information

Sample name:	Madisonwellsmedia546.pdf
Analysis ID:	1500041
MD5:	5860e337c8192049cfd7f96f890aa7d0
SHA1:	b235adb0cef62030db5eefe95d6dd4147344186f
SHA256:	d7be5e35ec40822713120fa550bda29ee8e7edcf511d32199983cf0e653ec8a7
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Yara detected HtmlPhish54

Detected use of open redirect vulnerability

Phishing site detected (based on favicon image match)

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Detected suspicious crossdomain redirect

Found iframes

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML page contains string obfuscation

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

Acrobat.exe (PID: 1388 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Madisonwellsmedia546.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 6936 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7012 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2252 --field-trial-handle=1580,i,18033727624882255278,16233875503812827206,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 6592 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.fortismerchants.co.uk/rd?cmnpn=93885&ct=90493&u=https%3A%2F%2Fsubcg.tynurserys.com%2FpCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ== MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3596 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1832,i,10525007346694860206,14711578944265795269,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
7.11.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
10.26.i.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
10.19.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
7.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
10.5.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
10.7.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 1 entries

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://subcg.tynurserys.com/pCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==	SlashNext: Label: Credential Stealing type: Phishing & Social Engineering
Source: https://www.tynurserys.com/mail/	Avira URL Cloud: Label: malware
Source: https://www.tynurserys.com/	Avira URL Cloud: Label: malware
Source: https://subcg.tynurserys.com	Avira URL Cloud: Label: malware
Source: https://subcg.tynurserys.com/pCavcKaS?d=eA5LR9g	Avira URL Cloud: Label: malware
Source: https://ywnjb.tynurserys.com/Me.htm?v=3	Avira URL Cloud: Label: malware
Source: https://www.tynurserys.com/owa/?state=1&redirectTo=aHR0cHM6Ly9vdXRsb29rLm9mZmljZS5jb20vbWFpbC8	Avira URL Cloud: Label: malware
Source: https://www.tynurserys.com/mail/favicon.ico	Avira URL Cloud: Label: malware
Source: https://subcg.tynurserys.com/pCavcKaS	Avira URL Cloud: Label: malware
Source: https://www.tynurserys.com/owa/startupdata.ashx?app=Mail&n=0	Avira URL Cloud: Label: malware
Source: https://subcg.tynurserys.com/favicon.ico	Avira URL Cloud: Label: malware
Source: https://www.tynurserys.com/mail/?authRedirect=true&state=0	Avira URL Cloud: Label: malware

Phishing

Yara detected HtmlPhish54

Source: Yara match	File source: 7.11.id.script.csv, type: HTML
Source: Yara match	File source: 10.26.i.script.csv, type: HTML
Source: Yara match	File source: 10.19.id.script.csv, type: HTML
Source: Yara match	File source: 7.4.pages.csv, type: HTML
Source: Yara match	File source: 10.5.pages.csv, type: HTML
Source: Yara match	File source: 10.7.pages.csv, type: HTML

Detected use of open redirect vulnerability

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Proxy from: www.fortismerchants.co.uk/rd?cmnpn=93885&ct=90493&u=https://subcg.tynurserys.com/pcavckas to https://subcg.tynurserys.com/pcavckas

Phishing site detected (based on favicon image match)

Source: https://tynurserys.com	Matcher: Template: outlook matched with high similarity
Source: https://tynurserys.com	Matcher: Template: microsoft matched with high similarity
Source: https://www.tynurserys.com/mail/#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==	Matcher: Template: outlook matched with high similarity
Source: https://subcg.tynurserys.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw&sso_reload=true	Matcher: Template: microsoft matched with high similarity

Phishing site detected (based on image similarity)

Source: https://subcg.tynurserys.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw&sso_reload=true

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Matcher: Template: microsoft matched

Source: https://subcg.tynurserys.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://subcg.tynurserys.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx

HTTP Parser: Number of links: 0

Source: https://subcg.tynurserys.com/pCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==

HTTP Parser: Base64 decoded: {"version":3,"sourceRoot":"/cfsetup_build/src/orchestrator/turnstile/templates","sources":["turnstile.scss"],"names":[],"mappings":"AAmCA;EACI;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI;IAEI;;EAGJ;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI...

Source: https://subcg.tynurserys.com/pCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==

HTTP Parser: Found new string: script . var verifyCallback_CF = function(response) {. let cfForm = document.querySelector("#cfForm");. if (validateElement(cfForm) && response.length > 10) {. cfForm.remove();. window.location.href = 'htt' + 'ps:' + '/' + '/su' + 'b' + 'cg' + '.' + 't' + 'yn' + 'ur' + 'ser' + 'ys.' + 'co' + 'm' + '/pC' + 'a' + 'vcK' + 'aS' + '?' + 'd=e' + 'A5' + 'LR9' + 'g' + window.location.hash;. return;. }. console.log("CAPTCHA verification failed or response length is not sufficient.");. return;. };.. function validateElement(element) {. return element != undefined && element.style != undefined && element.style.visibility != undefined;. }. ..

HTTP Parser: Title: Sign in to Outlook does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://subcg.tynurserys.com/pCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==	HTTP Parser: No favicon
Source: https://subcg.tynurserys.com/pCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==	HTTP Parser: No favicon
Source: https://subcg.tynurserys.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw	HTTP Parser: No favicon
Source: https://subcg.tynurserys.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw&sso_reload=true	HTTP Parser: No favicon

Source: https://subcg.tynurserys.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://subcg.tynurserys.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://subcg.tynurserys.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://subcg.tynurserys.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.17:443 -> 192.168.2.16:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.17:443 -> 192.168.2.16:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.71.55.58:443 -> 192.168.2.16:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.44.239.154:443 -> 192.168.2.16:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.44.239.154:443 -> 192.168.2.16:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.44.239.154:443 -> 192.168.2.16:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49826 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: www.fortismerchants.co.uk to https://subcg.tynurserys.com/pcavckas

Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 52.98.171.226 52.98.171.226
Source: Joe Sandbox View	IP Address: 104.18.95.41 104.18.95.41

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.104.175
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.104.175
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.104.175
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.104.175
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.104.175
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.104.175
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.104.175
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.104.175
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.104.175
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.104.175
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.17
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.17
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.17
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27

Source: global traffic	HTTP traffic detected: GET /rd?cmnpn=93885&ct=90493&u=https%3A%2F%2Fsubcg.tynurserys.com%2FpCavcKaS HTTP/1.1Host: www.fortismerchants.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pCavcKaS HTTP/1.1Host: subcg.tynurserys.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b9dff303c257c94&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b9dff303c257c94&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: subcg.tynurserys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://subcg.tynurserys.com/pCavcKaSAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1551955146:1724779460:S8hevjRG-pPNv9fILcmjlicunHEMlWb-gIhGxGWCUgU/8b9dff303c257c94/41e7ec57f580fdd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8b9dff303c257c94/1724782002561/5c91b52924fe45452019fec6d584871061755f6bc465156f893751f28a58fe66/oJwCedlV4oz_aMK HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=B3PZfKzHNmcUX1d&MD=887pveRe HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8b9dff303c257c94/1724782002566/Z5BWo-8suzd4vYL HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8b9dff303c257c94/1724782002566/Z5BWo-8suzd4vYL HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1551955146:1724779460:S8hevjRG-pPNv9fILcmjlicunHEMlWb-gIhGxGWCUgU/8b9dff303c257c94/41e7ec57f580fdd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1551955146:1724779460:S8hevjRG-pPNv9fILcmjlicunHEMlWb-gIhGxGWCUgU/8b9dff303c257c94/41e7ec57f580fdd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pCavcKaS?d=eA5LR9g HTTP/1.1Host: subcg.tynurserys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://subcg.tynurserys.com/pCavcKaSAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; x-ms-gateway-slice=estsfd
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.tynurserys.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063
Source: global traffic	HTTP traffic detected: GET /mail/ HTTP/1.1Host: www.tynurserys.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063
Source: global traffic	HTTP traffic detected: GET /mail/?authRedirect=true&state=0 HTTP/1.1Host: www.tynurserys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; ClientId=73BB9829642148A3B29661493F90DA28; OIDC=1
Source: global traffic	HTTP traffic detected: GET /owa/?state=1&redirectTo=aHR0cHM6Ly9vdXRsb29rLm9mZmljZS5jb20vbWFpbC8 HTTP/1.1Host: www.tynurserys.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; ClientId=73BB9829642148A3B29661493F90DA28; OIDC=1
Source: global traffic	HTTP traffic detected: GET /common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw HTTP/1.1Host: subcg.tynurserys.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; x-ms-gateway-slice=estsfd
Source: global traffic	HTTP traffic detected: GET /mail/favicon.ico HTTP/1.1Host: www.tynurserys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; ClientId=73BB9829642148A3B29661493F90DA28; OIDC=1
Source: global traffic	HTTP traffic detected: GET /mail/favicon.ico HTTP/1.1Host: www.tynurserys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; ClientId=73BB9829642148A3B29661493F90DA28; OIDC=1; OpenIdConnect.nonce.v3.d6rFuCnryopyCWreCIpo-GzwsfnZvYmM1mQ9Vg-2nxQ=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b; X-OWA-RedirectHistory=ArLym14BOBYBDMPG3Ag
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://subcg.tynurserys.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw&sso_reload=true HTTP/1.1Host: subcg.tynurserys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://subcg.tynurserys.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2BwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; x-ms-gateway-slice=estsfd; esctx-760Fcq4eTww=AQABCQEAAAApTwJmzXqdR4BN2miheQMYx8BhBac_-dQXp-j71yrdzHsFdv7J_kMl_E9E3H5kc2Z4jE5t6ktfVJJ-a-idah5VREvrti1docxxj8pbcbKUobeYC7iptW_FVi6Zii4MWqfJMOp5WHxKe30VMfmDtAQyL8yLLvS6re32c9JRid4LFyAA; fpc=Ah-DUjHRs35IvQUf8G1BV9I; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMY_z6dHdWQ_8RiG5JkkVypmi-XaDg--4t3g-vPj1GB2NSKGlM10hdFLLjFQraz9UYiM4oetjfcQeZHmjsTW4x6k4kWgDINg1dcfTRVWbM7dK0rmYFs6pi5wkxGmb_ph4qbEdtPBzg7MzzQ1pUQjEGDa0igdu1WDRHh03oLZ21I27QgAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: ywnjb.tynurserys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://subcg.tynurserys.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_Cr8LUIyurKoYeKwC2s2vJw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://subcg.tynurserys.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://subcg.tynurserys.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_Cr8LUIyurKoYeKwC2s2vJw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://subcg.tynurserys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=B3PZfKzHNmcUX1d&MD=887pveRe HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: www.fortismerchants.co.uk
Source: global traffic	DNS traffic detected: DNS query: subcg.tynurserys.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: www.tynurserys.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: ywnjb.tynurserys.com
Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic	DNS traffic detected: DNS query: r4.res.office365.com
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1551955146:1724779460:S8hevjRG-pPNv9fILcmjlicunHEMlWb-gIhGxGWCUgU/8b9dff303c257c94/41e7ec57f580fdd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 2711sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: 41e7ec57f580fddsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 27 Aug 2024 18:06:42 GMTTransfer-Encoding: chunkedConnection: closeCache-Control: privateNel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"Referrer-Policy: strict-origin-when-cross-originReport-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]}X-Ms-Ests-Server: 2.1.18760.5 - SCUS ProdSlicesX-Ms-Request-Id: 0d25a9a3-a47b-43a8-bcae-40bc0261ac00X-Ms-Srs: 1.PCF-Cache-Status: BYPASSSet-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8b9dff3b48fb8c4b-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 27 Aug 2024 18:06:43 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: vwrDZvLgP2k10vyQ1Vhc8oJpX1DLoUctj4s=$4wtWHz0I57ybeLOjcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8b9dff41fbde42c1-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 27 Aug 2024 18:06:48 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: qWdxeswoheF8yz3Fft6GdBoVB+iHKcGDn7s=$eeCJHR9MGDLuJeGfServer: cloudflareCF-RAY: 8b9dff5efcdc7cf3-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 27 Aug 2024 18:06:52 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: DUvLs5byH3ngfLtuSLjWZDPOVDoWA2+d7Qc=$rinYHjuelxHgLDr1cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8b9dff7809654237-EWRalt-svc: h3=":443"; ma=86400

Source: E0F5C59F9FA661F6F4C50B87FEF3A15A0.2.dr	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7c
Source: 77EC63BDA74BD0D0E0426DC8F80085060.2.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: chromecache_243.5.dr, chromecache_241.5.dr	String found in binary or memory: http://feross.org
Source: chromecache_223.5.dr	String found in binary or memory: http://github.com/jquery/globalize
Source: chromecache_225.5.dr, chromecache_237.5.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_203.5.dr, chromecache_209.5.dr, chromecache_229.5.dr, chromecache_221.5.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_225.5.dr, chromecache_237.5.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_203.5.dr, chromecache_209.5.dr, chromecache_229.5.dr, chromecache_221.5.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_201.5.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: 4b1b4a6b-3746-4da3-8a8f-3588479148b4.tmp.3.dr, 57178d7e-aca5-42d6-842c-4ca2e9bfa1ba.tmp.3.dr	String found in binary or memory: https://chrome.cloudflare-dns.com
Source: chromecache_203.5.dr, chromecache_209.5.dr, chromecache_218.5.dr, chromecache_243.5.dr, chromecache_235.5.dr, chromecache_229.5.dr, chromecache_241.5.dr, chromecache_221.5.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_202.5.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_245.5.dr, chromecache_224.5.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/apps/955070e9-99a6-4319-b8df-32adf59949aa_smal
Source: chromecache_202.5.dr	String found in binary or memory: https://subcg.tynurserys.com
Source: chromecache_245.5.dr, chromecache_224.5.dr	String found in binary or memory: https://web.yammer.com/teams/feed

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.17:443 -> 192.168.2.16:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.17:443 -> 192.168.2.16:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.71.55.58:443 -> 192.168.2.16:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.44.239.154:443 -> 192.168.2.16:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.44.239.154:443 -> 192.168.2.16:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.44.239.154:443 -> 192.168.2.16:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49826 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.winPDF@32/144@32/11

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-08-27 14-06-36-105.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Madisonwellsmedia546.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2252 --field-trial-handle=1580,i,18033727624882255278,16233875503812827206,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.fortismerchants.co.uk/rd?cmnpn=93885&ct=90493&u=https%3A%2F%2Fsubcg.tynurserys.com%2FpCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1832,i,10525007346694860206,14711578944265795269,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2252 --field-trial-handle=1580,i,18033727624882255278,16233875503812827206,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1832,i,10525007346694860206,14711578944265795269,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Madisonwellsmedia546.pdf	Initial sample: PDF keyword /JS count = 0
Source: Madisonwellsmedia546.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Madisonwellsmedia546.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: Madisonwellsmedia546.pdf

Initial sample: PDF keyword obj count = 52

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Web Protocols	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://subcg.tynurserys.com/pCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://chrome.cloudflare-dns.com	0%	URL Reputation	safe
https://outlook.office365.com/owa/prefetch.aspx	0%	URL Reputation	safe
http://underscorejs.org	0%	URL Reputation	safe
http://knockoutjs.com/	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	URL Reputation	safe
http://github.com/jquery/globalize	0%	Avira URL Cloud	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://www.tynurserys.com/mail/	100%	Avira URL Cloud	malware
https://www.tynurserys.com/	100%	Avira URL Cloud	malware
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	URL Reputation	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8b9dff303c257c94/1724782002566/Z5BWo-8suzd4vYL	0%	Avira URL Cloud	safe
http://feross.org	0%	URL Reputation	safe
https://subcg.tynurserys.com	100%	Avira URL Cloud	malware
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js	0%	Avira URL Cloud	safe
http://jedwatson.github.io/classnames	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png	0%	Avira URL Cloud	safe
https://subcg.tynurserys.com/pCavcKaS?d=eA5LR9g	100%	Avira URL Cloud	malware
https://login.windows-ppe.net	0%	Avira URL Cloud	safe
https://github.com/douglascrockford/JSON-js	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	0%	Avira URL Cloud	safe
https://ywnjb.tynurserys.com/Me.htm?v=3	100%	Avira URL Cloud	malware
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	0%	Avira URL Cloud	safe
https://www.tynurserys.com/owa/?state=1&redirectTo=aHR0cHM6Ly9vdXRsb29rLm9mZmljZS5jb20vbWFpbC8	100%	Avira URL Cloud	malware
https://aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_Cr8LUIyurKoYeKwC2s2vJw2.js	0%	Avira URL Cloud	safe
https://www.fortismerchants.co.uk/rd?cmnpn=93885&ct=90493&u=https%3A%2F%2Fsubcg.tynurserys.com%2FpCavcKaS	0%	Avira URL Cloud	safe
https://www.tynurserys.com/mail/favicon.ico	100%	Avira URL Cloud	malware
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b9dff303c257c94&lang=auto	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	0%	Avira URL Cloud	safe
https://subcg.tynurserys.com/pCavcKaS	100%	Avira URL Cloud	malware
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8b9dff303c257c94/1724782002561/5c91b52924fe45452019fec6d584871061755f6bc465156f893751f28a58fe66/oJwCedlV4oz_aMK	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1551955146:1724779460:S8hevjRG-pPNv9fILcmjlicunHEMlWb-gIhGxGWCUgU/8b9dff303c257c94/41e7ec57f580fdd	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/b/6790c32b9fc9/api.js	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg	0%	Avira URL Cloud	safe
https://www.tynurserys.com/owa/startupdata.ashx?app=Mail&n=0	100%	Avira URL Cloud	malware
https://subcg.tynurserys.com/favicon.ico	100%	Avira URL Cloud	malware
https://www.tynurserys.com/mail/?authRedirect=true&state=0	100%	Avira URL Cloud	malware
https://web.yammer.com/teams/feed	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.tynurserys.com	188.114.96.3	true	false	unknown
loadbalancer.ebiz.co.uk	52.16.167.62	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
subcg.tynurserys.com	188.114.97.3	true	true	unknown
challenges.cloudflare.com	104.18.94.41	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
ywnjb.tynurserys.com	188.114.97.3	true	false	unknown
HHN-efz.ms-acdc.office.com	52.98.171.226	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
r4.res.office365.com	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
www.fortismerchants.co.uk	unknown	unknown	true	unknown
m365cdn.nel.measure.office.net	unknown	unknown	false	unknown
outlook.office365.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js	false	Avira URL Cloud: safe	unknown
https://www.tynurserys.com/mail/	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8b9dff303c257c94/1724782002566/Z5BWo-8suzd4vYL	false	Avira URL Cloud: safe	unknown
https://www.tynurserys.com/	false	Avira URL Cloud: malware	unknown
https://outlook.office365.com/owa/prefetch.aspx	false	URL Reputation: safe	unknown
https://subcg.tynurserys.com/pCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png	false	Avira URL Cloud: safe	unknown
https://subcg.tynurserys.com/pCavcKaS?d=eA5LR9g	false	Avira URL Cloud: malware	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	URL Reputation: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	false	Avira URL Cloud: safe	unknown
https://www.tynurserys.com/owa/?state=1&redirectTo=aHR0cHM6Ly9vdXRsb29rLm9mZmljZS5jb20vbWFpbC8	false	Avira URL Cloud: malware	unknown
https://ywnjb.tynurserys.com/Me.htm?v=3	false	Avira URL Cloud: malware	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg	false	Avira URL Cloud: safe	unknown
https://www.fortismerchants.co.uk/rd?cmnpn=93885&ct=90493&u=https%3A%2F%2Fsubcg.tynurserys.com%2FpCavcKaS	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_Cr8LUIyurKoYeKwC2s2vJw2.js	false	Avira URL Cloud: safe	unknown
https://www.tynurserys.com/mail/favicon.ico	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b9dff303c257c94&lang=auto	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	false	Avira URL Cloud: safe	unknown
https://subcg.tynurserys.com/pCavcKaS	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8b9dff303c257c94/1724782002561/5c91b52924fe45452019fec6d584871061755f6bc465156f893751f28a58fe66/oJwCedlV4oz_aMK	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/6790c32b9fc9/api.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1551955146:1724779460:S8hevjRG-pPNv9fILcmjlicunHEMlWb-gIhGxGWCUgU/8b9dff303c257c94/41e7ec57f580fdd	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	URL Reputation: safe	unknown
https://subcg.tynurserys.com/favicon.ico	false	Avira URL Cloud: malware	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/	false	Avira URL Cloud: safe	unknown
https://www.tynurserys.com/owa/startupdata.ashx?app=Mail&n=0	false	Avira URL Cloud: malware	unknown
https://www.tynurserys.com/mail/?authRedirect=true&state=0	false	Avira URL Cloud: malware	unknown
https://www.tynurserys.com/mail/#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://github.com/jquery/globalize	chromecache_223.5.dr	false	Avira URL Cloud: safe	unknown
https://chrome.cloudflare-dns.com	4b1b4a6b-3746-4da3-8a8f-3588479148b4.tmp.3.dr, 57178d7e-aca5-42d6-842c-4ca2e9bfa1ba.tmp.3.dr	false	URL Reputation: safe	unknown
https://subcg.tynurserys.com	chromecache_202.5.dr	true	Avira URL Cloud: malware	unknown
http://underscorejs.org	chromecache_225.5.dr, chromecache_237.5.dr	false	URL Reputation: safe	unknown
http://knockoutjs.com/	chromecache_203.5.dr, chromecache_209.5.dr, chromecache_229.5.dr, chromecache_221.5.dr	false	URL Reputation: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_203.5.dr, chromecache_209.5.dr, chromecache_218.5.dr, chromecache_243.5.dr, chromecache_235.5.dr, chromecache_229.5.dr, chromecache_241.5.dr, chromecache_221.5.dr	false	Avira URL Cloud: safe	unknown
https://login.windows-ppe.net	chromecache_202.5.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_203.5.dr, chromecache_209.5.dr, chromecache_229.5.dr, chromecache_221.5.dr	false	URL Reputation: safe	unknown
http://feross.org	chromecache_243.5.dr, chromecache_241.5.dr	false	URL Reputation: safe	unknown
http://jedwatson.github.io/classnames	chromecache_225.5.dr, chromecache_237.5.dr	false	URL Reputation: safe	unknown
https://web.yammer.com/teams/feed	chromecache_245.5.dr, chromecache_224.5.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
52.98.171.226	HHN-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.16.167.62	loadbalancer.ebiz.co.uk	United States	16509	AMAZON-02US	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	subcg.tynurserys.com	European Union	13335	CLOUDFLARENETUS	true
188.114.96.3	www.tynurserys.com	European Union	13335	CLOUDFLARENETUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
23.203.104.175	unknown	United States	16625	AKAMAI-ASUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1500041
Start date and time:	2024-08-27 20:06:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Madisonwellsmedia546.pdf
Detection:	MAL
Classification:	mal72.phis.winPDF@32/144@32/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 216.58.212.174, 64.233.167.84, 34.104.35.123, 184.28.88.176, 172.64.41.3, 162.159.61.3, 199.232.214.172, 2.16.238.152, 2.16.238.149, 52.5.13.197, 23.22.254.206, 52.202.204.11, 54.227.187.23, 95.101.54.195, 2.16.202.123, 2.19.126.143, 2.19.126.149, 96.16.249.51, 96.16.249.14, 96.16.249.30, 23.38.98.104, 23.38.98.96, 13.78.111.199, 142.250.185.202, 142.250.186.106, 142.250.181.234, 142.250.186.42, 142.250.184.234, 172.217.16.202, 216.58.206.74, 142.250.185.234, 172.217.18.10, 142.250.185.170, 142.250.186.138, 172.217.16.138, 142.250.186.170, 142.250.185.106, 142.250.185.138, 142.250.186.74, 142.250.184.195, 23.215.0.143, 23.215.0.133, 23.202.154.36
Excluded domains from analysis (whitelisted): res-h3.public.cdn.office.net, e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, slscr.update.microsoft.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, a1894.dscb.akamai.net, acroipm2.adobe.com, a1952.dscq.akamai.net, clients2.google.com, login.live.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, wu-b-net.trafficmanager.net, apps.identrust.com, res-1-tls.cdn.office.net, res-prod-h3.trafficmanager.net, e40491.dscg.akamaiedge.net, fs.microsoft.com, identrust.edgesuite.net, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, acroipm2.adobe.com.edgesuite.net, aadcdnoriginwus2.azureedge.net, settings-win.data.microsoft.com, ctldl.windowsupdate.com, aadcdn.msauth.net, p13n.adobe.io, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, onedscolprdjpe03.japaneast.cloudapp.azure.com, browser.events.data.microsoft.com, edgedl.me.gvt1
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Madisonwellsmedia546.pdf

Simulations

Behavior and APIs

Time	Type	Description
14:06:45	API Interceptor	2x Sleep call for process: AcroCEF.exe modified

QR Codes

Source	URL
Screenshot	https://www.fortismerchants.co.uk/rd?cmnpn=93885&ct=90493&u=https%3A%2F%2Fsubcg.tynurserys.com%2FpCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==
Screenshot	https://www.fortismerchants.co.uk/rd?cmnpn=93885&ct=90493&u=https%3A%2F%2Fsubcg.tynurserys.com%2FpCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==
Screenshot	https://www.fortismerchants.co.uk/rd?cmnpn=93885&ct=90493&u=https%3A%2F%2Fsubcg.tynurserys.com%2FpCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==
Screenshot	https://www.fortismerchants.co.uk/rd?cmnpn=93885&ct=90493&u=https%3A%2F%2Fsubcg.tynurserys.com%2FpCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==
Screenshot	https://www.fortismerchants.co.uk/rd?cmnpn=93885&ct=90493&u=https%3A%2F%2Fsubcg.tynurserys.com%2FpCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==
Screenshot	https://www.fortismerchants.co.uk/rd?cmnpn=93885&ct=90493&u=https%3A%2F%2Fsubcg.tynurserys.com%2FpCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
52.98.171.226	http://esc-dot-wind-blade-416540.uk.r.appspot.com	Get hash	malicious	HTMLPhisher	Browse
	https://wbguae-my.sharepoint.com/:f:/g/personal/patrick_keyn_wbg_ae/EnS2WSQF1LJFudTErEZ1ybkBoAGYTzI4n0C4pN7OR_tXhg?e=LMj8rt&xsdata=MDV8MDJ8YmFyc2F0YW4uYnJ5YW5AZGVtZS1ncm91cC5jb218N2NkNTA2YjE4OThlNGI1MGVjZTUwOGRjYTNmMTc3Mjl8NGUyY2JmNjJjY2ZiNDNhN2JlM2Y3ZWI3YTg1OGJjZWN8MHwwfDYzODU2NTUwNDY5NTQ0ODA0MHxVbmtub3dufFRXRnBiR1pzYjNkOGV5SldJam9pTUM0d0xqQXdNREFpTENKUUlqb2lWMmx1TXpJaUxDSkJUaUk2SWsxaGFXd2lMQ0pYVkNJNk1uMD18MHx8fA%3d%3d&sdata=K2lnVWhTUzViZWlOSG5nNHZGcUtNTnNpalVLNE9GNGdJN0dWOVF3VmNZYz0%3d	Get hash	malicious	EvilProxy	Browse
	https://m.exactag.com/ai.aspx?tc=d9476116bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Ajeffreyhensley.com%2Fwinner%2F54980%2F%2Fa2VlbGV5LmhvbGdhdGVAMnNmZy5jb20=	Get hash	malicious	HTMLPhisher	Browse
	https://attachments.office.net/owa/cmangava%40tharisa.com/service.svc/s/GetAttachmentThumbnail?id=AAMkAGE2N2U5NmFkLWIzMjEtNGMwNS1iOWVlLWExNTBkNDk2NTZjMABGAAAAAAAsNFCwuPDISrln6MRbSR5lBwBC4JDOFd8jTJozG%2BNc7YRrAAAAmcUBAABu3YNoqzF8SLI68HoWeAXzAAFRD3sAAAABEgAQAOXLRvcdfU5Kkg7Zx598XsI%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkU1RDJGMEY4REE5M0I2NzA5QzQzQTlFOEE2MTQzQzAzRDYyRjlBODAiLCJ0eXAiOiJKV1QiLCJ4NXQiOiI1ZEx3LU5xVHRuQ2NRNm5vcGhROEE5WXZtb0EifQ.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.QgmzIBWvZG6gLwDV2SGPl9TdStXctQrpU_xiIGcL5I4eoVDkUPzqcKcrSAnwOD_E73nNMbCTWC-kgcJIIFGhLmh8iFWITRD5MwmaJN23JV7c8rlmzHlxnoqm8tPo98Soui3XZZYSaJZVTruXDBhUCiweHA69qYSoZDJxVUYZDvl5KvXMWJkA_ui0Vq1Sw7pPL5h9t4_QlGAarVBz6O9q21EGSBoX_hWPpcaEGJwoBDVeI-G6VvbkXzy9bJEMEZ6N-WzLyQtuKS9HVJBafIkUxsf0pIhhnJUluyukhnQ1dZohnpQr8e5v0Xoa3SObMFt_C5SeZHG2hFyxqFdeBhKQ_w&X-OWA-CANARY=X-OWA-CANARY_cookie_is_null_or_empty&owa=outlook.office.com&scriptVer=20240517003.15&clientId=1A63CAED249649AEBB5264A13128C2B5&animation=true&persistenceId=80cb7b14-7011-42b1-acde-250d928510f9	Get hash	malicious	HTMLPhisher	Browse
	jean.contant Copy of payment receipt[3053].shtml	Get hash	malicious	HTMLPhisher	Browse
	phish_alert_sp2_2.0.0.0 (1).msg	Get hash	malicious	HTMLPhisher	Browse
	#Ufe0fATT53546789b.htm	Get hash	malicious	HTMLPhisher	Browse
	Mensajes en cuarentena.zip	Get hash	malicious	HTMLPhisher	Browse
	https://www.databasepnc.com/	Get hash	malicious	HTMLPhisher	Browse
	https://nationwideabstrax-my.sharepoint.com/:f:/p/treyes/Eu5Apr4IFitIll2R0Yhe9z0BTM1mYeFV0MovV8RNbXPFBw?e=ZoNeFl&data=05	Get hash	malicious	Unknown	Browse
104.18.94.41	(No subject) (59).eml	Get hash	malicious	HTMLPhisher	Browse
	https://t.co/CFNobJuJq9	Get hash	malicious	HTMLPhisher	Browse
	http://esc-dot-wind-blade-416540.uk.r.appspot.com	Get hash	malicious	HTMLPhisher	Browse
	Electronic_Receipt_ATT0001.htm	Get hash	malicious	HTMLPhisher	Browse
	phish_alert_iocp_v1.4.48 (39).eml	Get hash	malicious	Tycoon2FA	Browse
	ocedures.msg	Get hash	malicious	Unknown	Browse
	Murexltd Mail Security Update Required For gjohnson@murexltd.com.msg	Get hash	malicious	HTMLPhisher	Browse
	http://journalscene.secondstreetapp.com/api/organization_user_email_verifications?token=npv0kjeneci&opid=1033948&lrt=rmsqe55tykx&bf=bc07ae1cf7bbffb3bcd5bc7a10f031b8&ip=207.144.57.39&redirect=https://unsus3.ru/oth/chameleon/#tbianetskaya@pierceatwood.com	Get hash	malicious	Unknown	Browse
	http://pixelmeldit.ru/RMQf	Get hash	malicious	HTMLPhisher	Browse
104.18.95.41	(No subject) (59).eml	Get hash	malicious	HTMLPhisher	Browse
	https://12dec6c2-3c78-e425-b87e-b20197f5da10.powerappsportals.com/	Get hash	malicious	Unknown	Browse
	https://t.co/CFNobJuJq9	Get hash	malicious	HTMLPhisher	Browse
	http://esc-dot-wind-blade-416540.uk.r.appspot.com	Get hash	malicious	HTMLPhisher	Browse
	Electronic_Receipt_ATT0001.htm	Get hash	malicious	HTMLPhisher	Browse
	phish_alert_iocp_v1.4.48 (39).eml	Get hash	malicious	Tycoon2FA	Browse
	phish_alert_iocp_v1.4.48 (38).eml	Get hash	malicious	HTMLPhisher	Browse
	ATT09876.htm	Get hash	malicious	HTMLPhisher	Browse
	ocedures.msg	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
challenges.cloudflare.com	(No subject) (59).eml	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://12dec6c2-3c78-e425-b87e-b20197f5da10.powerappsportals.com/	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://t.co/CFNobJuJq9	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	http://esc-dot-wind-blade-416540.uk.r.appspot.com	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	Electronic_Receipt_ATT0001.htm	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	phish_alert_iocp_v1.4.48 (39).eml	Get hash	malicious	Tycoon2FA	Browse	104.18.94.41
	phish_alert_iocp_v1.4.48 (38).eml	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	ATT09876.htm	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	ocedures.msg	Get hash	malicious	Unknown	Browse	104.18.95.41
sni1gl.wpc.omegacdn.net	http://esc-dot-wind-blade-416540.uk.r.appspot.com	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://www.dropbox.com/scl/fi/divczsjhc8wrt1wb18r2b/AT-Society-Directory.docx?rlkey=sjkzm3g8jkcekmsxm460sja78&st=r52leq64&dl=0	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	152.199.21.175
	https://support.microsoft.com/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://www.google.com.uy/url?q=//www.google.tn/amp/s/2kk8g.ubpages.com/ca10b7ff663b7dafeisla8zrrihpgxhbip2lby0aqo	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://aka.ms/LearnAboutSenderIdentification	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	virus total.pdf	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://odyqreazchfhphegqov.medtourindia.ru:8443/impact?impact=reachus	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://urumltygvfesfgswiin.medtourindia.ru:8443/impact?impact=info	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://netorgft11904377-my.sharepoint.com/:f:/g/personal/diwakar_d_symnn_com/Egh8Wigk3RNLgYl4YHrmY3wBASQTPrx6Li13Cr10RMG6nw?e=sSQT2N&xsdata=MDV8MDJ8UGhpc2hBbGVydHNARGV3YmVycnkuY29tfDQ3YjZjYWZiY2FmYjRiYzE5NjVkMDhkY2M1ZmJhZTM5fDg0YjdmNTM3ZmI3NjQyYjJhYzFiNDE1YTU1OTc3NjZjfDB8MHw2Mzg2MDI5MzE5OTY5Mjk2MjF8VW5rbm93bnxUV0ZwYkdac2IzZDhleUpXSWpvaU1DNHdMakF3TURBaUxDSlFJam9pVjJsdU16SWlMQ0pCVGlJNklrMWhhV3dpTENKWFZDSTZNbjA9fDB8fHw%3d&sdata=Q1R4VGhVK20rVytvaVJPWVRueXdFcTdmNU5xL0huZ3dzcjNFeERIMEx6Zz0%3d	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://ayurvedapancreatitisclinic.com/api/aHR0cHM6Ly9nb29nbGUuY29t&sig=ZDUxNjU0ZTllNzZkYTAxNWE4OTNkZTAyM2ZkZDA1MGViMGIzY2UyOTU1MzY1NGMyNjFlOTExM2ZiMzA5MzdmMg&exp=MTcyNDIzOTUzMQ	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
bg.microsoft.map.fastly.net	https://email-10.moengage.com/v1/emailclick?q=J9hmu1r6QKZrUydA7M0LhmLQ5i7Dg0Nl6MHK33dlRRiHDGLaUmrV29w-y9KVmRzhTLgNQhsm45GxW8V8xKrQoKNDHjB7CRmg_1cweH.uPLe.3eHt_gc8HUYJyNafgEERmJL2LxAT8X7OcG6eGtfAfBO9PAxgYyMwORkMW2Shu_8EgxVomZ4n5YVrJ6BeKFaCmD6d2Q4-0na_EglsL0Brj6yR2v6QG0HeFNJCVHWIDqcMyqe_r88-cETjiVnbQ8n6AdsU8zQ3H7iztnEZXRzETHYdGTm5hvYgsr5Sg7bkrF81eht6fM_e-ibIZP2oMLvBT1zWn_xe_wasEim1gTvVJRTqev1AuuHjN-EARFMZfriSXRqAx2EgGZLcoc2EiPI4kOQISdubWyzK9Xtj10aCP_wAt6KxwJRnrrWNRvn3blBJWnngxtQFXjDGd_qwCgdLvQwPLy5R0skEjnG0HC7MA#V2xjMVEyVlhTWHBSYlhocVRVVktkbGRXWkRSak1XdDVUMVJHYVdKc1NURlVSekExWlZad00xQlVNRDA9	Get hash	malicious	HTMLPhisher	Browse	199.232.210.172
	signature.pdf	Get hash	malicious	Unknown	Browse	199.232.214.172
	17247721854992a239a10dc9d698a853fc08f17659bf477258150484d560d105950a258f8e379.dat-decoded.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	199.232.214.172
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFl8RKvJCjgfWXgpyGiQbouwIVFCzJZdO6C7IEJWnFiPmUdkD_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZOJptL-2BsSl02HxRvbllikFuSJtHHDkVwyIj5AuFgiubBu9sTxc8j0-2BQG5wldcZa7WyDp4BZYdRmFKi1MU2RpCFoGVLX1rLVx-2BFFfe8ZtbBDm0OusvqG9hc8jycErQH9w4yo0iZBNb6ruS35AQpqe-2Bn9sSG0dYdsEjJuPPD68-2FQoiA15kbRIRZcVBuBtywmpClclGh64Ps2rLg6E3U3-2Ft-2B24zaJbCf8tvrjozgadicpaRwQ3KIy53pMZsOUCbTeEqGc-3D#bGFtYmVydC5nZW9yZ2lhQGFpZGIub3Jn	Get hash	malicious	Unknown	Browse	199.232.214.172
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFl8RKvJCjgfWXgpyGiQbouwIVFCzJZdO6C7IEJWnFiPmUdkD_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZOJptL-2BsSl02HxRvbllikFuSJtHHDkVwyIj5AuFgiubBu9sTxc8j0-2BQG5wldcZa7WyDp4BZYdRmFKi1MU2RpCFoGVLX1rLVx-2BFFfe8ZtbBDm0OusvqG9hc8jycErQH9w4yo0iZBNb6ruS35AQpqe-2Bn9sSG0dYdsEjJuPPD68-2FQoiA15kbRIRZcVBuBtywmpClclGh64Ps2rLg6E3U3-2Ft-2B24zaJbCf8tvrjozgadicpaRwQ3KIy53pMZsOUCbTeEqGc-3D#bGFtYmVydC5nZW9yZ2lhQGFpZGIub3Jn	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFgXXvv2-2BWxavJhSFh1X9YeE09JxYfGZOrfNXpE1b1zMSec6V_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZNvtRLmuq9nwTUBLvlyUQLSTjA0dDcTtmNJHz5AQBzdlGtncKRz08-2BYDBtkpKhh0KX17i2fmd5it7ecx-2FWvhsbD-2BwYBTTPKQ3j-2FAyMvTur79Dsx-2FPO7GwMrKARE8VWDjAjvStKY75qeeBLXHuDipEV3KKO3k4ABqkQG2RlytfHIDieNQv9UnoJapwQuVaik0jLuTXarvnnfl3sa3LYFT4h4hVVagLZJwfqoXYBXcReN-2F1X4eM9FZF-2BvVOXIZ-2BqDy2Q-3D	Get hash	malicious	HTMLPhisher	Browse	199.232.210.172
	Gov Annual Salary + Employer - Provided Benefits.pdf	Get hash	malicious	Phisher	Browse	199.232.210.172
	http://www.empoweryourretirement.com	Get hash	malicious	Unknown	Browse	199.232.214.172
	http://o62arw.dsjpropertymanagementllc.com	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	199.232.210.172
	http://hcmexelatech.com	Get hash	malicious	Unknown	Browse	199.232.210.172

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://12dec6c2-3c78-e425-b87e-b20197f5da10.powerappsportals.com/	Get hash	malicious	Unknown	Browse	20.119.128.8
	http://email.e.quickshipping.com/c/eJxszLFSxCAQgOGnId1lYHchWFDY5D042JOdXGJkg45v72ht-88_X03gYiw8cXILUIjBeze1RKEwBLTBu5CDj2gBGWPMD-I7P9wkCSyQjRCcRwKcq1uWSEzW40spdTFkef4YUjZtcp5yvM3lfZ-eqV3XqQZfDawG1jtv0ud8ZeUmfc8b99_PwPp13uQoz1FZDaydq3QulwHUPatmQ3a079vQP7an_-pngp8AAAD__zWIRVU	Get hash	malicious	Unknown	Browse	23.101.158.41
	http://esc-dot-wind-blade-416540.uk.r.appspot.com	Get hash	malicious	HTMLPhisher	Browse	52.98.179.50
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.107.246.57
	file.exe	Get hash	malicious	Unknown	Browse	52.123.240.23
	https://email-10.moengage.com/v1/emailclick?q=J9hmu1r6QKZrUydA7M0LhmLQ5i7Dg0Nl6MHK33dlRRiHDGLaUmrV29w-y9KVmRzhTLgNQhsm45GxW8V8xKrQoKNDHjB7CRmg_1cweH.uPLe.3eHt_gc8HUYJyNafgEERmJL2LxAT8X7OcG6eGtfAfBO9PAxgYyMwORkMW2Shu_8EgxVomZ4n5YVrJ6BeKFaCmD6d2Q4-0na_EglsL0Brj6yR2v6QG0HeFNJCVHWIDqcMyqe_r88-cETjiVnbQ8n6AdsU8zQ3H7iztnEZXRzETHYdGTm5hvYgsr5Sg7bkrF81eht6fM_e-ibIZP2oMLvBT1zWn_xe_wasEim1gTvVJRTqev1AuuHjN-EARFMZfriSXRqAx2EgGZLcoc2EiPI4kOQISdubWyzK9Xtj10aCP_wAt6KxwJRnrrWNRvn3blBJWnngxtQFXjDGd_qwCgdLvQwPLy5R0skEjnG0HC7MA#V2xjMVEyVlhTWHBSYlhocVRVVktkbGRXWkRSak1XdDVUMVJHYVdKc1NURlVSekExWlZad00xQlVNRDA9	Get hash	malicious	HTMLPhisher	Browse	13.107.246.57
	phish_alert_iocp_v1.4.48 (39).eml	Get hash	malicious	Tycoon2FA	Browse	52.113.194.132
	phish_alert_iocp_v1.4.48 (38).eml	Get hash	malicious	HTMLPhisher	Browse	52.109.76.240
	AG Uncorked IRMI Wine Mixer Invite.pdf	Get hash	malicious	HTMLPhisher	Browse	13.107.246.60
	file.exe	Get hash	malicious	Unknown	Browse	13.107.246.60
AMAZON-02US	phish_alert_iocp_v1.4.48 (39).eml	Get hash	malicious	Tycoon2FA	Browse	108.157.194.47
	phish_alert_iocp_v1.4.48 (38).eml	Get hash	malicious	HTMLPhisher	Browse	108.156.39.60
	Inv-Info98.htm	Get hash	malicious	HTMLPhisher	Browse	3.5.131.174
	AG Uncorked IRMI Wine Mixer Invite.pdf	Get hash	malicious	HTMLPhisher	Browse	18.245.46.111
	bot.mips.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	54.217.10.153
	ATT09876.htm	Get hash	malicious	HTMLPhisher	Browse	54.246.201.143
	OmnibeesReservas_2022067095.ppam	Get hash	malicious	RevengeRAT	Browse	18.228.165.84
	00026391087.ppam	Get hash	malicious	RevengeRAT	Browse	18.228.165.84
	00026391087.ppam	Get hash	malicious	RevengeRAT	Browse	18.228.165.84
CLOUDFLARENETUS	(No subject) (59).eml	Get hash	malicious	HTMLPhisher	Browse	172.66.47.111
	https://12dec6c2-3c78-e425-b87e-b20197f5da10.powerappsportals.com/	Get hash	malicious	Unknown	Browse	104.21.20.188
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Vidar	Browse	188.114.96.3
	https://t.co/CFNobJuJq9	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	http://esc-dot-wind-blade-416540.uk.r.appspot.com	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	Status Update ECKY2.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
	Statement of Account.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
CLOUDFLARENETUS	(No subject) (59).eml	Get hash	malicious	HTMLPhisher	Browse	172.66.47.111
	https://12dec6c2-3c78-e425-b87e-b20197f5da10.powerappsportals.com/	Get hash	malicious	Unknown	Browse	104.21.20.188
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Vidar	Browse	188.114.96.3
	https://t.co/CFNobJuJq9	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	http://esc-dot-wind-blade-416540.uk.r.appspot.com	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	Status Update ECKY2.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
	Statement of Account.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	(No subject) (59).eml	Get hash	malicious	HTMLPhisher	Browse	13.71.55.58 20.44.239.154 20.190.160.17 20.73.194.208 20.114.59.183 184.28.90.27
	http://email.e.quickshipping.com/c/eJxszLFSxCAQgOGnId1lYHchWFDY5D042JOdXGJkg45v72ht-88_X03gYiw8cXILUIjBeze1RKEwBLTBu5CDj2gBGWPMD-I7P9wkCSyQjRCcRwKcq1uWSEzW40spdTFkef4YUjZtcp5yvM3lfZ-eqV3XqQZfDawG1jtv0ud8ZeUmfc8b99_PwPp13uQoz1FZDaydq3QulwHUPatmQ3a079vQP7an_-pngp8AAAD__zWIRVU	Get hash	malicious	Unknown	Browse	13.71.55.58 20.44.239.154 20.190.160.17 20.73.194.208 20.114.59.183 184.28.90.27
	https://t.co/CFNobJuJq9	Get hash	malicious	HTMLPhisher	Browse	13.71.55.58 20.44.239.154 20.190.160.17 20.73.194.208 20.114.59.183 184.28.90.27
	http://esc-dot-wind-blade-416540.uk.r.appspot.com	Get hash	malicious	HTMLPhisher	Browse	13.71.55.58 20.44.239.154 20.190.160.17 20.73.194.208 20.114.59.183 184.28.90.27
	Status Update ECKY2.html	Get hash	malicious	Unknown	Browse	13.71.55.58 20.44.239.154 20.190.160.17 20.73.194.208 20.114.59.183 184.28.90.27
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.71.55.58 20.44.239.154 20.190.160.17 20.73.194.208 20.114.59.183 184.28.90.27
	file.exe	Get hash	malicious	Unknown	Browse	13.71.55.58 20.44.239.154 20.190.160.17 20.73.194.208 20.114.59.183 184.28.90.27
	Electronic_Receipt_ATT0001.htm	Get hash	malicious	HTMLPhisher	Browse	13.71.55.58 20.44.239.154 20.190.160.17 20.73.194.208 20.114.59.183 184.28.90.27
	https://email-10.moengage.com/v1/emailclick?q=J9hmu1r6QKZrUydA7M0LhmLQ5i7Dg0Nl6MHK33dlRRiHDGLaUmrV29w-y9KVmRzhTLgNQhsm45GxW8V8xKrQoKNDHjB7CRmg_1cweH.uPLe.3eHt_gc8HUYJyNafgEERmJL2LxAT8X7OcG6eGtfAfBO9PAxgYyMwORkMW2Shu_8EgxVomZ4n5YVrJ6BeKFaCmD6d2Q4-0na_EglsL0Brj6yR2v6QG0HeFNJCVHWIDqcMyqe_r88-cETjiVnbQ8n6AdsU8zQ3H7iztnEZXRzETHYdGTm5hvYgsr5Sg7bkrF81eht6fM_e-ibIZP2oMLvBT1zWn_xe_wasEim1gTvVJRTqev1AuuHjN-EARFMZfriSXRqAx2EgGZLcoc2EiPI4kOQISdubWyzK9Xtj10aCP_wAt6KxwJRnrrWNRvn3blBJWnngxtQFXjDGd_qwCgdLvQwPLy5R0skEjnG0HC7MA#V2xjMVEyVlhTWHBSYlhocVRVVktkbGRXWkRSak1XdDVUMVJHYVdKc1NURlVSekExWlZad00xQlVNRDA9	Get hash	malicious	HTMLPhisher	Browse	13.71.55.58 20.44.239.154 20.190.160.17 20.73.194.208 20.114.59.183 184.28.90.27

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	290
Entropy (8bit):	5.193045623230942
Encrypted:	false
SSDEEP:	6:N7IojR4q2PRN2nKuAl9OmbnIFUt887IojO73JZmw+87IojO73DkwORN2nKuAl9Oe:N7hjR4vaHAahFUt887hjs3J/+87hjs36
MD5:	F1091DF806C5321452BB0F0A54BEB072
SHA1:	4150214EA413C4C3F5FFB8D67D99528F25A7825D
SHA-256:	A760322C9715ED9076096A63F0510275B59C891A08C92ADF294EAD841D5F0B6B
SHA-512:	91878F133F43C6739B52B7C078252DB2B161731A05408A53FF35365FCA38DA230058D3AE4F7B91CFAE4AD63AFFA58B82E750701F86AB5E54C9CE10FC02B1B67A
Malicious:	false
Reputation:	low
Preview:	2024/08/27-14:06:34.419 1a60 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/08/27-14:06:34.421 1a60 Recovering log #3.2024/08/27-14:06:34.421 1a60 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	290
Entropy (8bit):	5.193045623230942
Encrypted:	false
SSDEEP:	6:N7IojR4q2PRN2nKuAl9OmbnIFUt887IojO73JZmw+87IojO73DkwORN2nKuAl9Oe:N7hjR4vaHAahFUt887hjs3J/+87hjs36
MD5:	F1091DF806C5321452BB0F0A54BEB072
SHA1:	4150214EA413C4C3F5FFB8D67D99528F25A7825D
SHA-256:	A760322C9715ED9076096A63F0510275B59C891A08C92ADF294EAD841D5F0B6B
SHA-512:	91878F133F43C6739B52B7C078252DB2B161731A05408A53FF35365FCA38DA230058D3AE4F7B91CFAE4AD63AFFA58B82E750701F86AB5E54C9CE10FC02B1B67A
Malicious:	false
Reputation:	low
Preview:	2024/08/27-14:06:34.419 1a60 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/08/27-14:06:34.421 1a60 Recovering log #3.2024/08/27-14:06:34.421 1a60 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.221526301657463
Encrypted:	false
SSDEEP:	6:N7Iogq2PRN2nKuAl9Ombzo2jMGIFUt887IoNZmw+87IocFSFkwORN2nKuAl9OmbX:N7hgvaHAa8uFUt887hN/+87hcFe5JHAv
MD5:	1C7A459F300456B442935A33E93F52E4
SHA1:	E82981C258213340E8CA2EC6450D4E63AC269587
SHA-256:	A789DF9E2D387E18F6D2B45818DB51121EE6612E61D4EE60EF39B70785C50173
SHA-512:	9F65459E696F9626E4DD0844536CFE196121D09F654BBDA9D037E607FBA575B7C431DB9CC49E1FFD028DBC4FDF71DCEE6403CE142EA1BC1799D5E18D1F865590
Malicious:	false
Reputation:	low
Preview:	2024/08/27-14:06:34.155 1b84 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/08/27-14:06:34.159 1b84 Recovering log #3.2024/08/27-14:06:34.160 1b84 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.221526301657463
Encrypted:	false
SSDEEP:	6:N7Iogq2PRN2nKuAl9Ombzo2jMGIFUt887IoNZmw+87IocFSFkwORN2nKuAl9OmbX:N7hgvaHAa8uFUt887hN/+87hcFe5JHAv
MD5:	1C7A459F300456B442935A33E93F52E4
SHA1:	E82981C258213340E8CA2EC6450D4E63AC269587
SHA-256:	A789DF9E2D387E18F6D2B45818DB51121EE6612E61D4EE60EF39B70785C50173
SHA-512:	9F65459E696F9626E4DD0844536CFE196121D09F654BBDA9D037E607FBA575B7C431DB9CC49E1FFD028DBC4FDF71DCEE6403CE142EA1BC1799D5E18D1F865590
Malicious:	false
Reputation:	low
Preview:	2024/08/27-14:06:34.155 1b84 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/08/27-14:06:34.159 1b84 Recovering log #3.2024/08/27-14:06:34.160 1b84 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\4b1b4a6b-3746-4da3-8a8f-3588479148b4.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	403
Entropy (8bit):	4.987341620372017
Encrypted:	false
SSDEEP:	12:YHO8sqgTWksBdOg2Hqcaq3QYiubrP7E4T3y:YXs4dMHF3QYhbz7nby
MD5:	22D20360D66ACEA3394CE8A75CDA5702
SHA1:	40DCF307CAC95AFFA5919AABEB241BEDCBBF4D9F
SHA-256:	8DCB21C35765C75105E622C0176F587D57A102C3469F5B25EE564EB15A631F6A
SHA-512:	F1401F12D4751E2B61D68C849B175D217FDABFAFACDD475293159CB6A992882617BE4E551289EC8F14335F2B1B2CF2FFE2AE35D0712A4F3461F7B81E2EC229D6
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13369342006341647","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":150981},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\57178d7e-aca5-42d6-842c-4ca2e9bfa1ba.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	4.953858338552356
Encrypted:	false
SSDEEP:	12:YHO8sq/WLksBdOg2H9caq3QYiubrP7E4T3y:YXsRJdMHM3QYhbz7nby
MD5:	4C313FE514B5F4E7E89329630909F8DC
SHA1:	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56
SHA-256:	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
SHA-512:	1726CAFCBA0121691DFA87A7298E6610BC4C7FD900867FD1B1710811E764918585E56788E08B7CA2CEE001F5DFD110E1BE6F6BBD7C2A7B7E2FC87D3DED210205
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341145152835463","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":144284},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	4.953858338552356
Encrypted:	false
SSDEEP:	12:YHO8sq/WLksBdOg2H9caq3QYiubrP7E4T3y:YXsRJdMHM3QYhbz7nby
MD5:	4C313FE514B5F4E7E89329630909F8DC
SHA1:	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56
SHA-256:	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
SHA-512:	1726CAFCBA0121691DFA87A7298E6610BC4C7FD900867FD1B1710811E764918585E56788E08B7CA2CEE001F5DFD110E1BE6F6BBD7C2A7B7E2FC87D3DED210205
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341145152835463","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":144284},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF4719e7.TMP (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	4.953858338552356
Encrypted:	false
SSDEEP:	12:YHO8sq/WLksBdOg2H9caq3QYiubrP7E4T3y:YXsRJdMHM3QYhbz7nby
MD5:	4C313FE514B5F4E7E89329630909F8DC
SHA1:	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56
SHA-256:	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
SHA-512:	1726CAFCBA0121691DFA87A7298E6610BC4C7FD900867FD1B1710811E764918585E56788E08B7CA2CEE001F5DFD110E1BE6F6BBD7C2A7B7E2FC87D3DED210205
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341145152835463","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":144284},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4099
Entropy (8bit):	5.23150934010142
Encrypted:	false
SSDEEP:	96:OLSw0bSwIAnrRqLX2rSq1OUxu/0OZ0xRBTxekN8xeT44S:OLT0bTIeYa51Ogu/0OZARBT8kN88T44S
MD5:	916D3014CC5B68639BA367EAFDB03947
SHA1:	B85EB91875766EABC1A4B218489FFBE3091556A0
SHA-256:	AF9EFC227927FE6A619D7D59BB6FC089F94141BE71B67CE9230F3D8D471A68E4
SHA-512:	6D538331BC57321E85BE99A833C0AE5E1A85A9A7FC7A1A44A254B4B2AF5E0B695997ADEE081911A0DC89ED0FBB1719B624ABE114D297728FB43EB17398B2BA91
Malicious:	false
Preview:	*...#................version.1..namespace-e...o................next-map-id.1.Pnamespace-1d95df23_a38f_44a8_b732_4e62dd896a16-https://rna-resource.acrobat.com/.0y.S_r................next-map-id.2.Snamespace-2a884c18_b39c_4e3d_942f_252e530ca4bd-https://rna-v2-resource.acrobat.com/.16.X:r................next-map-id.3.Snamespace-2e78bfda_7188_4688_a4aa_1ff81b6e5eaa-https://rna-v2-resource.acrobat.com/.2.P.@o................next-map-id.4.Pnamespace-09c119c2_97bc_4467_8f67_f92472c9e5dc-https://rna-resource.acrobat.com/.346.+^...............Pnamespace-1d95df23_a38f_44a8_b732_4e62dd896a16-https://rna-resource.acrobat.com/....^...............Pnamespace-09c119c2_97bc_4467_8f67_f92472c9e5dc-https://rna-resource.acrobat.com/..?&a...............Snamespace-2a884c18_b39c_4e3d_942f_252e530ca4bd-https://rna-v2-resource.acrobat.com/_...a...............Snamespace-2e78bfda_7188_4688_a4aa_1ff81b6e5eaa-https://rna-v2-resource.acrobat.com/...o................next-map-id.5.Pnamespace-07af9ee9_2076_4f12_94b5_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	322
Entropy (8bit):	5.218635929654345
Encrypted:	false
SSDEEP:	6:N7Iojlfq2PRN2nKuAl9OmbzNMxIFUt887Ioj5TZmw+87IojeFkwORN2nKuAl9Omk:N7hjFvaHAa8jFUt887hjJ/+87hji5JHP
MD5:	0A2E1F614EC2A9F82112F58F5C0D6E34
SHA1:	9C7FC62CF6BD515310268F55D6345B79CD5F23A9
SHA-256:	1636E990EB3BDD7B3782C442F235E3F197820677A201B8D884DB27019A05CFFB
SHA-512:	CFF61AC2F948D3300B4353478F8353838BEFB8266D678E12752CEF256F7D9ADD48DCFAE99F91C160B333CE9D73CEFDFDB487AC56832684C10ABE4C1DCB70A0B1
Malicious:	false
Preview:	2024/08/27-14:06:34.457 1b84 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/08/27-14:06:34.458 1b84 Recovering log #3.2024/08/27-14:06:34.460 1b84 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	322
Entropy (8bit):	5.218635929654345
Encrypted:	false
SSDEEP:	6:N7Iojlfq2PRN2nKuAl9OmbzNMxIFUt887Ioj5TZmw+87IojeFkwORN2nKuAl9Omk:N7hjFvaHAa8jFUt887hjJ/+87hji5JHP
MD5:	0A2E1F614EC2A9F82112F58F5C0D6E34
SHA1:	9C7FC62CF6BD515310268F55D6345B79CD5F23A9
SHA-256:	1636E990EB3BDD7B3782C442F235E3F197820677A201B8D884DB27019A05CFFB
SHA-512:	CFF61AC2F948D3300B4353478F8353838BEFB8266D678E12752CEF256F7D9ADD48DCFAE99F91C160B333CE9D73CEFDFDB487AC56832684C10ABE4C1DCB70A0B1
Malicious:	false
Preview:	2024/08/27-14:06:34.457 1b84 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/08/27-14:06:34.458 1b84 Recovering log #3.2024/08/27-14:06:34.460 1b84 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240827180642Z-293.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
Category:	dropped
Size (bytes):	71190
Entropy (8bit):	1.189171755868609
Encrypted:	false
SSDEEP:	192:PN5+iTK1Qek/Ekn/KW0yyv4qP5WdQTU92OA3eLreujjOe:F5hK1+/Ekn/fgv4pBGe
MD5:	0FC50CC7BAF533F2458CABEF6B091E00
SHA1:	168DE43C99C38DCED00667C97A72077D15B3496C
SHA-256:	85A5E256D4F9013B279BCDB38281616006E3ED06432866EA760BA67F191F9149
SHA-512:	DF4E0F776AB5B92C4DC64C5CD70A55F0114BC0B4F33503A57B510A2F1406C708375615CFFF2C0F615E5E6B2A86C98B340CB20FA38B29A893BAAC8B893DBC4B9F
Malicious:	false
Preview:	BM........6...(...u...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 2, database pages 14, cookie 0x5, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	57344
Entropy (8bit):	3.291927920232006
Encrypted:	false
SSDEEP:	192:vedRBvVui5V4R4dcQ5V4R4RtYWtEV2UUTTchqGp8F/7/z+FP:veBci5H5FY+EUUUTTcHqFzqFP
MD5:	A4D5FECEFE05F21D6F81ACF4D9A788CF
SHA1:	1A9AC236C80F2A2809F7DE374072E2FCCA5A775C
SHA-256:	83BE4623D80FFB402FBDEC4125671DF532845A3828A1B378D99BD243A4FD8FF2
SHA-512:	FF106C6B9E1EA4B1F3E3AB01FAEA21BA24A885E63DDF0C36EB0A8C3C89A9430FE676039C076C50D7C46DC4E809F6A7E35A4BFED64D9033FEBD6121AC547AA5E9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	16928
Entropy (8bit):	1.2154383902662338
Encrypted:	false
SSDEEP:	24:7+t5Q4+qLi+zkrFsgIFsxX3pALXmnHpkDGjmcxBSkomXk+2m9RFTsyg+wmf9MzmP:7M5H+qLmFTIF3XmHjBoGGR+jMz+LhlMe
MD5:	4EE9B232798445E1D7719803C8C18790
SHA1:	F31C83C0A035D853622FE6CF49768AA6205362D7
SHA-256:	473BBD8FB66BF41BF5188CF8B614D9B1DEA52D1448BFDC514DF558D4F413E39C
SHA-512:	2246314188A95DDA79191D8D60938D3D97D75A1D9E72189AABAA9379047ABEE9CC468BD21957C317FE960919E20DF4724941DEBFAE3441F7A0352E2634AA70A7
Malicious:	false
Preview:	.... .c........{........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	893
Entropy (8bit):	7.366016576663508
Encrypted:	false
SSDEEP:	24:hBntmDvKUQQDvKUr7C5fpqp8gPvXHmXvponXux:3ntmD5QQD5XC5RqHHXmXvp++x
MD5:	D4AE187B4574036C2D76B6DF8A8C1A30
SHA1:	B06F409FA14BAB33CBAF4A37811B8740B624D9E5
SHA-256:	A2CE3A0FA7D2A833D1801E01EC48E35B70D84F3467CC9F8FAB370386E13879C7
SHA-512:	1F44A360E8BB8ADA22BC5BFE001F1BABB4E72005A46BC2A94C33C4BD149FF256CCE6F35D65CA4F7FC2A5B9E15494155449830D2809C8CF218D0B9196EC646B0C
Malicious:	false
Preview:	0..y...H.........j0..f...1.0....H.........N0..J0..2.......D....'..09...@k0....H........0?1$0"..U....Digital Signature Trust Co.1.0...U....DST Root CA X30...000930211219Z..210930140115Z0?1$0"..U....Digital Signature Trust Co.1.0...U....DST Root CA X30.."0....H.............0..........P..W..be......,k0.[...}.@......3vI.?!I..N..>H.e...!.e..2....w..{........s.z..2..~..0....8.y.1.P..e.Qc...a.Ka..Rk...K.(.H......>.... .[.....p....%.tr.{j.4.0...h.{T....Z...=d.....Ap..r.&.8U9C....\@........%.......:..n.>..\..<.i.....)W..=....]......B0@0...U.......0....0...U...........0...U.........{,q...K.u...`...0....H...............,...\...(f7:...?K.... ]..YD.>.>..K.t.....t..~.....K. D....}..j.....N..:.pI...........:^H...X._..Z.....Y..n......f3.Y[...sG.+..7H..VK....r2...D.SrmC.&H.Rg.X..gvqx...V..9$1....Z0G..P.......dc`........}...=2.e..\|.Wv..(9..e...w.j..w.......)...55.1.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.247897867253902
Encrypted:	false
SSDEEP:	6:kKgk99UswD8HGsL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:YkkDImsLNkPlE99SNxAhUe/3
MD5:	EEFA592256B549A735C70ABD326CDEED
SHA1:	72BC3B7B3E65642236ECDDCF79B2FE545171D65B
SHA-256:	A3314BB743C1BBA4755FEB7BBCA0BEEE5E9D6943B65961D1D059A5A9C2E0A4CA
SHA-512:	068CF81489C873DAF9E814ACC0473AE0809A8B2F664CA3493BFBE360947520B3E5B135E754FA8818B0C0E75BB0ED04020D0CE83AB3C9460A9C19157180A6AA43
Malicious:	false
Preview:	p...... ...............(....................................................... ........G..@.......&......X........h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	252
Entropy (8bit):	3.0215269645321685
Encrypted:	false
SSDEEP:	3:kkFklUyElltfllXlE/E/KRkzllPlzRkwWBARLNDU+ZMlKlBkvclcMlVHblB8V7l3:kKjVlLxliBAIdQZV7I7kc3
MD5:	5B2560085728CB9055DB33F3BBD77602
SHA1:	62E4585EE4E4C3EC62FF92A5FA3D9B9FC8258F91
SHA-256:	693C0BDCC6BBFE2EB4044343000459E567CBDD90976A027C8E1AF475E1BF27B4
SHA-512:	966CC3463DD6042C0B1FD797CB750FD6E5C3A251440D55C5A519A5E2C9E49CCE7BF74DB72DEF8FE64898E3A4BF25F5196028883DDA426EB90976E320765C5804
Malicious:	false
Preview:	p...... ....`....r.....(....................................................... ........!.M........(...........}...h.t.t.p.:././.a.p.p.s...i.d.e.n.t.r.u.s.t...c.o.m./.r.o.o.t.s./.d.s.t.r.o.o.t.c.a.x.3...p.7.c...".3.7.d.-.6.0.7.9.b.8.c.0.9.2.9.c.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.38583387782788
Encrypted:	false
SSDEEP:	6:YEQXJ2HXZDBPCLYOQ5IRR4UhUR0YK2Ri1oAvJM3g98kUwPeUkwRe9:YvXKX36YOQWRuUhUdQqGMbLUkee9
MD5:	8C24EE004411B3B3C5B5ED0A3DA6F6D6
SHA1:	0EF070AE1636DF02C4291170E4285FD05E33B7F7
SHA-256:	F815FB11BE96F9CA0E3760706BEAE1B22FF843241F5851B8671A5DC3CA25E578
SHA-512:	A2447EA49C1FEC25757DE17A61EEA3DD3E5361EF8EEAFBAD973EB32B5A6E31028BBA8D1D5AB3275656043900E32ADD97D25FB1D1DC96C0BD01224DFE7746C811
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.33606997501939
Encrypted:	false
SSDEEP:	6:YEQXJ2HXZDBPCLYOQ5IRR4UhUR0YK2Ri1oAvJfBoTfXpnrPeUkwRe9:YvXKX36YOQWRuUhUdQqGWTfXcUkee9
MD5:	F6841C56E31F73D9632882ACEF4331E5
SHA1:	3DCC3FC42B6E1CE22AB786AEA75929CE140CC756
SHA-256:	9C560845700C1E36EC68EC1AD828693D8F5967E3468C804015D1FFE7392B8EC4
SHA-512:	78003D83CDE673DCB73E2E43CF6572DA74C2D1A0EF90D5E3A49845855F900D5052235EE74F03C4E6E498F62B495DFB834E18503D78E3A89DD32B9F92FA45D3D4
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.315065010414465
Encrypted:	false
SSDEEP:	6:YEQXJ2HXZDBPCLYOQ5IRR4UhUR0YK2Ri1oAvJfBD2G6UpnrPeUkwRe9:YvXKX36YOQWRuUhUdQqGR22cUkee9
MD5:	CDF27095DD24E9C844BECFACA63C8202
SHA1:	DD5D1D1EC489EDEA1B8CAE9B30AA2DDBF3F1E1AE
SHA-256:	7FA0538F26ECA78A07BE744AB665D6CC9C797ABC7F312158252C0FE6787BB26E
SHA-512:	47BDE86A425EDE3B785CF432D34B649A1B0E505C263ECC744AC516C10A303CE948B4FA78D9CE0DECF8715713A753B01EC020D2C80DE77F7D5C1331055C53D8EE
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.375002504867496
Encrypted:	false
SSDEEP:	6:YEQXJ2HXZDBPCLYOQ5IRR4UhUR0YK2Ri1oAvJfPmwrPeUkwRe9:YvXKX36YOQWRuUhUdQqGH56Ukee9
MD5:	D174E37E8B6B59BD1966E335F0E671B8
SHA1:	9116B993833FFB315983CC4E4E767BCE0DF68C7B
SHA-256:	70C34FF69426481D454DFFF20220E38694BB9400523C4EA24EAD8F6A15815619
SHA-512:	67C6798CB074E34AD854D4A5A5CC8DFAE0AFFB0BBE7CBB10E81E1CF54DD4CF5BAB00CBB14813B19700543800A6EE1EEE15ECB10485DED2D433A3EF75DF34936A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1063
Entropy (8bit):	5.669832146971427
Encrypted:	false
SSDEEP:	24:Yv6X32RUmnpLgEFqciGennl0RCmK8czOCY4w2f:YvzUQhgLtaAh8cvYvk
MD5:	2A8F0B333A6DC7F31FFC2DB21DB111DE
SHA1:	10F93695DA972BD8CCF37B7A4C33849D97906161
SHA-256:	B5386818614761C21131D3C58359848A9EFDD9436CFD531265D0D18BADF22C5C
SHA-512:	AD816900AE76D0CB34A2C9C1C06011A53E62C86D203EE1D3ECA028E8BDF7DEF36629BE0CDC8224DE8E3BBE1F94C86A823A34CE1069C0DEE0147434383B189FF1
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_2","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"afb9c2a3-eaf4-41f9-9d73-768e72f72282","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQgZmlsZXMgdG8gYW5kIGZyb20gUERGXG53aXRob3V0IGxpbWl0cy4ifSwidGNhdElkIjpudWxsfQ==","dataType":"application\/json","encodingSc

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1050
Entropy (8bit):	5.657871961542717
Encrypted:	false
SSDEEP:	24:Yv6X32RUmrVLgEF0c7sbnl0RCmK8czOCYHflEpwiVf:YvzUCFg6sGAh8cvYHWpwy
MD5:	F0278F0002EEE37D0E21CB34018A1E0F
SHA1:	878FDBE928D46210B20879890449F6E7B28397EA
SHA-256:	A243C5D56CF932DE8DEEC28DF65C24F0E7A56E0CCE4B8BDF3856E15FCFECBB13
SHA-512:	7D2278DF29893B7735076E1BA840AC7E6D31D378901C610E63071B617A12386CB127F0F39EA7FA0559F15CA245D9133A8BC0FD9DA2C3ADD5C35ED0DC80512594
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Disc_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_0","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"0924134e-3c59-4f53-b731-add558c56fec","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Disc_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQsIGVkaXQgYW5kIGUtc2lnblxuZm9ybXMgJiBhZ3JlZW1lbnRzLiJ9LCJ0Y2F0SWQiOm51bGx9","dataType":"application\/json","encodingScheme":true},"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.324594852879239
Encrypted:	false
SSDEEP:	6:YEQXJ2HXZDBPCLYOQ5IRR4UhUR0YK2Ri1oAvJfQ1rPeUkwRe9:YvXKX36YOQWRuUhUdQqGY16Ukee9
MD5:	6C9AD905D415EB6A95FE3BAD14AD9583
SHA1:	C73648440A516DAE452CC270E73C87122A353F52
SHA-256:	1CE08CEA03714E471A81FF23F0A044A615DD4B4560F11E699E76DD4FC8785B5B
SHA-512:	715531989B83A1DEB008C95E2E9FCC8A95BEC759C8255C54F074B3F92C3D626ECC97F5FB06DC8E63C9BD48C9BDB663E783E954380546CDD5806E9AB17FADB0D9
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1038
Entropy (8bit):	5.652120980237285
Encrypted:	false
SSDEEP:	24:Yv6X32RUm62LgEF7cciAXs0nl0RCmK8czOCAPtciBf:YvzUvogc8hAh8cvAV
MD5:	006ACD9FE72DA60F4CD2263B99B8BC7D
SHA1:	957B410834D173D3F6F0472E11B26696109BBF86
SHA-256:	7110372F1DFC5D965771E683BBE365D2719F172BF17EA7160F53AD0FC2624DE3
SHA-512:	D8F24A101C58DFE0D92B66D4DDCBB7ADC5571C2B8B50CB83E2203F7557BB16F3E21070E7A8CDB68832658DA89F44D791B137DEA2AF31B6CF77D2E05669ECBE3E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Edit_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_1","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"49d2f713-7aa9-44db-aa50-0a7a22add459","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Edit_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVkaXQgdGV4dCwgaW1hZ2VzLCBwYWdlcywgYW5kIG1vcmUuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme":true},"endDTS":1744

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1164
Entropy (8bit):	5.701391399911537
Encrypted:	false
SSDEEP:	24:Yv6X32RUmGKLgEfIcZVSkpsn264rS514ZjBrwloJTmcVIsrSK5f:YvzUDEgqprtrS5OZjSlwTmAfSKZ
MD5:	5366AC0DFEACA16273D204A8642FC26E
SHA1:	3B5E226329720E17D838B897D6E591F9E73D261A
SHA-256:	C122F53E27F7B2CD90BF1616F41962B910A54A1ECCDE09075C410F520B4B816D
SHA-512:	59CF7C8256570D26C68653821DCCD7AFC94589528C77F826ADCEF6DE8F3F9B86CD4A681EB1B6C3619137E9609F365AC84F33D3E6BE474AC0828132E9717D7B30
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85531_264848ActionBlock_0","campaignId":85531,"containerId":"1","controlGroupId":"","treatmentId":"ee1a7497-76e7-43c2-bb63-9a0551e11d73","variationId":"264848"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IlRyeSBBY3JvYmF0IFBybyJ9LCJ1aSI6eyJ0aXRsZV9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjE1cHgiLCJmb250X3N0eWxlIjoiMCJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEzcHgiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0b1xucHJlbWl1bSBQREYgYW5kIGUtc2lnbmluZ1xudG9vbHMuIn0sImJhbm5lcl9zdHlsaW5nIjo

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.327961021686286
Encrypted:	false
SSDEEP:	6:YEQXJ2HXZDBPCLYOQ5IRR4UhUR0YK2Ri1oAvJfYdPeUkwRe9:YvXKX36YOQWRuUhUdQqGg8Ukee9
MD5:	DF40C6D9E10337E4374D3BF21944FE1B
SHA1:	B2878BE8B0E465D7FB4B5FD52E2D1EC659697317
SHA-256:	2F710994FBBAD45575428CEFEC47DCEDD092DC5375B90547428236FBFEB2CA51
SHA-512:	C5959F04E8B77DF6C19AF892AAF41F3F285AC3FDCC70C3B45B019B61B9B35DDB75ADDF765421858155BA43291A63A28EFC3FD83AA5E2DDE2916CDFA040C503A6
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1395
Entropy (8bit):	5.778421003210947
Encrypted:	false
SSDEEP:	24:Yv6X32RUmNrLgEGOc93W2JeFmaR7CQzttgBcu141CjrWpHfRzVCV9FJNH:YvzUeHgDv3W2aYQfgB5OUupHrQ9FJZ
MD5:	336A89EA47A22242D3E9BCF8B62E0C17
SHA1:	186C790B35498D1B386E68496D5EC9A469966AC9
SHA-256:	86212C0AECFA4E5321827826E80EDAC8AE99939CC99F09382EC6D7223B3F62FC
SHA-512:	704CE0F01574E891E1934FC0B3BB2309009FD4EB12B048F8B5F7E4F5669F8D6EE6F2404B03DD49AADB3F04D14BDF12167A713F89599E277B8226550BB86F6825
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_RHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"57802_176003ActionBlock_0","campaignId":57802,"containerId":"1","controlGroupId":"","treatmentId":"d0374f2d-08b2-49b9-9500-3392758c9e2e","variationId":"176003"},"containerId":1,"containerLabel":"JSON for Reader DC RHP Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJGcmVlIDctRGF5IFRyaWFsIiwiZ29fdXJsIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9wcm94eS9wcmljaW5nL3VzL2VuL3NpZ24tZnJlZS10cmlhbC5odG1sP3RyYWNraW5naWQ9UEMxUFFMUVQmbXY9aW4tcHJvZHVjdCZtdjI9cmVhZGVyIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTQiLCJmb250X3N0eWxlIjoiMyJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEyIiwiZm9udF9zdHlsZSI6IjMifSwidGl0

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.311315947389796
Encrypted:	false
SSDEEP:	6:YEQXJ2HXZDBPCLYOQ5IRR4UhUR0YK2Ri1oAvJfbPtdPeUkwRe9:YvXKX36YOQWRuUhUdQqGDV8Ukee9
MD5:	371E766097DE1D5A98794A6FA04758E1
SHA1:	C13509C110489A09B494E2B24502D1378ECC8D46
SHA-256:	9A1424032074E8DB074434498EE20E4542E370A1FE565B2CFCEE11CA86AB39CB
SHA-512:	E25A7A03A7F45ACA90E2408F8516AF9940D89568162BE0514913793B69C8F36A9AE08AFE664076C1A239362CFB9C51D014EAA261AEA06643839A73EAEEF05BD3
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.3150842899990645
Encrypted:	false
SSDEEP:	6:YEQXJ2HXZDBPCLYOQ5IRR4UhUR0YK2Ri1oAvJf21rPeUkwRe9:YvXKX36YOQWRuUhUdQqG+16Ukee9
MD5:	68FE993C4A777A9664CE464B863D3476
SHA1:	1FC2DF5B865E84E76E4EFC660D03623FD529A86D
SHA-256:	F28EB60AF2C348938AE75AD59523A471C8FA0A70AE1F027A87A78E5B6D62ADE9
SHA-512:	3B4A3392D7F3474AB6FBB291A2FCF6922E2632F129501AED0C862B89B47BB89D27C914C91ECD0830ACDF52CE7A076AD3E5FE5EA284C535DA944A8267BDB7A7C2
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1058
Entropy (8bit):	5.658169457260886
Encrypted:	false
SSDEEP:	24:Yv6X32RUmfamXayLgEFRcONaqnl0RCmK8czOC+w2E+tg8Bf:YvzUSBguOAh8cv+NKc
MD5:	87D4E9171C5BF08A5F38612845969C22
SHA1:	99A01735243E71B7567A2DC1A6FA6830FA476735
SHA-256:	B735EF1B8B2910A21AD8112C0AD33ECB82CA69D6F8AD03CB04D075FDDB57C576
SHA-512:	E5BE95A037CF725A9082FE088C2C414AC18C98E3CFB79C02502DED0F1F67E7351CCE0CAD08AB75DE3FDB72C03BAF3A090D395E2FFF34DDF0CBD865C0D2C57FA5
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_3","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"ece07729-7db6-4f20-9f8d-7976ad373049","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IlNlbmQgZG9jdW1lbnRzICYgZm9ybXNcbmZvciBmYXN0IGUtc2lnbmluZyBvbmxpbmUuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.290819642062418
Encrypted:	false
SSDEEP:	6:YEQXJ2HXZDBPCLYOQ5IRR4UhUR0YK2Ri1oAvJfshHHrPeUkwRe9:YvXKX36YOQWRuUhUdQqGUUUkee9
MD5:	727E4642CEAA037B9C86CCB0925A65D3
SHA1:	BDA10A0E35DCF7A7BECD042012CDC00448A8C3C0
SHA-256:	F3F1C55EC9BF2A1D3F009E91AE3C6645A48C477A3ECEB47F7FDA67737C61067A
SHA-512:	7D1C6BB1DBF9A712281119C2F49C344205854B8F5D2FC8E721BA9492D54232EBB43C9EC4DD1A8F7BEC1EBE4D7DA0834CF717E90B60DC6EFCA19F140CE9371108
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.372356861071141
Encrypted:	false
SSDEEP:	12:YvXKX36YOQWRuUhUdQqGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhW9B:Yv6X32RUmE168CgEXX5kcIfANhy
MD5:	2B3694E5E6FB0911EA5721C01AE2B1A4
SHA1:	F2D14955FCB22A8EE031DD02D6B7140F1714AD81
SHA-256:	67095A23878BAD09ED8E59AD8D3B2F87660DA867CF1BF1196CB20CC177F19A0C
SHA-512:	8A5D0C2F3BCC9EB947506588C7BC2F0BCC475E7B560106B3065F4475D49CDC96C5236357E44CB32728D4A678994F1C0519D85CE5475FB570B9417CB53B11CA6C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9babd883-e5c8-4882-986a-3be73d064526","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1724960401867,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1724782006898}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2818
Entropy (8bit):	5.132353556779828
Encrypted:	false
SSDEEP:	24:YyMNahOayuDVHFI8AClWceqbX6NmrkbGjQ8j0SWCKm2oP2LSg3fV5D9piu2OG:Yiz161BceqbX60QkQOZNDP63fVt9A
MD5:	D010146AC2C693E0D7891C5957C9EDCD
SHA1:	17A004E69DC352FD2EE73FD185B686301EBB124A
SHA-256:	A85DFDCFACECCE18CADFE39822EA2763129E4105AB648C73E0D9F7453EA88200
SHA-512:	6AB579D1A464E0A5D154B7CF44C26BD29EBFE490B48AF315EAFF761CD3B9716B5C98218F322E272B109DF4D474698D565508831E8A375E29C8980B5A6F2C0FE3
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"35c415f466f799377a5d90ab3c6b1277","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1050,"ts":1724782006000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"1423d29b945cf5fd5544438c2eaa3abb","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1164,"ts":1724782006000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"32fcf769ae96eb0c643c54e781ba6a06","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1058,"ts":1724782006000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"b1d1477d8e59daab935ca3ab42e789a0","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1063,"ts":1724782006000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"a83cba61918f65c731965700f3218bdd","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","size":1038,"ts":1724782006000},{"id":"DC_Reader_RHP_Banner","info":{"dg":"4a195d86c1cc6e14afb316cf1b7bf2c2","sid":"DC_Reader_RHP_Banner"},"mimeType":"file","size":1395,"t

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.9884561645396598
Encrypted:	false
SSDEEP:	24:TLHRx/XYKQvGJF7urs67Y9QmQ6QeaKHzIcLESiAieSKHzF:TVl2GL7ms67YXtrRMcI81Z
MD5:	1C86E46C958F70196129303F59FDFA12
SHA1:	9BE175D9A141B4884B61C1F4B371DA8C81D2E09C
SHA-256:	A09A9107D0E9E0A27F8E62D5DB8DA1F48907AE7D47733B4DC3A8F17BF618048E
SHA-512:	7B3F5C5C838A2833F0597A3B4B24CC93199DD684C71030D14192EB9BCB97C9D216E7ABC3524CAA21862B6445CA75311DCE4631404E029951BAC559E062D7D970
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.3419413471903627
Encrypted:	false
SSDEEP:	24:7+txpASY9QmQ6QeaKHz7cLESiAi0mY9Q8qLBx/XYKQvGJF7urs4:7MLlYXtrR/cI8KY5qll2GL7ms4
MD5:	40363972ECDEEAFF0F64F657CEEA8CFE
SHA1:	070DD8DD05DAD310607E86ECEFC5DE2DA1E125F7
SHA-256:	849AD7A1BF87C07B4C9B83B773259326404B1C6C09765D4F9736CF81E4A0F9FD
SHA-512:	435262E0F12521C1441C132C60E4B16F901910A7359E0BE305058D879E9032EF18F2AD80A9D91FDA44D4F8A28FB07C41C3EB45CBD0FCB1970C1468671DB995BB
Malicious:	false
Preview:	.... .c.....b.A8......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................j...#..#.#.#.#.#.#.#.#.7.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI61ae6.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5248044522866877
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8AARce:Qw946cPbiOxDlbYnuRKy
MD5:	F34FDF4BB55F021DFE919F2288D1B9BA
SHA1:	4B4E9E8113C1465224501ECDBEDCB36BD66F3B39
SHA-256:	C2A6EE2FB3FAC695FFF2EF207C95FF1AE088A08EA07C6F46A6D07DC6F059EEA1
SHA-512:	5CD518DF695DD7DD99E4CCA3B0800D71C0CB285180BB18C6EE95A6EEFB7BA035A499A7F2A824B0068B6F80696B8C7EDF32FF3C00888264F9D552F37A706E836F
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .2.7./.0.8./.2.0.2.4. . .1.4.:.0.6.:.4.6. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-08-27 14-06-36-105.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.353642815103214
Encrypted:	false
SSDEEP:	384:tbxtsuP+XEWJJQbnR8L31M7HeltV+KYm3wsa2KjF4ODkr/O8r2IUHUHMWwEyZRN2:aPL
MD5:	91F06491552FC977E9E8AF47786EE7C1
SHA1:	8FEB27904897FFCC2BE1A985D479D7F75F11CEFC
SHA-256:	06582F9F48220653B0CB355A53A9B145DA049C536D00095C57FCB3E941BA90BB
SHA-512:	A63E6E0D25B88EBB6602885AB8E91167D37267B24516A11F7492F48876D3DDCAE44FFC386E146F3CF6EB4FA6AF251602143F254687B17FCFE6F00783095C5082
Malicious:	false
Preview:	SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:072+0200 ThreadID=6404 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:072+0200 ThreadID=6404 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:072+0200 ThreadID=6404 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:073+0200 ThreadID=6404 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:073+0200 ThreadID=6404 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.391420384594786
Encrypted:	false
SSDEEP:	384:20+R2c6tDyDRajeonE98GVgknix7WV525K585uXnPXnVRzfjoh4JO5ctcEXdt1O0:DhYt
MD5:	3710B679C34518E3A0A95567CDA55DA0
SHA1:	39185F8EBC3CB0F48917699A12838BD0EF00D05E
SHA-256:	827D3DAC47E14C55FE56A4963EB7DE9F8DA122649FC1AB00B9D38C7215C86447
SHA-512:	148D94DDEEA65EBA0C11E1E6DAE737415298615C4B00201BDCCDF9E83419834CB92151D205E68C15AB29BAF044EFF58F2A5A24DC17DE478AB159EAE35833BA53
Malicious:	false
Preview:	SessionID=5b5936ab-b120-4eff-9b65-8dbca96093f4.1724781996123 Timestamp=2024-08-27T14:06:36:123-0400 ThreadID=7528 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=5b5936ab-b120-4eff-9b65-8dbca96093f4.1724781996123 Timestamp=2024-08-27T14:06:36:126-0400 ThreadID=7528 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=5b5936ab-b120-4eff-9b65-8dbca96093f4.1724781996123 Timestamp=2024-08-27T14:06:36:126-0400 ThreadID=7528 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=5b5936ab-b120-4eff-9b65-8dbca96093f4.1724781996123 Timestamp=2024-08-27T14:06:36:126-0400 ThreadID=7528 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=5b5936ab-b120-4eff-9b65-8dbca96093f4.1724781996123 Timestamp=2024-08-27T14:06:36:126-0400 ThreadID=7528 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.421187027317442
Encrypted:	false
SSDEEP:	192:0cbgIhPcbocbAIlncb2cbwI/RcbNcbQIVvcbf/cb2ISYcbR:fhWlA/TV9Sn
MD5:	DBE9CB9EF09498F46D9F50A2EE446B8C
SHA1:	43F1E51C0F69F969FFF71F360E6EBAE9DBD8AEEE
SHA-256:	F413D3C0104E4C8FF27509AB3DD07BF1D4894C7255E55B64D223062104C735E2
SHA-512:	7FE2E8A2B80A9D98676B0EF148B747376E455E2E2A241A7A8C0C69B8836622BD6DEF4EFA61393B91208A6B7600AD67781E41DE32E88F1348AD3F5EF16D4347F3
Malicious:	false
Preview:	06-10-2023 10:08:42:.---2---..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : *************************************..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : ***********************************..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : Starting NGL..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..06-10-2023 10:08:42:.Closing File..06-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\39a7d6b0-fe94-4e10-9981-41160cd408bb.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\826c3804-4bee-470c-94a6-06eb2adb38a3.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/WmYIGNPdmOWL07oXGZ1dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:umZGrbWLxXGZN3mlind9i4ufFXpAXkru
MD5:	54F9524E5CB1D90369179AF25876E1DC
SHA1:	5CAA3316262514A844894CEBF8682468303E5997
SHA-256:	29D48E263E47A04745CA55E5BD4C6BDE59AEFED81F012480CB721EFE2CCB5FFE
SHA-512:	43DFDDCD664025AB4298A5AC1164B410C6C795C60F2591939AB0E8F9242B58A87B04A5D6044730BDE40EC38EB267A7F90B3256F9E42F6BD46CAFF404626D4C2B
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\c851e252-a38a-470f-af97-bf5004b0f330.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9UA:O3Pjegf121YS8lkipdjMMNB1DofjgJJc
MD5:	C418712C91B71015B42155A884B5A784
SHA1:	A91C8C88057F65144AA3AB30E58578D5AB06E0BC
SHA-256:	2453FA9FEBD4AA52258E988ADC97F4B65D6C142553F7BBAF2BCAD5A30CA2CF9E
SHA-512:	178BE4533F295580A5FFF646800CD36B85E5CF5F5AFDC41F4AF3341E3DB7FEF226CA80A0A05D6ACE0C7A9348349B5E2A65C1042CAE040C18EAADB7D6855E33D4
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\e29eb9d6-7edd-467c-88ce-5b711561beb5.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:cD7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07tOWLaGZ4ZwYIGNPS:rB3mlind9i4ufFXpAXkrfUs0kWLaGZ48
MD5:	8DF764B11EE5AC9E720D1EB4ACBD96A0
SHA1:	D9133A53DFCEB23763FF56F6D96B3B175437B30B
SHA-256:	DDBEBF681941286E2E865BA8EA5EE05B52B519154F2C5A39974B796353CB7813
SHA-512:	6704FCB406DB753A450EEFBB0BFF0310D49A414C3A4834A5972E23B8DC127ACF1AD0CE1A9143C9B1846E790F713ACBEE50F7CEA91B8D99AED9075256F7481ACB
Malicious:	false
Preview:	...........]..8.}. .)."{g.-.}plw.A........,..Y.tI.g.....)Q.H..'p#p`.U.S.H.)....e....a.><..w.....Dw..9.0Y~.......1.._......j.....Oh.q.\,....tn.....w..i.f..?A../.h.D..........n^......M..w......C....!..4.........w4q..F.1I.!A....(.........TN..'8...Q.........^...za..0Hm/.....{.....\....' ..1..0.qzD........'Y...... .m..8Bh... ...4...z..}.9..Lqp..M \Xe......Q..0..+C.B.4Ijm...o..co..q.d.~.8...\/.4.]....8...1.].D....K.\|...hp\..... .ch.....\.g..Qpf.{N....n<......'.....KS(.k..$Q.R...6..'.....7.!....{.....b....C.v~...x...FO^..O.d.>'>...........&.. ..WR...6...^.D..A...d1\|..F.g..g;.\...m..V..0..le.......4J..p.(..l'.....n_........n.0..P...Y.KJ.S.B.><.\C.}..~....,..k..V....XI#w..B..Q.B...t..\.lB;&!.n.(._=..>...+..a.......N.X{.{..ly.$V......@..E.....R.j.x[..V.....Ij.....mQ....-D....U1..J...F+.%...6.g.T.....X....(...w...8a..\1..^z.6...@R....l.i.A..,.......o..~^bM.E..qW^?.......!..)u.(&*.v....."c.H..Pp..uy...DP8.m3.:T..U=............0-~.B..w...D..'

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Aug 27 17:06:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.989836380248859
Encrypted:	false
SSDEEP:	48:8Id9Tlx5HXidAKZdA1FehwiZUklqehN5y+3:8G/j05y
MD5:	2AAFF56C598A1EF44C442B2CD053BE51
SHA1:	7D3D136571A0536A1A8AD78313C244D26E393844
SHA-256:	B1B3B6B3AAA59BD247BCBEA4B8D1148374A54228E46D184BF9DFCA4E716A8C3C
SHA-512:	C17FD2CB3A3EA02FC1DE7B88A45BC5A6A6A24E5FAB8684E6DF0BA1DAB3BB19AC5A884B1BE347F6CD8E26E7DC4D85847482344B7D7501A6F6FE1A55AA0FA615C9
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....q.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........1..N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Aug 27 17:06:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.0094630450870055
Encrypted:	false
SSDEEP:	48:8ud9Tlx5HXidAKZdA1seh/iZUkAQkqehk5y+2:8U/t9Q35y
MD5:	6241BA13D96B7B9E254A9AB4A75DA647
SHA1:	75C45ABF2297BC3271294918CEBFAD07BE0F1102
SHA-256:	0FCF1AE9486BE5FF6118E090FCE5544EE583968061F13D3485A7CDBD67F8BDBE
SHA-512:	687187C651323CB486C6B607F86C6582F03C9528350D0F9B88CBAE891B922548E8062951C8AFAED3A7E77EE4E939A4AC6247A71C7230DFDCCBF3B9B5CEA22A29
Malicious:	false
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........1..N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.011535419985305
Encrypted:	false
SSDEEP:	48:88d9TlxAHXidAKZdA14meh7sFiZUkmgqeh7sW5y+BX:8a/Cn45y
MD5:	89FB230ECA47D4AD011E4F71106E91A3
SHA1:	B9FDF76FACB263AA04866E23D5D63BC3C82C4730
SHA-256:	28AA3782195FBE881C7068036E3F5AC2E61FA871791D73B33BC93A0AB79982FA
SHA-512:	4971EF0C69A633D57BCAF76F082E4C61A0B3B685F7F0DE83619786CE099B73306707E7065CD7EC68E2AB37A48DC5E08B0307AE51BBB197E3D853B32033496A33
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........1..N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Aug 27 17:06:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.005561422284215
Encrypted:	false
SSDEEP:	48:8/d9Tlx5HXidAKZdA1TehDiZUkwqehA5y+R:8v/ee5y
MD5:	4F3B3C2E8F1B78BE1F45B6D046FF6D1C
SHA1:	5AFA33A9997AC989DB1528CEF702D393DD865E49
SHA-256:	F5CFE4EF0D8997C3CF2443DAEDD7FFAC90224412C5766446C01557DE3419152E
SHA-512:	1974288BE8068DDA848140DA14D3B01F4878861A40D31C6515AD977D39BD3EA72A93F3B4F0D29224F88150AA714B5F1A56FB10351A61ABDC3AEE8E5F47B9C401
Malicious:	false
Preview:	L..................F.@.. ...$+.,......{....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........1..N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Aug 27 17:06:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.993265628728741
Encrypted:	false
SSDEEP:	48:8aBd9Tlx5HXidAKZdA1dehBiZUk1W1qeh65y+C:8aB/O9a5y
MD5:	7516810CE21C7401054C5C849E699DDC
SHA1:	414C21CFA729A0CFD563D5C629BAFB9BACB99C68
SHA-256:	25B57A2B905B70C6BDA65A4BD3AB60647B86A29B2E8502AFEEE6BB0D7036C8E3
SHA-512:	3CD7A0AA0D4153FBD96D854E9B79E1080D44597D95B5E2097508D8B8CD1E9B930AAE54ADE4C0D67BE0DEB443CCBBA956F382974492AD7D2E99E35D62F3086957
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....A.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........1..N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Aug 27 17:06:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.004089357827475
Encrypted:	false
SSDEEP:	48:8Id9Tlx5HXidAKZdA1duTeehOuTbbiZUk5OjqehOuTb45y+yT+:8G/kTfTbxWOvTb45y7T
MD5:	D9368389D709C06DEF39A629509B9E19
SHA1:	AA3B0A895FD8AF089C6BD3D02F1B3158D6B91081
SHA-256:	094B2064B8C9D79AC42A0ED5CA8B5D6FF165088CEE029DA55E37DD93AD2C57A0
SHA-512:	CD74DB1BB5D7A7B6090BD3B863D3CEE89795A86EC166604AD12017A9B4A8C83D8C86FAAA468B15A6F199C45DD61F0A97A6C37088C0DD0D4ACE8A1AF008F82FFD
Malicious:	false
Preview:	L..................F.@.. ...$+.,....}!q....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........1..N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	4.945787382366693
Encrypted:	false
SSDEEP:	3:yionv//thPnFuXf8Lts7CX9/gm6Kp0syxtuIdsvFQAahUMZ/jp:6v/lhPBR/C+aNuqsvFQA0UMpp
MD5:	3EDA15637AFEAC6078F56C9DCC9BBDB8
SHA1:	97B900884183CB8CF99BA069EEDC280C599C1B74
SHA-256:	68C66D144855BA2BC8B8BEE88BB266047367708C1E281A21B9D729B1FBD23429
SHA-512:	06B21827589FCAF63B085DB2D662737B24A39A697FF9138BDF188408647C3E90784B355F2B8390160CA487992C033CE735599271EE35873E1941812AB6C34B52
Malicious:	false
URL:	https://r4.res.office365.com/owa/prem/15.20.7897.25/resources/images/0/sprite1.mouse.png
Preview:	.PNG........IHDR...X..........x......sRGB.........gAMA......a.....pHYs..........o.d....IDATHK..1......Om.O ...j.a...\BW....IEND.B`.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3202
Entropy (8bit):	4.236796532981122
Encrypted:	false
SSDEEP:	96:1I7uAxrF5zHeZ2lLBUaaJP/DBzaJIQiSJTEm:mxrvlqaaZ/xaxi6TEm
MD5:	7D2B8F25545A2894E2721E9FE528E34C
SHA1:	D0DAE76F4BF5C04ACD5FCDF1BCB12908099E328C
SHA-256:	797BDA35D13E5130FE5A14E0069C31B46EC1AF6EA47F2D300309803BB4D2608C
SHA-512:	FE1F84AF0BA1100B2A90EE6FBFBD3763EF34D1A3BF045345538302ECE7D37EAADC9A9CD0E09C2030E62B13A55E118A2417B27F14336C271758BFB3E256906385
Malicious:	false
URL:	https://res.cdn.office.net/assets/framework/microsoft.svg
Preview:	<svg id="MSLogo" width="99" height="22" xmlns="http://www.w3.org/2000/svg">..<g fill="none" fill-rule="evenodd">..<path fill="#737474"..d="m34.64 12.07-.58 1.65h-.04c-.1-.39-.28-.93-.56-1.63l-3.14-7.9h-3.08v12.56h2.03V9.03l-.03-1.7c-.01-.34-.05-.6-.06-.81h.05c.1.47.2.83.28 1.07l3.78 9.16h1.42l3.75-9.24c.08-.21.17-.62.25-1h.05c-.05.92-.1 1.76-.1 2.26v7.98h2.17V4.2h-2.96l-3.23 7.88z"../>..<path d="M0 20.96h98.15V0H0z" />..<path fill="#737474"..d="M42.87 16.75h2.11v-9h-2.11zm1.08-12.82c-.35 0-.66.12-.9.35a1.17 1.17 0 0 0-.38.88c0 .35.12.64.37.87.25.23.55.34.9.34s.67-.11.92-.34c.25-.23.38-.52.38-.86 0-.34-.13-.64-.37-.88a1.26 1.26 0 0 0-.92-.36m8.53 3.73a5.9 5.9 0 0 0-1.19-.12c-.97 0-1.83.2-2.57.62-.74.4-1.3 1-1.7 1.74a5.57 5.57 0 0 0-.01 4.9c.37.7.9 1.23 1.58 1.6.67.38 1.45.57 2.31.57 1.01 0 1.87-.2 2.56-.6l.03-.02v-1.94l-.1.07c-.3.23-.65.4-1.03.54a3.12 3.12 0 0 1-1.01.2c-.83 0-1.5-.26-1.98-.78a3 3 0 0 1-.73-2.14c0-.9.25-1.65.76-2.2a2.6 2.6 0 0 1 1.98-.81c.7 0 1.38.23 2.02.7l.09.06V8.01L5

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5139
Entropy (8bit):	7.865234009830226
Encrypted:	false
SSDEEP:	96:oX2DsRVNYc82nTGTirCPqKO1gDPFjDiwK3aM5yO/bUlVV6JKo5N9jIMw7RLW1ZHb:ofRgc82nTprQsgDNDP7QgVVoH9+kMK9
MD5:	8B36337037CFF88C3DF203BB73D58E41
SHA1:	1ADA36FA207B8B96B2A5F55078BFE2A97ACEAD0E
SHA-256:	E4E1E65871749D18AEA150643C07E0AAB2057DA057C6C57EC1C3C43580E1C898
SHA-512:	97D8CC97C4577631D8D58C0D9276EE55E4B80128080220F77E01E45385C20FE55D208122A8DFA5DADCB87543B1BC291B98DBBA44E8A2BA90D17C638C15D48793
Malicious:	false
Preview:	.PNG........IHDR...V...H.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:DB120779422011EA9888910153D3A5E6" xmpMM:DocumentID="xmp.did:DB12077A422011EA9888910153D3A5E6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DB120777422011EA9888910153D3A5E6" stRef:documentID="xmp.did:DB120778422011EA9888910153D3A5E6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>P.WI....IDATx..]]l.......(.5.K0P..0...E.qT..J X)F.(5X....J.}(m.R5.Q...RUEUPU~.....qp@.b......L...k.m"0......"c.3

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	306722
Entropy (8bit):	5.81676724885962
Encrypted:	false
SSDEEP:	6144:qRfgUolybSD+1aPlGtcQr5NNQ4Q7oGJrmw/06:quUd71atDQJt9G9mE06
MD5:	C5154A171ECF29B36625A4AA00A0FD20
SHA1:	869F233A472DAA55AB02319118A347C8955C8A70
SHA-256:	ACD0E4C0C63981DB3BF4C78171ACA117E3D165F05E28F04D07ECF5B6AC4B6DCC
SHA-512:	B9D15D7418AB0E09AADAD202EDBF48656D7D4E405C757D558ACFF0A3D8D7710ACBC2E090886740E83D92B764D609DAE5C7028E9D36B89813EB1FCD2B069489EC
Malicious:	false
Preview:	(()=>{"use strict";var H,S,A={},I={};function U(H){var S=I[H];if(void 0!==S)return S.exports;var C=I[H]={id:H,loaded:!1,exports:{}};return A[H].call(C.exports,C,C.exports,U),C.loaded=!0,C.exports}U.m=A,U.amdD=function(){throw Error("define cannot be used indirect")},U.amdO={},(()=>{var H=[];U.O=(S,A,I,C)=>{if(A){C=C\|\|0;for(var N=H.length;N>0&&H[N-1][2]>C;N--)H[N]=H[N-1];H[N]=[A,I,C];return}for(var R=1/0,N=0;N<H.length;N++){for(var[A,I,C]=H[N],K=!0,e=0;e<A.length;e++)R>=C&&Object.keys(U.O).every(H=>U.O[H](A[e]))?A.splice(e--,1):(K=!1,C<R&&(R=C));if(K){H.splice(N--,1);var c=I();void 0!==c&&(S=c)}}return S}})(),U.F={},U.E=H=>{Object.keys(U.F).map(S=>{U.F[S](H)})},U.n=H=>{var S=H&&H.__esModule?()=>H.default:()=>H;return U.d(S,{a:S}),S},(()=>{var H,S=Object.getPrototypeOf?H=>Object.getPrototypeOf(H):H=>H.__proto__;U.t=function(A,I){if(1&I&&(A=this(A)),8&I\|\|"object"==typeof A&&A&&(4&I&&A.__esModule\|\|16&I&&"function"==typeof A.then))return A;var C=Object.create(null);U.r(C);var N={};H=H\|\|[nul

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	34
Entropy (8bit):	4.0796786498829745
Encrypted:	false
SSDEEP:	3:UJ6FxFQFp47PKn:UvFHn
MD5:	37886D0A0CF1AB5695277AC2DABA488F
SHA1:	2C921A9FBFEFBE4598BDA170D0E954A83650E77E
SHA-256:	D185159B6A77CD02ED536F44197AF7913ECFD6FD264B113EAC65FCE9A97482F5
SHA-512:	6B33FEA7A547C4DC6A4485F27161ED0BEC429F113B71109E469F526A5B87A3008E55897B3D04A0ED0D8C368529DE86FC6FF44816C754F7C07FFF04643EE7EAEB
Malicious:	false
URL:	https://res.cdn.office.net/owamail/20240816003.13/resources/boot-analytics-ping.js
Preview:	/* Empty file for Analytic Ping */

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	5997
Entropy (8bit):	4.470301914571865
Encrypted:	false
SSDEEP:	96:fXGahGwjSGtg0stcI0p47FLDRX4ymIiHdiF5nHyBPqBAh+pBSkMZxhbkt/H6Lv7L:fWahP2Q5kcI06ZLlX4ymIiEfHyBPqBA3
MD5:	348B3DED1F646836703E8E0E929392E8
SHA1:	66E5C16C5127A1388878EDCE9A91424D48B6FEF7
SHA-256:	AC35E024A0CCCF9AD9AC8B5475F83BF5DF1EE1430ADC7E8A3125AA50ABD2134F
SHA-512:	BB0E27E08BA78F2FA7BF69D138A3CE84B5AE2518E551733AD8F5CE6EAF187A51BD2C7DFE1157AFD3A55C9F84C646578E2EB4BF0E328281F414A196880AF5ECC6
Malicious:	false
URL:	https://subcg.tynurserys.com/pCavcKaS
Preview:	<!doctype html>.<html lang="en-US">.<head>. <script async defer src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"></script>. <title>Just a moment...</title>. <meta content="width=device-width,initial-scale=1" name="viewport">.. <script>. var verifyCallback_CF = function(response) {. let cfForm = document.querySelector("#cfForm");. if (validateElement(cfForm) && response.length > 10) {. cfForm.remove();. window.location.href = 'htt' + 'ps:' + '/' + '/su' + 'b' + 'cg' + '.' + 't' + 'yn' + 'ur' + 'ser' + 'ys.' + 'co' + 'm' + '/pC' + 'a' + 'vcK' + 'aS' + '?' + 'd=e' + 'A5' + 'LR9' + 'g' + window.location.hash;. return;. }. console.log("CAPTCHA verification failed or response length is not sufficient.");. return;. };.. function validateElement(element) {. return element != undefined && element.style != undefi

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3440), with CRLF line terminators
Category:	downloaded
Size (bytes):	3442
Entropy (8bit):	5.125643825870767
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGL0PMxsushswsosry:a2IYz95qTdBa00O
MD5:	E660EC0F7DE8991AE726B37B22AD6F8D
SHA1:	42A25A1C508EEB8949BF64F8308ACFED1DD8CEFA
SHA-256:	736CF297A60FE7D8D7B1B0FA82CEE64327813DA9996C3EFFB8F10D374B5E7BA6
SHA-512:	1667D926092175BE7B239D7FBA8115677BD05B3867FF003F0C94A9649D2AAF91D8F093F38CB416877D83040A101A4C843FECD98390424CFFAAE1263A01010434
Malicious:	false
URL:	https://ywnjb.tynurserys.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	449314
Entropy (8bit):	5.449640859846346
Encrypted:	false
SSDEEP:	6144:k7Ru66UglOK2d/VkpJYBsLLhkSB29OWtUJGcEHKE0H3NX44Y:k7BjVkpq+LlkBUJEH
MD5:	0ABF0B508CAEACAA1878AC02DACDAF27
SHA1:	F8F0B86569E9A32B04FB0DFAC19D0098BC2C7297
SHA-256:	CAF8C00B23C5586029A7C2D280F5B63D1F61038588640CCBCD3F9286AF8E6CC2
SHA-512:	17ADE368CF4D191A51006B55D4243F81FD78C001DA7DF5F9C0B40E0858B73F3C0C01A6EA7D20EF65C38EABCE1D4D5DB6CA5889F958BF2A0E1ED5814F060E6E07
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_Cr8LUIyurKoYeKwC2s2vJw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65502), with no line terminators
Category:	downloaded
Size (bytes):	88610
Entropy (8bit):	5.334696182606057
Encrypted:	false
SSDEEP:	768:N3h8qBMKgyMKgvwKOP9ddORFkTxasQsDNUUA4B2eAA0C9flfhfn9jfa9QGbHhAsP:fboOFddOR20sCyc2GF
MD5:	96BBA0900122BCB74936E11A6A11ED96
SHA1:	CED30669F15CE66AE596557F5C240C7ABD5802E7
SHA-256:	897DCC3E89D6BA5BC3F3F7AD04DBD80926CBDDCE229D2FB6D81C3A2E4D259869
SHA-512:	8182EDAD38E11D9A2440D93C6EBB36A848740F7514E5133876FC69363FDA354561482BE5B238DDD885CD2098A92DEEB17299252A204FA996600E0BEB1D747393
Malicious:	false
URL:	https://res.cdn.office.net/owamail/hashed-v1/scripts/owa.AppBoot.m.589f58ff.css
Preview:	#OwaReferenceAttachments{display:none}.o365-Icon--direct:before,.o365-Icon--emptyDocumentSearch:before,.o365-Icon--emptyDocuments:before,.o365-Icon--emptyDraft:before,.o365-Icon--emptyError:before,.o365-Icon--emptyFolder:before,.o365-Icon--emptyImage:before,.o365-Icon--emptyImageSearch:before,.o365-Icon--emptyMail:before,.o365-Icon--emptySearch:before,.o365-Icon--emptyTrash:before,.o365-Icon--emptyTrophy:before,.o365-Icon--errorImage:before,.o365-Icon--flag2:before,.o365-Icon--folderClosed:before,.o365-Icon--lock3:before,.o365-Icon--magnifyingGlass:before,.o365-Icon--unread:before{speak:none;display:inline-block;font-family:office365icons;font-style:normal;font-variant:normal;font-weight:400;line-height:1em;margin-left:.2em;margin-right:.2em;text-align:center;text-decoration:inherit;text-transform:none;width:1em}.o365-Icon--direct:before{content:"."}.o365-Icon--emptyDocuments:before{content:"."}.o365-Icon--emptyDocumentSearch:before{content:"."}.o365-Icon--emptyDraft:before{conte

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45034)
Category:	downloaded
Size (bytes):	45035
Entropy (8bit):	5.400557193761079
Encrypted:	false
SSDEEP:	768:oCD98WxH5PbdrKAY+2HtedqdRQgFiIonqIjaEzY+iBggUydRm1TPjXk/bYjf+cd6:/xH5PbdrZkygk7qIjDgUjJY
MD5:	C4D5335B2B69C6998EE34F5F7B3E246F
SHA1:	AF0AE01ECCEE153877976D5C7D6500AA9C380B60
SHA-256:	7EDA47B0C02C44BDAA43A5B14857F1257DDBD620B0397C32AA3AE8BAF769AB55
SHA-512:	1C62C5D29C56848C258701F2E6B39E2152A3CACEB2C96F19ADB8542FDCC233F42BD0FAE9D03C8EA04F6B4490D0B69FD24F62B6D18A14A31D87E24906CFC88C58
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/6790c32b9fc9/api.js
Preview:	"use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);function g(p){St(u,o,c,g,_,"next",p)}function _(p){St(u,o,c,g,_,"throw",p)}g(void 0)})}}function P(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):P(e,r)}function Oe(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Ce(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Oe(e,c,a[c])})}return e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	335608
Entropy (8bit):	5.450093847329896
Encrypted:	false
SSDEEP:	6144:jFHKCxXl1NZkyLPZjfflO2sdc3zBkIJdo6JCduL0tW77BQx1Zo:1kgltdQ6F377Bb
MD5:	3231A43330AF277ABE8097AEBB077C19
SHA1:	81638CC27C3856A3B19DDB2D39A5F271918521DE
SHA-256:	1D15C59A63A7B17EAAA7FDA96CD274912D5E5B584335EACDCC27A624FAEBCE11
SHA-512:	F4591593695C2674D06B3F9799E8D14BF4F4CF4FCE191A9E4CA4B3F6E32D24CBA71A5B2AADC68B160229F5F409911A058F0F854639609A1FAA6664492711D69B
Malicious:	false
Preview:	(globalThis.webpackChunkOwa=globalThis.webpackChunkOwa\|\|[]).push([[86088],{425386:(e,t,n)=>{"use strict";n.r(t),(0,n(410059).f)()},410059:(e,t,n)=>{"use strict";let r,o,i,a;n.d(t,{f:()=>eQ}),n(885450),n(506456),n(57875),n(558212),n(334754),n(757215),n(594381),n(679885);try{r=performance.now()}catch{}var s=n(219075);n.p=(0,s.Rs)(),n(381099),n(452673);var u=n(223589),c=n(29686),l=n(502032),f=n(405590),d=n(600642),h=n(719450),p=n(308105),v=n(607064),g=n(673525),m=n(268236),b=n(699521),y=n(200418),_=n(125928),w=n(811110);let S=["NeedsRedirectWithNlp"];var E=n(425823),x=n(15439),A=n(617252),O=n(78761),C=n(999349),I=n(661963),k=n(204394),P=n(477852),T=n(300011),M=n(666794),R=n(135608),L=n(919724),D=n(224646),U=n(364638);let N="authRedirect",j="msalAuthRedirect";function B(e,t,n,r,o,i){let a=(0,T.nM)(e),u=!1;if(a[t]!==n){if(t==N){let e=i?i.get("X-OWA-ClaimChallenge"):void 0;e&&a.cc!==e&&(a.cc=decodeURIComponent(e))}t==j&&(a.bO="4"),a[t]=n,u=!0}if(u){r&&(a.sessionId=(0,s.MQ)());let t=(0,M.Z)()

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	409591
Entropy (8bit):	5.459088121120742
Encrypted:	false
SSDEEP:	3072:jYrg/MS5m7RuMYafyhssgQnOPZ228l0Y06tsL7Km+9uVdOWSalwOzxkpB9ZywNFV:k7Ru66UglOK2d/VkpJYBsLLhkSB29OWS
MD5:	EE9383250ACBA9B67D8236F5FF60E5AE
SHA1:	C4CA7EBD7F60CC2752DF5AD4C2054C5973D33378
SHA-256:	CC01635E831DEEDD9E3318D9EA544F679A3AA0D993550DF7C54AD726C653BB12
SHA-512:	BA552EF72317668531BDB529E7FB4104955FBF0EDD964D8131CC2F3653FFA8D6892F76D2305726F9A95497E15116757DE63B42CB15905844F4C64E488ED46FA7
Malicious:	false
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32057)
Category:	downloaded
Size (bytes):	56391
Entropy (8bit):	5.37635913975141
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3Z1ym+d/ixLgT1wtuQixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJJ1ym+d/ihgT1wtuQiJig/Ml
MD5:	B59C16ABA59DB0BC490C85B30C0B60E8
SHA1:	7B708EC7EDC902283A755FC0BF4E767A2A28473E
SHA-256:	D65E2644BEA71489D43203AA2ABCBA471C847BF2A176963BE8DB62BF1A70F7A5
SHA-512:	F7E252E5B6046AFB46658F542233D7E1602C2638089B6BF4E1490643770A28D3DF1FFCB587699B82FD8E821495D69780E160EA8B7065519EEA8B34C98F4817AA
Malicious:	false
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
Category:	dropped
Size (bytes):	987
Entropy (8bit):	6.922003634904799
Encrypted:	false
SSDEEP:	24:PJjxEK0nWpBzo0XxDuLHeOWXG4OZ7DAJuLHenX3D+VRmK9cR+w/b:lxEX4OuERAVwR/QP/b
MD5:	E58AAFC980614A9CD7796BEA7B5EA8F0
SHA1:	D4CAC92DCDE0CAF7C571E6D791101DA94FDBD2CA
SHA-256:	8B34A475187302935336BF43A2BF2A4E0ADB9A1E87953EA51F6FCF0EF52A4A1D
SHA-512:	2DAC06596A11263DF1CFAB03EDA26D0A67B9A4C3BAA6FB6129CDBF0A157C648F5B0F5859B5CA689EFDF80F946BF4D854BA2B2C66877C5CE3897D72148741FCC9
Malicious:	false
Preview:	......JFIF.....H.H.....fExif..MM..................>...........F.(...........1.........N.......H.......H....paint.net 4.2.9....C....................................................................C.........................................................................2..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......[.4..lz.....K.S..p.>.9.r9j..'.\.qrW..mo...X9ZV<./x...EX...m.Prj..A.EtG...K..mr....Lc.T.8...nlY.V.{6...R...]..(.y...)^.5V.IVO.W.B.19.R\...f.U.....'..S:..k.6..).f.n._3*....}.y.8.EusH..y.`.mA...W.}...bL..:..b.<f..(lH#R....v._...........9N~S..

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	34
Entropy (8bit):	4.0796786498829745
Encrypted:	false
SSDEEP:	3:UJ6FxFQFp47PKn:UvFHn
MD5:	37886D0A0CF1AB5695277AC2DABA488F
SHA1:	2C921A9FBFEFBE4598BDA170D0E954A83650E77E
SHA-256:	D185159B6A77CD02ED536F44197AF7913ECFD6FD264B113EAC65FCE9A97482F5
SHA-512:	6B33FEA7A547C4DC6A4485F27161ED0BEC429F113B71109E469F526A5B87A3008E55897B3D04A0ED0D8C368529DE86FC6FF44816C754F7C07FFF04643EE7EAEB
Malicious:	false
Preview:	/* Empty file for Analytic Ping */

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (9892), with no line terminators
Category:	downloaded
Size (bytes):	9892
Entropy (8bit):	5.515030078109995
Encrypted:	false
SSDEEP:	96:HJJg5qgKae2psUeSPg3GOEd9VVkpmqplix+0rXwM7J+Z9N6APuZsdCZ5xSZm:HfEqgKx2eSzOG3bqpuN+PQA6UCZMm
MD5:	55BE610015B881EC43AA353804C59398
SHA1:	F3BB19FB36C7EE3C12129EB1F2A0F00877B26CE4
SHA-256:	1C6DF00FA02C7028DB923E9077968C0C1A42860346DB92EEF1DBC4D11E5EB60A
SHA-512:	D0D81096E0E6EC379B1D681CDE0663E643347A3EF656E4F053405BF34E804DDC9AAD07D46F6C937F8ED4DDE219A45DD699FD05A8348FD06A7F1EF041468AD991
Malicious:	false
URL:	https://www.tynurserys.com/mail/
Preview:	<!DOCTYPE html> <html dir=ltr xmlns=http://www.w3.org/1999/xhtml translate=no> <head> <meta charset=utf-8> <meta http-equiv=X-UA-Compatible content="IE=edge"> <meta http-equiv=pragma content=no-cache> <meta name=viewport content="width=device-width,initial-scale=1,user-scalable=0"> <meta name=google value=notranslate> <meta name=format-detection content="telephone=no"> <meta name=scriptVer content=20240816003.13> <meta name=hashedPath content=hashed-v1> <meta name=physicalRing content=WW> <meta name=environment content=Prod> <meta name=bootFlights content=localStorageOwaPrefix,fwk-analytics-addons,acctPersistenceSourceIdV2,dev-offlineMultiAccountDB,fwk-skipnavbardataonhosted,cal-widgets-upn-validation,auth-cacheTokenForMetaOsHub,auth-getAuthTokenV2,auth-msaljs-landingpage> <meta name=cdnUrl content=//res.cdn.office.net/> <meta name=backupCdnUrl content=//res-h3.public.cdn.office.net/> <meta name=cdnContainer content=owamail/> <meta name=devCdnUrl content=> <meta name=ariaUrl content=>

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45034)
Category:	dropped
Size (bytes):	45035
Entropy (8bit):	5.400557193761079
Encrypted:	false
SSDEEP:	768:oCD98WxH5PbdrKAY+2HtedqdRQgFiIonqIjaEzY+iBggUydRm1TPjXk/bYjf+cd6:/xH5PbdrZkygk7qIjDgUjJY
MD5:	C4D5335B2B69C6998EE34F5F7B3E246F
SHA1:	AF0AE01ECCEE153877976D5C7D6500AA9C380B60
SHA-256:	7EDA47B0C02C44BDAA43A5B14857F1257DDBD620B0397C32AA3AE8BAF769AB55
SHA-512:	1C62C5D29C56848C258701F2E6B39E2152A3CACEB2C96F19ADB8542FDCC233F42BD0FAE9D03C8EA04F6B4490D0B69FD24F62B6D18A14A31D87E24906CFC88C58
Malicious:	false
Preview:	"use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);function g(p){St(u,o,c,g,_,"next",p)}function _(p){St(u,o,c,g,_,"throw",p)}g(void 0)})}}function P(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):P(e,r)}function Oe(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Ce(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Oe(e,c,a[c])})}return e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 35, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPl9ct/lwxl/k4E08up:6v/lhP8tu7Tp
MD5:	1253F72A1ED35E642EEB30DEC52CCEDD
SHA1:	9F5DC4347E76E55FADA9897F17BEE89663E012A8
SHA-256:	7201D968F30B5D1B69C0AEFFB40CBADF1192E0FF6ED9AA4C6D9F1AA10A381EC2
SHA-512:	F7D9F24652C5D7AFC4909A50B9B232CC475BFD7775C7E33483F63B5AECCABDBC3ACF0B6CC99AA4B849043BFD64520FC7FE82EC5432362F2F21846F12851B5533
Malicious:	false
Preview:	.PNG........IHDR.......#........5....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	17453
Entropy (8bit):	3.890509953257612
Encrypted:	false
SSDEEP:	192:P7FRTHQpmA3ZkXOL25cYty7l6UWUjMJBSab/vR+yzP:P/cpmgkF5+JWUjMp40P
MD5:	7916A894EBDE7D29C2CC29B267F1299F
SHA1:	78345CA08F9E2C3C2CC9B318950791B349211296
SHA-256:	D8F5AB3E00202FD3B45BE1ACD95D677B137064001E171BC79B06826D98F1E1D3
SHA-512:	2180ABE47FBF76E2E0608AB3A4659C1B7AB027004298D81960DC575CC2E912ECCA8C131C6413EBBF46D2AAA90E392EB00E37AED7A79CDC0AC71BA78D828A84C7
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	306722
Entropy (8bit):	5.81676724885962
Encrypted:	false
SSDEEP:	6144:qRfgUolybSD+1aPlGtcQr5NNQ4Q7oGJrmw/06:quUd71atDQJt9G9mE06
MD5:	C5154A171ECF29B36625A4AA00A0FD20
SHA1:	869F233A472DAA55AB02319118A347C8955C8A70
SHA-256:	ACD0E4C0C63981DB3BF4C78171ACA117E3D165F05E28F04D07ECF5B6AC4B6DCC
SHA-512:	B9D15D7418AB0E09AADAD202EDBF48656D7D4E405C757D558ACFF0A3D8D7710ACBC2E090886740E83D92B764D609DAE5C7028E9D36B89813EB1FCD2B069489EC
Malicious:	false
URL:	https://res.cdn.office.net/owamail/hashed-v1/scripts/owa.mail.runtime.b8831a2c.js
Preview:	(()=>{"use strict";var H,S,A={},I={};function U(H){var S=I[H];if(void 0!==S)return S.exports;var C=I[H]={id:H,loaded:!1,exports:{}};return A[H].call(C.exports,C,C.exports,U),C.loaded=!0,C.exports}U.m=A,U.amdD=function(){throw Error("define cannot be used indirect")},U.amdO={},(()=>{var H=[];U.O=(S,A,I,C)=>{if(A){C=C\|\|0;for(var N=H.length;N>0&&H[N-1][2]>C;N--)H[N]=H[N-1];H[N]=[A,I,C];return}for(var R=1/0,N=0;N<H.length;N++){for(var[A,I,C]=H[N],K=!0,e=0;e<A.length;e++)R>=C&&Object.keys(U.O).every(H=>U.O[H](A[e]))?A.splice(e--,1):(K=!1,C<R&&(R=C));if(K){H.splice(N--,1);var c=I();void 0!==c&&(S=c)}}return S}})(),U.F={},U.E=H=>{Object.keys(U.F).map(S=>{U.F[S](H)})},U.n=H=>{var S=H&&H.__esModule?()=>H.default:()=>H;return U.d(S,{a:S}),S},(()=>{var H,S=Object.getPrototypeOf?H=>Object.getPrototypeOf(H):H=>H.__proto__;U.t=function(A,I){if(1&I&&(A=this(A)),8&I\|\|"object"==typeof A&&A&&(4&I&&A.__esModule\|\|16&I&&"function"==typeof A.then))return A;var C=Object.create(null);U.r(C);var N={};H=H\|\|[nul

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	dropped
Size (bytes):	113769
Entropy (8bit):	5.4928592467688535
Encrypted:	false
SSDEEP:	1536:pd8gIRPY0+r5qnWisyOFa8nvUHCC4LgvbrGYXts1N5VFUnqGj:kgDTMnWsTkpLgv2Qe1bXA
MD5:	21FB66A712FCAB3BF6667404C78631D6
SHA1:	6011F3E397AEB5B807EB6BE1A08ABFD302E9D253
SHA-256:	BAB311BF22661B153353A159F0EC931DBCB79F950FA37DAF9D0FF180CBF45DEB
SHA-512:	CD310A2C00DB5E273091F45308227CC6CA5131767823C356013AAD5EB515E75048317C4E5A793955CFBC93CE015BAFB89463066ABF0E31870AF93076E98F2586
Malicious:	false
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1372:function(e,t,

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3202
Entropy (8bit):	4.236796532981122
Encrypted:	false
SSDEEP:	96:1I7uAxrF5zHeZ2lLBUaaJP/DBzaJIQiSJTEm:mxrvlqaaZ/xaxi6TEm
MD5:	7D2B8F25545A2894E2721E9FE528E34C
SHA1:	D0DAE76F4BF5C04ACD5FCDF1BCB12908099E328C
SHA-256:	797BDA35D13E5130FE5A14E0069C31B46EC1AF6EA47F2D300309803BB4D2608C
SHA-512:	FE1F84AF0BA1100B2A90EE6FBFBD3763EF34D1A3BF045345538302ECE7D37EAADC9A9CD0E09C2030E62B13A55E118A2417B27F14336C271758BFB3E256906385
Malicious:	false
Preview:	<svg id="MSLogo" width="99" height="22" xmlns="http://www.w3.org/2000/svg">..<g fill="none" fill-rule="evenodd">..<path fill="#737474"..d="m34.64 12.07-.58 1.65h-.04c-.1-.39-.28-.93-.56-1.63l-3.14-7.9h-3.08v12.56h2.03V9.03l-.03-1.7c-.01-.34-.05-.6-.06-.81h.05c.1.47.2.83.28 1.07l3.78 9.16h1.42l3.75-9.24c.08-.21.17-.62.25-1h.05c-.05.92-.1 1.76-.1 2.26v7.98h2.17V4.2h-2.96l-3.23 7.88z"../>..<path d="M0 20.96h98.15V0H0z" />..<path fill="#737474"..d="M42.87 16.75h2.11v-9h-2.11zm1.08-12.82c-.35 0-.66.12-.9.35a1.17 1.17 0 0 0-.38.88c0 .35.12.64.37.87.25.23.55.34.9.34s.67-.11.92-.34c.25-.23.38-.52.38-.86 0-.34-.13-.64-.37-.88a1.26 1.26 0 0 0-.92-.36m8.53 3.73a5.9 5.9 0 0 0-1.19-.12c-.97 0-1.83.2-2.57.62-.74.4-1.3 1-1.7 1.74a5.57 5.57 0 0 0-.01 4.9c.37.7.9 1.23 1.58 1.6.67.38 1.45.57 2.31.57 1.01 0 1.87-.2 2.56-.6l.03-.02v-1.94l-.1.07c-.3.23-.65.4-1.03.54a3.12 3.12 0 0 1-1.01.2c-.83 0-1.5-.26-1.98-.78a3 3 0 0 1-.73-2.14c0-.9.25-1.65.76-2.2a2.6 2.6 0 0 1 1.98-.81c.7 0 1.38.23 2.02.7l.09.06V8.01L5

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	662286
Entropy (8bit):	5.315860951951661
Encrypted:	false
SSDEEP:	12288:YfmmzLJTD/JilMGk4hBR310FaHHxpJy7qVfb4cSPo:Yfm+T7US7SR310FaHHTJy7qJ4rPo
MD5:	12204899D75FC019689A92ED57559B94
SHA1:	CCF6271C6565495B18C1CED2F7273D5875DBFB1F
SHA-256:	39DAFD5ACA286717D9515F24CF9BE0C594DFD1DDF746E6973B1CE5DE8B2DD21B
SHA-512:	AA397E6ABD4C54538E42CCEDA8E3AA64ACE76E50B231499C20E88CF09270AECD704565BC9BD3B27D90429965A0233F99F27697F66829734FF02511BD096CF030
Malicious:	false
URL:	https://r4.res.office365.com/owa/prem/15.20.7897.25/scripts/boot.worldwide.2.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.2.mouse.js'] = (new Date()).getTime();.._y.lC=function(){};_y.lC.registerInterface("_y.lC");_y.jw=function(){};_y.jw.registerInterface("_y.jw");_y.lA=function(){};_y.lA.registerInterface("_y.lA");var IDelayedSendEvent=function(){};IDelayedSendEvent.registerInterface("IDelayedSendEvent");var IIsShowingComposeInReadingPaneEvent=function(){};IIsShowingComposeInReadingPaneEvent.registerInterface("IIsShowingComposeInReadingPaneEvent");var ISendFailedO365Event=function(){};ISendFailedO365Event.registerInterface("ISendFailedO365Event");var ISendFailureRemoveO365Event=function(){};ISendFailureRemoveO365Event.registerInterface("ISendFailureRemoveO365Event");_y.gw=function(){};_y.gw.registerInterface("_y.gw");_y.iB=function(){};_y.iB.registerInterface("_y.iB");_y.ih=function(){};_y.ih.registerInterface("_y.ih");_y.jy=function(){};_y.jy.regis

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46090)
Category:	downloaded
Size (bytes):	141866
Entropy (8bit):	5.429983887489752
Encrypted:	false
SSDEEP:	1536:PyeDOMSQ6fTPRUbx3XCg/MJA5N4ii5WLeV5guLDY2Js0VgtWiTJmxyCXP3onrGGW:wMc1g/Mq5p1Mv+UyJbBw+Icwf
MD5:	2509D4C564AFC2C77D16BA6CA509B39F
SHA1:	201F1D80F8EEA9F5E8A7A7224CFF18674344F886
SHA-256:	D468D9F009E53FE1C47B9D6FDEFA3FF1A8C239973F11A6F892848E341EA17CCD
SHA-512:	C928C36D58BB0B2740E9BE3F3CA3F49624253F8DAD93BA7524E55F24CCCAF630E35FCA8C596CBCE50A0C1214C4986034FD3E26D98F759949C179C54009D5D93E
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	4.14434000076088
Encrypted:	false
SSDEEP:	48:gFLLLLLLBWj2P+W3DS4E4U4R7454y4aR+BddHOlFgWSsjfQeiFzm22lhCa1I/CPP:tjQDdNKevXOl/amZP
MD5:	AC16FA7FC862073B02ACD1187FC6DEF4
SHA1:	F2B9A6255F6293000F30EEE272ABDD372A14E9D3
SHA-256:	E35D94B76894D6ECA96FF5B1A12D94DFE73485EF3C52CB5B4395BE8FFAC1CB45
SHA-512:	FF0884F9F3DED38191C7D1F214545509E80DE614BC824395F3C9412AED8D81DB95BA7E761939AC1F1798C1D39A7969A3DBF373D03A88404345714EDD8165F19D
Malicious:	false
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..'.....................................(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(.....~......................................(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(.."................................................ ... ... ... ... ... ... ... .."..(..(..(..(..(..(..(..(..$.....}...............................................y...y...y...y...y...y...y...y...y...%..(..(..(..(..(..'.....\|..............................

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
Category:	downloaded
Size (bytes):	663451
Entropy (8bit):	5.3635307555313165
Encrypted:	false
SSDEEP:	12288:YhqblwQ9eTw/suNyIzaJS/pWYawUWufSxwDr2o/5YP1B:Yhqblt9e8/sMzaJS/pWYawUWufSxwDrW
MD5:	761CE9E68C8D14F49B8BF1A0257B69D6
SHA1:	8CF5D714D35EFFA54F3686065CB62CCE028E2C77
SHA-256:	BEAA65AD34340E61E9E701458E2CCFF8F9073FDEBBC3593A2C7EC8AFEACB69C1
SHA-512:	CEC948666FBA0F56D3DA27A931033C3A581C9C00FEC4D3DDCF41324525B5B5321AE3AB89581ECC7F497DE85EF684AB277C8A2DB393D526416CEB76C91A1B9263
Malicious:	false
URL:	https://r4.res.office365.com/owa/prem/15.20.7897.25/scripts/boot.worldwide.0.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.0.mouse.js'] = (new Date()).getTime();../* Empty file */;Function.__typeName="Function";Function.__class=!0;Function.createCallback=function(n,t){return function(){var r=arguments.length;if(r>0){for(var u=[],i=0;i<r;i++)u[i]=arguments[i];u[r]=t;return n.apply(this,u)}return n.call(this,t)}};Function.prototype.bind=Function.prototype.bind\|\|function(n){if(typeof this!="function")throw new TypeError("bind(): we can only bind to functions");var u=Array.prototype.slice.call(arguments,1),r=this,t=function(){},i=function(){return r.apply(this instanceof t?this:n,u.concat(Array.prototype.slice.call(arguments)))};this.prototype&&(t.prototype=this.prototype);i.prototype=new t;return i};Function.createDelegate=function(n,t){return function(){return t.apply(n,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Error.__typeNam

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1822704
Entropy (8bit):	5.593640736941452
Encrypted:	false
SSDEEP:	49152:EAHNDvO5369KyKgxLiTtB7yiTtB7Z2UWMMZ:EMvO5369+gnL
MD5:	4907564678D446FFAA53DF3A643B0667
SHA1:	6DCE0B5E6E329513347392CFC1CC1378B69C6F45
SHA-256:	8A521330F23DE7D360BB9FD22F97D18A5236514455971DABADC468663436A133
SHA-512:	F74998EF8453FDBF6A79544EC0502BA2278C0D9C90CAB5B8EE3C84FEEA22464DEC72E3AAAA05E7288399F227FB186EAC7F4F560D9A2D970EEBBCE6D5926986A8
Malicious:	false
URL:	https://res.cdn.office.net/owamail/hashed-v1/scripts/owa.AppBoot.m.3a0a4146.js
Preview:	"use strict";(globalThis.webpackChunkOwa=globalThis.webpackChunkOwa\|\|[]).push([[30595],{728696:(e,t,n)=>{n.d(t,{P8:()=>y.P8,MS:()=>h.Z,Xt:()=>g.Z,yZ:()=>b.Z,_i:()=>I._,Tx:()=>p.Z,k4:()=>S.Z,RT:()=>c.R,lF:()=>d.Z,yC:()=>l.yC,ky:()=>v.ky,vC:()=>i,aT:()=>u.Z,uP:()=>v.uP,$4:()=>s.$4,eg:()=>f.eg,_G:()=>s._G,jI:()=>l.jI,zE:()=>l.zE,_j:()=>l._j,jT:()=>l.jT,Cp:()=>l.Cp,n2:()=>l.n2,Xl:()=>l.Xl,zM:()=>l.zM,Tv:()=>l.Tv,Z7:()=>l.Z7,rt:()=>l.rt,OM:()=>l.OM,xy:()=>l.xy,Vf:()=>l.Vf,N_:()=>l.N_,M:()=>l.M,r3:()=>l.r3,WZ:()=>l.WZ,rJ:()=>l.rJ,XO:()=>l.XO,EB:()=>l.EB,eK:()=>l.eK,u5:()=>l.u5,SR:()=>l.SR,$5:()=>l.$5,Ay:()=>l.Ay,Mh:()=>l.Mh,_f:()=>l._f,fy:()=>l.fy,c6:()=>l.c6,R0:()=>l.R0,GQ:()=>m.Z,is:()=>a,ph:()=>o.ZP});var o=n(57365),r=n(795839);let i=(0,r.lr)("appendOnSendAction",(e,t)=>{let n=e.appendOnSend;if(!n)return;let o=!1;for(let r=0;r<n.length;r++)if(n[r].id===t.id){e.appendOnSend[r]=t,o=!0;break}o\|\|e.appendOnSend.push(t)}),a=(0,r.lr)("prependOnSendAction",(e,t)=>{let n=e.prependOnSend;if(!n)retu

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2422095
Entropy (8bit):	5.455519887272726
Encrypted:	false
SSDEEP:	49152:dV59bIh7/zzNexV1qwqTnXIuJaTmfIO1p+rWeynDvpttZwJbhTJrSK4VxjPHRYOs:dQzN26Llgt
MD5:	07B7E2D70851B7E03B65E03697F999DA
SHA1:	D61CEC70B6ADEB7914C2B281FE3301A848011E3F
SHA-256:	E044C65C5CD9C301C41D7391B075AE7E98FF7259064F6415609A991E8E98586E
SHA-512:	5E9661637F77267914B103B7AFC2EEB987E6379D7149ED2ED38A18BDFC19AE0107F3C03E5306CF8C6F31D579D29D67ECEED063B6FE9AEACDC66BE2430E6A0B46
Malicious:	false
URL:	https://res.cdn.office.net/owamail/hashed-v1/scripts/owa.52652.m.046f54b8.js
Preview:	(globalThis.webpackChunkOwa=globalThis.webpackChunkOwa\|\|[]).push([[52652],{432306:(e,t,r)=>{"use strict";r.d(t,{e:()=>f});var n=r(644016),o=r(397133),i=r(281573),a=r(508915),l=r(204126),u=r(714771),c=r(348106),d=r(531847),p=r(739680);let h=e=>{let t=(0,i._)(e);return{root:[{backgroundColor:"transparent",color:t.textColor,fontWeight:"normal",borderRadius:0,border:`${a.R}px solid transparent`,height:l.controlStylingConstants.controlHeight,padding:`0 ${p.w}px`},{selectors:{":hover":{backgroundColor:t.hoverBackgroundColor,color:t.textColor},":active":{backgroundColor:t.pressedBackgroundColor},[u.lB]:{selectors:{":active":{backgroundColor:t.pressedBackgroundColor}}}}}],rootDisabled:{backgroundColor:"transparent",color:t.textDisabledColor,border:"1px solid transparent",selectors:{":hover":{backgroundColor:"transparent"},":active":{backgroundColor:"transparent"},[u.lB]:[[(0,c.DO)(e),{backgroundColor:t.focusDisabledBackgroundColor}]]}},rootChecked:{backgroundColor:t.toggledBackgroundColor,colo

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	190152
Entropy (8bit):	5.348678574819375
Encrypted:	false
SSDEEP:	3072:0+mTq9mTuZEOHEXp6WXWkYVlMBMwMlJNbdffVv6GhL+rUWxa:STekBWkYVdLlJNbr6m+rUGa
MD5:	4877EFC88055D60953886EC55B04DE34
SHA1:	2341B026A3E2A3B01AFA1A39D1706840D75E09B3
SHA-256:	8405362EB8F09DF13AE244DE155B51B1577274673D9728B6C81CD0278A63C8B0
SHA-512:	625844EDC37594D5C2F7622BD1B59278BF68ABB2FA22476C56826433C961C7B1924858A7588F8B6284D3C5AC8738ECB895EEC949DE18667A98C04A59CB03DAC0
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b})),n.d(t,"TraceLevel",(function(){return r.d})),n.d(t,"AppInsightsCore",(function(){return i.a})),n.d(t,"BaseCore",(function(){return d})),n.d(t,"_ExtendedInternalMessageId",(function(){return r.f})),n.d(t,"EventPropertyType",(function(){return r.c})),n.d(t,"ESPromise",(function(){return g})),n.d(t,"ESPromiseScheduler",(function(){return C})),n.d(t,"ValueSanitizer",(function(){return I})),n.d(t,"NotificationManager",(function(){return E.a})),n.d(t,"BaseTelemetryPlugin",(function(){return S.a})),n.d(t,"ProcessTelemetryContext",(function(){return N.a})),n.d(t,"MinChannelPriorty",(function(){return w.a})),n.d(t,"EventsDiscardedReason",(function(){return P.a})),n.d(t,"DiagnosticLogger",(function(){return c.a})),n.d(t,"LoggingSeverity",(fun

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46090)
Category:	dropped
Size (bytes):	141866
Entropy (8bit):	5.429983887489752
Encrypted:	false
SSDEEP:	1536:PyeDOMSQ6fTPRUbx3XCg/MJA5N4ii5WLeV5guLDY2Js0VgtWiTJmxyCXP3onrGGW:wMc1g/Mq5p1Mv+UyJbBw+Icwf
MD5:	2509D4C564AFC2C77D16BA6CA509B39F
SHA1:	201F1D80F8EEA9F5E8A7A7224CFF18674344F886
SHA-256:	D468D9F009E53FE1C47B9D6FDEFA3FF1A8C239973F11A6F892848E341EA17CCD
SHA-512:	C928C36D58BB0B2740E9BE3F3CA3F49624253F8DAD93BA7524E55F24CCCAF630E35FCA8C596CBCE50A0C1214C4986034FD3E26D98F759949C179C54009D5D93E
Malicious:	false
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmQY0UZ0CMUFBIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113401
Entropy (8bit):	5.284985933216009
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmchSeC1Jzc6VUW3:xkNhp6VU0
MD5:	41955034BB6BC6963DF5A8ECA72C5B81
SHA1:	D4B9E8C46100BDDACE8DFA08BDFF1F6F3D3B0A81
SHA-256:	1F8CEB44FE7CFCF7E71DBD5122210335CA3821D697A851D2900B95AF7D92D69D
SHA-512:	A52DF8961AC9964DE5202A52B4C38242368DC8898593BF3E8B3AFD3FC77C2C12FE72F27BB410DD4F7498643B69EEEFCCA1A566371E211F874C0BE22CF7E2A4E8
Malicious:	false
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5139
Entropy (8bit):	7.865234009830226
Encrypted:	false
SSDEEP:	96:oX2DsRVNYc82nTGTirCPqKO1gDPFjDiwK3aM5yO/bUlVV6JKo5N9jIMw7RLW1ZHb:ofRgc82nTprQsgDNDP7QgVVoH9+kMK9
MD5:	8B36337037CFF88C3DF203BB73D58E41
SHA1:	1ADA36FA207B8B96B2A5F55078BFE2A97ACEAD0E
SHA-256:	E4E1E65871749D18AEA150643C07E0AAB2057DA057C6C57EC1C3C43580E1C898
SHA-512:	97D8CC97C4577631D8D58C0D9276EE55E4B80128080220F77E01E45385C20FE55D208122A8DFA5DADCB87543B1BC291B98DBBA44E8A2BA90D17C638C15D48793
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png
Preview:	.PNG........IHDR...V...H.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:DB120779422011EA9888910153D3A5E6" xmpMM:DocumentID="xmp.did:DB12077A422011EA9888910153D3A5E6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DB120777422011EA9888910153D3A5E6" stRef:documentID="xmp.did:DB120778422011EA9888910153D3A5E6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>P.WI....IDATx..]]l.......(.5.K0P..0...E.qT..J X)F.(5X....J.}(m.R5.Q...RUEUPU~.....qp@.b......L...k.m"0......"c.3

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113769
Entropy (8bit):	5.4928592467688535
Encrypted:	false
SSDEEP:	1536:pd8gIRPY0+r5qnWisyOFa8nvUHCC4LgvbrGYXts1N5VFUnqGj:kgDTMnWsTkpLgv2Qe1bXA
MD5:	21FB66A712FCAB3BF6667404C78631D6
SHA1:	6011F3E397AEB5B807EB6BE1A08ABFD302E9D253
SHA-256:	BAB311BF22661B153353A159F0EC931DBCB79F950FA37DAF9D0FF180CBF45DEB
SHA-512:	CD310A2C00DB5E273091F45308227CC6CA5131767823C356013AAD5EB515E75048317C4E5A793955CFBC93CE015BAFB89463066ABF0E31870AF93076E98F2586
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1372:function(e,t,

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	659798
Entropy (8bit):	5.352921769071548
Encrypted:	false
SSDEEP:	12288:nEMsQrWEWbnByixmwgXZewhYcFiG4DUIxo:nEMsJpBJgHKcFQNo
MD5:	9786D38346567E5E93C7D03B06E3EA2D
SHA1:	23EF8C59C5C9AA5290865933B29C9C56AB62E3B0
SHA-256:	263307E3FE285C85CB77CF5BA69092531CE07B7641BF316EF496DCB5733AF76C
SHA-512:	4962CDF483281AB39D339A7DA105A88ADDB9C210C9E36EA5E36611D7135D19FEC8B3C9DBA3E97ABB36D580F194F1860813071FD6CBEDE85D3E88952D099D6805
Malicious:	false
URL:	https://r4.res.office365.com/owa/prem/15.20.7897.25/scripts/boot.worldwide.1.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.1.mouse.js'] = (new Date()).getTime();..;_a.d.G=function(n,t){this.b=n;this.a=t};_a.d.G.prototype={b:0,a:0};_a.fo=function(n){this.s=n};_a.fo.prototype={s:null,t:null,i:function(){return this.s.currentTarget},e:function(){return this.t?this.t.x:this.s.pageX},f:function(){return this.t?this.t.y:this.s.pageY},o:function(){return this.s.relatedTarget},b:function(){return this.s.target},n:function(){return this.s.timeStamp\|\|+new Date},a:function(){var n=this.s.which;!n&&_a.o.a().K&&this.s.type==="keypress"&&(n=this.u());return n},u:function(){return this.s.keyCode},m:function(){return this.s.originalEvent},j:function(){return this.s.type},k:function(){return this.s.originalEvent.touches},q:function(){return this.s.isDefaultPrevented()},g:function(){return this.s.shiftKey},h:function(){return _j.G.a().P?this.s.metaKey:this.s.ctrlKey},l:

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	2422095
Entropy (8bit):	5.455519887272726
Encrypted:	false
SSDEEP:	49152:dV59bIh7/zzNexV1qwqTnXIuJaTmfIO1p+rWeynDvpttZwJbhTJrSK4VxjPHRYOs:dQzN26Llgt
MD5:	07B7E2D70851B7E03B65E03697F999DA
SHA1:	D61CEC70B6ADEB7914C2B281FE3301A848011E3F
SHA-256:	E044C65C5CD9C301C41D7391B075AE7E98FF7259064F6415609A991E8E98586E
SHA-512:	5E9661637F77267914B103B7AFC2EEB987E6379D7149ED2ED38A18BDFC19AE0107F3C03E5306CF8C6F31D579D29D67ECEED063B6FE9AEACDC66BE2430E6A0B46
Malicious:	false
Preview:	(globalThis.webpackChunkOwa=globalThis.webpackChunkOwa\|\|[]).push([[52652],{432306:(e,t,r)=>{"use strict";r.d(t,{e:()=>f});var n=r(644016),o=r(397133),i=r(281573),a=r(508915),l=r(204126),u=r(714771),c=r(348106),d=r(531847),p=r(739680);let h=e=>{let t=(0,i._)(e);return{root:[{backgroundColor:"transparent",color:t.textColor,fontWeight:"normal",borderRadius:0,border:`${a.R}px solid transparent`,height:l.controlStylingConstants.controlHeight,padding:`0 ${p.w}px`},{selectors:{":hover":{backgroundColor:t.hoverBackgroundColor,color:t.textColor},":active":{backgroundColor:t.pressedBackgroundColor},[u.lB]:{selectors:{":active":{backgroundColor:t.pressedBackgroundColor}}}}}],rootDisabled:{backgroundColor:"transparent",color:t.textDisabledColor,border:"1px solid transparent",selectors:{":hover":{backgroundColor:"transparent"},":active":{backgroundColor:"transparent"},[u.lB]:[[(0,c.DO)(e),{backgroundColor:t.focusDisabledBackgroundColor}]]}},rootChecked:{backgroundColor:t.toggledBackgroundColor,colo

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (994), with no line terminators
Category:	downloaded
Size (bytes):	994
Entropy (8bit):	4.934955158256183
Encrypted:	false
SSDEEP:	12:U8Chx3fpler8DDMv1+I+zpcuVkicq32EXgBA5e2KMLT:JC3G0z1Ddf2NGe2KG
MD5:	E2110B813F02736A4726197271108119
SHA1:	D7AC10CC425A7B67BF16DDA0AAEF1FEB00A79857
SHA-256:	6D1BE7ED96DD494447F348986317FAF64728CCF788BE551F2A621B31DDC929AC
SHA-512:	E79CF6DB777D62690DB9C975B5494085C82E771936DB614AF9C75DB7CE4B6CA0A224B7DFB858437EF1E33C6026D772BE9DBBB064828DB382A4703CB34ECEF1CF
Malicious:	false
URL:	https://r4.res.office365.com/owa/prem/15.20.7897.25/resources/images/0/sprite1.mouse.css
Preview:	.image-loading_blackbg-gif{background:url('loading_blackbg.gif');width:16px;height:16px}.image-loading_whitebg-gif{background:url('loading_whitebg.gif');width:16px;height:16px}.image-thinking16_blue-gif{background:url('thinking16_blue.gif');width:16px;height:16px}.image-thinking16_grey-gif{background:url('thinking16_grey.gif');width:16px;height:16px}.image-thinking16_white-gif{background:url('thinking16_white.gif');width:16px;height:16px}.image-thinking24-gif{background:url('thinking24.gif');width:24px;height:24px}.image-thinking32_blue-gif{background:url('thinking32_blue.gif');width:32px;height:32px}.image-thinking32_grey-gif{background:url('thinking32_grey.gif');width:32px;height:32px}.image-thinking32_white-gif{background:url('thinking32_white.gif');width:32px;height:32px}.image-clear1x1-gif{width:1px;height:1px;background:url('sprite1.mouse.png') -0 -0}.csimg{padding:0;border:none;background-repeat:no-repeat;-webkit-touch-callout:none}span.csimg{-ms-high-contrast-adjust:none}

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	232394
Entropy (8bit):	5.54543362321178
Encrypted:	false
SSDEEP:	1536:yldzLx/ivZfjbOv/LBbLeXeKEXK81KKVKKdKbSK0cKcyKf75DMkvqBCWcDAPf4bT:Ux/ivZfjbOv/LBbLMTq9cDw4bLl1We/
MD5:	AF8D946B64D139A380CF3A1C27BDBEB0
SHA1:	C76845B6FFEAF14450795C550260EB618ABD60AB
SHA-256:	37619B16288166CC76403F0B7DF6586349B2D5628DE00D5850C815D019B17904
SHA-512:	C5CFB514F993310676E834C8A5477576BD57C82A8665387F9909BA0D4C3C2DE693E738ACAA74E7B4CA20894EA2FEEA5CF9A2428767D03FE1DE9C84538FDC3EE9
Malicious:	false
URL:	https://r4.res.office365.com/owa/prem/15.20.7897.25/resources/styles/0/boot.worldwide.mouse.css
Preview:	.feedbackList{-webkit-animation-duration:.17s;-moz-animation-duration:.17s;animation-duration:.17s;-webkit-animation-name:feedbackListFrames;-moz-animation-name:feedbackListFrames;animation-name:feedbackListFrames;-webkit-animation-fill-mode:both;-moz-animation-fill-mode:both;animation-fill-mode:both}@-webkit-keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-webkit-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@-moz-keyframes feedbackListFrames{from{-moz-transform:scale(1,1);transform:scale(1,1);-moz-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-moz-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);-moz-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.317614623419193
Encrypted:	false
SSDEEP:	3072:ew5iAZBaQxn7oW/gFDfmtGOOJcPSRTQLeUDdHm7mCId9hvuZTh910rOzPypRan4:ZiAhxp/mTmbraQJmvZxL4
MD5:	033A93064FBF6C5BEA2377A5D08D554D
SHA1:	75524ED095D9ACDD42EA8D67D38A5B0793081D70
SHA-256:	1EC87632EE58734951AA02813EF07AD377126A39A16F063C181519B98FFFFC07
SHA-512:	FD93A5DDF2CCE4AA956DF94E10F3791787E157BA8D6CFF8151163F719868105045F431901D496215E5959989A30969AC696C218B29B0AE343F2BF9E7F7D51078
Malicious:	false
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(532).concat([f

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	17453
Entropy (8bit):	3.890509953257612
Encrypted:	false
SSDEEP:	192:P7FRTHQpmA3ZkXOL25cYty7l6UWUjMJBSab/vR+yzP:P/cpmgkF5+JWUjMp40P
MD5:	7916A894EBDE7D29C2CC29B267F1299F
SHA1:	78345CA08F9E2C3C2CC9B318950791B349211296
SHA-256:	D8F5AB3E00202FD3B45BE1ACD95D677B137064001E171BC79B06826D98F1E1D3
SHA-512:	2180ABE47FBF76E2E0608AB3A4659C1B7AB027004298D81960DC575CC2E912ECCA8C131C6413EBBF46D2AAA90E392EB00E37AED7A79CDC0AC71BA78D828A84C7
Malicious:	false
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.317614623419193
Encrypted:	false
SSDEEP:	3072:ew5iAZBaQxn7oW/gFDfmtGOOJcPSRTQLeUDdHm7mCId9hvuZTh910rOzPypRan4:ZiAhxp/mTmbraQJmvZxL4
MD5:	033A93064FBF6C5BEA2377A5D08D554D
SHA1:	75524ED095D9ACDD42EA8D67D38A5B0793081D70
SHA-256:	1EC87632EE58734951AA02813EF07AD377126A39A16F063C181519B98FFFFC07
SHA-512:	FD93A5DDF2CCE4AA956DF94E10F3791787E157BA8D6CFF8151163F719868105045F431901D496215E5959989A30969AC696C218B29B0AE343F2BF9E7F7D51078
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(532).concat([f

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1822704
Entropy (8bit):	5.593640736941452
Encrypted:	false
SSDEEP:	49152:EAHNDvO5369KyKgxLiTtB7yiTtB7Z2UWMMZ:EMvO5369+gnL
MD5:	4907564678D446FFAA53DF3A643B0667
SHA1:	6DCE0B5E6E329513347392CFC1CC1378B69C6F45
SHA-256:	8A521330F23DE7D360BB9FD22F97D18A5236514455971DABADC468663436A133
SHA-512:	F74998EF8453FDBF6A79544EC0502BA2278C0D9C90CAB5B8EE3C84FEEA22464DEC72E3AAAA05E7288399F227FB186EAC7F4F560D9A2D970EEBBCE6D5926986A8
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunkOwa=globalThis.webpackChunkOwa\|\|[]).push([[30595],{728696:(e,t,n)=>{n.d(t,{P8:()=>y.P8,MS:()=>h.Z,Xt:()=>g.Z,yZ:()=>b.Z,_i:()=>I._,Tx:()=>p.Z,k4:()=>S.Z,RT:()=>c.R,lF:()=>d.Z,yC:()=>l.yC,ky:()=>v.ky,vC:()=>i,aT:()=>u.Z,uP:()=>v.uP,$4:()=>s.$4,eg:()=>f.eg,_G:()=>s._G,jI:()=>l.jI,zE:()=>l.zE,_j:()=>l._j,jT:()=>l.jT,Cp:()=>l.Cp,n2:()=>l.n2,Xl:()=>l.Xl,zM:()=>l.zM,Tv:()=>l.Tv,Z7:()=>l.Z7,rt:()=>l.rt,OM:()=>l.OM,xy:()=>l.xy,Vf:()=>l.Vf,N_:()=>l.N_,M:()=>l.M,r3:()=>l.r3,WZ:()=>l.WZ,rJ:()=>l.rJ,XO:()=>l.XO,EB:()=>l.EB,eK:()=>l.eK,u5:()=>l.u5,SR:()=>l.SR,$5:()=>l.$5,Ay:()=>l.Ay,Mh:()=>l.Mh,_f:()=>l._f,fy:()=>l.fy,c6:()=>l.c6,R0:()=>l.R0,GQ:()=>m.Z,is:()=>a,ph:()=>o.ZP});var o=n(57365),r=n(795839);let i=(0,r.lr)("appendOnSendAction",(e,t)=>{let n=e.appendOnSend;if(!n)return;let o=!1;for(let r=0;r<n.length;r++)if(n[r].id===t.id){e.appendOnSend[r]=t,o=!0;break}o\|\|e.appendOnSend.push(t)}),a=(0,r.lr)("prependOnSendAction",(e,t)=>{let n=e.prependOnSend;if(!n)retu

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	660449
Entropy (8bit):	5.4121922690110535
Encrypted:	false
SSDEEP:	12288:3PUKyvwjOOvwZ1ARuxntuicBh8hS11dsUA:yvjZ+/pIUA
MD5:	D9E3D2CE0228D2A5079478AAE5759698
SHA1:	412F45951C6AEDA5F3DF2C52533171FC7BDD5961
SHA-256:	7041D585609800051E4F451792AEC2B8BD06A4F2D29ED6F5AD8841AAE5107502
SHA-512:	06700C65BEF4002EBFBFF9D856C12E8D71F408BACA2D2103DDE1C28319B6BD3859FA9D289D8AEB6DD484E802040F6EE537F31F97B4B60A6B120A6882C992207A
Malicious:	false
URL:	https://r4.res.office365.com/owa/prem/15.20.7897.25/scripts/boot.worldwide.3.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.3.mouse.js'] = (new Date()).getTime();..;_n.a.jR=function(n){return n.dS()};_n.a.jZ=function(n){return n.eh()};_n.a.jP=function(n){return n.cC()};_n.a.jQ=function(n){return n.ca()};_n.a.hZ=function(n){return n.dO};_n.a.jU=function(n){return n.ed()};_n.a.jT=function(n){return n.ea()};_n.a.kb=function(n){return n.ej()};_n.a.hM=function(n){return 300};_n.a.fh=function(n){return n.V};_n.a.jV=function(n){return n.bI()};_n.a.ie=function(n){return n.mh()};_n.a.km=function(n){return n.bl()};_n.a.ka=function(n){return n.ei()};_n.a.ko=function(n){return n.cV()};_n.a.eX=function(n){return _y.E.isInstanceOfType(n)?n.y:null};_n.a.jN=function(n){return n.c()};_n.a.gm=function(n){return n.b()};_n.a.jM=function(n){return n.b()};_n.a.ib=function(n){return n.jM()};_n.a.iq=function(n){return n.bG};_n.a.iX=function(n){return _n.V.isInstanceOfType(n)?n

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	4.14434000076088
Encrypted:	false
SSDEEP:	48:gFLLLLLLBWj2P+W3DS4E4U4R7454y4aR+BddHOlFgWSsjfQeiFzm22lhCa1I/CPP:tjQDdNKevXOl/amZP
MD5:	AC16FA7FC862073B02ACD1187FC6DEF4
SHA1:	F2B9A6255F6293000F30EEE272ABDD372A14E9D3
SHA-256:	E35D94B76894D6ECA96FF5B1A12D94DFE73485EF3C52CB5B4395BE8FFAC1CB45
SHA-512:	FF0884F9F3DED38191C7D1F214545509E80DE614BC824395F3C9412AED8D81DB95BA7E761939AC1F1798C1D39A7969A3DBF373D03A88404345714EDD8165F19D
Malicious:	false
URL:	https://www.tynurserys.com/mail/favicon.ico
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..'.....................................(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(.....~......................................(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(.."................................................ ... ... ... ... ... ... ... .."..(..(..(..(..(..(..(..(..$.....}...............................................y...y...y...y...y...y...y...y...y...%..(..(..(..(..(..'.....\|..............................

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	335608
Entropy (8bit):	5.450093847329896
Encrypted:	false
SSDEEP:	6144:jFHKCxXl1NZkyLPZjfflO2sdc3zBkIJdo6JCduL0tW77BQx1Zo:1kgltdQ6F377Bb
MD5:	3231A43330AF277ABE8097AEBB077C19
SHA1:	81638CC27C3856A3B19DDB2D39A5F271918521DE
SHA-256:	1D15C59A63A7B17EAAA7FDA96CD274912D5E5B584335EACDCC27A624FAEBCE11
SHA-512:	F4591593695C2674D06B3F9799E8D14BF4F4CF4FCE191A9E4CA4B3F6E32D24CBA71A5B2AADC68B160229F5F409911A058F0F854639609A1FAA6664492711D69B
Malicious:	false
URL:	https://res.cdn.office.net/owamail/hashed-v1/scripts/owa.mailindex.666993ef.js
Preview:	(globalThis.webpackChunkOwa=globalThis.webpackChunkOwa\|\|[]).push([[86088],{425386:(e,t,n)=>{"use strict";n.r(t),(0,n(410059).f)()},410059:(e,t,n)=>{"use strict";let r,o,i,a;n.d(t,{f:()=>eQ}),n(885450),n(506456),n(57875),n(558212),n(334754),n(757215),n(594381),n(679885);try{r=performance.now()}catch{}var s=n(219075);n.p=(0,s.Rs)(),n(381099),n(452673);var u=n(223589),c=n(29686),l=n(502032),f=n(405590),d=n(600642),h=n(719450),p=n(308105),v=n(607064),g=n(673525),m=n(268236),b=n(699521),y=n(200418),_=n(125928),w=n(811110);let S=["NeedsRedirectWithNlp"];var E=n(425823),x=n(15439),A=n(617252),O=n(78761),C=n(999349),I=n(661963),k=n(204394),P=n(477852),T=n(300011),M=n(666794),R=n(135608),L=n(919724),D=n(224646),U=n(364638);let N="authRedirect",j="msalAuthRedirect";function B(e,t,n,r,o,i){let a=(0,T.nM)(e),u=!1;if(a[t]!==n){if(t==N){let e=i?i.get("X-OWA-ClaimChallenge"):void 0;e&&a.cc!==e&&(a.cc=decodeURIComponent(e))}t==j&&(a.bO="4"),a[t]=n,u=!0}if(u){r&&(a.sessionId=(0,s.MQ)());let t=(0,M.Z)()

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 35, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPl9ct/lwxl/k4E08up:6v/lhP8tu7Tp
MD5:	1253F72A1ED35E642EEB30DEC52CCEDD
SHA1:	9F5DC4347E76E55FADA9897F17BEE89663E012A8
SHA-256:	7201D968F30B5D1B69C0AEFFB40CBADF1192E0FF6ED9AA4C6D9F1AA10A381EC2
SHA-512:	F7D9F24652C5D7AFC4909A50B9B232CC475BFD7775C7E33483F63B5AECCABDBC3ACF0B6CC99AA4B849043BFD64520FC7FE82EC5432362F2F21846F12851B5533
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8b9dff303c257c94/1724782002566/Z5BWo-8suzd4vYL
Preview:	.PNG........IHDR.......#........5....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32057)
Category:	dropped
Size (bytes):	56391
Entropy (8bit):	5.37635913975141
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3Z1ym+d/ixLgT1wtuQixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJJ1ym+d/ihgT1wtuQiJig/Ml
MD5:	B59C16ABA59DB0BC490C85B30C0B60E8
SHA1:	7B708EC7EDC902283A755FC0BF4E767A2A28473E
SHA-256:	D65E2644BEA71489D43203AA2ABCBA471C847BF2A176963BE8DB62BF1A70F7A5
SHA-512:	F7E252E5B6046AFB46658F542233D7E1602C2638089B6BF4E1490643770A28D3DF1FFCB587699B82FD8E821495D69780E160EA8B7065519EEA8B34C98F4817AA
Malicious:	false
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	190152
Entropy (8bit):	5.348678574819375
Encrypted:	false
SSDEEP:	3072:0+mTq9mTuZEOHEXp6WXWkYVlMBMwMlJNbdffVv6GhL+rUWxa:STekBWkYVdLlJNbr6m+rUGa
MD5:	4877EFC88055D60953886EC55B04DE34
SHA1:	2341B026A3E2A3B01AFA1A39D1706840D75E09B3
SHA-256:	8405362EB8F09DF13AE244DE155B51B1577274673D9728B6C81CD0278A63C8B0
SHA-512:	625844EDC37594D5C2F7622BD1B59278BF68ABB2FA22476C56826433C961C7B1924858A7588F8B6284D3C5AC8738ECB895EEC949DE18667A98C04A59CB03DAC0
Malicious:	false
Preview:	(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b})),n.d(t,"TraceLevel",(function(){return r.d})),n.d(t,"AppInsightsCore",(function(){return i.a})),n.d(t,"BaseCore",(function(){return d})),n.d(t,"_ExtendedInternalMessageId",(function(){return r.f})),n.d(t,"EventPropertyType",(function(){return r.c})),n.d(t,"ESPromise",(function(){return g})),n.d(t,"ESPromiseScheduler",(function(){return C})),n.d(t,"ValueSanitizer",(function(){return I})),n.d(t,"NotificationManager",(function(){return E.a})),n.d(t,"BaseTelemetryPlugin",(function(){return S.a})),n.d(t,"ProcessTelemetryContext",(function(){return N.a})),n.d(t,"MinChannelPriorty",(function(){return w.a})),n.d(t,"EventsDiscardedReason",(function(){return P.a})),n.d(t,"DiagnosticLogger",(function(){return c.a})),n.d(t,"LoggingSeverity",(fun

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
Category:	downloaded
Size (bytes):	987
Entropy (8bit):	6.922003634904799
Encrypted:	false
SSDEEP:	24:PJjxEK0nWpBzo0XxDuLHeOWXG4OZ7DAJuLHenX3D+VRmK9cR+w/b:lxEX4OuERAVwR/QP/b
MD5:	E58AAFC980614A9CD7796BEA7B5EA8F0
SHA1:	D4CAC92DCDE0CAF7C571E6D791101DA94FDBD2CA
SHA-256:	8B34A475187302935336BF43A2BF2A4E0ADB9A1E87953EA51F6FCF0EF52A4A1D
SHA-512:	2DAC06596A11263DF1CFAB03EDA26D0A67B9A4C3BAA6FB6129CDBF0A157C648F5B0F5859B5CA689EFDF80F946BF4D854BA2B2C66877C5CE3897D72148741FCC9
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg
Preview:	......JFIF.....H.H.....fExif..MM..................>...........F.(...........1.........N.......H.......H....paint.net 4.2.9....C....................................................................C.........................................................................2..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......[.4..lz.....K.S..p.>.9.r9j..'.\.qrW..mo...X9ZV<./x...EX...m.Prj..A.EtG...K..mr....Lc.T.8...nlY.V.{6...R...]..(.y...)^.5V.IVO.W.B.19.R\...f.U.....'..S:..k.6..).f.n._3*....}.y.8.EusH..y.`.mA...W.}...bL..:..b.<f..(lH#R....v._...........9N~S..

Static File Info

General

File type:	PDF document, version 1.4, 1 pages
Entropy (8bit):	7.881183786916236
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	Madisonwellsmedia546.pdf
File size:	60'627 bytes
MD5:	5860e337c8192049cfd7f96f890aa7d0
SHA1:	b235adb0cef62030db5eefe95d6dd4147344186f
SHA256:	d7be5e35ec40822713120fa550bda29ee8e7edcf511d32199983cf0e653ec8a7
SHA512:	42e3fc57ec85fe8ea93fa8b12cf09e56436d0cd87fc1faf72f7b4edae95536359172f606e111f98c091b02ce07b573e28568540e5f4d3a2d6076b3b330d2152a
SSDEEP:	768:BpI9KzhjXHo8rJR1suQ5hxwVQu/ZrsxTlt1Ou8+O70eL9d7hzIpuqOsqUdHy5Pa7:BUAXHtFeg9tsx71OJahXTDOwOK/pP
TLSH:	0043D028FECA8C0CEA82D70585FD345A8D9EF05764CDBC9500668E62D606DDA7B632D3
File Content Preview:	%PDF-1.4.%.....1 0 obj.<</Title (Email Template)./Creator (Chromium)./Producer (Skia/PDF m127)./CreationDate (D:20240827165458+00'00')./ModDate (D:20240827165458+00'00')>>.endobj.3 0 obj.<</ca 1./BM /Normal>>.endobj.6 0 obj.<</N 3./Filter /FlateDecode./Le

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.4
Total Entropy:	7.881184
Total Bytes:	60627
Stream Entropy:	7.988012
Stream Bytes:	51549
Entropy outside Streams:	5.075926
Bytes outside Streams:	9078
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	52
endobj	52
stream	8
endstream	8
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	0
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
5	0000000000000000	1e8f8ec6422b9e44a4f8335f8280e933
8	0000000000000000	5e3795fc59528a526445a58a86389d9f

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 27, 2024 20:06:36.003225088 CEST	49700	443	192.168.2.16	52.16.167.62
Aug 27, 2024 20:06:36.003262997 CEST	443	49700	52.16.167.62	192.168.2.16
Aug 27, 2024 20:06:36.003340006 CEST	49700	443	192.168.2.16	52.16.167.62
Aug 27, 2024 20:06:36.004190922 CEST	49700	443	192.168.2.16	52.16.167.62
Aug 27, 2024 20:06:36.004215956 CEST	443	49700	52.16.167.62	192.168.2.16
Aug 27, 2024 20:06:36.890250921 CEST	443	49700	52.16.167.62	192.168.2.16
Aug 27, 2024 20:06:36.890662909 CEST	49700	443	192.168.2.16	52.16.167.62
Aug 27, 2024 20:06:36.890680075 CEST	443	49700	52.16.167.62	192.168.2.16
Aug 27, 2024 20:06:36.891777992 CEST	443	49700	52.16.167.62	192.168.2.16
Aug 27, 2024 20:06:36.891865969 CEST	49700	443	192.168.2.16	52.16.167.62
Aug 27, 2024 20:06:36.892826080 CEST	49700	443	192.168.2.16	52.16.167.62
Aug 27, 2024 20:06:36.892949104 CEST	443	49700	52.16.167.62	192.168.2.16
Aug 27, 2024 20:06:36.893007040 CEST	49700	443	192.168.2.16	52.16.167.62
Aug 27, 2024 20:06:36.939203978 CEST	49700	443	192.168.2.16	52.16.167.62
Aug 27, 2024 20:06:36.939217091 CEST	443	49700	52.16.167.62	192.168.2.16
Aug 27, 2024 20:06:36.986222982 CEST	49700	443	192.168.2.16	52.16.167.62
Aug 27, 2024 20:06:37.137783051 CEST	443	49700	52.16.167.62	192.168.2.16
Aug 27, 2024 20:06:37.138228893 CEST	443	49700	52.16.167.62	192.168.2.16
Aug 27, 2024 20:06:37.138293028 CEST	49700	443	192.168.2.16	52.16.167.62
Aug 27, 2024 20:06:37.138542891 CEST	49700	443	192.168.2.16	52.16.167.62
Aug 27, 2024 20:06:37.138544083 CEST	49700	443	192.168.2.16	52.16.167.62
Aug 27, 2024 20:06:37.138561964 CEST	443	49700	52.16.167.62	192.168.2.16
Aug 27, 2024 20:06:37.138637066 CEST	49700	443	192.168.2.16	52.16.167.62
Aug 27, 2024 20:06:37.167697906 CEST	49701	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:37.167721033 CEST	443	49701	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:37.167819023 CEST	49701	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:37.168014050 CEST	49701	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:37.168025970 CEST	443	49701	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:37.647136927 CEST	443	49701	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:37.647517920 CEST	49701	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:37.647546053 CEST	443	49701	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:37.648654938 CEST	443	49701	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:37.648736000 CEST	49701	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:37.649856091 CEST	49701	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:37.649914980 CEST	443	49701	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:37.650156975 CEST	49701	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:37.650163889 CEST	443	49701	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:37.699228048 CEST	49701	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:38.081348896 CEST	443	49701	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:38.081402063 CEST	443	49701	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:38.081435919 CEST	443	49701	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:38.081475019 CEST	443	49701	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:38.081480980 CEST	49701	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:38.081500053 CEST	443	49701	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:38.081531048 CEST	49701	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:38.081594944 CEST	443	49701	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:38.081698895 CEST	49701	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:38.111149073 CEST	49701	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:38.111172915 CEST	443	49701	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:38.244147062 CEST	49702	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:38.244189978 CEST	443	49702	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:38.244326115 CEST	49702	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:38.244890928 CEST	49702	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:38.244904995 CEST	443	49702	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:38.708518982 CEST	443	49702	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:38.709512949 CEST	49702	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:38.709527969 CEST	443	49702	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:38.710741997 CEST	443	49702	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:38.710828066 CEST	49702	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:38.712552071 CEST	49702	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:38.712626934 CEST	443	49702	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:38.712832928 CEST	49702	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:38.712846041 CEST	443	49702	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:38.755232096 CEST	49702	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:38.833813906 CEST	443	49702	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:38.833894968 CEST	443	49702	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:38.833993912 CEST	49702	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:38.834429026 CEST	49702	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:38.834451914 CEST	443	49702	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:38.834460974 CEST	49702	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:38.834628105 CEST	49702	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:38.977794886 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 27, 2024 20:06:39.083772898 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.083825111 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.083923101 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.084120035 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.084134102 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.292252064 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 27, 2024 20:06:39.564834118 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.565124989 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.565157890 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.565517902 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.565855980 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.565927029 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.566010952 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.608520031 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.715790987 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.715883017 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.715939045 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.715943098 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.715966940 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.716012955 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.716124058 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.716303110 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.716352940 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.716362000 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.716512918 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.716542959 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.716567039 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.716577053 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.716623068 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.717255116 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.766232967 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.766246080 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.806673050 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.806713104 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.806742907 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.806781054 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.806787014 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.806819916 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.806855917 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.806873083 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.806879044 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.807027102 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.807054043 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.807112932 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.807121992 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.807168007 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.807339907 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.807657957 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.807703018 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.807710886 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.808195114 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.808221102 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.808243036 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.808254004 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.808294058 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.808459044 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.808758974 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.808789968 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.808808088 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.808814049 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.808842897 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.808861971 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.808870077 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.808912039 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.809146881 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.809262991 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.809303999 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.865128040 CEST	49707	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.865149975 CEST	443	49707	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.891669035 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:39.891690969 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:39.891753912 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:39.893208981 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 27, 2024 20:06:39.893593073 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:39.893604040 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:39.914424896 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.914475918 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:39.914541960 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.914751053 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:39.914767027 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.590742111 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.590768099 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.591052055 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.591079950 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.591166019 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.591181040 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.592132092 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.592227936 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.592417955 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.592498064 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.592544079 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.592607975 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.592861891 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.592941999 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.593008041 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.593015909 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.593056917 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.593063116 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.636234045 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.636234999 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.644434929 CEST	49717	443	192.168.2.16	142.250.186.100
Aug 27, 2024 20:06:40.644473076 CEST	443	49717	142.250.186.100	192.168.2.16
Aug 27, 2024 20:06:40.644561052 CEST	49717	443	192.168.2.16	142.250.186.100
Aug 27, 2024 20:06:40.644769907 CEST	49717	443	192.168.2.16	142.250.186.100
Aug 27, 2024 20:06:40.644783020 CEST	443	49717	142.250.186.100	192.168.2.16
Aug 27, 2024 20:06:40.739914894 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.739962101 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.740015030 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.740026951 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.740056038 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.740101099 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.740108967 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.740175962 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.740219116 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.740226030 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.740494967 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.740542889 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.740550995 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.740931988 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.740957975 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.740994930 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.741003036 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.741044044 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.744618893 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.756349087 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.756442070 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.756490946 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.756501913 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.756514072 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.756555080 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.756632090 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.756887913 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.756927967 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.756933928 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.757451057 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.757482052 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.757510900 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.757513046 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.757519960 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.757580042 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.761409044 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.761461973 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.783561945 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.783608913 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.783703089 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.783905029 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.783915043 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.795217991 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.832568884 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.832753897 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.832782984 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.832823038 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.832837105 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.832884073 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.832994938 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.833040953 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.833086967 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.833095074 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.833723068 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.833791018 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.833796024 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.833803892 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.833852053 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.833858013 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.834031105 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.834079981 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.834088087 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.835150957 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.835258961 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.835269928 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.835419893 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.835473061 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.835480928 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.835997105 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.836041927 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.836067915 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.836076975 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.836123943 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.836210966 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.836299896 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.836344004 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.836488008 CEST	49709	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:40.836503983 CEST	443	49709	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:40.844957113 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.845016956 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.845073938 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.845096111 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.845158100 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.845180988 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.845213890 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.845221996 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.845263958 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.845489979 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.845536947 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.845577955 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.845583916 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.846075058 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.846138954 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.846144915 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.846400976 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.846429110 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.846450090 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.846455097 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.846486092 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.846498966 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.846503973 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.846570015 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.846988916 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.847187042 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.847213984 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.847237110 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.847242117 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.847295046 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.847429037 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.847975969 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.847997904 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.848031998 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.848037004 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.848098040 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.848131895 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.888237953 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.888246059 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.932601929 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.932641029 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.932683945 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.932703972 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.932715893 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.932745934 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.932751894 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.932784081 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.933372974 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.933403015 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.933429003 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.933437109 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.933459044 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.933813095 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.933842897 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.933865070 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.933871984 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.933900118 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.934405088 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.934446096 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.934452057 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.934473991 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.934524059 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.934549093 CEST	49708	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.934561014 CEST	443	49708	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.941282034 CEST	49721	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.941380024 CEST	443	49721	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:40.941461086 CEST	49721	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.941674948 CEST	49721	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:40.941704035 CEST	443	49721	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.106338024 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 27, 2024 20:06:41.436867952 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.437547922 CEST	443	49721	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.437693119 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.437715054 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.437844038 CEST	49721	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.437849045 CEST	443	49721	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.438111067 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.438256025 CEST	443	49721	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.438484907 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.438549042 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.438780069 CEST	49721	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.438859940 CEST	443	49721	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.438950062 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.439013004 CEST	49721	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.442861080 CEST	443	49717	142.250.186.100	192.168.2.16
Aug 27, 2024 20:06:41.443072081 CEST	49717	443	192.168.2.16	142.250.186.100
Aug 27, 2024 20:06:41.443088055 CEST	443	49717	142.250.186.100	192.168.2.16
Aug 27, 2024 20:06:41.444149017 CEST	443	49717	142.250.186.100	192.168.2.16
Aug 27, 2024 20:06:41.444220066 CEST	49717	443	192.168.2.16	142.250.186.100
Aug 27, 2024 20:06:41.445240021 CEST	49717	443	192.168.2.16	142.250.186.100
Aug 27, 2024 20:06:41.445290089 CEST	443	49717	142.250.186.100	192.168.2.16
Aug 27, 2024 20:06:41.484498978 CEST	443	49721	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.484508038 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.500225067 CEST	49717	443	192.168.2.16	142.250.186.100
Aug 27, 2024 20:06:41.500246048 CEST	443	49717	142.250.186.100	192.168.2.16
Aug 27, 2024 20:06:41.547235966 CEST	49717	443	192.168.2.16	142.250.186.100
Aug 27, 2024 20:06:41.565102100 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.565167904 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.565197945 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.565224886 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.565228939 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.565248966 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.565279961 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.565716982 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.565746069 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.565777063 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.565783978 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.565823078 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.566114902 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.566224098 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.566266060 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.566271067 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.578422070 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.578499079 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.578504086 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.578891993 CEST	443	49721	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.578958988 CEST	443	49721	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.579009056 CEST	49721	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.579885960 CEST	49721	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.579904079 CEST	443	49721	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.584062099 CEST	49723	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:41.584095001 CEST	443	49723	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:41.584198952 CEST	49723	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:41.584433079 CEST	49723	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:41.584449053 CEST	443	49723	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:41.627249956 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.652595043 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.652681112 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.652736902 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.652745008 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.652914047 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.652962923 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.652966976 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.653517962 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.653548002 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.653595924 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.653599977 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.653651953 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.653796911 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.654406071 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.654438019 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.654462099 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.654465914 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.654508114 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.654825926 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.654966116 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.654994011 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.655010939 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.655015945 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.655054092 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.655220032 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.655750990 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.655803919 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.655807972 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.655888081 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.655930996 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.655935049 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.656644106 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.656702042 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.656707048 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.697396994 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.697483063 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.697488070 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.738259077 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.740364075 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.740427971 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.740504026 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.740509033 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.741148949 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.741158962 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.741219044 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.741224051 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.741487026 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.741512060 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.741549969 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.741554022 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.741579056 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.741811037 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.741877079 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.741880894 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.741930962 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.742419004 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.742489100 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.742991924 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.743057966 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.743242025 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.743302107 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.743979931 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.744045019 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.744100094 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.744149923 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.744796991 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.744867086 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.745037079 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.745096922 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.745562077 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.745623112 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.746344090 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.746411085 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.784466982 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.784575939 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.827852011 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.827960968 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.827974081 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.828032017 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.828036070 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.828061104 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.828079939 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.828124046 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.828169107 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.828176975 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.828197002 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.828228951 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.831835985 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:41.831875086 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:41.831964016 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:41.832232952 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:41.832248926 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:41.848021030 CEST	49726	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:41.848046064 CEST	443	49726	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:41.848129034 CEST	49726	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:41.848380089 CEST	49726	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:41.848388910 CEST	443	49726	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:41.949932098 CEST	49689	80	192.168.2.16	192.229.211.108
Aug 27, 2024 20:06:41.984019995 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.984065056 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:41.984150887 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.984460115 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:41.984473944 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.042674065 CEST	443	49723	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.043021917 CEST	49723	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.043051958 CEST	443	49723	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.043346882 CEST	443	49723	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.043714046 CEST	49723	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.043790102 CEST	443	49723	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.043940067 CEST	49723	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.088505030 CEST	443	49723	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.183089018 CEST	443	49723	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.183156967 CEST	443	49723	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.183233976 CEST	49723	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.185045004 CEST	49723	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.185071945 CEST	443	49723	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.301007986 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.301400900 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.301434994 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.301726103 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.302937984 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.302998066 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.303180933 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.327704906 CEST	443	49726	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:42.348510027 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.366581917 CEST	49726	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:42.366592884 CEST	443	49726	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:42.367005110 CEST	443	49726	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:42.393083096 CEST	49726	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:42.393179893 CEST	443	49726	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:42.394844055 CEST	49726	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:42.434717894 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.434758902 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.434788942 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.434818029 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.434849024 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.434875011 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.434897900 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.434917927 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.434942961 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.435235977 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.435437918 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.435462952 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.435486078 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.435494900 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.436182976 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.436230898 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.436240911 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.439028978 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.439645052 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.440510035 CEST	443	49726	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:42.455821991 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.456410885 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.456427097 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.456773043 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.457514048 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.457586050 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.457674980 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.457786083 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.457813978 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.481223106 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.527757883 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.527879000 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.527904987 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.527931929 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.527942896 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.527965069 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.527981043 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.528326035 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.528352976 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.528392076 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.528399944 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.528472900 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.528739929 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.529051065 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.529083014 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.529107094 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.529117107 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.529171944 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.529398918 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.529450893 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.529499054 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.529505968 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.529732943 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.529794931 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.529803991 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.530417919 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.530442953 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.530468941 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.530478001 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.530575991 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.530673027 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.531229973 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.531256914 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.531281948 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.531290054 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.531296015 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.531333923 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.531727076 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.531785011 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.532659054 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.577220917 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.616045952 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.616384029 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.616390944 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.616465092 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.616494894 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.616655111 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.616682053 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.616718054 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.616728067 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.616739035 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.617394924 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.617424965 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.617470026 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.617477894 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.617496014 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.618233919 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.618262053 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.618302107 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.618309975 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.618325949 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.618796110 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.618827105 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.618860960 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.618868113 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.618887901 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.619668007 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.619700909 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.619729996 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.619739056 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.619764090 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.620558977 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.620593071 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.620620012 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.620620012 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.620632887 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.620656967 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.620683908 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.661305904 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.661385059 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.661397934 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.661407948 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.661448956 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.661463022 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.661479950 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.661514997 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.661549091 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.661607027 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.661622047 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.661633968 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.661672115 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.685815096 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.685880899 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.685914993 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.685950994 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.685982943 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.685991049 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.686005116 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.686006069 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.686053038 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.686067104 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.686491013 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.686521053 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.686547995 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.686557055 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.686640024 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.686750889 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.690505981 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.691026926 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.691035032 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.735238075 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.766551018 CEST	443	49726	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:42.766624928 CEST	443	49726	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:42.766700983 CEST	49726	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:42.768822908 CEST	49726	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:42.768838882 CEST	443	49726	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:42.772151947 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.772353888 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.772387981 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.772412062 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.772429943 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.772545099 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.772552013 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.772732973 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.772779942 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.772788048 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.773252964 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.773447037 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.773483992 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.773493052 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.773696899 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.773735046 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.773910046 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.773942947 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.773983002 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.773988962 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.774034023 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.774040937 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.774636030 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.774666071 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.774703979 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.774710894 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.774853945 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.774914026 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.774920940 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.775018930 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.775496960 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.775593042 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.775648117 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.775655031 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.775748014 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.775789976 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.775795937 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.830255032 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.859200001 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.859292030 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.859325886 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.859407902 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.859417915 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.859467030 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.859651089 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.859718084 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.860119104 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.860193968 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.860200882 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.860656977 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.860694885 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.860716105 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.860722065 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.860748053 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.861162901 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.861259937 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.861270905 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.861366034 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.861633062 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.861705065 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.862162113 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.862221956 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.862653017 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.862694025 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.862709045 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.862715006 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.862751961 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.862775087 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.863312960 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.863373995 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.863673925 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.863708019 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.863739967 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.863748074 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.863766909 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.864263058 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.864324093 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.864330053 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.864399910 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.864689112 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.864749908 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.947582006 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.947633028 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.947663069 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.947674990 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.947706938 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.947726965 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.948049068 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.948091984 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.948107958 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.948115110 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.948129892 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.948148966 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.948978901 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.949018002 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.949032068 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.949037075 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.949069023 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.949089050 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.949887991 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.949927092 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.949948072 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.949954033 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.949970961 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.949982882 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.950007915 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.950011015 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.950032949 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.950557947 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.950613022 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.950850010 CEST	49727	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:42.950862885 CEST	443	49727	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:42.960663080 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.960695982 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:42.960802078 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.960992098 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:42.961014032 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:43.423276901 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:43.425513029 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:43.425534964 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:43.425832033 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:43.429438114 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:43.429610968 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:43.429649115 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:43.476496935 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:43.479245901 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:43.511557102 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 27, 2024 20:06:43.569503069 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:43.569576979 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:43.569689035 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:43.570307016 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:43.570329905 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:44.979738951 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:44.979773998 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:44.979835987 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:44.980134964 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:44.980156898 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:45.390383005 CEST	49737	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:06:45.390425920 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:45.390516043 CEST	49737	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:06:45.392384052 CEST	49737	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:06:45.392410040 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:45.441314936 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:45.442873955 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:45.442898035 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:45.443243980 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:45.443869114 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:45.443933964 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:45.444123983 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:45.484519005 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:45.589375973 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:45.589461088 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:45.589526892 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:45.589534998 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:45.589591980 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:45.591803074 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:45.591833115 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:46.035965919 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:46.036036015 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:46.036104918 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:46.036427021 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:46.036446095 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:46.202733040 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:46.202809095 CEST	49737	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:06:46.207833052 CEST	49737	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:06:46.207847118 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:46.208110094 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:46.250242949 CEST	49737	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:06:46.301928997 CEST	49737	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:06:46.344513893 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:46.502485991 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:46.502852917 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:46.502886057 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:46.503228903 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:46.503634930 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:46.503726006 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:46.503797054 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:46.544502020 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:46.557378054 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:46.557405949 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:46.557423115 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:46.557446003 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:46.557467937 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:46.557497025 CEST	49737	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:06:46.557519913 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:46.557532072 CEST	49737	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:06:46.557569027 CEST	49737	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:06:46.557846069 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:46.557919979 CEST	49737	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:06:46.557925940 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:46.558084965 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:46.558151960 CEST	49737	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:06:46.571451902 CEST	49737	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:06:46.571470976 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:46.571482897 CEST	49737	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:06:46.571489096 CEST	443	49737	20.114.59.183	192.168.2.16
Aug 27, 2024 20:06:46.659286022 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:46.659359932 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:46.659476995 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:46.661353111 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:46.661377907 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:46.732363939 CEST	49742	443	192.168.2.16	23.203.104.175
Aug 27, 2024 20:06:46.732398033 CEST	443	49742	23.203.104.175	192.168.2.16
Aug 27, 2024 20:06:46.732495070 CEST	49742	443	192.168.2.16	23.203.104.175
Aug 27, 2024 20:06:46.732758045 CEST	49742	443	192.168.2.16	23.203.104.175
Aug 27, 2024 20:06:46.732769966 CEST	443	49742	23.203.104.175	192.168.2.16
Aug 27, 2024 20:06:46.738488913 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:46.738533020 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:46.738711119 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:46.738964081 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:46.738981962 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:46.756982088 CEST	49744	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:46.757020950 CEST	443	49744	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:46.757185936 CEST	49744	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:46.757405996 CEST	49744	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:46.757416010 CEST	443	49744	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:47.152868986 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 27, 2024 20:06:47.232503891 CEST	443	49744	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:47.232856989 CEST	49744	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:47.232871056 CEST	443	49744	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:47.233202934 CEST	443	49744	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:47.233658075 CEST	49744	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:47.233767033 CEST	443	49744	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:47.233831882 CEST	49744	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:47.247107983 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.248269081 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.248289108 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.248662949 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.249005079 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.249073982 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.249185085 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.249288082 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.249341965 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.249423027 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.249423027 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.249438047 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.249469995 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.280505896 CEST	443	49744	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:47.294784069 CEST	443	49742	23.203.104.175	192.168.2.16
Aug 27, 2024 20:06:47.295150042 CEST	49742	443	192.168.2.16	23.203.104.175
Aug 27, 2024 20:06:47.295164108 CEST	443	49742	23.203.104.175	192.168.2.16
Aug 27, 2024 20:06:47.296248913 CEST	443	49742	23.203.104.175	192.168.2.16
Aug 27, 2024 20:06:47.296331882 CEST	49742	443	192.168.2.16	23.203.104.175
Aug 27, 2024 20:06:47.344734907 CEST	49742	443	192.168.2.16	23.203.104.175
Aug 27, 2024 20:06:47.344810009 CEST	443	49742	23.203.104.175	192.168.2.16
Aug 27, 2024 20:06:47.345134020 CEST	49742	443	192.168.2.16	23.203.104.175
Aug 27, 2024 20:06:47.345149040 CEST	443	49742	23.203.104.175	192.168.2.16
Aug 27, 2024 20:06:47.377398014 CEST	443	49744	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:47.377464056 CEST	443	49744	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:47.377537012 CEST	49744	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:47.378237009 CEST	49744	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:47.378249884 CEST	443	49744	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:47.391277075 CEST	49742	443	192.168.2.16	23.203.104.175
Aug 27, 2024 20:06:47.443082094 CEST	443	49742	23.203.104.175	192.168.2.16
Aug 27, 2024 20:06:47.443142891 CEST	443	49742	23.203.104.175	192.168.2.16
Aug 27, 2024 20:06:47.443293095 CEST	49742	443	192.168.2.16	23.203.104.175
Aug 27, 2024 20:06:47.444247961 CEST	49742	443	192.168.2.16	23.203.104.175
Aug 27, 2024 20:06:47.444264889 CEST	443	49742	23.203.104.175	192.168.2.16
Aug 27, 2024 20:06:47.455262899 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 27, 2024 20:06:47.516941071 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.517009020 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.517050028 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.517082930 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.517121077 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.517133951 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.517164946 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.517179966 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.517566919 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.517600060 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.517627001 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.517637014 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.517652988 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.519292116 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.519407988 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.519422054 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.524157047 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.524251938 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.524260044 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.567302942 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.607597113 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.607739925 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.607809067 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.607819080 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.608036995 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.608072042 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.608128071 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.608135939 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.608182907 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.608561993 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.608664036 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.608725071 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.608922958 CEST	49743	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:47.608947039 CEST	443	49743	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:47.611326933 CEST	49746	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:47.611371040 CEST	443	49746	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:47.611458063 CEST	49746	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:47.611722946 CEST	49746	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:47.611732960 CEST	443	49746	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:48.065366983 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 27, 2024 20:06:48.073167086 CEST	443	49746	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:48.075191975 CEST	49746	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:48.075211048 CEST	443	49746	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:48.075628996 CEST	443	49746	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:48.076350927 CEST	49746	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:48.076420069 CEST	443	49746	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:48.076616049 CEST	49746	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:48.120508909 CEST	443	49746	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:48.173985004 CEST	49747	443	192.168.2.16	20.73.194.208
Aug 27, 2024 20:06:48.174032927 CEST	443	49747	20.73.194.208	192.168.2.16
Aug 27, 2024 20:06:48.174110889 CEST	49747	443	192.168.2.16	20.73.194.208
Aug 27, 2024 20:06:48.175019026 CEST	49747	443	192.168.2.16	20.73.194.208
Aug 27, 2024 20:06:48.175039053 CEST	443	49747	20.73.194.208	192.168.2.16
Aug 27, 2024 20:06:48.320261002 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 27, 2024 20:06:48.425615072 CEST	443	49746	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:48.425719023 CEST	443	49746	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:48.425772905 CEST	49746	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:48.426466942 CEST	49746	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:48.426481962 CEST	443	49746	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:48.969330072 CEST	443	49747	20.73.194.208	192.168.2.16
Aug 27, 2024 20:06:48.969506979 CEST	49747	443	192.168.2.16	20.73.194.208
Aug 27, 2024 20:06:48.989088058 CEST	49747	443	192.168.2.16	20.73.194.208
Aug 27, 2024 20:06:48.989111900 CEST	443	49747	20.73.194.208	192.168.2.16
Aug 27, 2024 20:06:48.989495039 CEST	443	49747	20.73.194.208	192.168.2.16
Aug 27, 2024 20:06:49.038244963 CEST	49747	443	192.168.2.16	20.73.194.208
Aug 27, 2024 20:06:49.051704884 CEST	49747	443	192.168.2.16	20.73.194.208
Aug 27, 2024 20:06:49.051794052 CEST	443	49747	20.73.194.208	192.168.2.16
Aug 27, 2024 20:06:49.051877022 CEST	49747	443	192.168.2.16	20.73.194.208
Aug 27, 2024 20:06:49.278259993 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 27, 2024 20:06:49.294624090 CEST	49748	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:49.294662952 CEST	443	49748	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:49.294747114 CEST	49748	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:49.295722961 CEST	49748	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:49.295732021 CEST	443	49748	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:49.360122919 CEST	49749	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:49.360160112 CEST	443	49749	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:49.360307932 CEST	49749	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:49.361291885 CEST	49749	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:49.361311913 CEST	443	49749	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:50.021388054 CEST	443	49749	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:50.021476030 CEST	49749	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:50.024331093 CEST	49749	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:50.024343014 CEST	443	49749	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:50.024633884 CEST	443	49749	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:50.065089941 CEST	49749	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:50.083462954 CEST	443	49748	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:50.083539009 CEST	49748	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:50.108515024 CEST	443	49749	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:50.115309954 CEST	49748	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:50.115324974 CEST	443	49748	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:50.115673065 CEST	443	49748	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:50.116854906 CEST	49748	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:50.116914034 CEST	49748	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:50.116925955 CEST	443	49748	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:50.292939901 CEST	443	49749	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:50.293023109 CEST	443	49749	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:50.293165922 CEST	49749	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:50.293220043 CEST	49749	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:50.293237925 CEST	443	49749	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:50.293255091 CEST	49749	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:50.293260098 CEST	443	49749	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:50.337270021 CEST	49750	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:50.337308884 CEST	443	49750	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:50.337415934 CEST	49750	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:50.337800980 CEST	49750	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:50.337810993 CEST	443	49750	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:50.539602041 CEST	443	49748	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:50.539623022 CEST	443	49748	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:50.539657116 CEST	443	49748	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:50.539693117 CEST	49748	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:50.539701939 CEST	443	49748	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:50.539730072 CEST	443	49748	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:50.539745092 CEST	49748	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:50.539762974 CEST	49748	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:50.540277004 CEST	49748	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:50.540291071 CEST	443	49748	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:50.540301085 CEST	49748	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:50.540306091 CEST	443	49748	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:50.652862072 CEST	49751	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:50.652908087 CEST	443	49751	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:50.653017044 CEST	49751	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:50.653239012 CEST	49751	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:50.653259993 CEST	443	49751	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:50.659562111 CEST	49752	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:50.659604073 CEST	443	49752	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:50.659828901 CEST	49752	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:50.660016060 CEST	49752	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:50.660026073 CEST	443	49752	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:51.106658936 CEST	443	49751	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:51.106952906 CEST	49751	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:51.106987953 CEST	443	49751	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:51.107330084 CEST	443	49751	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:51.107635975 CEST	49751	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:51.107732058 CEST	443	49751	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:51.107772112 CEST	49751	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:51.107856989 CEST	49751	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:51.107882023 CEST	443	49751	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:51.108141899 CEST	49751	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:51.108179092 CEST	443	49751	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:51.171150923 CEST	443	49750	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:51.171251059 CEST	49750	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:51.172497034 CEST	49750	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:51.172507048 CEST	443	49750	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:51.172746897 CEST	443	49750	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:51.173986912 CEST	49750	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:51.192389011 CEST	443	49717	142.250.186.100	192.168.2.16
Aug 27, 2024 20:06:51.192466021 CEST	443	49717	142.250.186.100	192.168.2.16
Aug 27, 2024 20:06:51.192919016 CEST	49717	443	192.168.2.16	142.250.186.100
Aug 27, 2024 20:06:51.216536045 CEST	443	49750	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:51.360886097 CEST	443	49751	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:51.360960960 CEST	443	49751	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:51.360992908 CEST	443	49751	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:51.361031055 CEST	443	49751	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:51.361082077 CEST	49751	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:51.361103058 CEST	443	49751	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:51.361119032 CEST	443	49751	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:51.361134052 CEST	49751	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:51.361160994 CEST	49751	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:51.361790895 CEST	49751	443	192.168.2.16	104.18.95.41
Aug 27, 2024 20:06:51.361808062 CEST	443	49751	104.18.95.41	192.168.2.16
Aug 27, 2024 20:06:51.404385090 CEST	49717	443	192.168.2.16	142.250.186.100
Aug 27, 2024 20:06:51.404422045 CEST	443	49717	142.250.186.100	192.168.2.16
Aug 27, 2024 20:06:51.407495022 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:51.407536983 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:51.407624006 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:51.409262896 CEST	49754	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:51.409271955 CEST	443	49754	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:51.409585953 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:51.409598112 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:51.409616947 CEST	49754	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:51.410614967 CEST	49754	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:51.410625935 CEST	443	49754	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:51.419053078 CEST	49755	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:51.419090033 CEST	443	49755	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:51.419151068 CEST	49755	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:51.419363976 CEST	49755	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:51.419375896 CEST	443	49755	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:51.610059977 CEST	443	49750	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:51.610125065 CEST	443	49750	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:51.610368967 CEST	49750	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:51.610549927 CEST	443	49752	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:51.611185074 CEST	49752	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:51.611206055 CEST	443	49752	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:51.611422062 CEST	49750	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:51.611443996 CEST	443	49750	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:51.611454964 CEST	49750	443	192.168.2.16	184.28.90.27
Aug 27, 2024 20:06:51.611460924 CEST	443	49750	184.28.90.27	192.168.2.16
Aug 27, 2024 20:06:51.618705988 CEST	49752	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:51.618716955 CEST	443	49752	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:51.618731976 CEST	49752	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:51.618740082 CEST	443	49752	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:51.623557091 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 27, 2024 20:06:51.687248945 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 27, 2024 20:06:51.926259041 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 27, 2024 20:06:52.018455982 CEST	443	49752	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.018481016 CEST	443	49752	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.018521070 CEST	443	49752	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.018548965 CEST	49752	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.018570900 CEST	443	49752	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.018588066 CEST	49752	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.018593073 CEST	443	49752	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.018630981 CEST	49752	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.018884897 CEST	49752	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.018902063 CEST	443	49752	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.018912077 CEST	49752	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.018919945 CEST	443	49752	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.065359116 CEST	443	49755	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:52.065637112 CEST	49755	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:52.065664053 CEST	443	49755	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:52.066008091 CEST	443	49755	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:52.066344976 CEST	49755	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:52.066411018 CEST	443	49755	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:52.066456079 CEST	49755	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:52.080930948 CEST	49756	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.080976009 CEST	443	49756	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.081058979 CEST	49756	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.081235886 CEST	49756	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.081244946 CEST	443	49756	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.090569973 CEST	443	49754	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:52.090831995 CEST	49754	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:52.090861082 CEST	443	49754	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:52.091216087 CEST	443	49754	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:52.091509104 CEST	49754	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:52.091569901 CEST	443	49754	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:52.091636896 CEST	49754	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:52.091897964 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:52.092082977 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:52.092092991 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:52.093713045 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:52.094055891 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:52.094647884 CEST	49757	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.094680071 CEST	443	49757	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.094757080 CEST	49757	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.094999075 CEST	49757	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.095015049 CEST	443	49757	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.095037937 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:52.108510971 CEST	443	49755	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:52.117281914 CEST	49755	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:52.136498928 CEST	443	49754	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:52.148267984 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:52.211415052 CEST	443	49755	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:52.211489916 CEST	443	49755	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:52.211558104 CEST	49755	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:52.212053061 CEST	49755	443	192.168.2.16	104.18.94.41
Aug 27, 2024 20:06:52.212074041 CEST	443	49755	104.18.94.41	192.168.2.16
Aug 27, 2024 20:06:52.475949049 CEST	443	49754	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:52.476028919 CEST	443	49754	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:52.478569031 CEST	49754	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:52.478600979 CEST	443	49754	188.114.97.3	192.168.2.16
Aug 27, 2024 20:06:52.478627920 CEST	49754	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:52.478712082 CEST	49754	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:06:52.517309904 CEST	49758	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:52.517352104 CEST	443	49758	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:52.517426968 CEST	49758	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:52.517641068 CEST	49758	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:52.517652035 CEST	443	49758	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:52.530397892 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 27, 2024 20:06:52.872026920 CEST	443	49756	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.872595072 CEST	49756	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.872627020 CEST	443	49756	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.873289108 CEST	443	49757	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.873377085 CEST	49756	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.873378038 CEST	49757	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.873382092 CEST	443	49756	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.873440981 CEST	49756	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.873450041 CEST	443	49756	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.881627083 CEST	49757	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.881644964 CEST	443	49757	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.881998062 CEST	443	49757	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.882524967 CEST	49757	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.882524967 CEST	49757	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:52.882563114 CEST	443	49757	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:52.982227087 CEST	443	49758	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:52.982486963 CEST	49758	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:52.982501030 CEST	443	49758	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:52.983540058 CEST	443	49758	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:52.983709097 CEST	49758	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:52.988143921 CEST	49758	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:52.988209009 CEST	443	49758	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:52.988363028 CEST	49758	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:52.988368034 CEST	443	49758	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:53.040307999 CEST	49758	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:53.258630037 CEST	443	49757	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:53.258656979 CEST	443	49757	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:53.258690119 CEST	443	49757	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:53.258766890 CEST	49757	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:53.258766890 CEST	49757	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:53.258786917 CEST	443	49757	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:53.259023905 CEST	443	49757	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:53.259262085 CEST	49757	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:53.259262085 CEST	49757	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:53.259352922 CEST	49757	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:53.259368896 CEST	443	49757	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:53.283126116 CEST	443	49756	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:53.283144951 CEST	443	49756	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:53.283179998 CEST	443	49756	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:53.283252001 CEST	49756	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:53.283282995 CEST	443	49756	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:53.283404112 CEST	443	49756	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:53.284107924 CEST	49756	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:53.284107924 CEST	49756	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:53.284137011 CEST	443	49756	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:53.284163952 CEST	49756	443	192.168.2.16	20.190.160.17
Aug 27, 2024 20:06:53.284169912 CEST	443	49756	20.190.160.17	192.168.2.16
Aug 27, 2024 20:06:53.370928049 CEST	49759	443	192.168.2.16	13.71.55.58
Aug 27, 2024 20:06:53.370965004 CEST	443	49759	13.71.55.58	192.168.2.16
Aug 27, 2024 20:06:53.371042013 CEST	49759	443	192.168.2.16	13.71.55.58
Aug 27, 2024 20:06:53.371320009 CEST	49759	443	192.168.2.16	13.71.55.58
Aug 27, 2024 20:06:53.371336937 CEST	443	49759	13.71.55.58	192.168.2.16
Aug 27, 2024 20:06:53.372939110 CEST	443	49758	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:53.373023033 CEST	443	49758	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:53.373079062 CEST	49758	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:53.373497963 CEST	49758	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:53.373511076 CEST	443	49758	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:53.375828028 CEST	49760	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:53.375864983 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:53.375967026 CEST	49760	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:53.376149893 CEST	49760	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:53.376163006 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:53.743977070 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 27, 2024 20:06:54.056351900 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.056626081 CEST	49760	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:54.056638002 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.056982040 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.057374001 CEST	49760	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:54.057446003 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.057677984 CEST	49760	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:54.104506016 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.111246109 CEST	49760	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:54.570399046 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.570509911 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.570553064 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.570580006 CEST	49760	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:54.570604086 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.570647955 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.570664883 CEST	49760	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:54.570674896 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.570784092 CEST	49760	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:54.571185112 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.571367979 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.571394920 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.571415901 CEST	49760	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:54.571420908 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.571489096 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.571535110 CEST	49760	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:54.571738005 CEST	49760	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:54.571753979 CEST	443	49760	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:54.811937094 CEST	443	49759	13.71.55.58	192.168.2.16
Aug 27, 2024 20:06:54.812022924 CEST	49759	443	192.168.2.16	13.71.55.58
Aug 27, 2024 20:06:54.813210964 CEST	49759	443	192.168.2.16	13.71.55.58
Aug 27, 2024 20:06:54.813222885 CEST	443	49759	13.71.55.58	192.168.2.16
Aug 27, 2024 20:06:54.813508034 CEST	443	49759	13.71.55.58	192.168.2.16
Aug 27, 2024 20:06:54.814778090 CEST	49759	443	192.168.2.16	13.71.55.58
Aug 27, 2024 20:06:54.814834118 CEST	443	49759	13.71.55.58	192.168.2.16
Aug 27, 2024 20:06:54.814980030 CEST	443	49759	13.71.55.58	192.168.2.16
Aug 27, 2024 20:06:54.815020084 CEST	49759	443	192.168.2.16	13.71.55.58
Aug 27, 2024 20:06:54.815054893 CEST	49759	443	192.168.2.16	13.71.55.58
Aug 27, 2024 20:06:54.881524086 CEST	49767	443	192.168.2.16	13.71.55.58
Aug 27, 2024 20:06:54.881567955 CEST	443	49767	13.71.55.58	192.168.2.16
Aug 27, 2024 20:06:54.881747007 CEST	49767	443	192.168.2.16	13.71.55.58
Aug 27, 2024 20:06:54.882009029 CEST	49767	443	192.168.2.16	13.71.55.58
Aug 27, 2024 20:06:54.882019997 CEST	443	49767	13.71.55.58	192.168.2.16
Aug 27, 2024 20:06:56.154463053 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 27, 2024 20:06:56.157205105 CEST	49767	443	192.168.2.16	13.71.55.58
Aug 27, 2024 20:06:56.488290071 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 27, 2024 20:06:56.607767105 CEST	49768	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:56.607810974 CEST	443	49768	20.44.239.154	192.168.2.16
Aug 27, 2024 20:06:56.607970953 CEST	49768	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:56.608295918 CEST	49768	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:56.608310938 CEST	443	49768	20.44.239.154	192.168.2.16
Aug 27, 2024 20:06:57.464950085 CEST	49772	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:57.464968920 CEST	443	49772	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:57.465878963 CEST	49772	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:57.466147900 CEST	49772	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:57.466157913 CEST	443	49772	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:57.926371098 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 27, 2024 20:06:57.973958015 CEST	443	49772	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:57.974225044 CEST	49772	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:57.974240065 CEST	443	49772	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:57.974596977 CEST	443	49772	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:57.975362062 CEST	49772	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:57.975433111 CEST	443	49772	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:57.975590944 CEST	49772	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:57.975640059 CEST	443	49768	20.44.239.154	192.168.2.16
Aug 27, 2024 20:06:57.975732088 CEST	49768	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:57.978136063 CEST	49768	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:57.978146076 CEST	443	49768	20.44.239.154	192.168.2.16
Aug 27, 2024 20:06:57.979170084 CEST	443	49768	20.44.239.154	192.168.2.16
Aug 27, 2024 20:06:57.980794907 CEST	49768	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:57.980891943 CEST	443	49768	20.44.239.154	192.168.2.16
Aug 27, 2024 20:06:57.980962992 CEST	49768	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:58.020489931 CEST	443	49772	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:58.022407055 CEST	49772	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:58.053349972 CEST	49773	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:58.053371906 CEST	443	49773	20.44.239.154	192.168.2.16
Aug 27, 2024 20:06:58.053539038 CEST	49773	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:58.055011988 CEST	49773	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:58.055022955 CEST	443	49773	20.44.239.154	192.168.2.16
Aug 27, 2024 20:06:58.424263000 CEST	443	49772	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:58.424424887 CEST	443	49772	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:58.424496889 CEST	49772	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:58.425209999 CEST	49772	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:58.425225973 CEST	443	49772	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.026165009 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.026206970 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.026279926 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.026876926 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.026896000 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.300970078 CEST	443	49773	20.44.239.154	192.168.2.16
Aug 27, 2024 20:06:59.301079988 CEST	49773	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:59.309062004 CEST	49773	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:59.309067011 CEST	443	49773	20.44.239.154	192.168.2.16
Aug 27, 2024 20:06:59.309298038 CEST	443	49773	20.44.239.154	192.168.2.16
Aug 27, 2024 20:06:59.314572096 CEST	49773	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:59.314601898 CEST	443	49773	20.44.239.154	192.168.2.16
Aug 27, 2024 20:06:59.314668894 CEST	49773	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:59.410306931 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.410334110 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.410414934 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.410644054 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.410657883 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.492091894 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.492429018 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.492441893 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.492788076 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.493109941 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.493175030 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.493302107 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.540489912 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.615186930 CEST	49782	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:59.615207911 CEST	443	49782	20.44.239.154	192.168.2.16
Aug 27, 2024 20:06:59.615300894 CEST	49782	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:59.615540981 CEST	49782	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:06:59.615551949 CEST	443	49782	20.44.239.154	192.168.2.16
Aug 27, 2024 20:06:59.873842001 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.873912096 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.873980999 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.874466896 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.874480009 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.876576900 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.876595974 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.876684904 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.876894951 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.876909971 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.910693884 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.910912037 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.910921097 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.911196947 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.911494017 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.911545038 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 27, 2024 20:06:59.911633015 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:06:59.956487894 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.338679075 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.338727951 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.338783979 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.338800907 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.339103937 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.339118004 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.339155912 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.339160919 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.339225054 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.339241982 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.339272022 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.340403080 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.340414047 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.342746019 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:00.348313093 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.348501921 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.348524094 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.348865986 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.349442959 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.349507093 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.349806070 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.388493061 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.392512083 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.757781982 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.757833958 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.757863998 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.757891893 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.757894039 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.757924080 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.757956982 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.757976055 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.757986069 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.757997990 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.758078098 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.759032965 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.759340048 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.759356976 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.794799089 CEST	49784	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.794833899 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.794924974 CEST	49784	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.795139074 CEST	49784	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:00.795154095 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:00.797163010 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.797269106 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.797298908 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.797329903 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.797344923 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:00.797357082 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.797369957 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:00.797393084 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.797421932 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.797447920 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.797466040 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:00.797473907 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.797488928 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:00.797519922 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.799051046 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:00.799062967 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.842282057 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:00.842291117 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.890321016 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:00.955076933 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 27, 2024 20:07:00.989856005 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.992134094 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.992204905 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:00.992213964 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.994659901 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.997005939 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.997041941 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.997066021 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:00.997082949 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.997100115 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:00.997196913 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:00.997394085 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:01.000797987 CEST	443	49782	20.44.239.154	192.168.2.16
Aug 27, 2024 20:07:01.000868082 CEST	49782	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:07:01.000885963 CEST	49753	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:01.000900984 CEST	443	49753	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:01.026688099 CEST	49782	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:07:01.026698112 CEST	443	49782	20.44.239.154	192.168.2.16
Aug 27, 2024 20:07:01.026952028 CEST	443	49782	20.44.239.154	192.168.2.16
Aug 27, 2024 20:07:01.034123898 CEST	49782	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:07:01.034157991 CEST	443	49782	20.44.239.154	192.168.2.16
Aug 27, 2024 20:07:01.034250975 CEST	49782	443	192.168.2.16	20.44.239.154
Aug 27, 2024 20:07:01.039407015 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:01.039439917 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:01.039554119 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:01.041150093 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:01.041165113 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:01.301718950 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.301992893 CEST	49784	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:01.302018881 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.303085089 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.303149939 CEST	49784	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:01.303486109 CEST	49784	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:01.303560972 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.303628922 CEST	49784	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:01.348506927 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.352288008 CEST	49784	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:01.352313995 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.399277925 CEST	49784	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:01.464710951 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.464762926 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.464797020 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.464826107 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.464848995 CEST	49784	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:01.464875937 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.464894056 CEST	49784	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:01.465859890 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.466609955 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.466679096 CEST	49784	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:01.466701031 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.466717005 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.466746092 CEST	49784	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:01.466778994 CEST	49784	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:01.466948032 CEST	49784	443	192.168.2.16	188.114.96.3
Aug 27, 2024 20:07:01.466964006 CEST	443	49784	188.114.96.3	192.168.2.16
Aug 27, 2024 20:07:01.867239952 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:01.869318962 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:01.869354963 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:01.870413065 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:01.870613098 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:01.871706963 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:01.871788025 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:01.871879101 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:01.916497946 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:01.925333977 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:01.925343990 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:01.973366976 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.134562969 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.173295975 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.173305988 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.173336983 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.173348904 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.173358917 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.173441887 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.173470974 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.173496962 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.173511982 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.173512936 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.228328943 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.233942986 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.233953953 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.233983040 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.233994961 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.234009027 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.234016895 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.234039068 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.234090090 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.235997915 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.236006021 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.236032963 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.236042023 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.236103058 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.236103058 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.236119032 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.236630917 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.321861029 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.321871996 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.321903944 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.322009087 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.322021961 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.322096109 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.322096109 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.323177099 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.323193073 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.323312044 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.323318005 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.323376894 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.324166059 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.324179888 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.324305058 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.324310064 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.324372053 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.410165071 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.410182953 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.410305023 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.410320044 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.410408020 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.410835028 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.410849094 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.410924911 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.410929918 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.410974979 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.411669016 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.411701918 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.411741018 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.411746979 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.411756992 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.411807060 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.412077904 CEST	49788	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.412091970 CEST	443	49788	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.424349070 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.424377918 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.424453020 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.424653053 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:02.424664021 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:02.438467026 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:02.438502073 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:02.438654900 CEST	49791	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:02.438699007 CEST	443	49791	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:02.438703060 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:02.438980103 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:02.438992977 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:02.439013004 CEST	49791	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:02.439424992 CEST	49791	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:02.439444065 CEST	443	49791	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:02.899269104 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:02.899656057 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:02.899683952 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:02.900166035 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:02.900621891 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:02.900708914 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:02.901820898 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:02.901856899 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:02.925095081 CEST	443	49791	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:02.925457001 CEST	49791	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:02.925497055 CEST	443	49791	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:02.925817966 CEST	443	49791	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:02.926119089 CEST	49791	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:02.926194906 CEST	443	49791	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:02.948304892 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:02.979294062 CEST	49791	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.225387096 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.226248980 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.226275921 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.227309942 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.227372885 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.227660894 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.227722883 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.227806091 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.268498898 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.281325102 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.281348944 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.330254078 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.333040953 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.333136082 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.333178043 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.333199978 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.333209991 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.333220005 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.333275080 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.333591938 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.333671093 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.333714008 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.333725929 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.334032059 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.334336042 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.337771893 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.337799072 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.337842941 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.337851048 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.343039989 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.352282047 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.352324009 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.352400064 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.352849960 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.352865934 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.419794083 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.419862032 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.419931889 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.419946909 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.419980049 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.420022964 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.420028925 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.420633078 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.420672894 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.420674086 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.420682907 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.420710087 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.420717955 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.421372890 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.421422005 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.421426058 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.421432972 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.421458960 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.421463966 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.422152996 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.422178030 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.422188044 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.422194004 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.422235966 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.422329903 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.422379017 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.422410965 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.422415972 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.423053980 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.423084974 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.423096895 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.423101902 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.423131943 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.423135996 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.423187017 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.423237085 CEST	49790	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.423245907 CEST	443	49790	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.468892097 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.468943119 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.469048023 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.470875025 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.470884085 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.470947981 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.472110033 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.472125053 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.472394943 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.472405910 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.504662991 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.511348009 CEST	49795	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.511379957 CEST	443	49795	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.511467934 CEST	49795	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.511691093 CEST	49795	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:03.511704922 CEST	443	49795	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:03.531805038 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.531840086 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.531871080 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.531892061 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.531898975 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.531919003 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.531939030 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.531965017 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.531974077 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.531994104 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.583302021 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.589987040 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.590010881 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.590035915 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.590049982 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.590063095 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.590079069 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.590102911 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.590156078 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.590166092 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.590212107 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.591773033 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.591783047 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.591806889 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.591825962 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.591871977 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.591880083 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.591902018 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.591917992 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.676093102 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.676124096 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.676273108 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.676289082 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.676338911 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.677752018 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.677772045 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.677825928 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.677831888 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.677874088 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.679063082 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.679083109 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.679138899 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.679145098 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.679186106 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.680407047 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.680427074 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.680499077 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.680505037 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.680551052 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.705517054 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.759387016 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.763099909 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.763113022 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.763134956 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.763181925 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.763191938 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.763236046 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.763259888 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.763869047 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.763911009 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.763941050 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.763947010 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.763982058 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:03.763993025 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.764023066 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.764303923 CEST	49789	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:03.764317036 CEST	443	49789	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.013978958 CEST	443	49795	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:04.014249086 CEST	49795	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:04.014262915 CEST	443	49795	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:04.015140057 CEST	443	49795	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:04.015211105 CEST	49795	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:04.016160011 CEST	49795	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:04.016216040 CEST	443	49795	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:04.016334057 CEST	49795	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:04.016340017 CEST	443	49795	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:04.061336994 CEST	49795	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:04.160135984 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.160475969 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.160506964 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.160871983 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.161170006 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.161237955 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.161322117 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.208506107 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.310031891 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.310360909 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.310412884 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.310760975 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.311057091 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.311134100 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.311197042 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.329463005 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.329767942 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.329777002 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.330651999 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.330733061 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.330996990 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.331048965 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.331131935 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.331137896 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.356504917 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.381315947 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.424108028 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.474751949 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.474777937 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.474867105 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.474884033 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.474953890 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.476648092 CEST	443	49795	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:04.476696014 CEST	443	49795	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:04.476722956 CEST	443	49795	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:04.476754904 CEST	49795	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:04.476772070 CEST	443	49795	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:04.476816893 CEST	49795	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:04.476821899 CEST	443	49795	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:04.476833105 CEST	443	49795	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:04.476878881 CEST	49795	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:04.477751017 CEST	49795	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:04.477777004 CEST	443	49795	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:04.512511015 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.512535095 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.512605906 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.512641907 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.512686014 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.514331102 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.514344931 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.514411926 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.514432907 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.514478922 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.578185081 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.598361969 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.598392010 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.598490000 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.598515987 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.598560095 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.599997044 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.600018024 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.600083113 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.600107908 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.600156069 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.601392984 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.601411104 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.601469040 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.601481915 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.601521015 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.602417946 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.602474928 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.602490902 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.602493048 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.602519989 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.602550030 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.602793932 CEST	49792	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.602809906 CEST	443	49792	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.608311892 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.619342089 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.623459101 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.623480082 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.623522997 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.623553038 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.623572111 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.623585939 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.623636007 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.650357008 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.655867100 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.655888081 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.655937910 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.655955076 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.655968904 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.656028986 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.656040907 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.656071901 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.656130075 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.670459032 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.670494080 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.670645952 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.670670033 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.670717001 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.672938108 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.672960043 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.673028946 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.673037052 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.673096895 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.703263998 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.703277111 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.703330040 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.703413963 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.703432083 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.703453064 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.703475952 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.705097914 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.705113888 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.705219030 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.705224037 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.705315113 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.760214090 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.760252953 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.760384083 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.760406017 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.760457039 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.761257887 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.761293888 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.761343956 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.761351109 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.761394978 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.762959003 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.762983084 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.763041973 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.763050079 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.763072968 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.763093948 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.764100075 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.764125109 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.764188051 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.764194965 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.764259100 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.793553114 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.793644905 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.793674946 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.793723106 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.795078993 CEST	49794	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.795098066 CEST	443	49794	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.798038960 CEST	49796	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.798064947 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.798150063 CEST	49796	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.798367977 CEST	49796	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.798382044 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.850697041 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.850727081 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.850868940 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.850888968 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.850935936 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.851402044 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.851428032 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.851478100 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.851485014 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.851517916 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.851540089 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.852324963 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.852350950 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.852412939 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.852417946 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.852469921 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.853276014 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.853311062 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.853353024 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.853362083 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.853389978 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.853409052 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.854262114 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.854286909 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.854341030 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.854360104 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.854386091 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.854404926 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.855140924 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.855175018 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.855259895 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.855267048 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.855314016 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.855420113 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.855443954 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.855482101 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.855487108 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.855525017 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.855532885 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.941272020 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.941302061 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.941412926 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.941438913 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.941488981 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.941859007 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.941874981 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.941925049 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.941936970 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.941978931 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.942996979 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.943021059 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.943061113 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.943067074 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.943089008 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.943113089 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.943690062 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.943706989 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.943768024 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.943774939 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.943814039 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.946162939 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.946178913 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.946242094 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.946249008 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.946289062 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.946789980 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.946808100 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.946846962 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.946856022 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.946880102 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.946893930 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.947228909 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.947244883 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.947298050 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.947305918 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.947351933 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.986597061 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.986623049 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.986759901 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:04.986789942 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:04.986849070 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.032366037 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.032393932 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.032502890 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.032527924 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.032574892 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.032655954 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.032675982 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.032706022 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.032713890 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.032743931 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.032753944 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.032757998 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.033029079 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.033050060 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.033085108 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.033094883 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.033113956 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.033543110 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.033556938 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.033597946 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.033607006 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.033617973 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.033874035 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.033895016 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.033925056 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.033931017 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.033945084 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.034004927 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.034054995 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.034061909 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.034100056 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.034107924 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.034151077 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.034311056 CEST	49793	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.034332037 CEST	443	49793	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.037085056 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.037118912 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.037194014 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.037405968 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.037420988 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.045459986 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.045492887 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.045578957 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.046535015 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.046559095 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.606462002 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.606812954 CEST	49796	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.606846094 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.607208014 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.607503891 CEST	49796	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.607582092 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.607637882 CEST	49796	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.652513981 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.841849089 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.842786074 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.842808962 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.843389988 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.846072912 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.846214056 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.846266985 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.854479074 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.855077028 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.855084896 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.855973005 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.856040001 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.857115984 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.857161999 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.858935118 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.858942986 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.878114939 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.889273882 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.889290094 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.905293941 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.915807009 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.915822983 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.915914059 CEST	49796	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.915937901 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.915986061 CEST	49796	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.967385054 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.967406988 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.967511892 CEST	49796	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.967530966 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.967571020 CEST	49796	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.968792915 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.968807936 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.968874931 CEST	49796	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:05.968893051 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:05.968935966 CEST	49796	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.052015066 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.052134991 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.052170038 CEST	49796	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.052217960 CEST	49796	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.052422047 CEST	49796	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.052442074 CEST	443	49796	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.096329927 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 27, 2024 20:07:06.114150047 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.124737024 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.149914026 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.149930000 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.149949074 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.150058985 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.150088072 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.150098085 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.150140047 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.167959929 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.167970896 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.167984009 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.168044090 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.168065071 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.168076992 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.168082952 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.168128967 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.199764013 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.199778080 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.199807882 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.199840069 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.199862003 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.199892998 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.199906111 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.199938059 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.201746941 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.201766014 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.201842070 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.201848984 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.201895952 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.213593006 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.213602066 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.213649988 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.213697910 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.213706970 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.213738918 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.215903044 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.215923071 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.215981960 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.215989113 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.216017962 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.269279957 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.288722038 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.288748026 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.288805008 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.288815975 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.288861036 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.290580034 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.290600061 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.290671110 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.290678024 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.290729046 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.292845964 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.292866945 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.292937040 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.292946100 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.292996883 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.295494080 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.295511961 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.295582056 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.295588970 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.295633078 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.305088043 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.305099964 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.305131912 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.305180073 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.305191040 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.305202961 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.305246115 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.306917906 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.306935072 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.307018995 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.307027102 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.307071924 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.309393883 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.309412003 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.309498072 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.309504032 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.309551001 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.346765041 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.346785069 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.346882105 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.346900940 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.346949100 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.376743078 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.376771927 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.376874924 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.376892090 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.376941919 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.377543926 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.377563000 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.377630949 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.377638102 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.377682924 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.378848076 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.378865004 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.378931046 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.378937006 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.378978968 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.379841089 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.379858017 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.379924059 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.379930019 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.379973888 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.380867958 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.380888939 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.380954981 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.380960941 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.381007910 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.381818056 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.381844997 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.381896019 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.381901979 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.381938934 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.381958961 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.414788961 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.414807081 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.414872885 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.414880991 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.414926052 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.415282965 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.415303946 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.415354967 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.415361881 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.415402889 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.416136026 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.416151047 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.416251898 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.416255951 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.416313887 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.437561035 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.437582016 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.437684059 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.437705040 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.437757015 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.464191914 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.464227915 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.464308023 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.464324951 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.464369059 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.464623928 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.464647055 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.464694977 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.464701891 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.464742899 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.465523005 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.465543985 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.465600014 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.465605974 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.465634108 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.465655088 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.466608047 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.466624975 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.466691017 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.466702938 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.466753006 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.467449903 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.467468977 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.467531919 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.467538118 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.467585087 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.468359947 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.468375921 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.468441010 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.468446970 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.468523026 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.469280958 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.469299078 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.469366074 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.469372988 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.469418049 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.470232964 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.470251083 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.470299959 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.470304966 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.470340967 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.470349073 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.487426996 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.487462044 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.487495899 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.487509012 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.487540007 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.487556934 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.487581015 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.487750053 CEST	49798	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.487766027 CEST	443	49798	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.491213083 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.491260052 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.491339922 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.491558075 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.491575003 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.520644903 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.520679951 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.520773888 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.520984888 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.520999908 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.551654100 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.551686049 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.551775932 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.551795959 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.551846981 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.551848888 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.551870108 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.551892996 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.551906109 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.551950932 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.551956892 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.552001953 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.553527117 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.553555012 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.553636074 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.553642988 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.553673983 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.553702116 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.553705931 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.553715944 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.553760052 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.553785086 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.553788900 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.553819895 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.553863049 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.553895950 CEST	49797	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:06.553909063 CEST	443	49797	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:06.555785894 CEST	49801	443	192.168.2.16	52.98.171.226
Aug 27, 2024 20:07:06.555816889 CEST	443	49801	52.98.171.226	192.168.2.16
Aug 27, 2024 20:07:06.555895090 CEST	49801	443	192.168.2.16	52.98.171.226
Aug 27, 2024 20:07:06.556111097 CEST	49801	443	192.168.2.16	52.98.171.226
Aug 27, 2024 20:07:06.556123018 CEST	443	49801	52.98.171.226	192.168.2.16
Aug 27, 2024 20:07:07.299782038 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.300069094 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.300106049 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.300470114 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.300777912 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.300856113 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.300918102 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.322611094 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.322880030 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.322904110 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.323224068 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.323518038 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.323580027 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.323652029 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.348503113 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.368504047 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.381901979 CEST	443	49801	52.98.171.226	192.168.2.16
Aug 27, 2024 20:07:07.382172108 CEST	49801	443	192.168.2.16	52.98.171.226
Aug 27, 2024 20:07:07.382196903 CEST	443	49801	52.98.171.226	192.168.2.16
Aug 27, 2024 20:07:07.383304119 CEST	443	49801	52.98.171.226	192.168.2.16
Aug 27, 2024 20:07:07.383392096 CEST	49801	443	192.168.2.16	52.98.171.226
Aug 27, 2024 20:07:07.383399963 CEST	443	49801	52.98.171.226	192.168.2.16
Aug 27, 2024 20:07:07.383446932 CEST	49801	443	192.168.2.16	52.98.171.226
Aug 27, 2024 20:07:07.384385109 CEST	49801	443	192.168.2.16	52.98.171.226
Aug 27, 2024 20:07:07.384447098 CEST	443	49801	52.98.171.226	192.168.2.16
Aug 27, 2024 20:07:07.384660006 CEST	49801	443	192.168.2.16	52.98.171.226
Aug 27, 2024 20:07:07.384666920 CEST	443	49801	52.98.171.226	192.168.2.16
Aug 27, 2024 20:07:07.432306051 CEST	49801	443	192.168.2.16	52.98.171.226
Aug 27, 2024 20:07:07.564394951 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.584264040 CEST	443	49801	52.98.171.226	192.168.2.16
Aug 27, 2024 20:07:07.584299088 CEST	443	49801	52.98.171.226	192.168.2.16
Aug 27, 2024 20:07:07.584378958 CEST	49801	443	192.168.2.16	52.98.171.226
Aug 27, 2024 20:07:07.584398985 CEST	443	49801	52.98.171.226	192.168.2.16
Aug 27, 2024 20:07:07.584446907 CEST	49801	443	192.168.2.16	52.98.171.226
Aug 27, 2024 20:07:07.584968090 CEST	49801	443	192.168.2.16	52.98.171.226
Aug 27, 2024 20:07:07.585011005 CEST	443	49801	52.98.171.226	192.168.2.16
Aug 27, 2024 20:07:07.585078955 CEST	49801	443	192.168.2.16	52.98.171.226
Aug 27, 2024 20:07:07.593995094 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.608355999 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.613848925 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.613859892 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.613898039 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.613922119 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.613935947 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.613960028 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.613992929 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.614010096 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.631735086 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.631761074 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.631824970 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.631850004 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.631865978 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.631897926 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.652262926 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.652282000 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.652360916 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.652385950 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.652442932 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.654731989 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.654747963 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.654817104 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.654838085 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.654890060 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.680062056 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.680099010 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.680171013 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.680192947 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.680217981 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.683186054 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.683201075 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.683291912 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.683315039 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.735285997 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.738001108 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.738023043 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.738109112 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.738133907 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.738183975 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.739526033 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.739546061 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.739598989 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.739617109 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.739635944 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.739666939 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.741064072 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.741079092 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.741149902 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.741173983 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.741230965 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.770148993 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.770167112 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.770262957 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.770284891 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.770335913 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.772033930 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.772049904 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.772134066 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.772155046 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.772208929 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.776622057 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.776643991 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.776724100 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.776746035 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.776793957 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.787759066 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.787782907 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.787869930 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.787894011 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.787945032 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.806360006 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.806379080 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.806467056 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.806492090 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.806535959 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.825320959 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.825342894 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.825486898 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.825510979 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.825560093 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.826018095 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.826034069 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.826092958 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.826101065 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.826150894 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.826319933 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.826343060 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.826396942 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.826405048 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.826447010 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.827177048 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.827191114 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.827260017 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.827270985 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.827315092 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.828175068 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.828213930 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.828252077 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.828260899 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.828299999 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.828465939 CEST	49799	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.828490019 CEST	443	49799	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.856980085 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.856995106 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.857076883 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.857100964 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.857144117 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.858015060 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.858031034 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.858093977 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.858105898 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.858148098 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.859091043 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.859112978 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.859159946 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.859177113 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.859198093 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.859225988 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.860147953 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.860163927 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.860213995 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.860234022 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.860272884 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.860300064 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.862219095 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.862236023 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.862334967 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.862358093 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.862402916 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.863092899 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.863109112 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.863164902 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.863181114 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.863208055 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.863241911 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.864769936 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.864789009 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.864836931 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.864857912 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.864877939 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.864908934 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.944736004 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.944761038 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.945389032 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.945424080 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.945429087 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.945455074 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.945471048 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.945491076 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.946506977 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.946521044 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.946588039 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.946609020 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.946857929 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.946873903 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.946907043 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.946923018 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.946950912 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.948196888 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.948209047 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.948298931 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.948318958 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.950401068 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.950417995 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.950490952 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.950511932 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.950530052 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.950684071 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.950697899 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.950742006 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.950750113 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.979579926 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.979602098 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.979690075 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:07.979718924 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:07.979743958 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.022315025 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.031578064 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.031591892 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.031718969 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.031742096 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.031785965 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.032020092 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.032035112 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.032079935 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.032089949 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.032118082 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.032136917 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.033133984 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.033164978 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.033204079 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.033216000 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.033248901 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.033268929 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.033535957 CEST	49800	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.033555031 CEST	443	49800	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.037183046 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.037220955 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.037283897 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.037561893 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.037578106 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.077486992 CEST	49804	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.077513933 CEST	443	49804	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.077584982 CEST	49804	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.077912092 CEST	49805	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.077943087 CEST	443	49805	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.078006029 CEST	49805	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.078367949 CEST	49806	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.078382015 CEST	443	49806	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.078432083 CEST	49806	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.078737974 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.078744888 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.078803062 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.078953028 CEST	49804	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.078965902 CEST	443	49804	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.079094887 CEST	49805	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.079114914 CEST	443	49805	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.079219103 CEST	49806	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.079230070 CEST	443	49806	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.079343081 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.079351902 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.085309029 CEST	49808	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.085328102 CEST	443	49808	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.085388899 CEST	49808	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.085601091 CEST	49808	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.085613966 CEST	443	49808	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.130409956 CEST	49809	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.130438089 CEST	443	49809	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.130530119 CEST	49809	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.130831003 CEST	49809	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.130841017 CEST	443	49809	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.851763964 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.852004051 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.852027893 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.852385998 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.852665901 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.852735043 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.852791071 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.889916897 CEST	443	49806	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.889925003 CEST	443	49805	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.890260935 CEST	49805	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.890260935 CEST	49806	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.890286922 CEST	443	49805	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.890306950 CEST	443	49806	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.890625954 CEST	443	49805	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.890903950 CEST	49805	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.890958071 CEST	443	49805	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.891016006 CEST	49805	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.891371012 CEST	443	49806	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.891431093 CEST	49806	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.891668081 CEST	49806	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.891745090 CEST	49806	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.891752005 CEST	443	49806	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.893176079 CEST	443	49804	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.893203020 CEST	443	49806	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.893351078 CEST	49804	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.893371105 CEST	443	49804	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.893697023 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.893698931 CEST	443	49804	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.893970966 CEST	49804	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.894037962 CEST	443	49804	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.894079924 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.894087076 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.894191980 CEST	49804	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.895132065 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.895189047 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.895435095 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.895488024 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.895513058 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.900501013 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.929326057 CEST	443	49808	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.929626942 CEST	49808	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.929655075 CEST	443	49808	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.930697918 CEST	443	49808	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.930769920 CEST	49808	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.931103945 CEST	49808	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.931169033 CEST	443	49808	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.931237936 CEST	49808	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.931246042 CEST	443	49808	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.932507992 CEST	443	49805	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.940496922 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.940510035 CEST	443	49804	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.940661907 CEST	443	49809	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.940836906 CEST	49809	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.940845013 CEST	443	49809	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.941874981 CEST	443	49809	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.941955090 CEST	49809	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.942230940 CEST	49809	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.942297935 CEST	443	49809	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.942373037 CEST	49809	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.942378998 CEST	443	49809	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.946304083 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.946305037 CEST	49806	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.946320057 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.946325064 CEST	443	49806	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:08.978282928 CEST	49808	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.994309902 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.994317055 CEST	49809	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:08.995026112 CEST	49806	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.117922068 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.122648001 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.122668028 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.122733116 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.122759104 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.122821093 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.153017044 CEST	443	49806	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.153079987 CEST	443	49806	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.153140068 CEST	443	49806	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.153139114 CEST	49806	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.153192997 CEST	49806	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.153929949 CEST	49806	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.153947115 CEST	443	49806	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.154283047 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.154320002 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.154390097 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.154840946 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.154855967 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.155083895 CEST	443	49805	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.158035040 CEST	49812	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.158060074 CEST	443	49812	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.158157110 CEST	49812	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.158379078 CEST	49812	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.158391953 CEST	443	49812	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.168566942 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.172739983 CEST	443	49804	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.172835112 CEST	443	49804	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.172899961 CEST	49804	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.173363924 CEST	49804	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.173377991 CEST	443	49804	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.175378084 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.175389051 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.175420046 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.175431013 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.175441027 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.175458908 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.175467968 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.175518036 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.177514076 CEST	49813	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.177536011 CEST	443	49813	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.177603960 CEST	49813	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.177864075 CEST	49813	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.177875996 CEST	443	49813	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.199654102 CEST	443	49805	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.199676991 CEST	443	49805	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.199769020 CEST	49805	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.199800014 CEST	443	49805	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.199817896 CEST	443	49805	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.199883938 CEST	49805	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.200222969 CEST	49805	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.200242043 CEST	443	49805	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.204741955 CEST	49814	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.204761028 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.204865932 CEST	49814	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.205070019 CEST	49814	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.205080032 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.211383104 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.211442947 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.211452961 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.211491108 CEST	443	49808	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.211497068 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.211636066 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.211652040 CEST	443	49807	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.211661100 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.211693048 CEST	49807	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.211785078 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.211805105 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.211872101 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.211895943 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.211946964 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.211951017 CEST	443	49808	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.211998940 CEST	49808	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.212008953 CEST	443	49808	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.212022066 CEST	443	49808	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.212100983 CEST	49808	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.212867022 CEST	443	49809	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.212999105 CEST	443	49809	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.213056087 CEST	443	49809	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.213092089 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.213094950 CEST	49809	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.213104963 CEST	49809	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.213110924 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.213165998 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.213179111 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.213213921 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.215188980 CEST	49808	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.215198040 CEST	443	49808	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.215899944 CEST	49809	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.215909004 CEST	443	49809	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.218424082 CEST	49815	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.218444109 CEST	443	49815	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.218511105 CEST	49815	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.218710899 CEST	49815	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.218722105 CEST	443	49815	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.221220970 CEST	49816	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.221230984 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.221308947 CEST	49816	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.221585989 CEST	49816	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.221599102 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.295505047 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.295527935 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.295608044 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.295644045 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.295690060 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.296717882 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.296736002 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.296823025 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.296823025 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.296835899 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.296883106 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.300261021 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.300276041 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.300324917 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.300338984 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.300374031 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.301191092 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.301206112 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.301276922 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.301289082 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.301318884 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.393250942 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.393280029 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.393369913 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.393402100 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.393444061 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.394406080 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.394423008 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.394506931 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.394520044 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.394572020 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.395634890 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.395648956 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.395724058 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.395737886 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.395787001 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.406127930 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.406145096 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.406220913 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.406244040 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.406286001 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.407278061 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.407293081 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.407349110 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.407361031 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.407399893 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.408122063 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.408135891 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.408191919 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.408202887 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.408263922 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.409502029 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.409517050 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.409565926 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.409578085 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.409619093 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.479831934 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.479851007 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.479914904 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.479943037 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.479981899 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.480954885 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.480968952 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.481010914 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.481024027 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.481044054 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.481061935 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.481966019 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.481981039 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.482028008 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.482039928 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.482080936 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.483134985 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.483151913 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.483196974 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.483211040 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.483252048 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.485908985 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.485924006 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.485986948 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.485999107 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.486040115 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.486547947 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.486562967 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.486597061 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.486618042 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.486629963 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.486654997 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.487541914 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.487555981 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.487607002 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.487618923 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.487673044 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.511905909 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.511923075 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.512037039 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.512063980 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.512105942 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.567492962 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.567517996 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.567574024 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.567605972 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.567624092 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.567645073 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.568061113 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.568079948 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.568125963 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.568136930 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.568176985 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.568852901 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.568887949 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.568911076 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.568917036 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.568938017 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.568943977 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.568954945 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.568996906 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.569117069 CEST	49803	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.569132090 CEST	443	49803	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.569467068 CEST	49818	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.569500923 CEST	443	49818	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.569582939 CEST	49818	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.569917917 CEST	49818	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.569930077 CEST	443	49818	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.975343943 CEST	443	49812	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.975663900 CEST	49812	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.975684881 CEST	443	49812	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.976023912 CEST	443	49812	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.976325989 CEST	49812	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.976387978 CEST	443	49812	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.976499081 CEST	49812	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.978291035 CEST	443	49813	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.978554964 CEST	49813	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.978575945 CEST	443	49813	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.978868008 CEST	443	49813	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.979146004 CEST	49813	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:09.979197979 CEST	443	49813	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:09.979219913 CEST	49813	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.015573978 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.015916109 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.015930891 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.016287088 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.016674995 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.016753912 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.016783953 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.019663095 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.019864082 CEST	49814	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.019871950 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.020900965 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.020977020 CEST	49814	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.021266937 CEST	49814	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.021330118 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.021358013 CEST	49814	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.024501085 CEST	443	49813	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.024519920 CEST	443	49812	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.030302048 CEST	49813	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.033158064 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.033400059 CEST	49816	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.033411026 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.034503937 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.034568071 CEST	49816	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.034848928 CEST	49816	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.034910917 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.034976959 CEST	49816	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.062299013 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.062299013 CEST	49814	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.062313080 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.062323093 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.064996958 CEST	443	49815	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.065208912 CEST	49815	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.065217972 CEST	443	49815	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.066220045 CEST	443	49815	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.066286087 CEST	49815	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.066548109 CEST	49815	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.066611052 CEST	443	49815	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.066675901 CEST	49815	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.078337908 CEST	49816	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.078349113 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.110296011 CEST	49814	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.110342026 CEST	49815	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.110363007 CEST	443	49815	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.126312017 CEST	49816	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.158349991 CEST	49815	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.242788076 CEST	443	49813	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.243381977 CEST	443	49813	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.243458986 CEST	49813	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.244087934 CEST	49813	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.244112968 CEST	443	49813	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.245529890 CEST	443	49812	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.245681047 CEST	443	49812	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.245743036 CEST	443	49812	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.245750904 CEST	49812	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.245795965 CEST	49812	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.246124029 CEST	49812	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.246136904 CEST	443	49812	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.284157991 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.288589954 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.305149078 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.331866026 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.331881046 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.331912041 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.331928968 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.331935883 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.331944942 CEST	49814	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.331959963 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.331970930 CEST	49814	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.331978083 CEST	49814	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.331984043 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.332005978 CEST	49814	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.332067013 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.332118034 CEST	49814	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.332298994 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.332465887 CEST	49814	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.332479954 CEST	443	49814	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.339718103 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.339728117 CEST	443	49815	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.339730978 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.339790106 CEST	49816	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.339801073 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.339811087 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.339823961 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.339833021 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.339844942 CEST	49816	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.339848042 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.339889050 CEST	49816	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.339924097 CEST	49816	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.340274096 CEST	49816	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.340284109 CEST	443	49816	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.341348886 CEST	443	49815	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.341358900 CEST	443	49815	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.341411114 CEST	49815	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.341418028 CEST	443	49815	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.341430902 CEST	443	49815	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.341500998 CEST	49815	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.342097998 CEST	49815	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.342103004 CEST	443	49815	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.380979061 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.380995989 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.381051064 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.381064892 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.381078005 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.381093025 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.381105900 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.381120920 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.381146908 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.381165981 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.382287025 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.382311106 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.382348061 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.382354975 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.382386923 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.382405996 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.409400940 CEST	443	49818	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.409748077 CEST	49818	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.409761906 CEST	443	49818	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.410783052 CEST	443	49818	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.410856009 CEST	49818	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.411138058 CEST	49818	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.411201000 CEST	443	49818	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.411302090 CEST	49818	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.411309958 CEST	443	49818	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.427207947 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.427233934 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.427282095 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.427292109 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.427325010 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.427345037 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.460328102 CEST	49818	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.474634886 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.474664927 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.474708080 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.474719048 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.474750996 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.474771023 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.476433039 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.476449013 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.476495981 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.476501942 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.476520061 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.476546049 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.478111029 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.478128910 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.478199959 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.478212118 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.478267908 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.517910957 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.517955065 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.518009901 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.518009901 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.518054008 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.518487930 CEST	49811	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.518510103 CEST	443	49811	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.521631002 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.521676064 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.521765947 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.522008896 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.522022009 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.556334019 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 27, 2024 20:07:10.686314106 CEST	443	49818	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.686368942 CEST	443	49818	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.686420918 CEST	49818	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.686429024 CEST	443	49818	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.686448097 CEST	443	49818	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:10.686465979 CEST	49818	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.686497927 CEST	49818	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.690581083 CEST	49818	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:10.690594912 CEST	443	49818	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.355659008 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.356036901 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.356053114 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.356389046 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.356847048 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.356903076 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.357037067 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.400494099 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.627638102 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.670042992 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.670068026 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.670249939 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.670262098 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.670310974 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.716866016 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.716888905 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.716941118 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.716945887 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.716996908 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.720204115 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.720222950 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.720340967 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.720345020 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.720387936 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.804028034 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.804070950 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.804275990 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.804275990 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.804287910 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.804338932 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.805742025 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.805757999 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.805814028 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.805818081 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.805862904 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.807480097 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.807493925 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.807549953 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.807554960 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.807600975 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.809150934 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.809197903 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.809215069 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.809221029 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.809251070 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:11.809262991 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.809293032 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.809405088 CEST	49819	443	192.168.2.16	152.199.21.175
Aug 27, 2024 20:07:11.809416056 CEST	443	49819	152.199.21.175	192.168.2.16
Aug 27, 2024 20:07:17.826999903 CEST	443	49791	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:17.827075958 CEST	443	49791	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:17.827164888 CEST	49791	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:18.569895983 CEST	49791	443	192.168.2.16	188.114.97.3
Aug 27, 2024 20:07:18.569935083 CEST	443	49791	188.114.97.3	192.168.2.16
Aug 27, 2024 20:07:22.974303961 CEST	49826	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:07:22.974364996 CEST	443	49826	20.114.59.183	192.168.2.16
Aug 27, 2024 20:07:22.974474907 CEST	49826	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:07:22.974881887 CEST	49826	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:07:22.974901915 CEST	443	49826	20.114.59.183	192.168.2.16
Aug 27, 2024 20:07:23.774343967 CEST	443	49826	20.114.59.183	192.168.2.16
Aug 27, 2024 20:07:23.774440050 CEST	49826	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:07:23.776144028 CEST	49826	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:07:23.776163101 CEST	443	49826	20.114.59.183	192.168.2.16
Aug 27, 2024 20:07:23.776443958 CEST	443	49826	20.114.59.183	192.168.2.16
Aug 27, 2024 20:07:23.782516003 CEST	49826	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:07:23.828497887 CEST	443	49826	20.114.59.183	192.168.2.16
Aug 27, 2024 20:07:24.263633013 CEST	443	49826	20.114.59.183	192.168.2.16
Aug 27, 2024 20:07:24.263673067 CEST	443	49826	20.114.59.183	192.168.2.16
Aug 27, 2024 20:07:24.263690948 CEST	443	49826	20.114.59.183	192.168.2.16
Aug 27, 2024 20:07:24.263746023 CEST	49826	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:07:24.263780117 CEST	443	49826	20.114.59.183	192.168.2.16
Aug 27, 2024 20:07:24.263808012 CEST	49826	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:07:24.263838053 CEST	49826	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:07:24.264780998 CEST	443	49826	20.114.59.183	192.168.2.16
Aug 27, 2024 20:07:24.264830112 CEST	443	49826	20.114.59.183	192.168.2.16
Aug 27, 2024 20:07:24.264842987 CEST	49826	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:07:24.264854908 CEST	443	49826	20.114.59.183	192.168.2.16
Aug 27, 2024 20:07:24.264878035 CEST	49826	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:07:24.264892101 CEST	443	49826	20.114.59.183	192.168.2.16
Aug 27, 2024 20:07:24.264930964 CEST	49826	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:07:24.269222021 CEST	49826	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:07:24.269249916 CEST	443	49826	20.114.59.183	192.168.2.16
Aug 27, 2024 20:07:24.269268036 CEST	49826	443	192.168.2.16	20.114.59.183
Aug 27, 2024 20:07:24.269273996 CEST	443	49826	20.114.59.183	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 27, 2024 20:06:35.915344954 CEST	61312	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:35.915590048 CEST	52653	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:35.921428919 CEST	53	63423	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:35.929831028 CEST	53	64273	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:35.975263119 CEST	53	61312	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:36.005405903 CEST	53	52653	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:36.972573996 CEST	53	62738	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:37.140528917 CEST	63210	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:37.140714884 CEST	63735	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:37.161919117 CEST	53	63210	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:37.181390047 CEST	53	63735	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:38.232382059 CEST	54733	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:38.232554913 CEST	51508	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:38.243099928 CEST	53	54733	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:38.243654966 CEST	53	51508	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:39.876555920 CEST	59387	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:39.876741886 CEST	56823	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:39.888626099 CEST	53	59387	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:39.890161991 CEST	53	56823	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:39.906172037 CEST	62467	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:39.906316042 CEST	53915	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:39.913810015 CEST	53	62467	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:39.913820982 CEST	53	53915	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:40.635234118 CEST	55216	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:40.635371923 CEST	56786	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:40.643269062 CEST	53	55216	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:40.643346071 CEST	53	56786	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:42.768243074 CEST	50866	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:42.768423080 CEST	55908	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:52.478569031 CEST	52258	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:52.478773117 CEST	56812	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:06:52.516452074 CEST	53	52258	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:52.516729116 CEST	53	56812	1.1.1.1	192.168.2.16
Aug 27, 2024 20:06:54.064667940 CEST	53	64612	1.1.1.1	192.168.2.16
Aug 27, 2024 20:07:00.762257099 CEST	62075	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:07:00.762582064 CEST	60637	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:07:00.775667906 CEST	53	62075	1.1.1.1	192.168.2.16
Aug 27, 2024 20:07:00.837208986 CEST	53	60637	1.1.1.1	192.168.2.16
Aug 27, 2024 20:07:01.028337955 CEST	54749	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:07:01.028572083 CEST	51863	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:07:01.035737038 CEST	53	54749	1.1.1.1	192.168.2.16
Aug 27, 2024 20:07:01.036133051 CEST	53	51863	1.1.1.1	192.168.2.16
Aug 27, 2024 20:07:02.415780067 CEST	63368	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:07:02.415926933 CEST	58590	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:07:02.422648907 CEST	53	63368	1.1.1.1	192.168.2.16
Aug 27, 2024 20:07:02.423881054 CEST	53	58590	1.1.1.1	192.168.2.16
Aug 27, 2024 20:07:03.465435028 CEST	61213	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:07:03.465599060 CEST	49561	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:07:03.502688885 CEST	53	61213	1.1.1.1	192.168.2.16
Aug 27, 2024 20:07:03.510735989 CEST	53	49561	1.1.1.1	192.168.2.16
Aug 27, 2024 20:07:06.547537088 CEST	49250	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:07:06.547658920 CEST	50822	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:07:06.554615021 CEST	53	50822	1.1.1.1	192.168.2.16
Aug 27, 2024 20:07:06.554758072 CEST	53	49250	1.1.1.1	192.168.2.16
Aug 27, 2024 20:07:07.618190050 CEST	51540	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:07:07.618489027 CEST	60808	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:07:08.188652992 CEST	53	59107	1.1.1.1	192.168.2.16
Aug 27, 2024 20:07:12.684711933 CEST	53	65521	1.1.1.1	192.168.2.16
Aug 27, 2024 20:07:35.452126026 CEST	53	50786	1.1.1.1	192.168.2.16
Aug 27, 2024 20:07:35.850991964 CEST	53	54594	1.1.1.1	192.168.2.16
Aug 27, 2024 20:07:42.768516064 CEST	53970	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:07:42.768673897 CEST	53244	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:07:43.317661047 CEST	138	138	192.168.2.16	192.168.2.255
Aug 27, 2024 20:07:43.694302082 CEST	59488	53	192.168.2.16	1.1.1.1
Aug 27, 2024 20:07:43.694444895 CEST	50452	53	192.168.2.16	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 27, 2024 20:06:36.005460978 CEST	192.168.2.16	1.1.1.1	c24e	(Port unreachable)	Destination Unreachable
Aug 27, 2024 20:06:37.181452990 CEST	192.168.2.16	1.1.1.1	c23f	(Port unreachable)	Destination Unreachable
Aug 27, 2024 20:07:00.837302923 CEST	192.168.2.16	1.1.1.1	c23d	(Port unreachable)	Destination Unreachable
Aug 27, 2024 20:07:07.664221048 CEST	192.168.2.16	1.1.1.1	c286	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 27, 2024 20:06:35.915344954 CEST	192.168.2.16	1.1.1.1	0x9a46	Standard query (0)	www.fortismerchants.co.uk	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:35.915590048 CEST	192.168.2.16	1.1.1.1	0x191a	Standard query (0)	www.fortismerchants.co.uk	65	IN (0x0001)	false
Aug 27, 2024 20:06:37.140528917 CEST	192.168.2.16	1.1.1.1	0xd05a	Standard query (0)	subcg.tynurserys.com	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:37.140714884 CEST	192.168.2.16	1.1.1.1	0x64e6	Standard query (0)	subcg.tynurserys.com	65	IN (0x0001)	false
Aug 27, 2024 20:06:38.232382059 CEST	192.168.2.16	1.1.1.1	0xfcf2	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:38.232554913 CEST	192.168.2.16	1.1.1.1	0x2563	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 27, 2024 20:06:39.876555920 CEST	192.168.2.16	1.1.1.1	0xb709	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:39.876741886 CEST	192.168.2.16	1.1.1.1	0xe91	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 27, 2024 20:06:39.906172037 CEST	192.168.2.16	1.1.1.1	0xede5	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:39.906316042 CEST	192.168.2.16	1.1.1.1	0x99ae	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 27, 2024 20:06:40.635234118 CEST	192.168.2.16	1.1.1.1	0xaded	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:40.635371923 CEST	192.168.2.16	1.1.1.1	0x6d35	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 27, 2024 20:06:42.768243074 CEST	192.168.2.16	1.1.1.1	0x2bdb	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:42.768423080 CEST	192.168.2.16	1.1.1.1	0x7c5c	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Aug 27, 2024 20:06:52.478569031 CEST	192.168.2.16	1.1.1.1	0x5ba7	Standard query (0)	www.tynurserys.com	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:52.478773117 CEST	192.168.2.16	1.1.1.1	0x94af	Standard query (0)	www.tynurserys.com	65	IN (0x0001)	false
Aug 27, 2024 20:07:00.762257099 CEST	192.168.2.16	1.1.1.1	0xfd34	Standard query (0)	www.tynurserys.com	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:00.762582064 CEST	192.168.2.16	1.1.1.1	0x99c2	Standard query (0)	www.tynurserys.com	65	IN (0x0001)	false
Aug 27, 2024 20:07:01.028337955 CEST	192.168.2.16	1.1.1.1	0x61e	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:01.028572083 CEST	192.168.2.16	1.1.1.1	0x5ae2	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 27, 2024 20:07:02.415780067 CEST	192.168.2.16	1.1.1.1	0x3c25	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:02.415926933 CEST	192.168.2.16	1.1.1.1	0xd723	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 27, 2024 20:07:03.465435028 CEST	192.168.2.16	1.1.1.1	0xe74a	Standard query (0)	ywnjb.tynurserys.com	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:03.465599060 CEST	192.168.2.16	1.1.1.1	0x4e90	Standard query (0)	ywnjb.tynurserys.com	65	IN (0x0001)	false
Aug 27, 2024 20:07:06.547537088 CEST	192.168.2.16	1.1.1.1	0x4892	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:06.547658920 CEST	192.168.2.16	1.1.1.1	0x5797	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false
Aug 27, 2024 20:07:07.618190050 CEST	192.168.2.16	1.1.1.1	0xc03a	Standard query (0)	r4.res.office365.com	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:07.618489027 CEST	192.168.2.16	1.1.1.1	0x6a75	Standard query (0)	r4.res.office365.com	65	IN (0x0001)	false
Aug 27, 2024 20:07:42.768516064 CEST	192.168.2.16	1.1.1.1	0xb651	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:42.768673897 CEST	192.168.2.16	1.1.1.1	0xbd1	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Aug 27, 2024 20:07:43.694302082 CEST	192.168.2.16	1.1.1.1	0x63f2	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:43.694444895 CEST	192.168.2.16	1.1.1.1	0x6371	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 27, 2024 20:06:35.975263119 CEST	1.1.1.1	192.168.2.16	0x9a46	No error (0)	www.fortismerchants.co.uk	loadbalancer.ebiz.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:06:35.975263119 CEST	1.1.1.1	192.168.2.16	0x9a46	No error (0)	loadbalancer.ebiz.co.uk		52.16.167.62	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:36.005405903 CEST	1.1.1.1	192.168.2.16	0x191a	No error (0)	www.fortismerchants.co.uk	loadbalancer.ebiz.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:06:37.161919117 CEST	1.1.1.1	192.168.2.16	0xd05a	No error (0)	subcg.tynurserys.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:37.161919117 CEST	1.1.1.1	192.168.2.16	0xd05a	No error (0)	subcg.tynurserys.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:37.181390047 CEST	1.1.1.1	192.168.2.16	0x64e6	No error (0)	subcg.tynurserys.com			65	IN (0x0001)	false
Aug 27, 2024 20:06:38.243099928 CEST	1.1.1.1	192.168.2.16	0xfcf2	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:38.243099928 CEST	1.1.1.1	192.168.2.16	0xfcf2	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:38.243654966 CEST	1.1.1.1	192.168.2.16	0x2563	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 27, 2024 20:06:39.888626099 CEST	1.1.1.1	192.168.2.16	0xb709	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:39.888626099 CEST	1.1.1.1	192.168.2.16	0xb709	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:39.890161991 CEST	1.1.1.1	192.168.2.16	0xe91	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 27, 2024 20:06:39.913810015 CEST	1.1.1.1	192.168.2.16	0xede5	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:39.913810015 CEST	1.1.1.1	192.168.2.16	0xede5	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:39.913820982 CEST	1.1.1.1	192.168.2.16	0x99ae	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 27, 2024 20:06:40.643269062 CEST	1.1.1.1	192.168.2.16	0xaded	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:40.643346071 CEST	1.1.1.1	192.168.2.16	0x6d35	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 27, 2024 20:06:41.587533951 CEST	1.1.1.1	192.168.2.16	0x257b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:41.587533951 CEST	1.1.1.1	192.168.2.16	0x257b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:42.776171923 CEST	1.1.1.1	192.168.2.16	0x2bdb	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:06:42.777412891 CEST	1.1.1.1	192.168.2.16	0x7c5c	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:06:52.516452074 CEST	1.1.1.1	192.168.2.16	0x5ba7	No error (0)	www.tynurserys.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:52.516452074 CEST	1.1.1.1	192.168.2.16	0x5ba7	No error (0)	www.tynurserys.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:06:52.516729116 CEST	1.1.1.1	192.168.2.16	0x94af	No error (0)	www.tynurserys.com			65	IN (0x0001)	false
Aug 27, 2024 20:07:00.775667906 CEST	1.1.1.1	192.168.2.16	0xfd34	No error (0)	www.tynurserys.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:00.775667906 CEST	1.1.1.1	192.168.2.16	0xfd34	No error (0)	www.tynurserys.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:00.837208986 CEST	1.1.1.1	192.168.2.16	0x99c2	No error (0)	www.tynurserys.com			65	IN (0x0001)	false
Aug 27, 2024 20:07:01.035737038 CEST	1.1.1.1	192.168.2.16	0x61e	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:01.035737038 CEST	1.1.1.1	192.168.2.16	0x61e	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:01.035737038 CEST	1.1.1.1	192.168.2.16	0x61e	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:01.036133051 CEST	1.1.1.1	192.168.2.16	0x5ae2	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:01.036133051 CEST	1.1.1.1	192.168.2.16	0x5ae2	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:02.422648907 CEST	1.1.1.1	192.168.2.16	0x3c25	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:02.422648907 CEST	1.1.1.1	192.168.2.16	0x3c25	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:02.422648907 CEST	1.1.1.1	192.168.2.16	0x3c25	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:02.423881054 CEST	1.1.1.1	192.168.2.16	0xd723	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:02.423881054 CEST	1.1.1.1	192.168.2.16	0xd723	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:03.358623981 CEST	1.1.1.1	192.168.2.16	0x3800	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:03.358623981 CEST	1.1.1.1	192.168.2.16	0x3800	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:03.502688885 CEST	1.1.1.1	192.168.2.16	0xe74a	No error (0)	ywnjb.tynurserys.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:03.502688885 CEST	1.1.1.1	192.168.2.16	0xe74a	No error (0)	ywnjb.tynurserys.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:03.510735989 CEST	1.1.1.1	192.168.2.16	0x4e90	No error (0)	ywnjb.tynurserys.com			65	IN (0x0001)	false
Aug 27, 2024 20:07:06.554615021 CEST	1.1.1.1	192.168.2.16	0x5797	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:06.554615021 CEST	1.1.1.1	192.168.2.16	0x5797	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:06.554615021 CEST	1.1.1.1	192.168.2.16	0x5797	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:06.554758072 CEST	1.1.1.1	192.168.2.16	0x4892	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:06.554758072 CEST	1.1.1.1	192.168.2.16	0x4892	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:06.554758072 CEST	1.1.1.1	192.168.2.16	0x4892	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:06.554758072 CEST	1.1.1.1	192.168.2.16	0x4892	No error (0)	HHN-efz.ms-acdc.office.com		52.98.171.226	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:06.554758072 CEST	1.1.1.1	192.168.2.16	0x4892	No error (0)	HHN-efz.ms-acdc.office.com		52.98.243.18	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:06.554758072 CEST	1.1.1.1	192.168.2.16	0x4892	No error (0)	HHN-efz.ms-acdc.office.com		52.98.241.194	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:06.554758072 CEST	1.1.1.1	192.168.2.16	0x4892	No error (0)	HHN-efz.ms-acdc.office.com		52.98.175.2	A (IP address)	IN (0x0001)	false
Aug 27, 2024 20:07:07.625050068 CEST	1.1.1.1	192.168.2.16	0xc03a	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:07.664133072 CEST	1.1.1.1	192.168.2.16	0x6a75	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:42.776072979 CEST	1.1.1.1	192.168.2.16	0xb651	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:42.778913975 CEST	1.1.1.1	192.168.2.16	0xbd1	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:43.701353073 CEST	1.1.1.1	192.168.2.16	0x6371	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 27, 2024 20:07:43.702445030 CEST	1.1.1.1	192.168.2.16	0x63f2	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

www.fortismerchants.co.uk

subcg.tynurserys.com

https:

challenges.cloudflare.com

www.tynurserys.com

aadcdn.msftauth.net

ywnjb.tynurserys.com

outlook.office365.com

slscr.update.microsoft.com

armmf.adobe.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49700	52.16.167.62	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:36 UTC	739	OUT	GET /rd?cmnpn=93885&ct=90493&u=https%3A%2F%2Fsubcg.tynurserys.com%2FpCavcKaS HTTP/1.1 Host: www.fortismerchants.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:37 UTC	800	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 27 Aug 2024 18:06:37 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 98 Connection: close location: https://subcg.tynurserys.com/pCavcKaS Set-Cookie: COLDBOX_DEBUGMODE_755FE14511DAA085FD97B552646AA415=B2B473B1FD6E076B7FDC89B8C5E30C42C543E9E1045EE90F6B3846C8F7B1ABF9;Path=/ Set-Cookie: EBIZ_WWWFORTISMERCHANTSCOUK=2657DF89F79C2E088A62D1ADC8EBF2C7ADFDC813DEAAE8852274A8897D25BCDE7C1276C55F;Path=/;Expires=Tue, 27-Aug-2024 20:06:37 UTC Set-Cookie: LAYOUTMODE=261393AFDEB07C1D;Path=/;Expires=Wed, 27-Aug-2025 18:06:37 UTC Set-Cookie: COLDBOX_DEBUGMODE_755FE14511DAA085FD97B552646AA415=_disabled_;Path=/ Set-Cookie: COLDBOX_DEBUGMODE_755FE14511DAA085FD97B552646AA415=_disabled_;Path=/ Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN
2024-08-27 18:06:37 UTC	98	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 4d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 09 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Document Moved</title></head><body><h1>Object Moved</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49701	188.114.97.3	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:37 UTC	671	OUT	GET /pCavcKaS HTTP/1.1 Host: subcg.tynurserys.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:38 UTC	744	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:06:38 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; Path=/; Domain=tynurserys.com; Expires=Tue, 27 Aug 2024 19:06:37 GMT; Max-Age=3600 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s4hOurnxY5WiZTB%2B5589GMbLahceqqWGxIq%2B3jkmnkKTX7%2FSEJvttcsMb%2BBUopE4TkKd0vOEvzYcyznuRJpH%2FYsq%2FViFvJel7UpElaqQre4W820Guei0v1P%2FumNsAt0HRqC9ddgcNw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b9dff1ddf9943be-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:38 UTC	625	IN	Data Raw: 31 37 36 64 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 3f 6f 6e 6c 6f 61 64 3d 6f 6e 6c 6f 61 64 54 75 72 6e 73 74 69 6c 65 43 61 6c 6c 62 61 63 6b 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c Data Ascii: 176d<!doctype html><html lang="en-US"><head> <script async defer src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"></script> <title>Just a moment...</title> <meta content="width=device-width,initial
2024-08-27 18:06:38 UTC	1369	IN	Data Raw: 27 79 73 2e 27 20 2b 20 27 63 6f 27 20 2b 20 27 6d 27 20 2b 20 27 2f 70 43 27 20 2b 20 27 61 27 20 2b 20 27 76 63 4b 27 20 2b 20 27 61 53 27 20 2b 20 27 3f 27 20 2b 20 27 64 3d 65 27 20 2b 20 27 41 35 27 20 2b 20 27 4c 52 39 27 20 2b 20 27 67 27 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 43 41 50 54 43 48 41 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 66 61 69 6c 65 64 20 6f 72 20 72 65 73 70 6f 6e 73 65 20 6c 65 6e 67 74 68 20 69 73 20 6e 6f 74 20 73 75 66 66 69 63 69 65 6e 74 2e 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 Data Ascii: 'ys.' + 'co' + 'm' + '/pC' + 'a' + 'vcK' + 'aS' + '?' + 'd=e' + 'A5' + 'LR9' + 'g' + window.location.hash; return; } console.log("CAPTCHA verification failed or response length is not sufficient."); retu
2024-08-27 18:06:38 UTC	1369	IN	Data Raw: 69 61 6c 2c 20 22 4e 6f 74 6f 20 53 61 6e 73 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 2c 20 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 20 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 3b 0a 20 20 20 20 7d 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 7d 0a 20 20 20 20 61 20 7b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 63 6f 6c 6f 72 20 2e 31 35 73 3b 0a 20 20 Data Ascii: ial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; } body { display: flex; flex-direction: column; min-height: 100vh; } a { transition: color .15s;
2024-08-27 18:06:38 UTC	1369	IN	Data Raw: 6b 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 74 65 78 74 2d 63 65 6e 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 32 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 37 35 72 65 6d 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 Data Ascii: k; } .text-center { text-align: center; } .footer { margin: 0 auto; width: 100%; max-width: 60rem; line-height: 1.125rem; font-size: .75rem; } .footer-inner { border-top: 1px
2024-08-27 18:06:38 UTC	1273	IN	Data Raw: 20 23 64 39 64 39 64 39 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 61 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 65 65 37 33 30 61 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 77 72 61 70 70 65 72 22 20 72 6f 6c 65 3d 22 6d 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 Data Ascii: #d9d9d9; } a { color: #fff; } a:hover { text-decoration: underline; color: #ee730a; } }</style><body class="no-js"> <div class="main-wrapper" role="main"> <div
2024-08-27 18:06:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49702	104.18.94.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:38 UTC	579	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:38 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 27 Aug 2024 18:06:38 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/6790c32b9fc9/api.js Server: cloudflare CF-RAY: 8b9dff246b538c60-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49707	104.18.94.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:39 UTC	563	OUT	GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:39 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:06:39 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 45035 Connection: close accept-ranges: bytes last-modified: Thu, 15 Aug 2024 16:28:23 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8b9dff29e8508c1d-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:39 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 53 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 5f 3d 65 5b 75 5d 28 67 29 2c 70 3d 5f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 61 28 66 29 3b 72 65 74 75 72 6e 7d 5f 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);funct
2024-08-27 18:06:39 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 72 28 65 2c 72 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 24 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function $e(e,r){return r=r!=nu
2024-08-27 18:06:39 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 4a 65 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 43 74 28 65 29 7c 7c 4e 74 28 65 2c 72 29 7c 7c 4c 74 28 65 2c 72 29 7c 7c 6b 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(a))return Je(e,r)}}function be(e,r){return Ct(e)\|\|Nt(e,r)\|\|Lt(e,r)\|\|kt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ne(e,r){var a={label:0,sent:function(){if(u[0
2024-08-27 18:06:39 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 46 74 3d 33 30 30 30 32 30 3b 76 61 72 20 6b 65 3d 33 30 30 30 33 30 3b 76 61 72 20 4c 65 3d 33 30 30 30 33 31 3b 76 61 72 20 42 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ft=300020;var ke=300030;var Le=300031;var B;(fu
2024-08-27 18:06:39 UTC	1369	IN	Data Raw: 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 75 65 7c 7c 28 75 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6c 65 3b 28 66 75 6e Data Ascii: e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ue\|\|(ue={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var le;(fun
2024-08-27 18:06:39 UTC	1369	IN	Data Raw: 76 61 72 20 59 3d 22 30 2f 30 22 3b 66 75 6e 63 74 69 6f 6e 20 66 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 Data Ascii: var Y="0/0";function ft(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="d
2024-08-27 18:06:39 UTC	1369	IN	Data Raw: 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 63 2c 75 3d 4c 28 78 72 2c 28 63 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 67 2c 5f 3d 4c 28 77 72 2c 28 67 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 67 21 3d 3d 76 6f 69 64 20 30 3f 67 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 26 26 75 3f 22 Data Ascii: HAVING_TROUBLES,c,u=L(xr,(c=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&c!==void 0?c:"nonexistent"),g,_=L(wr,(g=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&g!==void 0?g:"nonexistent");return o&&u?"
2024-08-27 18:06:39 UTC	1369	IN	Data Raw: 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 29 7d 2c 73 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 74 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 5a 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 Data Ascii: __proto__\|\|Object.getPrototypeOf(a)},se(e)}function Zt(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Pe(e){var r=typeof Map=="function"?new Map:void 0;return Pe=function(o){if(o===null\|\|!Zt(o))return o;if(typeof o!="function")
2024-08-27 18:06:39 UTC	1369	IN	Data Raw: 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 61 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 50 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 61 72 28 29 7b 76 61 72 20 65 3d 67 74 28 29 3b 65 7c 7c 76 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 Data Ascii: riptElement)&&e.test(r.src))return r;for(var a=document.querySelectorAll("script"),o=0,c;c=a[o];o++)if(P(c,HTMLScriptElement)&&e.test(c.src))return c}function ar(){var e=gt();e\|\|v("Could not find Turnstile script tag, some features may not be available",4
2024-08-27 18:06:39 UTC	1369	IN	Data Raw: 28 22 61 6c 6c 6f 77 22 2c 22 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 69 73 6f 6c 61 74 65 64 3b 20 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 61 6e 64 62 6f 78 22 2c 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 66 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 30 70 78 22 2c 66 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 Data Ascii: ("allow","cross-origin-isolated; fullscreen"),f.setAttribute("sandbox","allow-same-origin allow-scripts allow-popups allow-forms"),f.setAttribute("scrolling","no"),f.style.borderWidth="0px",f.style.width="100%",f.style.height="100%",f.style.overflow="hidd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49709	104.18.94.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:40 UTC	383	OUT	GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:40 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:06:40 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 45035 Connection: close accept-ranges: bytes last-modified: Thu, 15 Aug 2024 16:28:23 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8b9dff304f9032e4-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:40 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 53 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 5f 3d 65 5b 75 5d 28 67 29 2c 70 3d 5f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 61 28 66 29 3b 72 65 74 75 72 6e 7d 5f 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);funct
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 72 28 65 2c 72 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 24 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function $e(e,r){return r=r!=nu
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 4a 65 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 43 74 28 65 29 7c 7c 4e 74 28 65 2c 72 29 7c 7c 4c 74 28 65 2c 72 29 7c 7c 6b 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(a))return Je(e,r)}}function be(e,r){return Ct(e)\|\|Nt(e,r)\|\|Lt(e,r)\|\|kt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ne(e,r){var a={label:0,sent:function(){if(u[0
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 46 74 3d 33 30 30 30 32 30 3b 76 61 72 20 6b 65 3d 33 30 30 30 33 30 3b 76 61 72 20 4c 65 3d 33 30 30 30 33 31 3b 76 61 72 20 42 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ft=300020;var ke=300030;var Le=300031;var B;(fu
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 75 65 7c 7c 28 75 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6c 65 3b 28 66 75 6e Data Ascii: e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ue\|\|(ue={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var le;(fun
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 76 61 72 20 59 3d 22 30 2f 30 22 3b 66 75 6e 63 74 69 6f 6e 20 66 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 Data Ascii: var Y="0/0";function ft(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="d
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 63 2c 75 3d 4c 28 78 72 2c 28 63 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 67 2c 5f 3d 4c 28 77 72 2c 28 67 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 67 21 3d 3d 76 6f 69 64 20 30 3f 67 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 26 26 75 3f 22 Data Ascii: HAVING_TROUBLES,c,u=L(xr,(c=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&c!==void 0?c:"nonexistent"),g,_=L(wr,(g=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&g!==void 0?g:"nonexistent");return o&&u?"
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 29 7d 2c 73 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 74 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 5a 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 Data Ascii: __proto__\|\|Object.getPrototypeOf(a)},se(e)}function Zt(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Pe(e){var r=typeof Map=="function"?new Map:void 0;return Pe=function(o){if(o===null\|\|!Zt(o))return o;if(typeof o!="function")
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 61 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 50 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 61 72 28 29 7b 76 61 72 20 65 3d 67 74 28 29 3b 65 7c 7c 76 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 Data Ascii: riptElement)&&e.test(r.src))return r;for(var a=document.querySelectorAll("script"),o=0,c;c=a[o];o++)if(P(c,HTMLScriptElement)&&e.test(c.src))return c}function ar(){var e=gt();e\|\|v("Could not find Turnstile script tag, some features may not be available",4
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 28 22 61 6c 6c 6f 77 22 2c 22 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 69 73 6f 6c 61 74 65 64 3b 20 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 61 6e 64 62 6f 78 22 2c 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 66 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 30 70 78 22 2c 66 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 Data Ascii: ("allow","cross-origin-isolated; fullscreen"),f.setAttribute("sandbox","allow-same-origin allow-scripts allow-popups allow-forms"),f.setAttribute("scrolling","no"),f.style.borderWidth="0px",f.style.width="100%",f.style.height="100%",f.style.overflow="hidd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49708	104.18.95.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:40 UTC	803	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:40 UTC	1362	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:06:40 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 74472 Connection: close cross-origin-embedder-policy: require-corp origin-agent-cluster: ?1 content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA document-policy: js-profiling cross-origin-resource-policy: cross-origin cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cross-origin-opener-policy: same-origin permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2024-08-27 18:06:40 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 62 39 64 66 66 33 30 33 63 32 35 37 63 39 34 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8b9dff303c257c94-EWRalt-svc: h3=":443"; ma=86400
2024-08-27 18:06:40 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 28 31 2e 35 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 32 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 69 72 65 77 6f 72 6b 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 38 3b 20 2f 2a 20 6c 65 6e 67 74 68 20 2a 2f 0a 20 20 7d 0a 20 20 33 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 2d 38 3b 20 2f 2a 20 6c 65 6e 67 74 68 20 2a 2f 0a 20 20 7d 0a 7d 0a 40 Data Ascii: (1.5); opacity: 1; } 100% { transform: scale(2); opacity: 0; }}@keyframes firework { 0% { opacity: 0; stroke-dashoffset: 8; /* length / } 30% { opacity: 1; } 100% { stroke-dashoffset: -8; / length */ }}@
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 65 78 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 31 36 70 78 20 30 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 0a 23 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0a 7d 0a 0a 23 66 61 69 6c 2d 69 63 6f 6e 2c 20 23 6f 76 65 72 72 75 6e 2d 69 63 6f 6e 20 7b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 Data Ascii: ex; flex-direction: column; margin: 0 16px 0 0; text-align: right;}#spinner-icon { display: flex; width: 30px; height: 30px; animation: spin 5s linear infinite;}#fail-icon, #overrun-icon { width: 30px; height: 30px; display: flex
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 30 33 38 31 32 37 3b 0a 20 20 66 69 6c 6c 3a 20 23 30 33 38 31 32 37 3b 0a 7d 0a 0a 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 0a 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 2c 0a 23 65 78 70 69 72 65 64 2d 74 65 78 74 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 0a 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 0a 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 2c 0a 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 0a 23 6f Data Ascii: terlimit: 10; stroke: #038127; fill: #038127;}#overrun-text,#timeout-text,#expired-text { margin: 0; text-align: inherit; font-size: 14px; font-weight: 400;}#timeout-refresh-link,#expired-text,#timeout-text,#expired-refresh-link,#o
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 69 73 69 74 65 64 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 Data Ascii: k,.theme-dark #challenge-error-text a:visited,.theme-dark #challenge-error-text a:link { color: #bbb;}.theme-dark #challenge-overlay a:hover, .theme-dark #challenge-overlay a:active, .theme-dark #challenge-overlay a:focus,.theme-dark #challenge-err
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 37 39 37 39 37 39 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 33 32 33 32 33 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f Data Ascii: .theme-dark #terms a:focus { color: #949494;}.theme-dark #content { border-color: #797979; background-color: #232323;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-loop-link { co
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 7a 2d Data Ascii: }.theme-dark .error-message { color: #ffa299;}.theme-dark .error-message a { color: #ffa299;}.theme-dark .error-message a:link, .theme-dark .error-message a:visited { color: #ffa299;}#challenge-overlay { position: absolute; top: 0; z-
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b Data Ascii: margin: 0; cursor: pointer; width: 24px; height: 24px;}.cb-lb input:active ~ .cb-i { border: 2px solid #c44d0e;}.cb-lb input:checked ~ .cb-i { transform: rotate(0deg) scale(1); opacity: 1; border-radius: 5px; background-color: white;
2024-08-27 18:06:40 UTC	1369	IN	Data Raw: 61 6e 64 69 6e 67 20 7b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 20 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 61 6c 69 67 6e 2d 73 65 6c 66 3a 20 66 6c 65 78 2d 65 6e 64 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 31 32 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 71 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 73 69 7a Data Ascii: anding { flex-flow: row-reverse wrap; place-content: center flex-start; align-self: flex-end; margin: 0 12px; padding-right: 0; text-align: right;}.size-compact #terms { text-align: right;}.size-compact #qr { text-align: center;}.siz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49718	104.18.95.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:41 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b9dff303c257c94&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:41 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:06:41 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 116938 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8b9dff357c3418bc-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:41 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 5a 63 51 66 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.ZcQf2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcep
2024-08-27 18:06:41 UTC	1369	IN	Data Raw: 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 20 66 65 65 64 62 61 63 6b 20 72 65 70 6f 72 74 20 68 61 73 20 62 65 65 6e 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 73 75 62 Data Ascii: port%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","turnstile_timeout":"Timed%20out","turnstile_refresh":"Refresh","human_button_text":"Verify%20you%20are%20human","feedback_report_output_subtitle":"Your feedback report has been successfully sub
2024-08-27 18:06:41 UTC	1369	IN	Data Raw: 70 61 72 73 65 49 6e 74 28 67 48 28 35 34 38 29 29 2f 31 30 2b 2d 70 61 72 73 65 49 6e 74 28 67 48 28 31 34 33 30 29 29 2f 31 31 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 34 37 31 31 38 35 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 36 33 33 29 5d 2c 65 4f 3d 7b 7d 2c 65 4f 5b 67 49 28 31 30 30 38 29 5d 3d 27 6f 27 2c 65 4f 5b 67 49 28 37 34 30 29 5d 3d 27 73 27 2c 65 4f 5b 67 49 28 38 30 37 29 5d 3d 27 75 27 2c 65 4f 5b 67 49 28 36 37 33 29 5d 3d 27 7a 27 2c 65 4f 5b 67 49 28 31 35 35 33 29 5d 3d 27 6e 27 2c 65 4f 5b 67 49 28 31 30 37 33 29 5d 3d 27 49 27 2c 65 50 3d Data Ascii: parseInt(gH(548))/10+-parseInt(gH(1430))/11,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,471185),eM=this\|\|self,eN=eM[gI(633)],eO={},eO[gI(1008)]='o',eO[gI(740)]='s',eO[gI(807)]='u',eO[gI(673)]='z',eO[gI(1553)]='n',eO[gI(1073)]='I',eP=
2024-08-27 18:06:41 UTC	1369	IN	Data Raw: 58 69 62 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 7d 2c 6a 3d 4f 62 6a 65 63 74 5b 67 50 28 31 32 35 30 29 5d 28 68 29 2c 6b 3d 30 3b 69 5b 67 50 28 31 38 30 32 29 5d 28 6b 2c 6a 5b 67 50 28 31 36 32 35 29 5d 29 3b 6b 2b 2b 29 69 66 28 69 5b 67 50 28 31 37 32 33 29 5d 3d 3d 3d 67 50 28 31 36 31 32 29 29 7b 69 66 28 6c 3d 6a 5b 6b 5d 2c 6c 3d 3d 3d 27 66 27 26 26 28 6c 3d 27 4e 27 29 2c 67 5b 6c 5d 29 7b 66 6f 72 28 6d 3d 30 3b 6d 3c 68 5b 6a 5b 6b 5d 5d 5b 67 50 28 31 36 32 35 29 5d 3b 2d 31 3d 3d 3d 67 5b 6c 5d 5b 67 50 28 31 31 33 31 29 5d 28 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 26 26 28 69 5b 67 50 28 36 36 34 29 5d 28 65 55 2c 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 7c 7c 67 5b 6c 5d 5b 67 50 28 37 35 30 29 5d 28 69 5b 67 Data Ascii: Xib':function(n,o){return n+o}},j=Object[gP(1250)](h),k=0;i[gP(1802)](k,j[gP(1625)]);k++)if(i[gP(1723)]===gP(1612)){if(l=j[k],l==='f'&&(l='N'),g[l]){for(m=0;m<h[j[k]][gP(1625)];-1===g[l][gP(1131)](h[j[k]][m])&&(i[gP(664)](eU,h[j[k]][m])\|\|g[l][gP(750)](i[g
2024-08-27 18:06:41 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 6d 6c 72 6f 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 72 61 57 61 5a 27 3a 68 43 28 31 37 30 34 29 2c 27 4b 57 6b 52 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 51 48 43 69 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 6f 42 71 4b 48 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 64 77 55 71 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 68 76 46 51 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 49 50 47 41 58 Data Ascii: ction(h,i){return h-i},'mlrom':function(h,i){return h(i)},'raWaZ':hC(1704),'KWkRW':function(h,i){return h(i)},'QHCiO':function(h,i){return h<<i},'oBqKH':function(h,i){return h&i},'dwUqp':function(h,i){return i==h},'hvFQB':function(h,i){return h<<i},'IPGAX
2024-08-27 18:06:41 UTC	1369	IN	Data Raw: 3d 3d 3d 68 46 28 31 34 38 33 29 29 7b 66 6f 72 28 73 3d 30 3b 64 5b 68 46 28 35 35 31 29 5d 28 73 2c 46 29 3b 48 3c 3c 3d 31 2c 49 3d 3d 64 5b 68 46 28 36 37 39 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 68 46 28 37 35 30 29 5d 28 64 5b 68 46 28 31 37 38 39 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 68 46 28 31 31 31 31 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 68 46 28 31 34 39 38 29 5d 28 64 5b 68 46 28 35 30 39 29 5d 28 48 2c 31 29 2c 4d 26 31 2e 39 33 29 2c 49 3d 3d 64 5b 68 46 28 36 37 39 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 68 46 28 37 35 30 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 6a 20 69 6e Data Ascii: ===hF(1483)){for(s=0;d[hF(551)](s,F);H<<=1,I==d[hF(679)](j,1)?(I=0,G[hF(750)](d[hF(1789)](o,H)),H=0):I++,s++);for(M=C[hF(1111)](0),s=0;8>s;H=d[hF(1498)](d[hF(509)](H,1),M&1.93),I==d[hF(679)](j,1)?(I=0,G[hF(750)](o(H)),H=0):I++,M>>=1,s++);}else return j in
2024-08-27 18:06:41 UTC	1369	IN	Data Raw: 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 50 3d 7b 7d 2c 50 5b 68 46 28 31 31 31 34 29 5d 3d 68 46 28 35 36 31 29 2c 51 3d 6a 5b 68 46 28 31 31 39 37 29 5d 28 6e 65 77 20 43 28 5b 68 46 28 31 37 33 34 29 5d 2c 50 29 29 2c 52 3d 6e 65 77 20 50 28 51 29 2c 6a 5b 68 46 28 31 36 36 39 29 5d 28 51 29 2c 52 5b 68 46 28 31 34 31 33 29 5d 28 29 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 68 46 28 38 38 31 29 5d 28 64 5b 68 46 28 31 38 36 36 29 5d 28 48 2c 31 29 2c 4d 26 31 2e 30 37 29 2c 64 5b 68 46 28 31 38 35 37 29 5d 28 49 2c 64 5b 68 46 28 36 37 39 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 68 46 28 37 35 30 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 44 2d 2d 2c 44 Data Ascii: lete B[C]}else P={},P[hF(1114)]=hF(561),Q=j[hF(1197)](new C([hF(1734)],P)),R=new P(Q),j[hF(1669)](Q),R[hF(1413)]()}else for(M=x[C],s=0;s<F;H=d[hF(881)](d[hF(1866)](H,1),M&1.07),d[hF(1857)](I,d[hF(679)](j,1))?(I=0,G[hF(750)](o(H)),H=0):I++,M>>=1,s++);D--,D
2024-08-27 18:06:41 UTC	1369	IN	Data Raw: 3b 73 77 69 74 63 68 28 4d 3d 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 49 28 36 38 33 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 64 5b 68 49 28 37 34 39 29 5d 28 46 2c 4b 29 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 68 49 28 37 36 35 29 5d 28 64 5b 68 49 28 31 33 35 32 29 5d 28 30 2c 4c 29 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4d 3d 64 5b 68 49 28 31 37 36 32 29 5d 28 42 2c 31 29 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 49 28 36 38 33 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d Data Ascii: ;switch(M=J){case 0:for(J=0,K=Math[hI(683)](2,8),F=1;d[hI(749)](F,K);L=H&G,H>>=1,0==H&&(H=j,G=o(I++)),J\|=d[hI(765)](d[hI(1352)](0,L)?1:0,F),F<<=1);s[B++]=e(J),M=d[hI(1762)](B,1),x--;break;case 1:for(J=0,K=Math[hI(683)](2,16),F=1;F!=K;L=G&H,H>>=1,H==0&&(H=
2024-08-27 18:06:41 UTC	1369	IN	Data Raw: 68 4d 28 35 32 35 29 5d 2c 27 65 76 65 6e 74 27 3a 68 4d 28 39 34 35 29 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 68 4d 28 31 35 36 36 29 5d 5b 68 4d 28 31 36 35 33 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 68 4d 28 31 35 36 36 29 5d 5b 68 4d 28 31 33 35 31 29 5d 2c 27 63 6f 64 65 27 3a 68 4d 28 39 31 36 29 2c 27 72 63 56 27 3a 65 4d 5b 68 4d 28 31 35 36 36 29 5d 5b 68 4d 28 31 32 37 38 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 49 28 31 35 35 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 68 4e 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 29 7b 6a 3d 28 68 4e 3d 67 49 2c 69 3d 7b 7d 2c 69 5b 68 4e 28 38 31 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b Data Ascii: hM(525)],'event':hM(945),'cfChlOut':eM[hM(1566)][hM(1653)],'cfChlOutS':eM[hM(1566)][hM(1351)],'code':hM(916),'rcV':eM[hM(1566)][hM(1278)]},'*'))},g)},eM[gI(1558)]=function(f,g,h,hN,i,j,k,l,m,n,o,s,x,B){j=(hN=gI,i={},i[hN(810)]=function(C,D){return C+D},i[
2024-08-27 18:06:41 UTC	1369	IN	Data Raw: 33 29 5d 28 68 4f 28 34 39 30 29 2c 4a 53 4f 4e 5b 68 4f 28 38 37 35 29 5d 28 68 29 29 5d 5b 68 4f 28 31 34 31 38 29 5d 28 6a 5b 68 4f 28 31 37 36 38 29 5d 29 2c 65 4d 5b 68 4f 28 35 34 36 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 51 29 7b 68 51 3d 68 4f 2c 65 4d 5b 68 51 28 31 35 35 38 29 5d 28 6d 2c 75 6e 64 65 66 69 6e 65 64 2c 68 51 28 37 33 36 29 29 7d 2c 31 30 29 2c 65 4d 5b 68 4f 28 35 34 36 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 52 29 7b 68 52 3d 68 4f 2c 68 52 28 31 36 36 36 29 21 3d 3d 6a 5b 68 52 28 31 34 34 31 29 5d 3f 65 5b 68 52 28 35 34 36 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 53 29 7b 68 53 3d 68 52 2c 67 5b 68 53 28 31 38 30 38 29 5d 28 29 7d 2c 31 65 33 29 3a 65 4d 5b 68 52 28 31 38 30 38 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 68 4f 28 Data Ascii: 3)](hO(490),JSON[hO(875)](h))][hO(1418)](j[hO(1768)]),eM[hO(546)](function(hQ){hQ=hO,eM[hQ(1558)](m,undefined,hQ(736))},10),eM[hO(546)](function(hR){hR=hO,hR(1666)!==j[hR(1441)]?e[hR(546)](function(hS){hS=hR,g[hS(1808)]()},1e3):eM[hR(1808)]()},1e3),eM[hO(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49721	104.18.95.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:41 UTC	795	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:41 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:06:41 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8b9dff357dee7c8a-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:41 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49723	104.18.94.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:42 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:42 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:06:42 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8b9dff394f3943df-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:42 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49725	104.18.94.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:42 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b9dff303c257c94&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:42 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:06:42 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 116900 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8b9dff3adc3042b8-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:42 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 5a 63 51 66 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.ZcQf2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2F
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 Data Ascii: %3EClick%20here%20for%20more%20information%3C%2Fa%3E","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","testing_only":"Testing%20only.","turnstile_refresh":"Refresh","check_delays":"Verificati
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 65 49 6e 74 28 67 48 28 31 31 34 38 29 29 2f 31 30 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 34 34 34 39 36 34 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 31 30 33 32 29 5d 2c 65 4d 5b 67 49 28 31 30 38 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 67 55 2c 65 29 7b 65 3d 28 67 55 3d 67 49 2c 7b 27 71 61 64 6a 61 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 2c 27 68 4b 48 46 67 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 51 28 63 29 7d 63 61 74 63 Data Ascii: eInt(gH(1148))/10,f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,444964),eM=this\|\|self,eN=eM[gI(1032)],eM[gI(1085)]=function(c,gU,e){e=(gU=gI,{'qadja':function(g,h){return g(h)},'hKHFg':function(g,h){return g(h)}});try{return eQ(c)}catc
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 75 72 6e 20 69 3d 3d 68 7d 2c 27 7a 74 67 59 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 49 46 6b 59 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 4c 74 74 54 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 78 6f 47 4b 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 6a 67 62 70 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 59 5a 47 46 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 70 53 69 66 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 7d 2c 65 3d 53 74 Data Ascii: urn i==h},'ztgYJ':function(h,i){return h!=i},'IFkYv':function(h,i){return i&h},'LttTw':function(h,i){return h==i},'xoGKG':function(h,i){return ih},'jgbpi':function(h,i){return hi},'YZGFi':function(h,i){return h<i},'pSifm':function(h,i){return h-i}},e=St
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 36 32 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 78 5b 4c 5d 3d 45 2b 2b 2c 64 5b 67 58 28 31 39 32 34 29 5d 28 53 74 72 69 6e 67 2c 4b 29 29 7d 69 66 28 64 5b 67 58 28 31 36 32 38 29 5d 28 27 27 2c 43 29 29 7b 69 66 28 4f 62 6a 65 63 74 5b 67 58 28 39 39 33 29 5d 5b 67 58 28 38 39 36 29 5d 5b 67 58 28 36 33 38 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 67 58 28 31 30 34 34 29 5d 28 32 35 36 2c 43 5b 67 58 28 35 38 39 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 64 5b 67 58 28 31 37 37 33 29 5d 28 73 2c 46 29 3b 48 3c 3c 3d 31 2c 64 5b 67 58 28 37 30 34 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 67 58 28 35 34 37 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 58 28 35 38 39 29 5d 28 30 29 2c 73 3d 30 Data Ascii: 62)](2,F),F++),x[L]=E++,d[gX(1924)](String,K))}if(d[gX(1628)]('',C)){if(Object[gX(993)][gX(896)][gX(638)](B,C)){if(d[gX(1044)](256,C[gX(589)](0))){for(s=0;d[gX(1773)](s,F);H<<=1,d[gX(704)](I,j-1)?(I=0,G[gX(547)](o(H)),H=0):I++,s++);for(M=C[gX(589)](0),s=0
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 68 28 4c 5b 4d 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 4e 3d 64 5b 68 30 28 31 36 37 39 29 5d 28 47 2c 48 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 68 30 28 31 36 30 34 29 5d 28 6f 2c 49 2b 2b 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 4a 7c 3d 28 30 3c 4e 3f 31 3a 30 29 2a 46 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 46 3c 3c 3d 31 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 48 3e 3e 3d 31 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 30 28 37 36 32 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4e 3d 47 26 48 2c 48 3e 3e 3d 31 2c 64 5b 68 30 28 31 33 31 Data Ascii: h(L[M++]){case'0':N=d[h0(1679)](G,H);continue;case'1':0==H&&(H=j,G=d[h0(1604)](o,I++));continue;case'2':J\|=(0<N?1:0)*F;continue;case'3':F<<=1;continue;case'4':H>>=1;continue}break}switch(J){case 0:for(J=0,K=Math[h0(762)](2,8),F=1;F!=K;N=G&H,H>>=1,d[h0(131
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 2c 65 54 3d 65 53 2c 65 4d 5b 67 49 28 31 33 36 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 68 35 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 68 35 3d 67 49 2c 6f 3d 7b 27 74 42 44 6b 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3c 48 7d 2c 27 57 53 62 6a 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 4b 6d 48 41 68 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 28 48 29 7d 2c 27 58 4b 55 56 47 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 28 48 29 7d 2c 27 61 78 46 66 46 27 3a 68 35 28 37 37 34 29 2c 27 46 4f 79 59 79 27 3a 68 35 28 36 32 39 29 2c 27 68 52 6c 44 78 27 3a 66 75 6e 63 74 69 6f 6e Data Ascii: ,eT=eS,eM[gI(1364)]=function(g,h,i,j,h5,o,x,B,C,D,E,F){if(h5=gI,o={'tBDkm':function(G,H){return G<H},'WSbjO':function(G,H){return G===H},'KmHAh':function(G,H){return G(H)},'XKUVG':function(G,H){return G(H)},'axFfF':h5(774),'FOyYy':h5(629),'hRlDx':function
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 6c 29 26 26 28 6c 3d 27 4e 27 29 2c 67 5b 6c 5d 29 7b 66 6f 72 28 6d 3d 30 3b 6d 3c 68 5b 6a 5b 6b 5d 5d 5b 68 38 28 31 35 35 31 29 5d 3b 2d 31 3d 3d 3d 67 5b 6c 5d 5b 68 38 28 31 37 38 32 29 5d 28 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 26 26 28 69 5b 68 38 28 31 38 38 39 29 5d 28 65 59 2c 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 7c 7c 67 5b 6c 5d 5b 68 38 28 35 34 37 29 5d 28 27 6f 2e 27 2b 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 29 2c 6d 2b 2b 29 3b 7d 65 6c 73 65 20 67 5b 6c 5d 3d 68 5b 6a 5b 6b 5d 5d 5b 68 38 28 31 30 34 31 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 68 39 29 7b 72 65 74 75 72 6e 20 68 39 3d 68 38 2c 69 5b 68 39 28 31 38 33 39 29 5d 28 27 6f 2e 27 2c 6e 29 7d 29 7d 2c 65 4d 5b 67 49 28 36 36 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 61 2c 64 2c 65 2c 66 2c Data Ascii: l)&&(l='N'),g[l]){for(m=0;m<h[j[k]][h8(1551)];-1===g[l][h8(1782)](h[j[k]][m])&&(i[h8(1889)](eY,h[j[k]][m])\|\|g[l][h8(547)]('o.'+h[j[k]][m])),m++);}else g[l]=h[j[k]][h8(1041)](function(n,h9){return h9=h8,i[h9(1839)]('o.',n)})},eM[gI(661)]=function(ha,d,e,f,
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 5b 68 63 28 31 35 32 30 29 5d 28 6a 5b 68 63 28 31 39 34 32 29 5d 28 6a 5b 68 63 28 31 37 37 30 29 5d 28 6a 5b 68 63 28 31 37 37 30 29 5d 28 68 63 28 31 37 37 32 29 2b 42 2b 68 63 28 31 37 36 37 29 2b 31 2c 6a 5b 68 63 28 37 36 36 29 5d 29 2b 65 4d 5b 68 63 28 35 36 38 29 5d 5b 68 63 28 35 33 33 29 5d 2c 27 2f 27 29 2c 65 4d 5b 68 63 28 35 36 38 29 5d 5b 68 63 28 31 37 38 33 29 5d 29 2b 27 2f 27 2c 65 4d 5b 68 63 28 35 36 38 29 5d 5b 68 63 28 31 37 31 37 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 37 27 3a 69 66 28 21 6f 29 72 65 74 75 72 6e 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 6f 5b 68 63 28 36 33 31 29 5d 28 68 63 28 36 38 35 29 2c 68 63 28 31 37 39 35 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 39 27 3a 42 3d 65 4d 5b Data Ascii: [hc(1520)](j[hc(1942)](j[hc(1770)](j[hc(1770)](hc(1772)+B+hc(1767)+1,j[hc(766)])+eM[hc(568)][hc(533)],'/'),eM[hc(568)][hc(1783)])+'/',eM[hc(568)][hc(1717)]);continue;case'7':if(!o)return;continue;case'8':o[hc(631)](hc(685),hc(1795));continue;case'9':B=eM[
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 7d 29 29 3b 65 6c 73 65 20 65 4d 5b 68 66 28 36 32 31 29 5d 28 6d 2c 75 6e 64 65 66 69 6e 65 64 2c 68 66 28 31 30 35 37 29 29 7d 2c 31 30 29 2c 65 4d 5b 68 64 28 36 35 34 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 68 29 7b 68 68 3d 68 64 2c 65 4d 5b 68 68 28 36 36 31 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 68 64 28 31 32 36 38 29 5d 5b 68 64 28 37 36 35 29 5d 28 68 64 28 31 30 37 33 29 2c 6d 29 29 3b 72 65 74 75 72 6e 21 5b 5d 7d 2c 66 32 3d 7b 7d 2c 66 32 5b 67 49 28 31 31 38 33 29 5d 3d 66 31 2c 65 4d 5b 67 49 28 36 38 39 29 5d 3d 66 32 2c 66 34 3d 65 4d 5b 67 49 28 35 36 38 29 5d 5b 67 49 28 31 35 38 37 29 5d 5b 67 49 28 37 36 38 29 5d 2c 66 35 3d 65 4d 5b 67 49 28 35 36 38 29 5d 5b 67 49 28 31 35 38 37 29 5d 5b 67 49 28 31 38 39 34 29 5d 2c 66 67 3d 21 Data Ascii: }));else eM[hf(621)](m,undefined,hf(1057))},10),eM[hd(654)](function(hh){hh=hd,eM[hh(661)]()},1e3),eM[hd(1268)][hd(765)](hd(1073),m));return![]},f2={},f2[gI(1183)]=f1,eM[gI(689)]=f2,f4=eM[gI(568)][gI(1587)][gI(768)],f5=eM[gI(568)][gI(1587)][gI(1894)],fg=!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49726	188.114.97.3	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:42 UTC	683	OUT	GET /favicon.ico HTTP/1.1 Host: subcg.tynurserys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://subcg.tynurserys.com/pCavcKaS Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063
2024-08-27 18:06:42 UTC	780	IN	HTTP/1.1 404 Not Found Date: Tue, 27 Aug 2024 18:06:42 GMT Transfer-Encoding: chunked Connection: close Cache-Control: private Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]} X-Ms-Ests-Server: 2.1.18760.5 - SCUS ProdSlices X-Ms-Request-Id: 0d25a9a3-a47b-43a8-bcae-40bc0261ac00 X-Ms-Srs: 1.P CF-Cache-Status: BYPASS Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8b9dff3b48fb8c4b-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49727	104.18.95.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:42 UTC	926	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1551955146:1724779460:S8hevjRG-pPNv9fILcmjlicunHEMlWb-gIhGxGWCUgU/8b9dff303c257c94/41e7ec57f580fdd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2711 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 41e7ec57f580fdd sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:42 UTC	2711	OUT	Data Raw: 76 5f 38 62 39 64 66 66 33 30 33 63 32 35 37 63 39 34 3d 64 57 33 44 58 44 24 44 55 44 67 44 68 44 71 77 62 47 77 62 51 46 4b 51 4b 67 42 70 4b 42 62 4b 46 79 67 4d 4b 6c 79 62 50 77 62 4b 4d 51 62 6e 62 4a 76 62 50 51 54 58 43 4b 50 62 42 44 57 4b 4e 34 39 62 65 39 42 43 62 78 31 59 59 54 66 34 44 2d 54 62 54 44 36 45 4b 62 59 77 39 62 50 34 44 50 54 33 4d 44 65 33 62 6d 71 45 76 62 62 75 62 6a 59 2d 49 31 42 67 31 4c 55 6e 53 48 50 62 36 67 34 42 77 4c 79 4b 5a 6a 62 42 52 6a 68 38 31 6b 70 4b 58 25 32 62 62 54 46 62 58 34 5a 62 76 62 2d 4d 6d 6a 62 62 59 4b 76 54 41 4d 33 4b 72 62 42 4d 62 50 49 54 4f 64 33 4b 64 76 46 44 62 4e 46 62 38 76 6d 71 58 54 6b 62 64 50 4b 48 2b 35 39 44 65 44 4b 64 6a 4b 45 33 46 62 24 2d 4b 62 79 73 4a 6e 49 4d 62 34 6e 4b Data Ascii: v_8b9dff303c257c94=dW3DXD$DUDgDhDqwbGwbQFKQKgBpKBbKFygMKlybPwbKMQbnbJvbPQTXCKPbBDWKN49be9BCbx1YYTf4D-TbTD6EKbYw9bP4DPT3MDe3bmqEvbbubjY-I1Bg1LUnSHPb6g4BwLyKZjbBRjh81kpKX%2bbTFbX4Zbvb-MmjbbYKvTAM3KrbBMbPITOd3KdvFDbNFb8vmqXTkbdPKH+59DeDKdjKE3Fb$-KbysJnIMb4nK
2024-08-27 18:06:42 UTC	747	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:06:42 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 151488 Connection: close cf-chl-gen: VGI7oR2mADmBiOqoL8b+2J6dolD7Ofi/3VVctXwIWq2Y+hDXJE3MEZJixsSnwmRDyQ6BpjNLwbly6dq9ll4R2H7We6pTFP2VXJiFqi/FaamKRJSXZYthkuRMdMU3ItcaZFMygm5TXXZRw0oj2j78NskQUwCYeu49OWFNEAgbvby3RutEkFjhhLKAqMth/CMx87UlZWJpj01sSB+SgiJiD2gLudd2w3PpuL4IWYsFzy673dSV10B7g/M3QoRWzNFMn/zE7vpFbuXcY5MyCzoUxkTszNbC+0aSEv/Ya6iC//tnN1NhzP6K8/ixHfujTwl46wmYsm8sxaGQL3TZJt3cbHYuRrxxjExhHUFhnjcF+p+sxLdzohn+Vu6KVqPdCyZffEfoD+1Yb7AHmEOziFXKaxtMS/F0K1AOfN1vcmBDl/gllLPFsqkQSRhwKO+kBljTNHpjbXspbsfongHLSyOx3PVqS//trt33cnoRW0MfmfadPbw=$6It/5RkmsABYtfKr Server: cloudflare CF-RAY: 8b9dff3bbaf94372-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:42 UTC	622	IN	Data Raw: 6a 34 39 37 67 62 2b 74 67 71 44 48 73 61 68 2f 76 62 32 6e 6d 34 6e 4c 7a 4a 47 4c 7a 72 43 78 72 38 36 70 70 4e 6a 46 6b 71 37 64 32 4f 47 77 34 35 71 7a 6f 72 6a 66 32 4d 62 59 34 63 47 6a 34 75 53 38 35 2f 50 78 77 72 37 74 73 73 37 50 36 75 6e 51 32 76 37 4c 38 37 72 69 34 76 66 34 2b 76 45 42 41 2f 58 42 33 77 44 4b 44 65 63 49 30 63 55 47 41 64 4c 75 44 4e 48 61 39 4e 6b 4c 44 78 6e 71 45 52 6b 59 34 78 41 47 2b 67 55 71 38 67 63 4a 36 50 59 4c 44 53 34 48 49 67 45 31 43 43 67 78 38 79 38 39 50 66 4d 38 46 44 49 54 52 42 67 32 47 55 56 43 51 30 63 38 4c 45 35 4c 4b 55 77 4f 54 67 78 41 48 67 67 54 4b 6c 4e 53 46 56 78 4b 55 44 39 55 55 46 4e 44 4d 6b 4a 61 52 79 42 6b 56 30 70 68 53 47 4a 45 59 7a 35 70 50 47 35 31 55 54 39 47 56 44 70 51 56 46 5a Data Ascii: j497gb+tgqDHsah/vb2nm4nLzJGLzrCxr86ppNjFkq7d2OGw45qzorjf2MbY4cGj4uS85/Pxwr7tss7P6unQ2v7L87ri4vf4+vEBA/XB3wDKDecI0cUGAdLuDNHa9NkLDxnqERkY4xAG+gUq8gcJ6PYLDS4HIgE1CCgx8y89PfM8FDITRBg2GUVCQ0c8LE5LKUwOTgxAHggTKlNSFVxKUD9UUFNDMkJaRyBkV0phSGJEYz5pPG51UT9GVDpQVFZ
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 35 6d 55 34 2b 52 59 5a 53 53 56 46 4f 46 65 70 5a 39 62 47 71 43 65 48 46 74 6b 47 42 30 6d 4a 79 4c 67 58 57 69 69 35 6d 4e 5a 4c 4b 49 62 62 4f 68 63 70 65 46 75 58 4f 59 68 70 36 4a 73 33 71 4c 76 5a 50 45 77 72 2b 2f 68 62 2f 41 79 61 6d 62 6d 4d 58 4b 77 73 65 74 74 71 62 52 73 5a 69 62 76 4b 69 74 75 4b 2f 63 7a 74 61 78 6f 62 2f 63 76 63 58 48 34 4b 57 35 36 4c 76 49 35 36 37 45 76 71 2b 31 7a 72 58 69 30 66 48 77 39 38 38 41 79 39 54 36 2b 4f 33 6a 30 4e 51 46 42 67 67 45 31 77 76 6e 41 78 4c 70 7a 2b 6b 47 30 4f 51 41 43 75 2f 57 39 2b 6e 74 49 50 7a 72 46 2f 6e 68 2f 4f 58 75 32 65 67 49 43 50 54 73 2b 79 66 37 42 65 33 79 4b 65 73 52 4e 76 51 35 38 51 6b 33 38 68 38 66 4c 6a 4e 41 51 41 38 75 51 6a 55 38 50 54 63 45 51 78 6f 4a 49 43 51 52 4c Data Ascii: 5mU4+RYZSSVFOFepZ9bGqCeHFtkGB0mJyLgXWii5mNZLKIbbOhcpeFuXOYhp6Js3qLvZPEwr+/hb/AyambmMXKwsettqbRsZibvKituK/cztaxob/cvcXH4KW56LvI567Evq+1zrXi0fHw988Ay9T6+O3j0NQFBggE1wvnAxLpz+kG0OQACu/W9+ntIPzrF/nh/OXu2egICPTs+yf7Be3yKesRNvQ58Qk38h8fLjNAQA8uQjU8PTcEQxoJICQRL
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 35 59 70 52 63 6e 59 68 76 61 5a 68 65 58 70 46 2f 58 47 47 6b 66 35 75 54 71 6d 71 46 73 47 31 73 71 35 31 76 63 5a 4b 55 68 6e 47 37 70 33 65 33 6d 4b 71 70 71 5a 74 2b 66 63 43 64 6e 37 2b 64 69 59 4c 4e 6d 4a 69 70 78 4d 6a 41 6b 35 2f 52 31 4b 4c 48 78 64 57 31 79 4b 75 64 72 64 62 42 73 73 48 44 74 64 47 6a 6d 71 44 47 32 64 2b 37 6f 4f 72 47 38 4b 6e 30 78 4f 50 47 73 63 37 36 7a 72 66 4d 2f 63 37 56 76 37 72 31 2f 4e 66 39 7a 2b 50 54 34 2b 6a 6b 41 67 67 41 7a 51 55 42 79 78 44 54 2f 67 34 5a 41 77 6b 49 2b 67 59 64 46 77 77 65 49 52 38 4d 48 42 34 66 35 53 45 63 46 2f 34 65 47 77 54 36 37 79 33 70 49 53 6f 66 45 4f 30 77 39 75 77 33 4a 69 33 33 47 68 6f 39 44 67 37 38 4d 53 59 53 41 51 70 41 4c 45 73 4d 55 43 34 4b 4f 31 51 69 48 53 70 41 49 6c Data Ascii: 5YpRcnYhvaZheXpF/XGGkf5uTqmqFsG1sq51vcZKUhnG7p3e3mKqpqZt+fcCdn7+diYLNmJipxMjAk5/R1KLHxdW1yKudrdbBssHDtdGjmqDG2d+7oOrG8Kn0xOPGsc76zrfM/c7Vv7r1/Nf9z+PT4+jkAggAzQUByxDT/g4ZAwkI+gYdFwweIR8MHB4f5SEcF/4eGwT67y3pISofEO0w9uw3Ji33Gho9Dg78MSYSAQpALEsMUC4KO1QiHSpAIl
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 65 6e 57 4f 67 71 52 75 68 56 36 6f 65 6c 79 4b 6e 59 78 33 6a 58 69 61 6b 6d 56 75 70 71 64 70 71 5a 71 5a 74 4c 79 54 65 58 79 74 65 59 79 50 6a 4a 2b 57 6d 5a 57 53 6f 70 6d 57 6c 63 65 6b 7a 39 48 53 76 38 75 77 69 4d 43 74 70 71 76 55 70 62 65 76 79 70 37 52 30 38 43 73 78 62 44 6b 34 72 76 4c 79 38 54 6d 34 39 36 74 33 38 48 50 78 74 43 32 73 63 62 51 75 73 4f 7a 2b 39 76 33 2b 66 45 42 35 4e 6e 51 41 51 62 45 75 38 48 5a 36 64 6e 41 79 66 44 78 30 4d 34 54 30 64 58 4f 42 63 73 4a 47 41 62 61 47 51 33 71 49 65 45 4f 2b 66 37 64 46 4f 63 6d 47 51 66 33 4c 51 6f 77 41 79 41 49 4a 78 41 33 43 52 45 36 4b 2f 4d 6c 45 68 51 49 4f 42 67 33 45 45 4d 6d 46 52 55 35 4b 68 67 59 51 79 78 43 47 45 31 4e 4f 69 70 45 56 69 34 4a 4c 31 52 52 44 52 70 5a 55 78 55 Data Ascii: enWOgqRuhV6oelyKnYx3jXiakmVupqdpqZqZtLyTeXyteYyPjJ+WmZWSopmWlcekz9HSv8uwiMCtpqvUpbevyp7R08CsxbDk4rvLy8Tm496t38HPxtC2scbQusOz+9v3+fEB5NnQAQbEu8HZ6dnAyfDx0M4T0dXOBcsJGAbaGQ3qIeEO+f7dFOcmGQf3LQowAyAIJxA3CRE6K/MlEhQIOBg3EEMmFRU5KhgYQyxCGE1NOipEVi4JL1RRDRpZUxU
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 49 4e 2b 69 58 32 63 69 49 74 70 6d 36 56 75 6a 70 39 71 63 34 71 56 6c 36 4a 36 65 48 6d 65 6e 4b 31 35 6b 70 75 43 6f 6f 36 38 78 70 2b 41 6b 35 6d 30 71 72 62 4b 69 4b 6d 53 70 59 32 71 70 36 6d 54 7a 4d 4b 71 6c 38 6a 61 6d 4c 37 66 79 72 4b 39 34 39 58 54 78 64 72 72 78 2b 6a 62 35 4f 61 37 76 39 47 39 31 63 43 31 39 4d 48 33 73 39 71 75 32 62 53 36 7a 4d 48 50 33 65 2f 53 39 64 76 69 32 4f 76 55 2b 74 6a 6f 41 63 4c 4b 78 41 76 4c 33 75 6a 31 43 76 6b 4c 34 77 37 74 37 41 41 64 38 64 67 50 39 78 59 47 48 79 44 62 4b 77 6b 49 4a 51 76 2b 35 67 34 79 48 69 55 52 42 41 41 6c 47 41 34 4a 4e 67 63 36 46 7a 6f 64 50 76 6f 58 52 54 41 57 47 53 70 47 46 77 77 63 50 30 51 66 44 41 70 4c 53 45 51 71 4c 44 6c 58 52 56 6c 51 54 68 64 62 56 6b 49 30 4f 43 55 77 Data Ascii: IN+iX2ciItpm6Vujp9qc4qVl6J6eHmenK15kpuCoo68xp+Ak5m0qrbKiKmSpY2qp6mTzMKql8jamL7fyrK949XTxdrrx+jb5Oa7v9G91cC19MH3s9qu2bS6zMHP3e/S9dvi2OvU+tjoAcLKxAvL3uj1CvkL4w7t7AAd8dgP9xYGHyDbKwkIJQv+5g4yHiURBAAlGA4JNgc6FzodPvoXRTAWGSpGFwwcP0QfDApLSEQqLDlXRVlQThdbVkI0OCUw
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 53 61 67 5a 79 4d 65 33 2b 49 69 70 42 7a 63 35 71 45 73 37 32 59 73 4b 39 36 75 71 32 44 67 37 53 44 6b 35 58 49 6e 49 53 4a 79 38 36 59 7a 74 47 7a 71 4d 71 4d 73 4c 57 33 78 64 72 4e 6c 72 4b 72 7a 4e 43 72 73 74 33 53 35 4e 43 2b 33 73 54 45 32 37 61 71 75 4d 2f 4b 76 39 37 67 76 62 58 46 30 39 6e 71 77 2f 6a 46 79 2f 43 38 75 64 54 67 37 75 4d 42 43 41 51 4b 42 50 37 4b 44 75 63 51 44 4e 7a 76 41 38 6e 38 37 75 58 78 39 66 58 6e 2b 66 51 50 31 74 62 37 37 66 50 74 41 66 48 69 2b 39 38 41 4b 53 4d 65 41 53 4d 6c 4c 43 6b 62 4a 53 72 79 49 79 4d 30 39 78 77 73 4e 42 45 72 4b 6a 6b 72 4b 7a 55 36 4a 30 59 34 4b 51 67 5a 43 45 51 4b 44 45 49 77 4a 55 73 2f 55 54 38 34 44 6c 41 59 54 78 68 56 47 7a 31 56 51 56 73 77 58 46 30 32 59 31 64 59 53 55 78 71 56 Data Ascii: SagZyMe3+IipBzc5qEs72YsK96uq2Dg7SDk5XInISJy86YztGzqMqMsLW3xdrNlrKrzNCrst3S5NC+3sTE27aquM/Kv97gvbXF09nqw/jFy/C8udTg7uMBCAQKBP7KDucQDNzvA8n87uXx9fXn+fQP1tb77fPtAfHi+98AKSMeASMlLCkbJSryIyM09xwsNBErKjkrKzU6J0Y4KQgZCEQKDEIwJUs/UT84DlAYTxhVGz1VQVswXF02Y1dYSUxqV
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 76 67 61 57 69 6f 5a 4b 56 68 5a 69 4a 69 62 2b 62 77 72 4b 53 66 37 69 75 6f 71 53 4a 6d 62 75 45 6f 63 4f 49 69 70 6e 42 72 49 37 57 7a 70 54 4b 6c 4e 4b 78 7a 5a 72 55 76 74 65 31 76 35 75 66 35 4b 50 67 34 65 4b 34 36 4f 4f 2f 36 74 2f 6e 77 38 69 71 77 38 54 65 72 38 33 34 78 72 4c 50 79 50 69 33 30 76 48 68 31 4f 54 65 37 67 59 49 34 66 37 70 2b 2b 33 36 37 51 62 79 37 39 49 52 44 51 62 58 44 52 41 48 2b 78 41 56 39 41 6f 52 32 39 54 79 47 52 49 5a 46 53 45 57 35 2b 59 58 35 68 41 45 36 4f 30 73 43 67 49 6b 42 43 6f 35 47 77 67 6f 43 68 63 33 38 52 67 64 2f 68 45 66 4a 6a 59 51 4a 69 55 47 4f 43 41 4c 4a 6a 31 49 43 68 4d 51 4e 45 52 58 49 52 49 30 50 44 46 54 48 54 70 61 55 79 42 4d 58 55 31 6c 4a 31 67 2f 4b 6a 31 6f 4b 31 31 6b 51 31 31 65 4a 58 Data Ascii: vgaWioZKVhZiJib+bwrKSf7iuoqSJmbuEocOIipnBrI7WzpTKlNKxzZrUvte1v5uf5KPg4eK46OO/6t/nw8iqw8Ter834xrLPyPi30vHh1OTe7gYI4f7p++367Qby79IRDQbXDRAH+xAV9AoR29TyGRIZFSEW5+YX5hAE6O0sCgIkBCo5GwgoChc38Rgd/hEfJjYQJiUGOCALJj1IChMQNERXIRI0PDFTHTpaUyBMXU1lJ1g/Kj1oK11kQ11eJX
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 6b 5a 61 31 6c 71 65 74 76 36 36 76 6a 61 36 6a 75 71 4c 42 70 59 71 46 76 4d 72 47 72 61 72 4a 7a 37 33 52 6f 38 6a 5a 74 61 7a 58 72 39 7a 65 74 64 76 66 73 70 7a 54 72 37 4b 6e 70 37 66 4b 36 64 6e 73 36 38 72 50 33 75 43 73 35 66 62 50 30 2b 66 4c 39 75 7a 47 76 4c 66 66 30 76 50 61 31 73 54 6b 41 39 76 64 41 4e 49 48 42 63 72 69 34 77 48 68 38 73 34 4b 37 51 73 47 34 74 6b 46 36 75 37 72 42 39 48 75 39 74 72 36 33 4f 45 56 45 42 72 35 43 68 38 63 44 75 67 71 49 69 6b 43 4b 52 62 75 4b 51 34 56 42 6a 77 4e 2b 43 38 51 4d 7a 4d 37 4b 2f 74 41 4c 78 45 7a 52 45 49 68 4a 44 34 33 47 54 74 4b 49 51 77 50 55 43 68 58 4c 31 52 53 4d 52 4e 58 4c 78 67 34 55 6b 74 54 56 46 74 50 52 57 5a 68 4f 31 64 71 61 45 42 76 59 47 4e 44 55 53 39 72 62 54 42 50 64 48 4a Data Ascii: kZa1lqetv66vja6juqLBpYqFvMrGrarJz73Ro8jZtazXr9zetdvfspzTr7Knp7fK6dns68rP3uCs5fbP0+fL9uzGvLff0vPa1sTkA9vdANIHBcri4wHh8s4K7QsG4tkF6u7rB9Hu9tr63OEVEBr5Ch8cDugqIikCKRbuKQ4VBjwN+C8QMzM7K/tALxEzREIhJD43GTtKIQwPUChXL1RSMRNXLxg4UktTVFtPRWZhO1dqaEBvYGNDUS9rbTBPdHJ
2024-08-27 18:06:42 UTC	1369	IN	Data Raw: 70 4f 56 77 73 43 56 78 73 64 37 6c 72 65 2b 7a 4b 4b 71 75 59 6d 64 75 38 4b 55 7a 4a 2b 33 70 74 76 62 78 73 58 59 6c 2b 43 32 6e 4f 54 46 33 36 43 2f 35 73 69 36 71 2b 61 6d 31 2b 53 71 78 74 48 52 39 4f 62 55 77 75 65 34 74 73 50 77 38 76 33 4f 41 65 2f 50 30 4e 61 38 7a 77 6a 6e 35 77 44 70 31 39 6e 39 42 63 7a 4f 42 67 37 53 45 78 51 59 79 67 66 6c 44 64 7a 64 48 52 44 74 48 68 2f 68 47 67 62 35 47 68 77 54 4b 41 6e 30 2f 66 67 48 4a 53 6b 49 35 66 77 79 4d 54 55 31 39 79 73 33 4f 54 63 56 4c 7a 6f 72 47 55 50 39 4f 51 59 43 51 77 51 69 4e 69 4d 68 50 79 70 4b 4f 6a 39 52 54 52 38 55 4a 68 56 4e 52 55 59 58 4c 44 67 72 51 6c 5a 69 59 55 30 65 49 79 46 44 52 79 64 6b 54 57 4a 75 61 6d 73 78 61 6d 42 31 4e 56 4e 6f 55 47 68 6f 4c 6a 52 30 66 31 49 34 Data Ascii: pOVwsCVxsd7lre+zKKquYmdu8KUzJ+3ptvbxsXYl+C2nOTF36C/5si6q+am1+SqxtHR9ObUwue4tsPw8v3OAe/P0Na8zwjn5wDp19n9BczOBg7SExQYygflDdzdHRDtHh/hGgb5GhwTKAn0/fgHJSkI5fwyMTU19ys3OTcVLzorGUP9OQYCQwQiNiMhPypKOj9RTR8UJhVNRUYXLDgrQlZiYU0eIyFDRydkTWJuamsxamB1NVNoUGhoLjR0f1I4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49730	104.18.94.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:43 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1551955146:1724779460:S8hevjRG-pPNv9fILcmjlicunHEMlWb-gIhGxGWCUgU/8b9dff303c257c94/41e7ec57f580fdd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:43 UTC	379	IN	HTTP/1.1 404 Not Found Date: Tue, 27 Aug 2024 18:06:43 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: vwrDZvLgP2k10vyQ1Vhc8oJpX1DLoUctj4s=$4wtWHz0I57ybeLOj cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8b9dff41fbde42c1-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:43 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49733	104.18.95.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:45 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8b9dff303c257c94/1724782002561/5c91b52924fe45452019fec6d584871061755f6bc465156f893751f28a58fe66/oJwCedlV4oz_aMK HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:45 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 27 Aug 2024 18:06:45 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-08-27 18:06:45 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 58 4a 47 31 4b 53 54 2d 52 55 55 67 47 66 37 47 31 59 53 48 45 47 46 31 58 32 76 45 5a 52 56 76 69 54 64 52 38 6f 70 59 5f 6d 59 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gXJG1KST-RUUgGf7G1YSHEGF1X2vEZRVviTdR8opY_mYAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-08-27 18:06:45 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49737	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:46 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=B3PZfKzHNmcUX1d&MD=887pveRe HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-27 18:06:46 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: b81a1eba-cc5c-4927-99de-cec525aef6c4 MS-RequestId: b5ea6d1d-df82-4908-85b6-7deac30afac9 MS-CV: ZZEY4uPjpUar3rX4.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 27 Aug 2024 18:06:45 GMT Connection: close Content-Length: 24490
2024-08-27 18:06:46 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-08-27 18:06:46 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49739	104.18.95.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:46 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8b9dff303c257c94/1724782002566/Z5BWo-8suzd4vYL HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:46 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:06:46 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8b9dff553dde0f77-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:46 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 23 08 02 00 00 00 12 7f 1d 35 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR#5IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49744	104.18.94.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:47 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8b9dff303c257c94/1724782002566/Z5BWo-8suzd4vYL HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:47 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:06:47 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8b9dff59bccc0ce5-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:47 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 23 08 02 00 00 00 12 7f 1d 35 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR#5IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49743	104.18.95.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:47 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1551955146:1724779460:S8hevjRG-pPNv9fILcmjlicunHEMlWb-gIhGxGWCUgU/8b9dff303c257c94/41e7ec57f580fdd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32081 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 41e7ec57f580fdd sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:47 UTC	16384	OUT	Data Raw: 76 5f 38 62 39 64 66 66 33 30 33 63 32 35 37 63 39 34 3d 64 57 33 44 48 36 4b 4d 6b 78 51 34 57 24 54 62 6d 62 6d 34 33 4b 55 4b 43 62 47 62 49 39 24 4d 54 62 75 62 79 39 36 67 4b 47 42 62 58 39 79 79 68 4b 63 58 30 62 50 77 62 4b 65 62 6a 62 4b 39 79 41 62 76 78 44 36 63 62 54 46 42 78 6c 79 62 45 79 4b 6c 62 36 70 54 77 30 79 2d 33 4b 6d 71 62 30 43 45 44 4d 62 4b 75 51 62 45 62 64 33 62 37 62 24 33 4b 52 62 4b 61 39 67 72 63 39 62 41 63 57 38 64 4b 4b 70 6b 62 6c 58 4b 59 58 68 43 24 30 62 36 31 52 34 64 76 45 58 51 44 58 34 42 43 42 39 25 32 62 65 55 62 36 45 2d 34 50 36 42 35 34 56 79 62 51 6d 33 62 63 31 39 30 58 31 30 62 4b 46 4b 42 50 2d 2d 24 62 24 30 62 65 61 66 61 54 39 6e 6d 6c 47 31 36 32 77 47 31 41 76 35 68 74 67 6c 65 75 64 2d 7a 33 53 68 Data Ascii: v_8b9dff303c257c94=dW3DH6KMkxQ4W$Tbmbm43KUKCbGbI9$MTbuby96gKGBbX9yyhKcX0bPwbKebjbK9yAbvxD6cbTFBxlybEyKlb6pTw0y-3Kmqb0CEDMbKuQbEbd3b7b$3KRbKa9grc9bAcW8dKKpkblXKYXhC$0b61R4dvEXQDX4BCB9%2beUb6E-4P6B54VybQm3bc190X10bKFKBP--$b$0beafaT9nmlG162wG1Av5htgleud-z3Sh
2024-08-27 18:06:47 UTC	15697	OUT	Data Raw: 75 74 6c 39 54 62 49 62 33 44 2d 39 42 6b 62 6c 2b 50 46 42 51 79 39 2d 63 62 54 62 6a 33 34 51 36 50 62 31 6b 62 39 42 65 62 76 33 47 46 36 36 62 33 44 24 6b 44 31 62 36 44 79 6b 42 6b 62 70 44 59 6b 42 68 62 54 62 50 62 4b 51 62 34 79 79 51 4b 43 62 45 44 78 74 42 6d 62 55 46 36 76 51 39 6b 31 44 65 55 37 44 62 57 44 65 33 42 50 62 65 62 78 33 4b 4d 62 41 46 33 57 4b 4b 62 45 39 47 59 34 44 4b 5a 33 78 39 42 55 62 33 66 62 39 62 6b 39 71 62 4b 44 42 34 44 4f 62 59 39 36 43 62 52 65 2d 78 42 77 50 52 65 42 39 62 41 62 41 51 33 74 62 75 36 6a 67 4b 6a 58 70 62 50 62 36 54 61 4c 62 63 37 75 24 61 44 62 4c 2b 78 51 36 68 39 4f 5a 75 57 42 65 4b 4f 62 34 39 4b 49 41 50 46 33 30 4b 4d 62 37 44 2d 44 4b 53 39 34 79 65 4c 36 78 62 4f 62 54 55 31 59 62 5a 33 36 Data Ascii: utl9TbIb3D-9Bkbl+PFBQy9-cbTbj34Q6Pb1kb9Bebv3GF66b3D$kD1b6DykBkbpDYkBhbTbPbKQb4yyQKCbEDxtBmbUF6vQ9k1DeU7DbWDe3BPbebx3KMbAF3WKKbE9GY4DKZ3x9BUb3fb9bk9qbKDB4DObY96CbRe-xBwPReB9bAbAQ3tbu6jgKjXpbPb6TaLbc7u$aDbL+xQ6h9OZuWBeKOb49KIAPF30KMb7D-DKS94yeL6xbObTU1YbZ36
2024-08-27 18:06:47 UTC	330	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:06:47 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26304 Connection: close cf-chl-gen: Pfm7nv9GUBTxKgLGRSN4M5/Bfm3O2XZJgZztctbICBl5v/mqMcsmHg+UeOfxGCA/2I195Jgq/26qIgrd$M309GdqQesqnkQ8B Server: cloudflare CF-RAY: 8b9dff59ab5f436a-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:47 UTC	1039	IN	Data Raw: 6a 34 39 37 67 62 2b 44 6b 35 54 47 6d 35 75 61 67 61 5a 2b 71 36 65 6a 70 38 2f 52 70 38 6e 54 31 61 71 4f 70 4a 6d 76 70 37 79 58 6c 73 69 37 75 71 4b 7a 35 75 65 38 75 37 72 70 35 4b 79 32 6f 4e 2f 6f 33 65 6e 55 73 65 33 78 79 50 6a 72 37 37 6e 59 38 77 44 39 7a 73 6e 37 31 73 37 30 41 64 4f 2f 31 4e 66 31 2b 39 37 35 42 4e 33 4e 38 2f 51 4b 35 77 2f 52 42 74 45 62 37 39 4c 7a 31 52 6f 4c 44 41 34 52 41 52 49 66 2b 65 55 59 4a 51 33 36 49 43 63 43 2b 69 6f 74 42 77 45 67 46 67 73 56 38 41 34 47 4e 7a 49 49 50 43 6e 37 4e 30 56 46 42 55 51 79 4f 68 55 44 52 6b 64 4c 51 44 42 53 54 79 31 51 45 6c 49 51 52 43 49 4d 46 79 35 58 56 42 6c 67 54 6c 52 44 57 46 52 58 52 7a 5a 47 58 6b 73 6b 61 46 74 4f 5a 55 78 6d 53 47 64 43 62 55 42 79 65 56 56 44 53 6c 67 Data Ascii: j497gb+Dk5TGm5uagaZ+q6ejp8/Rp8nT1aqOpJmvp7yXlsi7uqKz5ue8u7rp5Ky2oN/o3enUse3xyPjr77nY8wD9zsn71s70AdO/1Nf1+975BN3N8/QK5w/RBtEb79Lz1RoLDA4RARIf+eUYJQ36ICcC+iotBwEgFgsV8A4GNzIIPCn7N0VFBUQyOhUDRkdLQDBSTy1QElIQRCIMFy5XVBlgTlRDWFRXRzZGXkskaFtOZUxmSGdCbUByeVVDSlg
2024-08-27 18:06:47 UTC	1369	IN	Data Raw: 62 71 63 54 4e 72 74 4b 61 71 70 53 69 6f 4d 57 31 6a 36 4c 5a 75 36 6a 4e 32 64 61 75 7a 2b 53 78 6e 64 6d 37 73 75 4f 79 77 62 6e 63 37 63 6a 76 75 36 36 2b 35 4b 36 31 77 63 32 32 78 2f 54 35 30 2b 76 59 38 2f 7a 52 33 4d 41 41 2b 2b 41 47 39 41 44 67 44 76 6b 45 33 4d 76 39 44 4f 51 49 2f 51 7a 6b 47 41 4d 51 36 4e 63 54 42 39 6f 50 43 76 6f 65 49 66 45 61 43 50 66 79 44 43 63 6b 42 43 58 68 4d 69 67 42 44 51 55 68 4b 54 62 79 39 2f 4d 35 39 2b 38 78 48 53 41 42 51 69 55 53 50 51 5a 41 41 7a 55 42 4b 78 35 4c 4f 77 70 49 44 79 30 74 44 52 45 74 4a 79 77 54 4b 7a 41 74 46 56 67 57 46 30 39 59 48 54 6c 58 4e 31 68 47 4a 43 74 6e 51 54 6f 38 5a 45 70 68 62 33 56 74 56 48 46 45 5a 47 74 70 5a 46 56 4e 61 48 79 43 4f 46 52 30 59 31 68 5a 50 32 71 45 56 49 Data Ascii: bqcTNrtKaqpSioMW1j6LZu6jN2dauz+Sxndm7suOywbnc7cjvu66+5K61wc22x/T50+vY8/zR3MAA++AG9ADgDvkE3Mv9DOQI/QzkGAMQ6NcTB9oPCvoeIfEaCPfyDCckBCXhMigBDQUhKTby9/M59+8xHSABQiUSPQZAAzUBKx5LOwpIDy0tDREtJywTKzAtFVgWF09YHTlXN1hGJCtnQTo8ZEphb3VtVHFEZGtpZFVNaHyCOFR0Y1hZP2qEVI
2024-08-27 18:06:47 UTC	1369	IN	Data Raw: 31 4c 57 75 77 64 61 6e 74 35 58 58 7a 71 6e 58 31 73 71 54 76 74 32 76 76 4c 6e 55 78 2b 62 68 71 4c 54 68 78 65 4b 73 33 4f 43 37 76 71 76 46 39 4f 47 78 74 38 7a 49 31 75 2b 2b 30 50 7a 43 7a 50 6a 37 76 39 37 33 77 41 66 6d 79 41 30 4a 44 73 76 4e 33 67 62 6e 7a 77 62 67 35 65 58 78 2b 66 33 56 48 66 48 73 44 39 30 43 38 68 63 5a 41 76 59 5a 35 43 77 49 49 4f 41 41 37 69 6e 6b 4d 43 59 66 46 53 38 79 4b 78 6b 53 43 51 30 30 4d 52 51 65 2f 6a 34 35 51 42 51 47 49 69 4d 70 47 79 51 6f 52 79 73 52 53 55 6c 4c 50 55 45 30 4a 78 55 70 46 6a 77 55 56 46 6f 59 54 6b 73 63 52 44 4d 66 4f 7a 4a 59 4e 6b 4d 6e 56 57 63 34 53 58 4a 78 57 32 74 78 4e 45 35 68 4d 48 64 52 4f 6c 4e 4f 54 7a 35 78 59 30 31 2f 50 47 42 6c 64 46 46 63 66 57 64 4b 62 59 39 37 51 32 4e Data Ascii: 1LWuwdant5XXzqnX1sqTvt2vvLnUx+bhqLThxeKs3OC7vqvF9OGxt8zI1u++0PzCzPj7v973wAfmyA0JDsvN3gbnzwbg5eXx+f3VHfHsD90C8hcZAvYZ5CwIIOAA7inkMCYfFS8yKxkSCQ00MRQe/j45QBQGIiMpGyQoRysRSUlLPUE0JxUpFjwUVFoYTkscRDMfOzJYNkMnVWc4SXJxW2txNE5hMHdROlNOTz5xY01/PGBldFFcfWdKbY97Q2N
2024-08-27 18:06:47 UTC	1369	IN	Data Raw: 64 4b 38 6c 61 6d 34 75 4b 37 53 74 39 72 43 32 4a 7a 5a 30 74 37 68 6f 35 37 65 71 71 7a 73 32 37 44 79 38 72 57 30 36 4f 7a 4d 73 63 54 4d 2b 2f 62 2b 31 41 48 52 2b 64 6e 50 39 2f 50 7a 41 4e 50 59 34 77 44 65 33 63 7a 48 41 4f 62 67 46 41 2f 32 35 75 76 59 46 51 63 58 46 41 76 5a 45 41 76 66 48 65 4c 6c 41 2b 62 62 36 75 6e 71 33 79 6b 76 35 2f 37 38 2f 4f 77 4c 39 67 76 77 45 76 45 30 47 54 76 32 39 54 63 42 4e 42 67 43 46 51 4d 2b 4e 68 30 48 4f 55 73 47 49 31 42 52 48 43 59 71 45 6b 49 75 55 55 6f 54 4d 69 64 54 47 30 39 54 48 69 46 6a 55 47 52 63 4a 55 49 67 59 43 6c 55 4b 47 70 58 51 6c 78 74 4d 57 52 67 62 54 42 47 62 6e 41 34 54 6a 68 7a 5a 31 49 39 65 57 78 30 63 48 78 45 57 31 69 41 69 32 6d 46 58 6f 75 44 6a 58 31 70 67 59 4b 48 61 55 36 44 Data Ascii: dK8lam4uK7St9rC2JzZ0t7ho57eqqzs27Dy8rW06OzMscTM+/b+1AHR+dnP9/PzANPY4wDe3czHAObgFA/25uvYFQcXFAvZEAvfHeLlA+bb6unq3ykv5/78/OwL9gvwEvE0GTv29TcBNBgCFQM+Nh0HOUsGI1BRHCYqEkIuUUoTMidTG09THiFjUGRcJUIgYClUKGpXQlxtMWRgbTBGbnA4TjhzZ1I9eWx0cHxEW1iAi2mFXouDjX1pgYKHaU6D
2024-08-27 18:06:47 UTC	1369	IN	Data Raw: 75 34 6e 5a 57 2f 6f 65 50 59 70 63 6e 4b 70 37 37 72 36 4f 65 77 38 4d 62 6b 33 62 58 67 77 62 66 34 7a 62 6e 59 74 65 65 34 37 72 33 62 30 64 72 41 41 4e 38 43 39 50 4b 39 79 38 54 75 44 77 44 48 2f 75 76 77 44 50 4c 76 31 64 6e 37 44 42 77 49 44 4f 34 64 34 4f 4c 68 4a 75 41 52 2f 52 54 7a 44 43 33 71 41 78 67 4b 44 53 30 46 45 65 6f 58 48 78 55 4e 43 2f 59 32 4f 78 66 35 4d 68 45 54 44 6a 4c 39 48 44 49 2b 4b 69 68 4c 46 69 51 6a 48 77 67 6d 55 7a 34 6e 4c 46 52 52 43 68 6c 53 56 55 39 49 58 69 34 36 55 44 49 72 4c 46 4d 36 51 47 56 6f 50 6c 51 33 4f 30 31 44 63 47 70 54 58 32 45 2f 4d 58 4a 70 61 54 70 38 63 54 56 4d 58 6c 74 55 63 48 5a 6a 56 48 64 47 57 46 35 55 50 55 5a 59 58 31 35 4e 63 57 52 52 61 46 4f 46 68 6d 46 4c 62 6f 4e 36 5a 6e 46 63 6d Data Ascii: u4nZW/oePYpcnKp77r6Oew8Mbk3bXgwbf4zbnYtee47r3b0drAAN8C9PK9y8TuDwDH/uvwDPLv1dn7DBwIDO4d4OLhJuAR/RTzDC3qAxgKDS0FEeoXHxUNC/Y2Oxf5MhETDjL9HDI+KihLFiQjHwgmUz4nLFRRChlSVU9IXi46UDIrLFM6QGVoPlQ3O01DcGpTX2E/MXJpaTp8cTVMXltUcHZjVHdGWF5UPUZYX15NcWRRaFOFhmFLboN6ZnFcm
2024-08-27 18:06:47 UTC	1369	IN	Data Raw: 7a 36 61 4f 2f 6f 75 79 6f 37 38 4f 72 71 37 79 75 38 63 6a 41 39 66 6e 50 35 62 62 37 30 62 44 57 37 39 54 64 31 77 54 41 34 66 6b 48 33 4e 51 4b 44 63 6a 70 34 67 48 6c 33 4d 37 51 36 51 67 4a 43 74 51 58 35 78 6e 59 2b 51 34 63 39 2f 7a 61 49 76 6b 6e 4a 75 50 38 36 75 49 73 36 41 6b 75 36 78 49 54 38 77 63 32 4d 6a 6b 4a 38 53 55 4c 4a 66 6f 79 47 50 67 78 4d 42 52 42 50 7a 38 46 52 30 55 65 50 6b 63 61 49 79 30 5a 4b 68 38 2f 4e 53 30 4f 53 79 67 34 54 53 6b 35 4f 30 63 73 4f 6b 77 33 4c 30 41 30 52 31 42 44 58 69 5a 63 53 31 31 51 62 45 46 6c 4d 57 68 4b 5a 30 68 73 53 47 70 4c 62 46 78 76 55 48 52 4d 63 6d 73 2b 57 6d 35 47 59 48 65 45 57 47 78 65 62 6d 31 64 67 48 4a 78 59 59 52 2b 59 33 42 32 55 6d 70 36 69 6d 36 50 65 58 52 34 58 36 56 67 6c 57 Data Ascii: z6aO/ouyo78Orq7yu8cjA9fnP5bb70bDW79Td1wTA4fkH3NQKDcjp4gHl3M7Q6QgJCtQX5xnY+Q4c9/zaIvknJuP86uIs6Aku6xIT8wc2MjkJ8SULJfoyGPgxMBRBPz8FR0UePkcaIy0ZKh8/NS0OSyg4TSk5O0csOkw3L0A0R1BDXiZcS11QbEFlMWhKZ0hsSGpLbFxvUHRMcms+Wm5GYHeEWGxebm1dgHJxYYR+Y3B2Ump6im6PeXR4X6VglW
2024-08-27 18:06:47 UTC	1369	IN	Data Raw: 74 38 76 43 76 50 47 2f 7a 50 62 6b 38 4d 2b 76 30 2b 6e 56 78 74 4b 36 30 4d 34 42 33 75 4c 50 32 74 37 70 77 76 58 62 33 51 7a 4e 39 39 44 62 2f 4f 62 6d 46 39 34 52 38 4f 55 4b 46 76 54 72 39 68 62 32 48 2f 6f 5a 2b 53 63 52 35 76 67 72 46 51 4d 4f 4c 53 6b 64 2f 44 45 64 4c 51 67 32 43 79 7a 71 4e 7a 6f 6d 47 51 73 59 4e 69 6f 51 47 44 6b 64 45 78 38 44 4b 42 4d 57 4e 68 39 50 50 55 59 38 48 44 30 66 48 56 55 68 4c 79 46 59 4c 78 6f 71 46 56 31 56 53 6d 4a 64 47 6a 6c 6a 59 53 49 37 49 7a 39 5a 51 43 56 44 58 54 35 7a 4d 69 35 57 64 58 46 6c 52 58 6c 6c 64 56 42 2b 55 33 51 7a 66 34 4a 75 59 56 4e 67 66 6e 4a 59 59 49 46 6c 57 32 64 4c 63 46 74 65 66 6d 65 58 68 59 36 45 5a 49 56 6e 5a 5a 31 30 61 6c 4f 66 6f 33 74 74 70 48 74 6d 64 6d 47 70 6f 5a 61 Data Ascii: t8vCvPG/zPbk8M+v0+nVxtK60M4B3uLP2t7pwvXb3QzN99Db/ObmF94R8OUKFvTr9hb2H/oZ+ScR5vgrFQMOLSkd/DEdLQg2CyzqNzomGQsYNioQGDkdEx8DKBMWNh9PPUY8HD0fHVUhLyFYLxoqFV1VSmJdGjljYSI7Iz9ZQCVDXT5zMi5WdXFlRXlldVB+U3Qzf4JuYVNgfnJYYIFlW2dLcFtefmeXhY6EZIVnZZ10alOfo3ttpHtmdmGpoZa
2024-08-27 18:06:47 UTC	1369	IN	Data Raw: 50 54 68 79 73 66 35 35 50 54 4e 2b 76 6a 30 7a 51 4c 73 39 37 71 38 41 66 4f 2b 43 73 6b 4a 33 77 37 69 36 74 77 52 35 75 37 75 46 65 6f 42 35 42 6f 56 43 65 6f 65 47 4e 33 76 49 75 4c 32 38 43 58 36 41 2f 6b 71 46 51 76 36 4c 69 6b 74 2f 4f 67 74 44 77 49 32 43 79 54 71 4f 76 6b 58 44 7a 30 54 4f 52 74 42 46 7a 30 52 51 30 46 42 46 6b 6f 66 52 52 35 4f 53 69 4d 64 55 6a 31 52 4a 56 5a 42 4e 79 74 5a 47 52 6f 75 46 56 6b 2f 4c 57 46 64 58 54 4e 6c 55 56 55 37 61 6c 51 69 52 32 31 5a 54 7a 31 76 4d 6c 4e 42 64 6a 5a 53 4c 33 64 72 55 31 64 54 61 56 52 73 67 55 4a 35 56 6f 4e 47 63 56 61 4a 64 59 46 62 6a 58 70 6a 58 70 46 53 6a 57 65 56 56 6e 64 72 6d 57 2b 52 62 6c 57 5a 6a 57 2b 68 59 6f 4a 62 70 61 47 68 64 61 71 6c 68 34 65 74 67 36 57 43 73 5a 32 73 Data Ascii: PThysf55PTN+vj0zQLs97q8AfO+CskJ3w7i6twR5u7uFeoB5BoVCeoeGN3vIuL28CX6A/kqFQv6Likt/OgtDwI2CyTqOvkXDz0TORtBFz0RQ0FBFkofRR5OSiMdUj1RJVZBNytZGRouFVk/LWFdXTNlUVU7alQiR21ZTz1vMlNBdjZSL3drU1dTaVRsgUJ5VoNGcVaJdYFbjXpjXpFSjWeVVndrmW+RblWZjW+hYoJbpaGhdaqlh4etg6WCsZ2s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49742	23.203.104.175	443	7012	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:47 UTC	390	OUT	GET /onboarding/smskillreader.txt HTTP/1.1 Host: armmf.adobe.com Connection: keep-alive Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br
2024-08-27 18:06:47 UTC	247	IN	HTTP/1.1 200 OK Server: Apache Last-Modified: Mon, 01 May 2023 15:02:33 GMT ETag: "78-5faa31cce96da" Accept-Ranges: bytes Content-Length: 120 Content-Type: text/plain; charset=UTF-8 Date: Tue, 27 Aug 2024 18:06:47 GMT Connection: close
2024-08-27 18:06:47 UTC	120	IN	Data Raw: 46 69 6c 65 20 74 68 61 74 20 61 63 74 73 20 6c 69 6b 65 20 61 20 4b 69 6c 6c 20 73 77 69 74 63 68 20 66 6f 72 20 53 4d 53 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 6e 20 52 65 61 64 65 72 2e 20 44 65 6c 65 74 65 20 74 68 69 73 20 66 69 6c 65 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6b 69 6c 6c 20 73 77 69 74 63 68 20 69 6e 20 52 65 61 64 65 72 2e Data Ascii: File that acts like a Kill switch for SMS functionality in Reader. Delete this file to enable the kill switch in Reader.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49746	104.18.94.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:48 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1551955146:1724779460:S8hevjRG-pPNv9fILcmjlicunHEMlWb-gIhGxGWCUgU/8b9dff303c257c94/41e7ec57f580fdd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:48 UTC	379	IN	HTTP/1.1 404 Not Found Date: Tue, 27 Aug 2024 18:06:48 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: qWdxeswoheF8yz3Fft6GdBoVB+iHKcGDn7s=$eeCJHR9MGDLuJeGf Server: cloudflare CF-RAY: 8b9dff5efcdc7cf3-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:48 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49749	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:50 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-27 18:06:50 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF17) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=77616 Date: Tue, 27 Aug 2024 18:06:50 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49748	20.190.160.17	443

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:50 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-08-27 18:06:50 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-27 18:06:50 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 27 Aug 2024 18:05:50 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BL2 x-ms-request-id: 644d4f89-6362-4930-98ad-9fb37fb50b67 PPServer: PPV: 30 H: BL02EPF0001DA44 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 27 Aug 2024 18:06:49 GMT Connection: close Content-Length: 11389
2024-08-27 18:06:50 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49751	104.18.95.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:51 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1551955146:1724779460:S8hevjRG-pPNv9fILcmjlicunHEMlWb-gIhGxGWCUgU/8b9dff303c257c94/41e7ec57f580fdd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34455 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 41e7ec57f580fdd sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ul3kq/0x4AAAAAAAeTpIyb_xx_MePH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:51 UTC	16384	OUT	Data Raw: 76 5f 38 62 39 64 66 66 33 30 33 63 32 35 37 63 39 34 3d 64 57 33 44 48 36 4b 4d 6b 78 51 34 57 24 54 62 6d 62 6d 34 33 4b 55 4b 43 62 47 62 49 39 24 4d 54 62 75 62 79 39 36 67 4b 47 42 62 58 39 79 79 68 4b 63 58 30 62 50 77 62 4b 65 62 6a 62 4b 39 79 41 62 76 78 44 36 63 62 54 46 42 78 6c 79 62 45 79 4b 6c 62 36 70 54 77 30 79 2d 33 4b 6d 71 62 30 43 45 44 4d 62 4b 75 51 62 45 62 64 33 62 37 62 24 33 4b 52 62 4b 61 39 67 72 63 39 62 41 63 57 38 64 4b 4b 70 6b 62 6c 58 4b 59 58 68 43 24 30 62 36 31 52 34 64 76 45 58 51 44 58 34 42 43 42 39 25 32 62 65 55 62 36 45 2d 34 50 36 42 35 34 56 79 62 51 6d 33 62 63 31 39 30 58 31 30 62 4b 46 4b 42 50 2d 2d 24 62 24 30 62 65 61 66 61 54 39 6e 6d 6c 47 31 36 32 77 47 31 41 76 35 68 74 67 6c 65 75 64 2d 7a 33 53 68 Data Ascii: v_8b9dff303c257c94=dW3DH6KMkxQ4W$Tbmbm43KUKCbGbI9$MTbuby96gKGBbX9yyhKcX0bPwbKebjbK9yAbvxD6cbTFBxlybEyKlb6pTw0y-3Kmqb0CEDMbKuQbEbd3b7b$3KRbKa9grc9bAcW8dKKpkblXKYXhC$0b61R4dvEXQDX4BCB9%2beUb6E-4P6B54VybQm3bc190X10bKFKBP--$b$0beafaT9nmlG162wG1Av5htgleud-z3Sh
2024-08-27 18:06:51 UTC	16384	OUT	Data Raw: 75 74 6c 39 54 62 49 62 33 44 2d 39 42 6b 62 6c 2b 50 46 42 51 79 39 2d 63 62 54 62 6a 33 34 51 36 50 62 31 6b 62 39 42 65 62 76 33 47 46 36 36 62 33 44 24 6b 44 31 62 36 44 79 6b 42 6b 62 70 44 59 6b 42 68 62 54 62 50 62 4b 51 62 34 79 79 51 4b 43 62 45 44 78 74 42 6d 62 55 46 36 76 51 39 6b 31 44 65 55 37 44 62 57 44 65 33 42 50 62 65 62 78 33 4b 4d 62 41 46 33 57 4b 4b 62 45 39 47 59 34 44 4b 5a 33 78 39 42 55 62 33 66 62 39 62 6b 39 71 62 4b 44 42 34 44 4f 62 59 39 36 43 62 52 65 2d 78 42 77 50 52 65 42 39 62 41 62 41 51 33 74 62 75 36 6a 67 4b 6a 58 70 62 50 62 36 54 61 4c 62 63 37 75 24 61 44 62 4c 2b 78 51 36 68 39 4f 5a 75 57 42 65 4b 4f 62 34 39 4b 49 41 50 46 33 30 4b 4d 62 37 44 2d 44 4b 53 39 34 79 65 4c 36 78 62 4f 62 54 55 31 59 62 5a 33 36 Data Ascii: utl9TbIb3D-9Bkbl+PFBQy9-cbTbj34Q6Pb1kb9Bebv3GF66b3D$kD1b6DykBkbpDYkBhbTbPbKQb4yyQKCbEDxtBmbUF6vQ9k1DeU7DbWDe3BPbebx3KMbAF3WKKbE9GY4DKZ3x9BUb3fb9bk9qbKDB4DObY96CbRe-xBwPReB9bAbAQ3tbu6jgKjXpbPb6TaLbc7u$aDbL+xQ6h9OZuWBeKOb49KIAPF30KMb7D-DKS94yeL6xbObTU1YbZ36
2024-08-27 18:06:51 UTC	1687	OUT	Data Raw: 37 78 5a 34 4a 34 24 33 50 48 4e 63 62 33 50 4d 50 35 4d 36 56 4e 41 24 6c 4e 36 51 58 39 4c 62 77 49 62 38 4a 43 62 66 46 4b 4c 56 44 5a 50 76 51 32 77 5a 44 53 33 59 79 4b 70 62 76 7a 4a 37 56 4c 56 77 7a 52 2d 30 37 64 30 33 33 78 50 35 71 73 66 48 54 79 33 35 4e 36 4e 39 42 6a 59 2d 4c 59 71 6f 6f 46 30 56 63 39 36 4e 41 51 6d 39 38 39 57 62 65 55 33 6f 66 43 74 32 70 49 77 65 54 5a 6c 41 62 73 75 7a 47 57 73 52 44 36 51 35 5a 39 4f 65 62 54 71 35 62 62 42 56 68 42 72 62 24 62 62 7a 6e 41 44 2d 41 30 50 77 4a 4e 63 52 65 6b 62 43 54 72 31 6f 51 56 4b 54 6e 79 56 75 44 42 76 79 4a 62 45 76 77 49 2d 45 65 5a 76 78 52 63 33 4b 59 37 4e 36 39 50 56 6b 62 6b 6b 4a 31 4d 64 53 62 44 24 62 42 73 38 37 39 24 45 65 5a 62 39 74 4f 6f 4e 65 77 50 62 2d 38 52 51 Data Ascii: 7xZ4J4$3PHNcb3PMP5M6VNA$lN6QX9LbwIb8JCbfFKLVDZPvQ2wZDS3YyKpbvzJ7VLVwzR-07d033xP5qsfHTy35N6N9BjY-LYqooF0Vc96NAQm989WbeU3ofCt2pIweTZlAbsuzGWsRD6Q5Z9OebTq5bbBVhBrb$bbznAD-A0PwJNcRekbCTr1oQVKTnyVuDBvyJbEvwI-EeZvxRc3KY7N69PVkbkkJ1MdSbD$bBs879$EeZb9tOoNewPb-8RQ
2024-08-27 18:06:51 UTC	378	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:06:51 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 3416 Connection: close cf-chl-out: xrQjCZoPdcfumYma/urzrwK38U2IhL2HWivT3FWXQDgDuGImrIuihItxmOT3eqHIYyIZqv+N9bZEPv20gubMe+fWkbHS3vkqD1PBi9zXSLllDzlZEBmMHITbbUyfd4CVx6JV/BvaF2U/OLQj7L45SBtuOxmhWVNKsMXfD8mrwRpCRcIYQRXBzd8xk64UB8w1ULfSkyj2h38+FDuLjuHA$bb3bEVjd9hQ78b0K
2024-08-27 18:06:51 UTC	1115	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 64 64 70 77 6d 2b 65 79 67 5a 62 72 7a 50 79 48 64 34 59 64 63 37 4f 4a 42 4d 79 38 63 55 61 4a 78 30 30 52 47 6e 52 37 35 4f 4b 62 54 4e 47 70 64 31 2f 7a 6a 55 76 31 45 6a 62 44 47 2b 51 49 66 69 77 6a 7a 5a 66 77 79 7a 68 79 4a 4f 48 76 6f 4d 45 6b 35 69 75 50 66 62 2f 6d 2f 43 4a 58 48 56 71 50 37 39 4c 48 59 52 67 35 43 53 77 4b 59 7a 6c 34 4f 6d 49 48 70 71 71 30 6f 30 62 69 71 49 50 47 4a 63 54 70 68 33 4d 73 59 76 69 43 58 4b 6a 37 6f 4e 49 34 34 51 34 50 6c 6d 38 2f 72 53 61 56 2f 72 46 6f 62 48 70 37 6b 35 61 4e 4e 61 47 2f 76 65 6b 41 4b 36 4c 58 53 79 4f 32 47 4d 4b 6a 34 36 54 58 47 6b 55 66 58 2b 46 71 69 41 78 6f 53 6f 53 31 65 61 56 34 45 45 76 5a 79 78 50 35 36 54 72 74 69 4c 52 6d 4d 65 75 41 6b Data Ascii: cf-chl-out-s: ddpwm+eygZbrzPyHd4Ydc7OJBMy8cUaJx00RGnR75OKbTNGpd1/zjUv1EjbDG+QIfiwjzZfwyzhyJOHvoMEk5iuPfb/m/CJXHVqP79LHYRg5CSwKYzl4OmIHpqq0o0biqIPGJcTph3MsYviCXKj7oNI44Q4Plm8/rSaV/rFobHp7k5aNNaG/vekAK6LXSyO2GMKj46TXGkUfX+FqiAxoSoS1eaV4EEvZyxP56TrtiLRmMeuAk
2024-08-27 18:06:51 UTC	1245	IN	Data Raw: 6a 34 39 37 67 62 2b 44 6b 35 54 47 6d 35 75 61 67 61 5a 2b 71 36 65 6a 75 62 44 52 7a 72 4f 6e 31 4d 4c 54 70 38 7a 4e 73 36 65 63 33 4c 50 53 6f 64 47 6b 72 70 6a 58 34 4e 54 62 34 2b 54 69 33 2b 66 6f 34 4f 66 54 73 65 48 79 34 4e 54 76 2b 2f 6e 4b 79 75 2f 66 2b 37 50 76 34 72 62 62 2f 73 48 44 31 4e 66 31 2b 39 37 72 45 52 44 5a 36 77 58 4f 35 77 2f 52 42 74 48 57 30 66 4d 56 32 68 30 4f 33 51 34 52 41 52 49 66 2b 65 55 59 4a 51 33 36 49 43 63 43 2b 69 6f 74 42 77 45 67 46 67 73 56 4f 67 77 74 43 54 45 52 4c 78 55 41 46 42 34 68 41 42 30 6a 52 51 51 2f 54 55 30 4f 54 55 73 67 48 46 4d 2f 4c 43 6f 7a 56 56 45 76 4c 52 6b 32 58 42 35 64 4e 45 6f 63 46 69 4d 2f 4e 7a 31 41 53 6b 67 35 56 31 70 67 54 6d 4e 75 50 47 5a 4d 54 6d 67 75 4d 55 70 6f 62 46 35 Data Ascii: j497gb+Dk5TGm5uagaZ+q6ejubDRzrOn1MLTp8zNs6ec3LPSodGkrpjX4NTb4+Ti3+fo4OfTseHy4NTv+/nKyu/f+7Pv4rbb/sHD1Nf1+97rERDZ6wXO5w/RBtHW0fMV2h0O3Q4RARIf+eUYJQ36ICcC+iotBwEgFgsVOgwtCTERLxUAFB4hAB0jRQQ/TU0OTUsgHFM/LCozVVEvLRk2XB5dNEocFiM/Nz1ASkg5V1pgTmNuPGZMTmguMUpobF5
2024-08-27 18:06:51 UTC	1369	IN	Data Raw: 32 42 64 57 79 63 70 50 6d 64 43 4f 6b 70 6e 51 45 5a 4e 61 46 5a 33 57 47 6c 63 66 47 64 32 53 33 68 37 65 33 70 77 66 48 74 39 55 6c 78 6c 67 59 69 46 67 55 61 51 5a 34 71 4a 54 55 36 51 6a 32 46 33 6c 59 53 45 57 4a 64 76 62 6e 71 61 68 48 46 37 6f 47 56 36 6d 36 43 6a 6e 4b 4b 6e 70 61 42 2f 71 61 79 47 70 61 79 48 74 34 32 79 6a 5a 71 4a 71 37 52 39 6a 72 75 57 6f 72 61 30 72 36 4b 38 75 35 69 69 71 73 6d 4e 6e 71 50 4a 6a 73 79 75 30 62 66 59 72 4d 2b 74 75 62 62 54 72 70 32 30 76 62 50 59 33 39 2b 6b 6f 63 6a 46 31 4d 72 49 35 4b 76 4f 34 75 76 71 76 63 76 6e 33 38 4c 6c 31 76 48 73 74 2f 58 51 36 39 6e 34 2f 4e 62 4f 41 72 2f 52 35 2f 67 45 39 4e 30 45 43 4e 37 4b 43 64 45 41 36 66 49 4b 47 66 54 32 31 75 62 59 44 50 76 64 48 52 34 61 47 65 41 44 Data Ascii: 2BdWycpPmdCOkpnQEZNaFZ3WGlcfGd2S3h7e3pwfHt9UlxlgYiFgUaQZ4qJTU6Qj2F3lYSEWJdvbnqahHF7oGV6m6CjnKKnpaB/qayGpayHt42yjZqJq7R9jruWora0r6K8u5iiqsmNnqPJjsyu0bfYrM+tubbTrp20vbPY39+kocjF1MrI5KvO4uvqvcvn38Ll1vHst/XQ69n4/NbOAr/R5/gE9N0ECN7KCdEA6fIKGfT21ubYDPvdHR4aGeAD
2024-08-27 18:06:51 UTC	802	IN	Data Raw: 35 63 52 30 6f 76 63 43 30 72 4c 47 4a 31 51 54 42 34 4f 6c 77 34 56 6e 6d 42 51 56 70 39 59 59 4e 48 51 31 61 49 68 57 4e 56 54 58 31 6b 57 55 52 70 5a 35 52 55 54 5a 57 4d 57 58 4e 34 5a 70 74 56 6b 6d 74 55 6e 6d 46 6c 6f 32 64 6a 69 61 75 43 6d 58 68 71 68 33 75 74 61 59 6d 44 69 57 69 4d 70 62 56 7a 74 48 75 64 66 70 4a 36 75 33 75 44 67 72 58 45 65 59 4f 52 79 4d 57 6a 6f 35 65 36 76 63 32 51 30 4d 71 31 6b 4e 4c 5a 70 6f 79 4e 33 62 65 58 7a 4f 48 43 6c 4c 66 44 6c 2b 4f 2b 32 4a 2b 6d 77 62 66 74 74 38 58 64 34 36 2f 75 73 74 44 30 72 66 58 45 73 4e 48 4c 36 37 37 38 79 37 37 43 37 67 62 74 76 74 37 6a 39 38 6e 69 33 72 2f 45 44 51 72 4c 79 67 34 57 36 63 37 58 31 67 2f 5a 42 2f 50 57 33 74 33 62 36 69 4c 56 42 42 66 66 2f 67 67 4b 4b 64 30 5a 33 Data Ascii: 5cR0ovcC0rLGJ1QTB4Olw4VnmBQVp9YYNHQ1aIhWNVTX1kWURpZ5RUTZWMWXN4ZptVkmtUnmFlo2djiauCmXhqh3utaYmDiWiMpbVztHudfpJ6u3uDgrXEeYORyMWjo5e6vc2Q0Mq1kNLZpoyN3beXzOHClLfDl+O+2J+mwbftt8Xd46/ustD0rfXEsNHL6778y77C7gbtvt7j98ni3r/EDQrLyg4W6c7X1g/ZB/PW3t3b6iLVBBff/ggKKd0Z3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49750	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:51 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-27 18:06:51 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=81529 Date: Tue, 27 Aug 2024 18:06:51 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-27 18:06:51 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49752	20.190.160.17	443

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:51 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-08-27 18:06:51 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-27 18:06:52 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 27 Aug 2024 18:05:51 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: d16a96a5-4ada-4cd4-a27c-42f3fe55a806 PPServer: PPV: 30 H: SN1PEPF0002FAB5 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 27 Aug 2024 18:06:51 GMT Connection: close Content-Length: 11389
2024-08-27 18:06:52 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49755	104.18.94.41	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:52 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1551955146:1724779460:S8hevjRG-pPNv9fILcmjlicunHEMlWb-gIhGxGWCUgU/8b9dff303c257c94/41e7ec57f580fdd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:06:52 UTC	379	IN	HTTP/1.1 404 Not Found Date: Tue, 27 Aug 2024 18:06:52 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: DUvLs5byH3ngfLtuSLjWZDPOVDoWA2+d7Qc=$rinYHjuelxHgLDr1 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8b9dff7809654237-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:52 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49754	188.114.97.3	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:52 UTC	842	OUT	GET /pCavcKaS?d=eA5LR9g HTTP/1.1 Host: subcg.tynurserys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://subcg.tynurserys.com/pCavcKaS Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; x-ms-gateway-slice=estsfd
2024-08-27 18:06:52 UTC	611	IN	HTTP/1.1 302 Found Date: Tue, 27 Aug 2024 18:06:52 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://www.tynurserys.com/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=an9kc5YpNYrHC84ukyLIooAqInOnD2A2U1DyGR0tKwx3F8L0S8wVhIpdCwPreR%2FvNtIPWD0Gu1vH0epodmLdCgRulUtfBydgJBPwvl%2BrWsfZO9Jxgyt5cZy7U2w9dpfZ%2F71nQXSEDg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b9dff78292b422f-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:06:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49756	20.190.160.17	443

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:52 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4710 Host: login.live.com
2024-08-27 18:06:52 UTC	4710	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-27 18:06:53 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 27 Aug 2024 18:05:53 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BAY x-ms-request-id: dae93fee-ee34-44df-bf92-6ec8cf942378 PPServer: PPV: 30 H: PH1PEPF00011EDE V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 27 Aug 2024 18:06:52 GMT Connection: close Content-Length: 10173
2024-08-27 18:06:53 UTC	10173	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49757	20.190.160.17	443

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:52 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-08-27 18:06:52 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-27 18:06:53 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 27 Aug 2024 18:05:53 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: bcd80ffe-c606-47c4-907f-2dd2d3326f0d PPServer: PPV: 30 H: SN1PEPF0002FA69 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 27 Aug 2024 18:06:53 GMT Connection: close Content-Length: 11369
2024-08-27 18:06:53 UTC	11369	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49758	188.114.96.3	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:52 UTC	785	OUT	GET / HTTP/1.1 Host: www.tynurserys.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063
2024-08-27 18:06:53 UTC	927	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 27 Aug 2024 18:06:53 GMT Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: no-cache Location: https://www.tynurserys.com/mail/ Ms-Cv: 5oaxrqdWgYy211kildFztA.0 Pragma: no-cache Request-Id: aeb186e6-56a7-8c81-b6d7-592295d173b4 X-Feefzinfo: SAT X-Feproxyinfo: SA9PR13CA0006.NAMPRD13.PROD.OUTLOOK.COM X-Feserver: SA9PR13CA0006 X-Feserver: SA9PR13CA0006 X-Powered-By: ASP.NET X-Requestid: 1e39678b-0c50-456a-b019-912295708ff4 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dj79%2FmF%2FfbNlE2gftAgL5LmBK9y%2FvHMyPChDJ05nTiRsBVr%2B5hJCIn95QgwgSI8MihB6mGWPF5xywyoOU8PSTJphblJC1Pe7RVK9LLXMz5X4P8ShmUT2xzs8LlWFqpmS2kLgUgw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b9dff7dab580f43-EWR
2024-08-27 18:06:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49760	188.114.96.3	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:54 UTC	790	OUT	GET /mail/ HTTP/1.1 Host: www.tynurserys.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063
2024-08-27 18:06:54 UTC	1346	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:06:54 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: no-cache Cross-Origin-Opener-Policy: same-origin-allow-popups Expires: -1 Link: <https://res.cdn.office.net/>; rel="preconnect" Ms-Cv: FeSkFvX2Pc3KgoKlh4Xa6g.1.1 Origin-Trial: AgxVPru/jRUesV9k7Pn5/osZuJ4g/2sL76bPZejtrjsFofGlatTE4sbavhadrkBNum06aL1ghYYaKcX04fiRdAIAAABveyJvcmlnaW4iOiJodHRwczovL29mZmljZS5jb206NDQzIiwiZmVhdHVyZSI6IkxvbmdBbmltYXRpb25GcmFtZVRpbWluZyIsImV4cGlyeSI6MTcxNjk0MDc5OSwiaXNTdWJkb21haW4iOnRydWV9 Pragma: no-cache Referrer-Policy: no-referrer Request-Id: 16a4e415-f6f5-cd3d-ca82-82a58785daea Set-Cookie: ClientId=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ClientId=73BB9829642148A3B29661493F90DA28; Path=/; Expires=Wed, 27 Aug 2025 18:06:54 GMT; Secure; SameSite=None Vary: Accept-Encoding X-App-Name: Mail X-Backendhttpstatus: 200 X-Backendhttpstatus: 200 X-Bepartition: Clique/CLNAMPRD04CYS00 X-Beserver: CYYPR04MB8867 X-Besku: UNKNOWN X-Calculatedbetarget: CYYPR04MB8867.NAMPRD04.PROD.OUTLOOK.COM X-Calculatedfetarget: CY5PR17CU001.internal.outlook.com X-Client-Version: 20240816003.13 X-Clique: CLNAMPRD04CYS00 X-Feefzinfo: SAT X-Feproxyinfo: SN7PR04CA0170.NAMPRD04.PROD.OUTLOOK.COM X-Feserver: CY5PR17CA0003
2024-08-27 18:06:54 UTC	710	IN	Data Raw: 58 2d 46 65 73 65 72 76 65 72 3a 20 53 4e 37 50 52 30 34 43 41 30 31 37 30 0d 0a 58 2d 46 69 72 73 74 68 6f 70 63 61 66 65 65 66 7a 3a 20 53 41 54 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 41 53 50 2e 4e 45 54 0d 0a 58 2d 50 72 65 66 65 72 72 65 64 72 6f 75 74 69 6e 67 6b 65 79 64 69 61 67 6e 6f 73 74 69 63 73 3a 20 30 0d 0a 58 2d 50 72 6f 78 79 2d 42 61 63 6b 65 6e 64 73 65 72 76 65 72 73 74 61 74 75 73 3a 20 32 30 30 0d 0a 58 2d 50 72 6f 78 79 2d 52 6f 75 74 69 6e 67 63 6f 72 72 65 63 74 6e 65 73 73 3a 20 31 0d 0a 58 2d 52 75 6d 2d 4e 6f 74 75 70 64 61 74 65 71 75 65 72 69 65 64 64 62 63 6f 70 79 3a 20 31 0d 0a 58 2d 52 75 6d 2d 4e 6f 74 75 70 64 61 74 65 71 75 65 72 69 65 64 70 61 74 68 3a 20 31 0d 0a 58 2d 52 75 6d 2d 56 61 6c 69 64 61 74 65 64 Data Ascii: X-Feserver: SN7PR04CA0170X-Firsthopcafeefz: SATX-Powered-By: ASP.NETX-Preferredroutingkeydiagnostics: 0X-Proxy-Backendserverstatus: 200X-Proxy-Routingcorrectness: 1X-Rum-Notupdatequerieddbcopy: 1X-Rum-Notupdatequeriedpath: 1X-Rum-Validated
2024-08-27 18:06:54 UTC	1369	IN	Data Raw: 32 36 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 3c 68 74 6d 6c 20 64 69 72 3d 6c 74 72 20 78 6d 6c 6e 73 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 20 74 72 61 6e 73 6c 61 74 65 3d 6e 6f 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 70 72 61 67 6d 61 20 63 6f 6e 74 65 6e 74 3d 6e 6f 2d 63 61 63 68 65 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c Data Ascii: 26a4<!DOCTYPE html> <html dir=ltr xmlns=http://www.w3.org/1999/xhtml translate=no> <head> <meta charset=utf-8> <meta http-equiv=X-UA-Compatible content="IE=edge"> <meta http-equiv=pragma content=no-cache> <meta name=viewport content="width=device-width,
2024-08-27 18:06:54 UTC	1369	IN	Data Raw: 65 6c 6c 2e 73 75 69 74 65 2e 6f 66 66 69 63 65 2e 63 6f 6d 27 7d 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 73 63 72 69 70 74 50 61 74 68 20 63 6f 6e 74 65 6e 74 3d 73 63 72 69 70 74 73 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 6f 77 61 49 73 41 75 74 68 65 6e 74 69 63 61 74 65 64 20 63 6f 6e 74 65 6e 74 3d 7b 7b 49 73 41 75 74 68 65 6e 74 69 63 61 74 65 64 7d 7d 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 6a 73 54 69 6d 65 73 74 61 6d 70 20 63 6f 6e 74 65 6e 74 3d 31 37 32 34 37 38 32 30 31 34 34 34 32 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 70 75 62 6c 69 63 55 72 6c 20 63 6f 6e 74 65 6e 74 3d 68 74 74 70 73 3a 2f 2f 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 63 6f 6d 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 61 61 64 41 75 74 68 6f 72 69 74 79 55 72 6c 20 63 6f Data Ascii: ell.suite.office.com'}> <meta name=scriptPath content=scripts/> <meta name=owaIsAuthenticated content={{IsAuthenticated}}> <meta name=jsTimestamp content=1724782014442> <meta name=publicUrl content=https://outlook.office.com> <meta name=aadAuthorityUrl co
2024-08-27 18:06:54 UTC	1369	IN	Data Raw: 6e 74 73 2f 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 2e 77 6f 66 66 3f 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 23 6c 6f 61 64 69 6e 67 53 63 72 65 65 6e 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 6c 6f 61 64 69 6e 67 4c 6f 67 6f 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 63 61 6c 63 28 35 30 76 68 20 2d 20 39 30 70 78 29 3b 6c 65 66 74 3a 63 61 6c 63 28 35 30 76 77 20 2d 20 39 30 70 78 29 3b 77 69 64 74 68 3a 31 38 30 70 78 3b 68 65 69 67 68 74 3a 31 38 30 70 78 Data Ascii: nts/office365icons.woff?') format('woff');font-weight:400;font-style:normal}#loadingScreen{position:fixed;top:0;bottom:0;left:0;right:0;background-color:#fff}#loadingLogo{position:fixed;top:calc(50vh - 90px);left:calc(50vw - 90px);width:180px;height:180px
2024-08-27 18:06:54 UTC	1369	IN	Data Raw: 71 75 65 73 74 26 26 6f 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 73 70 6f 6e 73 65 3f 6c 6f 67 45 72 72 6f 72 28 6f 2e 72 65 73 70 6f 6e 73 65 45 72 72 6f 72 4d 65 73 73 61 67 65 2c 22 22 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 6f 2e 63 61 6c 6c 73 74 61 63 6b 41 74 52 65 71 75 65 73 74 29 3a 6c 6f 67 45 72 72 6f 72 28 22 55 6e 68 61 6e 64 6c 65 64 20 52 65 6a 65 63 74 69 6f 6e 3a 20 22 2b 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6f 3f 6f 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6f 29 29 29 7d 29 29 2c 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 73 65 6c 66 2e 6c 6f 63 61 74 69 6f 6e 3b 21 73 65 6c 66 2e 4f 77 61 26 26 72 26 26 76 6f 69 64 20 30 21 3d 3d 72 2e Data Ascii: quest&&o instanceof Response?logError(o.responseErrorMessage,"",void 0,void 0,void 0,o.callstackAtRequest):logError("Unhandled Rejection: "+("string"==typeof o?o:JSON.stringify(o)))})),window.onload=function(){var r=self.location;!self.Owa&&r&&void 0!==r.
2024-08-27 18:06:54 UTC	1369	IN	Data Raw: 74 2f 6f 77 61 6d 61 69 6c 2f 68 61 73 68 65 64 2d 76 31 2f 73 63 72 69 70 74 73 2f 6f 77 61 2e 6d 61 69 6c 69 6e 64 65 78 2e 36 36 36 39 39 33 65 66 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 20 72 6f 6c 65 3d 61 70 70 6c 69 63 61 74 69 6f 6e 20 63 6c 61 73 73 3d 22 6d 73 2d 66 6f 6e 74 2d 73 20 64 69 73 61 62 6c 65 54 65 78 74 53 65 6c 65 63 74 69 6f 6e 20 6d 73 2d 46 61 62 72 69 63 2d 2d 69 73 46 6f 63 75 73 48 69 64 64 65 6e 22 3e 20 3c 64 69 76 20 69 64 3d 61 70 70 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 69 64 3d 6c 6f 61 64 69 6e 67 53 63 72 65 65 6e 3e 20 3c 64 69 76 20 69 64 3d 6c 6f 61 64 69 6e 67 4c 6f 67 6f 20 64 69 72 3d 6c 74 72 3e 20 Data Ascii: t/owamail/hashed-v1/scripts/owa.mailindex.666993ef.js" crossorigin="anonymous"></script></head> <body role=application class="ms-font-s disableTextSelection ms-Fabric--isFocusHidden"> <div id=app></div> <div id=loadingScreen> <div id=loadingLogo dir=ltr>
2024-08-27 18:06:54 UTC	1369	IN	Data Raw: 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 35 33 70 78 2c 2d 37 30 70 78 29 20 72 6f 74 61 74 65 28 32 38 64 65 67 29 7d 23 65 66 3e 2e 72 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 65 6e 76 48 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 34 39 30 64 66 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 30 70 78 2c 36 33 70 78 29 20 72 6f 74 61 74 65 28 2d 32 38 64 65 67 29 7d 23 65 62 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 32 33 62 36 64 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 37 30 70 78 7d 23 63 61 6c 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 77 69 64 74 68 3a Data Ascii: rm:translate(-153px,-70px) rotate(28deg)}#ef>.r{width:287px;height:var(--envH);background:#1490df;transform:translate(-120px,63px) rotate(-28deg)}#eb{width:var(--envW);height:40px;background:#123b6d;margin-top:-70px}#cal{display:flex;flex-wrap:wrap;width:
2024-08-27 18:06:54 UTC	1369	IN	Data Raw: 70 78 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 2d 31 38 30 64 65 67 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 70 65 6e 65 64 2d 66 6c 61 70 2d 73 77 69 6e 67 7b 30 25 2c 31 30 30 25 2c 31 34 2e 35 25 2c 37 36 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 36 38 70 78 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 2d 39 30 64 65 67 29 7d 31 36 2e 35 25 2c 37 34 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 36 38 70 78 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 2d 31 38 30 64 65 67 29 7d 7d 23 63 6c 6f 73 65 64 46 6c 61 70 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 63 6c 6f 73 65 64 2d 66 6c 61 70 2d 73 77 69 6e 67 20 76 61 72 28 2d 2d 64 75 Data Ascii: px) rotate3d(1,0,0,-180deg)}@keyframes opened-flap-swing{0%,100%,14.5%,76%{transform:translateY(-68px) rotate3d(1,0,0,-90deg)}16.5%,74%{transform:translateY(-68px) rotate3d(1,0,0,-180deg)}}#closedFlap{width:var(--envW);animation:closed-flap-swing var(--du
2024-08-27 18:06:54 UTC	317	IN	Data Raw: 22 3e 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 69 64 3d 65 62 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 69 64 3d 65 66 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 72 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 6c 3e 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 69 64 3d 63 6c 6f 73 65 64 46 6c 61 70 3e 20 3c 64 69 76 20 69 64 3d 66 6d 61 73 6b 3e 3c 64 69 76 20 63 6c 61 73 73 3d 66 6c 61 70 54 72 69 61 6e 67 6c 65 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 69 6d 67 20 73 72 63 3d 2f 2f 72 65 73 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 73 73 65 74 73 2f 66 72 61 6d 65 77 6f 72 6b 2f 6d 69 Data Ascii: "></div> </div> </div> </div> <div id=eb></div> <div id=ef> <div class=r></div> <div class=l></div> </div> <div id=closedFlap> <div id=fmask><div class=flapTriangle></div></div> </div> </div> </div> </div> <img src=//res.cdn.office.net/assets/framework/mi
2024-08-27 18:06:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49772	188.114.96.3	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:57 UTC	1319	OUT	POST /owa/startupdata.ashx?app=Mail&n=0 HTTP/1.1 Host: www.tynurserys.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-message-count: 25 x-owa-sessionid: 73593ab3-b64e-4855-81a6-09311607f6e1 prefer: exchange.behavior="IncludeThirdPartyOnlineMeetingProviders" x-js-experiment: 5 x-req-source: Mail x-owa-canary: X-OWA-CANARY_cookie_is_null_or_empty sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 action: StartupData x-owa-bootflights: localStorageOwaPrefix,fwk-analytics-addons,acctPersistenceSourceIdV2,dev-offlineMultiAccountDB,fwk-skipnavbardataonhosted,cal-widgets-upn-validation,auth-cacheTokenForMetaOsHub,auth-getAuthTokenV2,auth-msaljs-landingpage x-owa-correlationid: accountPolicy_4d49a673-78a6-affd-63ae-a8355de10f38 ms-cv: Tf9ITGXH7TZyqBoUFcafWt.0 x-owa-hosted-ux: false sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.tynurserys.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; ClientId=73BB9829642148A3B29661493F90DA28
2024-08-27 18:06:58 UTC	1337	IN	HTTP/1.1 401 Date: Tue, 27 Aug 2024 18:06:58 GMT Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=86400 Nel: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=SAT&RemoteIP=2602:f9f3::&Environment=MT"}],"include_subdomains":true} Request-Id: 4e94cbc7-333f-1d3b-e697-0cc5ee26ef78 Set-Cookie: OIDC=1; Path=/; Expires=Thu, 27 Feb 2025 18:06:58 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: RoutingKeyCookie=; Path=/; Expires=Sat, 27 Aug 1994 18:06:58 GMT; Secure Set-Cookie: HostSwitchPrg=; Path=/; Expires=Sat, 27 Aug 1994 18:06:58 GMT; Secure Set-Cookie: OptInPrg=; Path=/; Expires=Sat, 27 Aug 1994 18:06:58 GMT; Secure Www-Authenticate: Bearer client_id="00000002-0000-0ff1-ce00-000000000000", trusted_issuers="00000001-0000-0000-c000-000000000000@*", token_types="app_asserted_user_v1 service_asserted_app_v1", authorization_uri="https://login.microsoftonline.com/common/oauth2/authorize" X-Backend-Begin: 2024-08-27T18:06:58.281 X-Backend-End: 2024-08-27T18:06:58.281 X-Backendhttpstatus: 401 X-Backendhttpstatus: 401 X-Beserver: BN7PR04MB4306 X-Besku: WCS5
2024-08-27 18:06:58 UTC	729	IN	Data Raw: 58 2d 43 61 6c 63 75 6c 61 74 65 64 62 65 74 61 72 67 65 74 3a 20 42 4e 37 50 52 30 34 4d 42 34 33 30 36 2e 6e 61 6d 70 72 64 30 34 2e 70 72 6f 64 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 0d 0a 58 2d 43 61 6c 63 75 6c 61 74 65 64 66 65 74 61 72 67 65 74 3a 20 42 4e 39 50 52 30 33 43 55 30 33 34 2e 69 6e 74 65 72 6e 61 6c 2e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 0d 0a 58 2d 44 69 61 67 69 6e 66 6f 3a 20 42 4e 37 50 52 30 34 4d 42 34 33 30 36 0d 0a 58 2d 46 65 65 66 7a 69 6e 66 6f 3a 20 53 41 54 0d 0a 58 2d 46 65 70 72 6f 78 79 69 6e 66 6f 3a 20 53 4e 37 50 52 30 34 43 41 30 31 37 30 2e 4e 41 4d 50 52 44 30 34 2e 50 52 4f 44 2e 4f 55 54 4c 4f 4f 4b 2e 43 4f 4d 0d 0a 58 2d 46 65 73 65 72 76 65 72 3a 20 42 4e 39 50 52 30 33 43 41 30 39 38 36 0d 0a 58 2d 46 65 73 65 72 Data Ascii: X-Calculatedbetarget: BN7PR04MB4306.namprd04.prod.outlook.comX-Calculatedfetarget: BN9PR03CU034.internal.outlook.comX-Diaginfo: BN7PR04MB4306X-Feefzinfo: SATX-Feproxyinfo: SN7PR04CA0170.NAMPRD04.PROD.OUTLOOK.COMX-Feserver: BN9PR03CA0986X-Feser
2024-08-27 18:06:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49777	188.114.96.3	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:59 UTC	809	OUT	GET /mail/?authRedirect=true&state=0 HTTP/1.1 Host: www.tynurserys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; ClientId=73BB9829642148A3B29661493F90DA28; OIDC=1
2024-08-27 18:06:59 UTC	1268	IN	HTTP/1.1 302 Date: Tue, 27 Aug 2024 18:06:59 GMT Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: no-cache Expires: -1 Location: https://www.tynurserys.com/owa/?state=1&redirectTo=aHR0cHM6Ly9vdXRsb29rLm9mZmljZS5jb20vbWFpbC8 Ms-Cv: 5aaIVFJvJrTlGcIww2Tjxw.1 Pragma: no-cache Request-Id: 5488a6e5-6f52-b426-e519-c230c364e3c7 X-Backendhttpstatus: 302 X-Bepartition: Clique/CLNAMPRD04SAT05 X-Beserver: SN7PR04MB8571 X-Besku: UNKNOWN X-Calculatedbetarget: SN7PR04MB8571.NAMPRD04.PROD.OUTLOOK.COM X-Clique: CLNAMPRD04SAT05 X-Feefzinfo: SAT X-Feproxyinfo: SN7PR04CA0170.NAMPRD04.PROD.OUTLOOK.COM X-Feserver: SN7PR04CA0170 X-Firsthopcafeefz: SAT X-Powered-By: ASP.NET X-Preferredroutingkeydiagnostics: 0 X-Proxy-Backendserverstatus: 302 X-Proxy-Routingcorrectness: 1 X-Web-Server-Version: 24.8.20.6 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7TqASAgJbLDAoeFGCG7S1YUcTGjI28SNKm9QD%2BJhjz5ghXdpECkmblH0qesItVEd9KBQqroz5WJE7iQwulgYr1Www%2BBDKPQcLlKRbFEYFIwwBfIO%2Bkzl7NkoNQMmxwvqk6SV%2B%2F8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b9dffa649e472bc-EWR
2024-08-27 18:06:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49780	188.114.96.3	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:06:59 UTC	845	OUT	GET /owa/?state=1&redirectTo=aHR0cHM6Ly9vdXRsb29rLm9mZmljZS5jb20vbWFpbC8 HTTP/1.1 Host: www.tynurserys.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; ClientId=73BB9829642148A3B29661493F90DA28; OIDC=1
2024-08-27 18:07:00 UTC	1360	IN	HTTP/1.1 302 Date: Tue, 27 Aug 2024 18:07:00 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=86400 Location: https://subcg.tynurserys.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw Nel: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} P3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=SAT&RemoteIP=2602:f9f3::&Environment=MT"}],"include_subdomains":true}
2024-08-27 18:07:00 UTC	1320	IN	Data Raw: 52 65 71 75 65 73 74 2d 49 64 3a 20 63 32 36 31 63 37 61 62 2d 32 35 65 31 2d 36 31 33 36 2d 37 32 33 30 2d 32 63 39 37 62 33 30 63 66 64 61 64 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 52 6f 75 74 69 6e 67 4b 65 79 43 6f 6f 6b 69 65 3d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 32 37 20 41 75 67 20 31 39 39 34 20 31 38 3a 30 37 3a 30 30 20 47 4d 54 3b 20 53 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 70 65 6e 49 64 43 6f 6e 6e 65 63 74 2e 74 6f 6b 65 6e 2e 76 31 3d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 32 37 20 41 75 67 20 31 39 39 34 20 31 38 3a 30 37 3a 30 30 20 47 4d 54 3b 20 53 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 70 65 6e 49 64 43 6f 6e 6e 65 63 74 2e 74 Data Ascii: Request-Id: c261c7ab-25e1-6136-7230-2c97b30cfdadSet-Cookie: RoutingKeyCookie=; Path=/; Expires=Sat, 27 Aug 1994 18:07:00 GMT; SecureSet-Cookie: OpenIdConnect.token.v1=; Path=/; Expires=Sat, 27 Aug 1994 18:07:00 GMT; SecureSet-Cookie: OpenIdConnect.t
2024-08-27 18:07:00 UTC	1369	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 70 65 6e 49 64 43 6f 6e 6e 65 63 74 2e 74 6f 6b 65 6e 50 6f 73 74 50 61 74 68 3d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 77 77 77 2e 74 79 6e 75 72 73 65 72 79 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 32 37 20 41 75 67 20 31 39 39 34 20 31 38 3a 30 37 3a 30 30 20 47 4d 54 3b 20 53 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 70 65 6e 49 64 43 6f 6e 6e 65 63 74 2e 6e 6f 6e 63 65 2e 76 33 2e 64 36 72 46 75 43 6e 72 79 6f 70 79 43 57 72 65 43 49 70 6f 2d 47 7a 77 73 66 6e 5a 76 59 6d 4d 31 6d 51 39 56 67 2d 32 6e 78 51 3d 36 33 38 36 30 33 37 38 38 32 30 31 39 33 31 37 34 32 2e 35 33 62 30 35 65 37 66 2d 62 33 30 31 2d 34 35 66 32 2d 39 61 61 61 2d 30 36 66 66 31 37 34 65 34 Data Ascii: Set-Cookie: OpenIdConnect.tokenPostPath=; Path=/; Domain=www.tynurserys.com; Expires=Sat, 27 Aug 1994 18:07:00 GMT; SecureSet-Cookie: OpenIdConnect.nonce.v3.d6rFuCnryopyCWreCIpo-GzwsfnZvYmM1mQ9Vg-2nxQ=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4
2024-08-27 18:07:00 UTC	1983	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 70 65 6e 49 64 43 6f 6e 6e 65 63 74 2e 69 64 5f 74 6f 6b 65 6e 2e 76 31 3d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 77 77 77 2e 74 79 6e 75 72 73 65 72 79 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 32 37 20 41 75 67 20 31 39 39 34 20 31 38 3a 30 37 3a 30 30 20 47 4d 54 3b 20 53 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 70 65 6e 49 64 43 6f 6e 6e 65 63 74 2e 63 6f 64 65 2e 76 31 3d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 77 77 77 2e 74 79 6e 75 72 73 65 72 79 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 32 37 20 41 75 67 20 31 39 39 34 20 31 38 3a 30 37 3a 30 30 20 47 4d 54 3b 20 53 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 70 65 Data Ascii: Set-Cookie: OpenIdConnect.id_token.v1=; Path=/; Domain=www.tynurserys.com; Expires=Sat, 27 Aug 1994 18:07:00 GMT; SecureSet-Cookie: OpenIdConnect.code.v1=; Path=/; Domain=www.tynurserys.com; Expires=Sat, 27 Aug 1994 18:07:00 GMT; SecureSet-Cookie: Ope
2024-08-27 18:07:00 UTC	876	IN	Data Raw: 33 36 35 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 5f 69 64 3d 30 30 30 30 30 30 30 32 2d 30 30 30 30 2d 30 66 66 31 2d 63 65 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 63 6f 6d 25 32 66 6f 77 61 25 32 66 26 61 6d 70 Data Ascii: 365<html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&amp
2024-08-27 18:07:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49753	188.114.97.3	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:00 UTC	1424	OUT	GET /common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw HTTP/1.1 Host: subcg.tynurserys.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; x-ms-gateway-slice=estsfd
2024-08-27 18:07:00 UTC	1333	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:07:00 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store, no-cache Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]} Set-Cookie: esctx-760Fcq4eTww=AQABCQEAAAApTwJmzXqdR4BN2miheQMYx8BhBac_-dQXp-j71yrdzHsFdv7J_kMl_E9E3H5kc2Z4jE5t6ktfVJJ-a-idah5VREvrti1docxxj8pbcbKUobeYC7iptW_FVi6Zii4MWqfJMOp5WHxKe30VMfmDtAQyL8yLLvS6re32c9JRid4LFyAA; Path=/; Domain=subcg.tynurserys.com; HttpOnly; Secure; SameSite=None Set-Cookie: fpc=Ah-DUjHRs35IvQUf8G1BV9I; Path=/; Expires=Thu, 26 Sep 2024 18:07:00 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMY_z6dHdWQ_8RiG5JkkVypmi-XaDg--4t3g-vPj1GB2NSKGlM10hdFLLjFQraz9UYiM4oetjfcQeZHmjsTW4x6k4kWgDINg1dcfTRVWbM7dK0rmYFs6pi5wkxGmb_ph4qbEdtPBzg7MzzQ1pUQjEGDa0igdu1WDRHh03oLZ21I27QgAA; Path=/; Domain=subcg.tynurserys.com; HttpOnly; Secure; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None
2024-08-27 18:07:00 UTC	328	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 74 73 73 65 72 76 69 63 65 63 6f 6f 6b 69 65 3d 65 73 74 73 66 64 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 58 2d 4d 73 2d 45 73 74 73 2d 53 65 72 76 65 72 3a 20 32 2e 31 2e 31 38 37 39 34 2e 36 20 2d 20 4e 43 55 53 20 50 72 6f 64 53 6c 69 63 65 73 0d 0a 58 2d 4d 73 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 61 66 39 64 35 35 32 2d 62 32 64 63 2d 34 36 31 30 2d 61 37 37 30 2d 39 35 64 37 63 32 30 38 39 39 30 30 0d 0a 58 2d 4d 73 2d 53 72 73 3a 20 31 2e 50 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 53 65 72 76 65 72 3a 20 63 Data Ascii: Set-Cookie: stsservicecookie=estsfd; Path=/; HttpOnly; Secure; SameSite=NoneVary: Accept-EncodingX-Ms-Ests-Server: 2.1.18794.6 - NCUS ProdSlicesX-Ms-Request-Id: 1af9d552-b2dc-4610-a770-95d7c2089900X-Ms-Srs: 1.PCF-Cache-Status: DYNAMICServer: c
2024-08-27 18:07:00 UTC	1369	IN	Data Raw: 35 62 38 63 0d 0a 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 Data Ascii: 5b8c... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html><head> <title>Redirecting</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta http-equiv="X-UA-Compatible"
2024-08-27 18:07:00 UTC	1369	IN	Data Raw: 74 74 70 73 25 33 61 25 32 66 25 32 66 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 63 6f 6d 25 32 66 6f 77 61 25 32 66 5c 75 30 30 32 36 72 65 73 6f 75 72 63 65 3d 30 30 30 30 30 30 30 32 2d 30 30 30 30 2d 30 66 66 31 2d 63 65 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 5c 75 30 30 32 36 72 65 73 70 6f 6e 73 65 5f 6d 6f 64 65 3d 66 6f 72 6d 5f 70 6f 73 74 5c 75 30 30 32 36 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 64 65 2b 69 64 5f 74 6f 6b 65 6e 5c 75 30 30 32 36 73 63 6f 70 65 3d 6f 70 65 6e 69 64 5c 75 30 30 32 36 73 74 61 74 65 3d 44 59 75 39 44 6f 49 77 47 41 43 4c 76 6f 74 62 35 57 74 4c 5f 77 62 69 6f 44 45 4d 75 4b 43 4a 68 71 31 66 61 52 4f 49 42 41 4d 45 34 39 76 62 34 57 36 36 79 77 67 68 2d 38 51 75 6b 55 45 53 30 55 6f 59 42 55 49 62 Data Ascii: ttps%3a%2f%2foutlook.office.com%2fowa%2f\u0026resource=00000002-0000-0ff1-ce00-000000000000\u0026response_mode=form_post\u0026response_type=code+id_token\u0026scope=openid\u0026state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIb
2024-08-27 18:07:00 UTC	1369	IN	Data Raw: 67 65 41 6c 6c 6f 77 65 64 22 3a 66 61 6c 73 65 2c 22 6d 69 6e 44 73 73 6f 45 64 67 65 56 65 72 73 69 6f 6e 22 3a 22 31 37 22 2c 22 69 73 53 61 66 61 72 69 41 6c 6c 6f 77 65 64 22 3a 74 72 75 65 2c 22 72 65 64 69 72 65 63 74 55 72 69 22 3a 22 22 2c 22 69 73 49 45 41 6c 6c 6f 77 65 64 46 6f 72 53 73 6f 50 72 6f 62 65 22 3a 74 72 75 65 2c 22 65 64 67 65 52 65 64 69 72 65 63 74 55 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 61 75 74 6f 6c 6f 67 6f 6e 2e 6d 69 63 72 6f 73 6f 66 74 61 7a 75 72 65 61 64 2d 73 73 6f 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 77 69 6e 61 75 74 68 2f 73 73 6f 2f 65 64 67 65 72 65 64 69 72 65 63 74 3f 63 6c 69 65 6e 74 2d 72 65 71 75 65 73 74 2d 69 64 3d 63 32 36 31 63 37 61 62 2d 32 35 65 31 2d 36 31 33 36 2d 37 32 33 30 2d 32 63 39 37 62 33 Data Ascii: geAllowed":false,"minDssoEdgeVersion":"17","isSafariAllowed":true,"redirectUri":"","isIEAllowedForSsoProbe":true,"edgeRedirectUri":"https://autologon.microsoftazuread-sso.com/common/winauth/sso/edgeredirect?client-request-id=c261c7ab-25e1-6136-7230-2c97b3
2024-08-27 18:07:00 UTC	1369	IN	Data Raw: 37 62 33 30 63 66 64 61 64 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 31 61 66 39 64 35 35 32 2d 62 32 64 63 2d 34 36 31 30 2d 61 37 37 30 2d 39 35 64 37 63 32 30 38 39 39 30 30 22 2c 22 6c 6f 63 61 6c 65 22 3a 7b 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 6c 63 69 64 22 3a 31 30 33 33 7d 2c 22 73 6c 4d 61 78 52 65 74 72 79 22 3a 32 2c 22 73 6c 52 65 70 6f 72 74 46 61 69 6c 75 72 65 22 3a 74 72 75 65 2c 22 73 74 72 69 6e 67 73 22 3a 7b 22 64 65 73 6b 74 6f 70 73 73 6f 22 3a 7b 22 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 6d 65 73 73 61 67 65 22 3a 22 54 72 79 69 6e 67 20 74 6f 20 73 69 67 6e 20 79 6f 75 20 69 6e 22 7d 7d 2c 22 65 6e 75 6d 73 22 3a 7b 22 43 6c 69 65 6e 74 4d 65 74 72 69 63 73 4d 6f 64 65 73 22 3a 7b 22 4e 6f 6e 65 22 3a 30 2c 22 53 75 Data Ascii: 7b30cfdad","sessionId":"1af9d552-b2dc-4610-a770-95d7c2089900","locale":{"mkt":"en-US","lcid":1033},"slMaxRetry":2,"slReportFailure":true,"strings":{"desktopsso":{"authenticatingmessage":"Trying to sign you in"}},"enums":{"ClientMetricsModes":{"None":0,"Su
2024-08-27 18:07:00 UTC	1369	IN	Data Raw: 6f 74 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 2f 22 5d 2c 22 6c 6f 67 42 79 54 68 72 6f 77 69 6e 67 22 3a 74 72 75 65 7d 2c 22 73 65 72 76 65 72 44 65 74 61 69 6c 73 22 3a 7b 22 73 6c 63 22 3a 22 50 72 6f 64 53 6c 69 63 65 73 22 2c 22 64 63 22 3a 22 4e 43 55 53 22 2c 22 72 69 22 3a 22 43 48 30 58 58 58 58 22 2c 22 76 65 72 22 3a 7b 22 76 22 3a 5b 32 2c 31 2c 31 38 37 39 34 2c 36 5d 7d 2c 22 72 74 22 3a 22 32 30 32 34 2d 30 38 2d 32 37 54 31 38 3a 30 37 3a 30 30 22 2c 22 65 74 22 3a 32 7d 2c 22 63 6c 69 65 6e 74 45 76 65 6e 74 73 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 65 6c 65 6d 65 74 72 79 45 Data Ascii: ots":["https://aadcdn.msauth.net/","https://aadcdn.msftauth.net/"],"logByThrowing":true},"serverDetails":{"slc":"ProdSlices","dc":"NCUS","ri":"CH0XXXX","ver":{"v":[2,1,18794,6]},"rt":"2024-08-27T18:07:00","et":2},"clientEvents":{"enabled":true,"telemetryE
2024-08-27 18:07:00 UTC	1369	IN	Data Raw: 4c 69 73 74 22 3a 22 45 53 54 53 55 53 45 52 4c 49 53 54 22 7d 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 22 63 68 72 6f 6d 65 22 2c 22 72 65 61 73 6f 6e 22 3a 22 50 75 6c 6c 20 69 73 20 6e 65 65 64 65 64 22 7d 2c 22 75 72 6c 4e 6f 43 6f 6f 6b 69 65 73 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 62 63 67 2e 74 79 6e 75 72 73 65 72 79 73 2e 63 6f 6d 2f 63 6f 6f 6b 69 65 73 64 69 73 61 62 6c 65 64 22 2c 22 66 54 72 69 6d 43 68 72 6f 6d 65 42 73 73 6f 55 72 6c 22 3a 74 72 75 65 2c 22 69 6e 6c 69 6e 65 4d 6f 64 65 22 3a 35 2c 22 66 53 68 6f 77 43 6f 70 79 44 65 62 75 67 44 65 74 61 69 6c 73 4c 69 6e 6b 22 3a 74 72 75 65 2c 22 66 54 65 6e 61 6e 74 42 72 61 6e 64 69 6e 67 43 64 6e 41 64 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 22 3a 74 72 Data Ascii: List":"ESTSUSERLIST"},"enabled":true,"type":"chrome","reason":"Pull is needed"},"urlNoCookies":"https://subcg.tynurserys.com/cookiesdisabled","fTrimChromeBssoUrl":true,"inlineMode":5,"fShowCopyDebugDetailsLink":true,"fTenantBrandingCdnAddEventHandlers":tr
2024-08-27 18:07:00 UTC	1369	IN	Data Raw: 2c 0a 75 3d 32 29 3b 66 6f 72 28 76 61 72 20 63 3d 75 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 73 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 63 5d 29 7d 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 65 28 74 2c 69 29 3a 69 28 74 29 7d 2c 6f 2e 72 65 67 69 73 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 21 6f 2e 72 5b 65 5d 29 7b 6f 2e 6f 2e 70 75 73 68 28 65 29 3b 76 61 72 20 69 3d 7b 7d 3b 69 66 28 74 26 26 28 69 2e 6d 65 74 68 6f 64 3d 74 29 2c 6e 26 26 28 69 2e 73 6b 69 70 54 69 6d 65 6f 75 74 3d 6e 29 2c 61 72 67 75 6d 65 6e 74 73 26 26 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 29 7b 69 2e 65 78 74 72 61 41 72 67 73 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 3d 33 3b 61 Data Ascii: ,u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a
2024-08-27 18:07:00 UTC	1369	IN	Data Raw: 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 6f 29 2c 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 6e 29 29 7d 28 29 7d 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 0a 72 65 74 75 72 6e 20 66 2e 24 43 6f 6e 66 69 67 7c 7c 66 2e 53 65 72 76 65 72 44 61 74 61 7c 7c 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 72 29 7b 76 61 72 20 74 3d 66 2e 24 44 65 62 75 67 3b 74 26 26 74 2e 61 70 70 65 6e 64 4c 6f 67 26 26 28 72 26 26 28 65 2b 3d 22 20 27 22 2b 28 72 2e 73 72 63 7c 7c 72 2e 68 72 65 66 7c 7c 22 22 29 2b 22 27 22 2c 65 2b 3d 22 2c 20 69 64 3a 22 2b 28 72 2e 69 64 7c 7c 22 22 29 2c 65 2b 3d 22 2c 20 61 73 79 6e 63 3a 22 2b 28 72 Data Ascii: ("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r
2024-08-27 18:07:00 UTC	1369	IN	Data Raw: 6f 72 69 67 69 6e 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 22 29 2c 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 75 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 6e 74 65 67 72 69 74 79 22 2c 74 29 29 2c 75 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 72 3d 67 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 3b 72 65 74 75 72 6e 20 72 2e 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 2c 72 2e 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2c 72 2e 68 72 65 66 3d 65 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 0a 76 61 72 20 72 3d 67 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 74 3d 67 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 6e 6f 6e 63 65 5d Data Ascii: origin","anonymous"),t&&"string"==typeof t&&u.setAttribute("integrity",t)),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){var r=g.createElement("script"),t=g.querySelector("script[nonce]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49783	188.114.96.3	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:00 UTC	689	OUT	GET /mail/favicon.ico HTTP/1.1 Host: www.tynurserys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; ClientId=73BB9829642148A3B29661493F90DA28; OIDC=1
2024-08-27 18:07:00 UTC	1241	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:07:00 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=86400 Etag: "1daf4e3764767ce" Last-Modified: Thu, 22 Aug 2024 22:34:34 GMT Ms-Cv: sMZshX4duvWpjykStI4feA.1.1 Request-Id: 856cc6b0-1d7e-f5ba-a98f-2912b48e1f78 X-Backendhttpstatus: 200 X-Backendhttpstatus: 200 X-Besku: UNKNOWN X-Calculatedbetarget: SJ0PR05MB8183.NAMPRD05.PROD.OUTLOOK.COM X-Calculatedfetarget: SJ0PR03CU001.internal.outlook.com X-Feefzinfo: SAT X-Feproxyinfo: SA1PR05CA0005.NAMPRD05.PROD.OUTLOOK.COM X-Feserver: SJ0PR03CA0008 X-Feserver: SA1PR05CA0005 X-Firsthopcafeefz: SAT X-Nanoproxy: 1 X-Powered-By: ASP.NET X-Preferredroutingkeydiagnostics: 0 X-Proxy-Backendserverstatus: 200 X-Proxy-Routingcorrectness: 1 Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U9Hi%2F9yQiIWZC1fOf0SMoEL%2FNRq0BZvGHsnUEvgTQdV8agzkHmUoLbePSOZapohtgTy91ntRoFbGQw6Wx2y99SmvLCgBULo%2B2JWwMth0yvMNqyL0wMv7u53lxY56O%2FOBJZRIgZM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b9dffaba8df72aa-EWR
2024-08-27 18:07:00 UTC	128	IN	Data Raw: 31 65 63 65 0d 0a 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 1ece 6 hf( @
2024-08-27 18:07:00 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-08-27 18:07:00 UTC	1369	IN	Data Raw: 90 14 ff df 90 14 ff df 90 14 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d7 80 10 ff ef cc 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ef cc 9f ff d7 80 10 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff 4a 24 06 ff 93 4c 05 ff b5 62 03 ff b8 64 03 ff b8 64 03 ff b5 62 03 ff a4 55 05 ff 94 4a 08 ff be 70 0d ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff f7 e6 cf ff ff ff ff ff ff ff ff ff f7 e6 cf ff f7 e6 cf ff ff ff ff ff ff ff ff ff f7 e6 cf ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff 50 29 03 ff a5 5a 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b3 60 04 ff ae 5c 03 ff a5 57 07 ff ca 7c 0f ff df 90 14 ff df 90 14 ff Data Ascii: xxxxxxxxJ$LbddbUJpxxxxxxxxP)Zddddd`\W\|
2024-08-27 18:07:00 UTC	1369	IN	Data Raw: 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff 00 00 00 00 00 00 00 00 d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff 7a 45 00 ff d2 97 24 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff 00 00 00 00 00 00 00 00 d4 78 00 cf d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff c3 6e 00 ff 87 4c 00 ff d2 97 24 ff ea a8 28 ff ea Data Ascii: (((((PPPPPPxxxxxxxxxxxxxxxxzE$((((((PPPPPPxxxxxxxxxxxxxxxnL$(
2024-08-27 18:07:00 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 03 ff c0 00 03 ff c0 00 03 ff c0 00 03 ff c0 00 03 ff c0 00 03 ff c0 00 03 ff ff ff ff ff ff ff ff 28 00 00 00 18 00 00 00 30 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ea a8 28 ef ea a8 28 ff ea a8 Data Ascii: (0 ((
2024-08-27 18:07:00 UTC	1369	IN	Data Raw: 67 27 0a ff 70 2f 0b df d4 78 00 ff d4 78 00 ff d4 78 00 ff f2 d5 af ff ff ff ff ff e4 ab 60 ff d4 78 00 ff d4 78 00 ff e4 ab 60 ff ff ff ff ff f2 d5 af ff d4 78 00 ff d4 78 00 ff d4 78 00 ff 6a 3c 00 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff 67 27 0a 70 00 00 00 00 d4 78 00 ff d4 78 00 ff d4 78 00 ff df 9a 40 ff ff ff ff ff ff ff ff ff ec c4 8f ff ec c4 8f ff fc f7 ef ff ff ff ff ff df 9a 40 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff 75 54 14 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff 00 00 00 00 00 00 00 00 d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff e1 a2 50 ff fa ee df ff ff ff ff ff ff ff ff ff fc f7 ef ff e4 ab 60 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 Data Ascii: g'p/xxx`xx`xxxj<(((((((g'pxxx@@xxxuTPPPPPPPxxxxP`xxxx
2024-08-27 18:07:00 UTC	921	IN	Data Raw: 7e 1e ff e2 9e 23 ff ce 88 16 ff ce 85 13 ff db 8d 14 ff df 90 14 ff b8 64 03 ef b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b4 63 04 ff 69 46 0c ff cb 83 12 ff d8 8b 13 ff df 90 14 ff df 90 14 ff df 90 14 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff 68 43 0a ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff b8 64 03 ff b8 64 03 ff c5 81 32 ff f6 ec e0 ff ff ff ff ff ff ff ff ff f6 ec e0 ff c5 81 32 ff b8 64 03 ff b8 64 03 ff 56 34 0c ff c4 7c 17 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff b8 64 03 ff b8 64 03 ff f6 ec e0 ff fb f5 ef ff ce 94 52 ff ce 94 52 ff fb f5 ef ff ed d8 c0 ff b8 64 03 ff b8 64 03 ff Data Ascii: ~#dddddddddciFddddddddddhCdd22ddV4\|ddRRdd
2024-08-27 18:07:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49784	188.114.96.3	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:01 UTC	655	OUT	GET /mail/favicon.ico HTTP/1.1 Host: www.tynurserys.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; ClientId=73BB9829642148A3B29661493F90DA28; OIDC=1; OpenIdConnect.nonce.v3.d6rFuCnryopyCWreCIpo-GzwsfnZvYmM1mQ9Vg-2nxQ=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b; X-OWA-RedirectHistory=ArLym14BOBYBDMPG3Ag
2024-08-27 18:07:01 UTC	1249	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:07:01 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=86400 Etag: "1daf4e3764767ce" Last-Modified: Thu, 22 Aug 2024 22:34:34 GMT Ms-Cv: sMZshX4duvWpjykStI4feA.1.1 Request-Id: 856cc6b0-1d7e-f5ba-a98f-2912b48e1f78 X-Backendhttpstatus: 200 X-Backendhttpstatus: 200 X-Besku: UNKNOWN X-Calculatedbetarget: SJ0PR05MB8183.NAMPRD05.PROD.OUTLOOK.COM X-Calculatedfetarget: SJ0PR03CU001.internal.outlook.com X-Feefzinfo: SAT X-Feproxyinfo: SA1PR05CA0005.NAMPRD05.PROD.OUTLOOK.COM X-Feserver: SJ0PR03CA0008 X-Feserver: SA1PR05CA0005 X-Firsthopcafeefz: SAT X-Nanoproxy: 1 X-Powered-By: ASP.NET X-Preferredroutingkeydiagnostics: 0 X-Proxy-Backendserverstatus: 200 X-Proxy-Routingcorrectness: 1 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S8qTWtx%2Btf%2FJj6BfAH1dha0W9gmJQC%2FZmnNXMA%2FFoMvvmDDPU%2FCIZnZVDrBgZXHdi2NSKbKs7gg9wvpDgiCoINr41q52vjg0xp5uAM1D5Y%2FuS%2FlUWxSiAl8bLpRij%2BejsXEQg8s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b9dffb1b8fb7d14-EWR
2024-08-27 18:07:01 UTC	120	IN	Data Raw: 31 65 63 65 0d 0a 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 1ece 6 hf( @
2024-08-27 18:07:01 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-08-27 18:07:01 UTC	1369	IN	Data Raw: 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d7 80 10 ff ef cc 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ef cc 9f ff d7 80 10 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff 4a 24 06 ff 93 4c 05 ff b5 62 03 ff b8 64 03 ff b8 64 03 ff b5 62 03 ff a4 55 05 ff 94 4a 08 ff be 70 0d ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff f7 e6 cf ff ff ff ff ff ff ff ff ff f7 e6 cf ff f7 e6 cf ff ff ff ff ff ff ff ff ff f7 e6 cf ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff 50 29 03 ff a5 5a 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b3 60 04 ff ae 5c 03 ff a5 57 07 ff ca 7c 0f ff Data Ascii: xxxxxxxxJ$LbddbUJpxxxxxxxxP)Zddddd`\W\|
2024-08-27 18:07:01 UTC	1369	IN	Data Raw: 24 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff 00 00 00 00 00 00 00 00 d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff 7a 45 00 ff d2 97 24 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff 00 00 00 00 00 00 00 00 d4 78 00 cf d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff c3 6e 00 ff 87 4c 00 ff d2 Data Ascii: $((((((PPPPPPxxxxxxxxxxxxxxxxzE$((((((PPPPPPxxxxxxxxxxxxxxxnL
2024-08-27 18:07:01 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 03 ff c0 00 03 ff c0 00 03 ff c0 00 03 ff c0 00 03 ff c0 00 03 ff c0 00 03 ff ff ff ff ff ff ff ff 28 00 00 00 18 00 00 00 30 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ea a8 Data Ascii: (0
2024-08-27 18:07:01 UTC	1369	IN	Data Raw: ea a8 28 ff ea a8 28 ff 67 27 0a ff 70 2f 0b df d4 78 00 ff d4 78 00 ff d4 78 00 ff f2 d5 af ff ff ff ff ff e4 ab 60 ff d4 78 00 ff d4 78 00 ff e4 ab 60 ff ff ff ff ff f2 d5 af ff d4 78 00 ff d4 78 00 ff d4 78 00 ff 6a 3c 00 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff ea a8 28 ff 67 27 0a 70 00 00 00 00 d4 78 00 ff d4 78 00 ff d4 78 00 ff df 9a 40 ff ff ff ff ff ff ff ff ff ec c4 8f ff ec c4 8f ff fc f7 ef ff ff ff ff ff df 9a 40 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff 75 54 14 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff ff d9 50 ff 00 00 00 00 00 00 00 00 d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff e1 a2 50 ff fa ee df ff ff ff ff ff ff ff ff ff fc f7 ef ff e4 ab 60 ff d4 78 00 ff d4 78 00 Data Ascii: ((g'p/xxx`xx`xxxj<(((((((g'pxxx@@xxxuTPPPPPPPxxxxP`xx
2024-08-27 18:07:01 UTC	929	IN	Data Raw: 54 14 ff 75 54 14 ff b0 7e 1e ff e2 9e 23 ff ce 88 16 ff ce 85 13 ff db 8d 14 ff df 90 14 ff b8 64 03 ef b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b4 63 04 ff 69 46 0c ff cb 83 12 ff d8 8b 13 ff df 90 14 ff df 90 14 ff df 90 14 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff 68 43 0a ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff b8 64 03 ff b8 64 03 ff c5 81 32 ff f6 ec e0 ff ff ff ff ff ff ff ff ff f6 ec e0 ff c5 81 32 ff b8 64 03 ff b8 64 03 ff 56 34 0c ff c4 7c 17 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff b8 64 03 ff b8 64 03 ff f6 ec e0 ff fb f5 ef ff ce 94 52 ff ce 94 52 ff fb f5 ef ff ed d8 c0 ff Data Ascii: TuT~#dddddddddciFddddddddddhCdd22ddV4\|ddRR
2024-08-27 18:07:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49788	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:01 UTC	625	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://subcg.tynurserys.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:02 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1688245 Cache-Control: public, max-age=31536000 Content-MD5: bedopN8eDQBhzbUu8GNGxA== Content-Type: application/x-javascript Date: Tue, 27 Aug 2024 18:07:02 GMT Etag: 0x8DCB563C85A43C4 Last-Modified: Mon, 05 Aug 2024 15:32:14 GMT Server: ECAcc (lhc/78A8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb594470-e01e-0006-2151-e9b2d8000000 x-ms-version: 2009-09-19 Content-Length: 141866 Connection: close
2024-08-27 18:07:02 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-27 18:07:02 UTC	1	IN	Data Raw: 22 Data Ascii: "
2024-08-27 18:07:02 UTC	16383	IN	Data Raw: 5d 2c 5b 22 23 32 30 32 30 32 30 22 5d 29 2c 73 3d 65 28 72 2c 5b 22 34 35 2c 35 30 2c 35 34 22 5d 2c 5b 22 23 32 64 33 32 33 36 22 5d 29 2c 75 3d 65 28 72 2c 5b 22 32 35 35 2c 32 35 30 2c 32 33 39 22 5d 2c 5b 22 23 66 66 66 61 65 66 22 5d 29 3b 69 66 28 6f 7c 7c 61 7c 7c 73 29 72 65 74 75 72 6e 22 62 6c 61 63 6b 22 3b 69 66 28 69 7c 7c 75 29 72 65 74 75 72 6e 22 77 68 69 74 65 22 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d Data Ascii: ],["#202020"]),s=e(r,["45,50,54"],["#2d3236"]),u=e(r,["255,250,239"],["#fffaef"]);if(o\|\|a\|\|s)return"black";if(i\|\|u)return"white"}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getCom
2024-08-27 18:07:02 UTC	16383	IN	Data Raw: 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 35 35 37 22 2c 50 50 5f 45 5f 4f 54 54 5f 44 41 54 41 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 33 34 38 46 22 2c 50 50 5f 45 5f 4f 54 54 5f 41 4c 52 45 41 44 59 5f 43 4f 4e 53 55 4d 45 44 3a 22 38 30 30 34 33 34 39 30 22 2c 50 50 5f 45 5f 4f 54 54 5f 49 4e 56 41 4c 49 44 5f 50 55 52 50 4f 53 45 3a 22 38 30 30 34 33 34 39 36 22 2c 50 50 5f 45 5f 50 50 53 41 5f 52 50 54 5f 4e 4f 54 4f 41 44 44 52 45 53 53 3a 22 38 30 30 34 38 31 32 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 45 53 53 5f 42 41 44 44 45 56 49 43 45 4e 41 4d 45 3a 22 38 30 30 34 39 43 32 32 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c Data Ascii: PASSWORD:"80043557",PP_E_OTT_DATA_INVALID:"8004348F",PP_E_OTT_ALREADY_CONSUMED:"80043490",PP_E_OTT_INVALID_PURPOSE:"80043496",PP_E_PPSA_RPT_NOTOADDRESS:"80048120",PP_E_STRONGPROCESS_BADDEVICENAME:"80049C22",PP_E_INLINELOGIN_INVALID_SMS:"800434E1",PP_E_INL
2024-08-27 18:07:02 UTC	16383	IN	Data Raw: 2a 29 3f 24 2f 5d 2c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 74 2e 63 61 6c 6c 28 6e 2c 65 5b 72 5d 2c 72 2c 65 29 7d 2c 41 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 65 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 4c 62 Data Ascii: *)?$/],D:function(e,t,n){for(var r=0,o=e.length;r<o;r++)t.call(n,e[r],r,e)},A:"function"==typeof Array.prototype.indexOf?function(e,t){return Array.prototype.indexOf.call(e,t)}:function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},Lb
2024-08-27 18:07:02 UTC	16383	IN	Data Raw: 6e 2e 71 62 28 74 29 2c 53 2e 61 2e 41 62 28 74 2c 50 29 2c 53 2e 6f 70 74 69 6f 6e 73 2e 64 65 66 65 72 55 70 64 61 74 65 73 26 26 53 2e 54 61 2e 64 65 66 65 72 72 65 64 28 74 2c 21 30 29 2c 74 7d 3b 76 61 72 20 50 3d 7b 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 3a 6e 2c 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 77 5d 7d 2c 78 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 73 70 65 63 74 61 74 65 22 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 29 7d 2c 79 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 Data Ascii: n.qb(t),S.a.Ab(t,P),S.options.deferUpdates&&S.Ta.deferred(t,!0),t};var P={equalityComparer:n,v:function(){return this[w]},xa:function(){this.notifySubscribers(this[w],"spectate"),this.notifySubscribers(this[w])},ya:function(){this.notifySubscribers(this[w
2024-08-27 18:07:02 UTC	16383	IN	Data Raw: 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 61 2e 47 61 28 53 2e 75 2e 47 28 65 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 5b 6e 5d 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6f 28 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 72 29 29 3a 53 2e 61 2e 47 61 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2e 67 65 74 42 69 6e 64 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 2c 65 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 74 29 Data Ascii: n o(e){return S.a.Ga(S.u.G(e),(function(t,n){return function(){return e()[n]}}))}function i(e,t,r){return"function"==typeof e?o(e.bind(null,t,r)):S.a.Ga(e,n)}function c(e,t){return o(this.getBindings.bind(this,e,t))}function d(e,t){var n=S.h.firstChild(t)
2024-08-27 18:07:02 UTC	16383	IN	Data Raw: 26 26 28 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 28 30 2c 74 29 2c 53 2e 75 2e 47 28 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 41 66 74 65 72 52 65 6e 64 65 72 22 29 2c 6e 75 6c 6c 2c 5b 74 5b 30 5d 2c 65 21 3d 3d 44 3f 65 3a 61 5d 29 7d 29 2c 53 2e 61 2e 65 63 28 65 2c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 26 26 28 70 3d 21 6c 26 26 69 5b 30 5d 2e 73 65 6c 65 63 74 65 64 3f 5b 53 2e 77 2e 4d 28 69 5b 30 5d 29 5d 3a 5b 5d 2c 68 3d 21 30 29 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 2c 74 3d 3d 3d 44 3f 28 53 2e 61 2e 42 62 28 72 2c 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 43 61 70 74 69 6f 6e 22 29 Data Ascii: &&(c=function(e,t){i(0,t),S.u.G(n.get("optionsAfterRender"),null,[t[0],e!==D?e:a])}),S.a.ec(e,f,(function(t,r,i){return i.length&&(p=!l&&i[0].selected?[S.w.M(i[0])]:[],h=!0),r=e.ownerDocument.createElement("option"),t===D?(S.a.Bb(r,n.get("optionsCaption")
2024-08-27 18:07:02 UTC	16383	IN	Data Raw: 27 29 3b 22 7d 2c 6c 2e 74 6d 70 6c 2e 74 61 67 2e 6b 6f 5f 77 69 74 68 3d 7b 6f 70 65 6e 3a 22 77 69 74 68 28 24 31 29 20 7b 22 2c 63 6c 6f 73 65 3a 22 7d 20 22 7d 29 7d 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 53 2e 63 61 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 53 2e 24 61 3b 76 61 72 20 65 3d 6e 65 77 20 53 2e 24 61 3b 30 3c 65 2e 48 64 26 26 53 2e 67 63 28 65 29 2c 53 2e 62 28 22 6a 71 75 65 72 79 54 6d 70 6c 54 65 6d 70 6c 61 74 65 45 6e 67 69 6e 65 22 2c 53 2e 24 61 29 7d 28 29 7d 29 29 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f Data Ascii: ');"},l.tmpl.tag.ko_with={open:"with($1) {",close:"} "})},S.$a.prototype=new S.ca,S.$a.prototype.constructor=S.$a;var e=new S.$a;0<e.Hd&&S.gc(e),S.b("jqueryTmplTemplateEngine",S.$a)}()}))}()},function(e,t,n){function r(e){return(r="function"==typeof Symbo
2024-08-27 18:07:02 UTC	10801	IN	Data Raw: 69 6e 67 69 66 79 28 6e 29 7d 72 65 74 75 72 6e 20 74 26 26 28 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 5c 3f 2f 67 2c 22 5c 5c 75 30 30 33 46 22 29 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 65 2e 68 65 61 64 65 72 73 3d 62 28 29 2c 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 61 2c 65 2e 62 72 65 61 6b 43 61 63 68 65 3d 73 2c 65 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 3d 68 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 3b 69 66 28 74 29 7b 76 61 72 20 73 3d 74 2e 65 76 65 6e 74 4f 70 74 69 6f 6e 73 7c 7c 7b 7d 3b 69 66 28 73 2e 65 76 65 6e 74 49 64 3d 74 2e 65 76 65 6e 74 49 64 7c 7c 73 2e 65 76 65 6e 74 49 64 2c 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 68 69 64 69 Data Ascii: ingify(n)}return t&&(t=t.replace(/\?/g,"\\u003F")),t}function S(e){e.headers=b(),e.withCredentials=a,e.breakCache=s,e.responseType=h}function E(e,t,n,r,o,i){var a=null;if(t){var s=t.eventOptions\|\|{};if(s.eventId=t.eventId\|\|s.eventId,s.hasOwnProperty("hidi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49790	188.114.97.3	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:02 UTC	2667	OUT	GET /common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw&sso_reload=true HTTP/1.1 Host: subcg.tynurserys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://subcg.tynurserys.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=c261c7ab-25e1-6136-7230-2c97b30cfdad&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638603788201931742.53b05e7f-b301-45f2-9aaa-06ff174e4c3b&state=DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjRQGMFjJyap1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063; x-ms-gateway-slice=estsfd; esctx-760Fcq4eTww=AQABCQEAAAApTwJmzXqdR4BN2miheQMYx8BhBac_-dQXp-j71yrdzHsFdv7J_kMl_E9E3H5kc2Z4jE5t6ktfVJJ-a-idah5VREvrti1docxxj8pbcbKUobeYC7iptW_FVi6Zii4MWqfJMOp5WHxKe30VMfmDtAQyL8yLLvS6re32c9JRid4LFyAA; fpc=Ah-DUjHRs35IvQUf8G1BV9I; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMY_z6dHdWQ_8RiG5JkkVypmi-XaDg--4t3g-vPj1GB2NSKGlM10hdFLLjFQraz9UYiM4oetjfcQeZHmjsTW4x6k4kWgDINg1dcfTRVWbM7dK0rmYFs6pi5wkxGmb_ph4qbEdtPBzg7MzzQ1pUQjEGDa0igdu1WDRHh03oLZ21I27QgAA; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-08-27 18:07:03 UTC	1301	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:07:03 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store, no-cache Expires: -1 Link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch,<https://aadcdn.msauth.net>; rel=dns-prefetch Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]} Set-Cookie: buid=0.ASUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYp8vCtlo0g0Z0lI1QB0vBH8zK_y5-c_g2NAJp2Gw-75_PmwuisTr8dCywfslVfa0hVudegAn7Zi8Lq2z5SmqTUzAEbu0l-Ts-FYt7m_0IMiggAA; Path=/; Expires=Thu, 26 Sep 2024 18:07:03 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYcewsXJNyK-6BL1pZuLjBPIcSCOLBf2Rq3EdnT2fBTH9xJ1MgSL5R9ToVuEju9d2OVBXBGX_tK5D50PruDpoaqZbIE8I937bneHfNRKbt4J425FYR4Z8LWobepWqTE9Uc9tUq6O4D55m9T5iSGTTG4MzaP2FHLMeL7RG2pA0oka4gAA; Path=/; Domain=subcg.tynurserys.com; HttpOnly; Secure; SameSite=None
2024-08-27 18:07:03 UTC	785	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 65 73 63 74 78 2d 33 4c 4c 66 69 61 70 67 6a 68 73 3d 41 51 41 42 43 51 45 41 41 41 41 70 54 77 4a 6d 7a 58 71 64 52 34 42 4e 32 6d 69 68 65 51 4d 59 7a 5f 45 65 52 32 70 56 6e 2d 78 46 48 43 71 4d 32 79 64 56 49 66 57 30 75 32 45 67 41 49 5f 38 49 4e 62 47 4d 58 53 54 32 63 33 56 48 6b 4b 4f 62 4f 63 4e 43 6d 35 48 50 4f 70 48 38 51 58 6d 37 51 41 78 38 41 6a 78 54 67 59 34 64 67 77 48 49 6d 55 5f 50 6b 68 78 58 78 64 68 53 36 73 58 63 6b 62 58 55 76 37 54 34 56 70 41 77 5a 31 65 38 56 44 45 53 47 74 65 53 59 4e 65 67 5a 56 61 78 73 41 54 57 39 54 67 4f 67 36 74 41 65 70 68 70 65 48 45 6c 69 41 41 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 73 75 62 63 67 2e 74 79 6e 75 72 73 65 72 79 73 2e 63 6f 6d 3b 20 48 74 Data Ascii: Set-Cookie: esctx-3LLfiapgjhs=AQABCQEAAAApTwJmzXqdR4BN2miheQMYz_EeR2pVn-xFHCqM2ydVIfW0u2EgAI_8INbGMXST2c3VHkKObOcNCm5HPOpH8QXm7QAx8AjxTgY4dgwHImU_PkhxXxdhS6sXckbXUv7T4VpAwZ1e8VDESGteSYNegZVaxsATW9TgOg6tAephpeHEliAA; Path=/; Domain=subcg.tynurserys.com; Ht
2024-08-27 18:07:03 UTC	1369	IN	Data Raw: 34 30 30 30 0d 0a 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 4f 75 74 6c 6f 6f 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 Data Ascii: 4000... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head> <title>Sign in to Outlook</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2024-08-27 18:07:03 UTC	1369	IN	Data Raw: 74 79 6e 75 72 73 65 72 79 73 2e 63 6f 6d 2f 6c 6f 67 6f 75 74 2e 73 72 66 3f 69 66 72 61 6d 65 64 5f 62 79 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 73 75 62 63 67 2e 74 79 6e 75 72 73 65 72 79 73 2e 63 6f 6d 22 2c 22 75 72 6c 4f 74 68 65 72 49 64 70 46 6f 72 67 65 74 22 3a 22 68 74 74 70 73 3a 2f 2f 79 77 6e 6a 62 2e 74 79 6e 75 72 73 65 72 79 73 2e 63 6f 6d 2f 66 6f 72 67 65 74 6d 65 2e 73 72 66 3f 69 66 72 61 6d 65 64 5f 62 79 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 73 75 62 63 67 2e 74 79 6e 75 72 73 65 72 79 73 2e 63 6f 6d 22 2c 22 73 68 6f 77 43 61 6e 74 41 63 63 65 73 73 41 63 63 6f 75 6e 74 4c 69 6e 6b 22 3a 74 72 75 65 2c 22 75 72 6c 47 69 74 48 75 62 46 65 64 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e Data Ascii: tynurserys.com/logout.srf?iframed_by=https%3a%2f%2fsubcg.tynurserys.com","urlOtherIdpForget":"https://ywnjb.tynurserys.com/forgetme.srf?iframed_by=https%3a%2f%2fsubcg.tynurserys.com","showCantAccessAccountLink":true,"urlGitHubFed":"https://outlook.office.
2024-08-27 18:07:03 UTC	1369	IN	Data Raw: 69 6e 67 29 20 49 73 6c 61 6e 64 73 7e 36 31 21 21 21 43 4f 7e 43 6f 6c 6f 6d 62 69 61 7e 35 37 21 21 21 4b 4d 7e 43 6f 6d 6f 72 6f 73 7e 32 36 39 21 21 21 43 47 7e 43 6f 6e 67 6f 7e 32 34 32 21 21 21 43 44 7e 43 6f 6e 67 6f 20 28 44 52 43 29 7e 32 34 33 21 21 21 43 4b 7e 43 6f 6f 6b 20 49 73 6c 61 6e 64 73 7e 36 38 32 21 21 21 43 52 7e 43 6f 73 74 61 20 52 69 63 61 7e 35 30 36 21 21 21 43 49 7e 43 c3 b4 74 65 20 64 5c 75 30 30 32 37 49 76 6f 69 72 65 7e 32 32 35 21 21 21 48 52 7e 43 72 6f 61 74 69 61 7e 33 38 35 21 21 21 43 55 7e 43 75 62 61 7e 35 33 21 21 21 43 57 7e 43 75 72 61 c3 a7 61 6f 7e 35 39 39 21 21 21 43 59 7e 43 79 70 72 75 73 7e 33 35 37 21 21 21 43 5a 7e 43 7a 65 63 68 69 61 7e 34 32 30 21 21 21 44 4b 7e 44 65 6e 6d 61 72 6b 7e 34 35 21 21 Data Ascii: ing) Islands~61!!!CO~Colombia~57!!!KM~Comoros~269!!!CG~Congo~242!!!CD~Congo (DRC)~243!!!CK~Cook Islands~682!!!CR~Costa Rica~506!!!CI~Cte d\u0027Ivoire~225!!!HR~Croatia~385!!!CU~Cuba~53!!!CW~Curaao~599!!!CY~Cyprus~357!!!CZ~Czechia~420!!!DK~Denmark~45!!
2024-08-27 18:07:03 UTC	1369	IN	Data Raw: 33 37 30 21 21 21 4c 55 7e 4c 75 78 65 6d 62 6f 75 72 67 7e 33 35 32 21 21 21 4d 4f 7e 4d 61 63 61 6f 20 53 41 52 7e 38 35 33 21 21 21 4d 47 7e 4d 61 64 61 67 61 73 63 61 72 7e 32 36 31 21 21 21 4d 57 7e 4d 61 6c 61 77 69 7e 32 36 35 21 21 21 4d 59 7e 4d 61 6c 61 79 73 69 61 7e 36 30 21 21 21 4d 56 7e 4d 61 6c 64 69 76 65 73 7e 39 36 30 21 21 21 4d 4c 7e 4d 61 6c 69 7e 32 32 33 21 21 21 4d 54 7e 4d 61 6c 74 61 7e 33 35 36 21 21 21 4d 48 7e 4d 61 72 73 68 61 6c 6c 20 49 73 6c 61 6e 64 73 7e 36 39 32 21 21 21 4d 51 7e 4d 61 72 74 69 6e 69 71 75 65 7e 35 39 36 21 21 21 4d 52 7e 4d 61 75 72 69 74 61 6e 69 61 7e 32 32 32 21 21 21 4d 55 7e 4d 61 75 72 69 74 69 75 73 7e 32 33 30 21 21 21 59 54 7e 4d 61 79 6f 74 74 65 7e 32 36 32 21 21 21 4d 58 7e 4d 65 78 69 63 Data Ascii: 370!!!LU~Luxembourg~352!!!MO~Macao SAR~853!!!MG~Madagascar~261!!!MW~Malawi~265!!!MY~Malaysia~60!!!MV~Maldives~960!!!ML~Mali~223!!!MT~Malta~356!!!MH~Marshall Islands~692!!!MQ~Martinique~596!!!MR~Mauritania~222!!!MU~Mauritius~230!!!YT~Mayotte~262!!!MX~Mexic
2024-08-27 18:07:03 UTC	1369	IN	Data Raw: 35 21 21 21 53 58 7e 53 69 6e 74 20 4d 61 61 72 74 65 6e 7e 31 21 21 21 53 4b 7e 53 6c 6f 76 61 6b 69 61 7e 34 32 31 21 21 21 53 49 7e 53 6c 6f 76 65 6e 69 61 7e 33 38 36 21 21 21 53 42 7e 53 6f 6c 6f 6d 6f 6e 20 49 73 6c 61 6e 64 73 7e 36 37 37 21 21 21 53 4f 7e 53 6f 6d 61 6c 69 61 7e 32 35 32 21 21 21 5a 41 7e 53 6f 75 74 68 20 41 66 72 69 63 61 7e 32 37 21 21 21 53 53 7e 53 6f 75 74 68 20 53 75 64 61 6e 7e 32 31 31 21 21 21 45 53 7e 53 70 61 69 6e 7e 33 34 21 21 21 4c 4b 7e 53 72 69 20 4c 61 6e 6b 61 7e 39 34 21 21 21 53 48 7e 53 74 20 48 65 6c 65 6e 61 2c 20 41 73 63 65 6e 73 69 6f 6e 2c 20 61 6e 64 20 54 72 69 73 74 61 6e 20 64 61 20 43 75 6e 68 61 7e 32 39 30 21 21 21 53 44 7e 53 75 64 61 6e 7e 32 34 39 21 21 21 53 52 7e 53 75 72 69 6e 61 6d 65 7e Data Ascii: 5!!!SX~Sint Maarten~1!!!SK~Slovakia~421!!!SI~Slovenia~386!!!SB~Solomon Islands~677!!!SO~Somalia~252!!!ZA~South Africa~27!!!SS~South Sudan~211!!!ES~Spain~34!!!LK~Sri Lanka~94!!!SH~St Helena, Ascension, and Tristan da Cunha~290!!!SD~Sudan~249!!!SR~Suriname~
2024-08-27 18:07:03 UTC	1369	IN	Data Raw: 64 79 45 78 69 73 74 45 72 72 6f 72 48 61 6e 64 6c 69 6e 67 22 3a 74 72 75 65 2c 22 66 42 6c 6f 63 6b 4f 6e 41 70 70 6c 65 45 6d 61 69 6c 43 6c 61 69 6d 45 72 72 6f 72 22 3a 74 72 75 65 2c 22 66 49 73 56 65 72 69 66 69 61 62 6c 65 43 72 65 64 65 6e 74 69 61 6c 73 53 75 70 70 6f 72 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 56 65 72 69 66 69 61 62 6c 65 43 72 65 64 65 6e 74 69 61 6c 50 72 65 73 65 6e 74 61 74 69 6f 6e 50 6f 6c 6c 69 6e 67 49 6e 74 65 72 76 61 6c 53 65 63 6f 6e 64 73 22 3a 30 2e 35 2c 22 69 56 65 72 69 66 69 61 62 6c 65 43 72 65 64 65 6e 74 69 61 6c 50 72 65 73 65 6e 74 61 74 69 6f 6e 50 6f 6c 6c 69 6e 67 54 69 6d 65 6f 75 74 53 65 63 6f 6e 64 73 22 3a 33 30 30 2c 22 66 49 73 51 72 50 69 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c Data Ascii: dyExistErrorHandling":true,"fBlockOnAppleEmailClaimError":true,"fIsVerifiableCredentialsSupportEnabled":true,"iVerifiableCredentialPresentationPollingIntervalSeconds":0.5,"iVerifiableCredentialPresentationPollingTimeoutSeconds":300,"fIsQrPinEnabled":true,
2024-08-27 18:07:03 UTC	1369	IN	Data Raw: 55 53 5c 75 30 30 32 36 68 6f 73 74 65 64 3d 30 5c 75 30 30 32 36 64 65 76 69 63 65 5f 70 6c 61 74 66 6f 72 6d 3d 57 69 6e 64 6f 77 73 2b 31 30 22 2c 22 75 72 6c 4d 73 61 52 65 73 65 74 50 61 73 73 77 6f 72 64 22 3a 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 2e 74 79 6e 75 72 73 65 72 79 73 2e 63 6f 6d 2f 70 61 73 73 77 6f 72 64 2f 72 65 73 65 74 3f 77 72 65 70 6c 79 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 73 75 62 63 67 2e 74 79 6e 75 72 73 65 72 79 73 2e 63 6f 6d 25 32 66 63 6f 6d 6d 6f 6e 25 32 66 72 65 70 72 6f 63 65 73 73 25 33 66 63 74 78 25 33 64 72 51 51 49 41 52 41 41 6a 5a 45 37 62 4e 4e 67 41 49 54 39 31 36 6c 70 53 36 46 52 4a 79 5a 41 45 53 78 56 6e 66 78 4f 37 44 69 4f 31 43 47 4a 38 32 36 65 62 63 67 44 6f 63 68 32 66 73 66 4f 36 Data Ascii: US\u0026hosted=0\u0026device_platform=Windows+10","urlMsaResetPassword":"https://account.tynurserys.com/password/reset?wreply=https%3a%2f%2fsubcg.tynurserys.com%2fcommon%2freprocess%3fctx%3drQQIARAAjZE7bNNgAIT916lpS6FRJyZAESxVnfxO7DiO1CGJ826ebcgDoch2fsfO6
2024-08-27 18:07:03 UTC	1369	IN	Data Raw: 6c 47 65 74 4f 6e 65 54 69 6d 65 43 6f 64 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 62 63 67 2e 74 79 6e 75 72 73 65 72 79 73 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 47 65 74 4f 6e 65 54 69 6d 65 43 6f 64 65 22 2c 22 75 72 6c 4c 6f 67 6f 75 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 62 63 67 2e 74 79 6e 75 72 73 65 72 79 73 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 75 78 6c 6f 67 6f 75 74 22 2c 22 75 72 6c 46 6f 72 67 65 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 62 63 67 2e 74 79 6e 75 72 73 65 72 79 73 2e 63 6f 6d 2f 66 6f 72 67 65 74 75 73 65 72 22 2c 22 75 72 6c 44 69 73 61 6d 62 69 67 52 65 6e 61 6d 65 22 3a 22 68 74 74 70 73 3a 2f 2f 67 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 77 6c 69 6e 6b 2f 70 2f 3f 4c 69 6e 6b 49 44 3d 37 33 33 32 34 37 22 2c 22 Data Ascii: lGetOneTimeCode":"https://subcg.tynurserys.com/common/GetOneTimeCode","urlLogout":"https://subcg.tynurserys.com/common/uxlogout","urlForget":"https://subcg.tynurserys.com/forgetuser","urlDisambigRename":"https://go.microsoft.com/fwlink/p/?LinkID=733247","
2024-08-27 18:07:03 UTC	1369	IN	Data Raw: 31 7a 46 46 53 4d 4b 51 69 46 46 35 69 6c 39 35 4a 50 58 35 65 66 35 74 44 31 63 5f 44 72 59 79 70 64 31 59 43 76 62 71 72 2d 32 61 31 37 4e 51 74 79 4f 39 65 6a 48 64 76 78 50 62 52 33 4f 53 43 48 44 5a 5f 58 44 35 37 4e 59 56 6e 64 47 6b 72 32 42 77 22 7d 2c 22 6f 43 61 6e 63 65 6c 50 6f 73 74 50 61 72 61 6d 73 22 3a 7b 22 65 72 72 6f 72 22 3a 22 61 63 63 65 73 73 5f 64 65 6e 69 65 64 22 2c 22 65 72 72 6f 72 5f 73 75 62 63 6f 64 65 22 3a 22 63 61 6e 63 65 6c 22 2c 22 73 74 61 74 65 22 3a 22 44 59 75 39 44 6f 49 77 47 41 43 4c 76 6f 74 62 35 57 74 4c 5f 77 62 69 6f 44 45 4d 75 4b 43 4a 68 71 31 66 61 52 4f 49 42 41 4d 45 34 39 76 62 34 57 36 36 79 77 67 68 2d 38 51 75 6b 55 45 53 30 55 6f 59 42 55 49 62 77 34 46 5a 77 58 54 42 6a 31 49 67 79 4b 41 6a 52 Data Ascii: 1zFFSMKQiFF5il95JPX5ef5tD1c_DrYypd1YCvbqr-2a17NQtyO9ejHdvxPbR3OSCHDZ_XD57NYVndGkr2Bw"},"oCancelPostParams":{"error":"access_denied","error_subcode":"cancel","state":"DYu9DoIwGACLvotb5WtL_wbioDEMuKCJhq1faROIBAME49vb4W66ywgh-8QukUES0UoYBUIbw4FZwXTBj1IgyKAjR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49789	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:03 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:03 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1688246 Cache-Control: public, max-age=31536000 Content-MD5: bedopN8eDQBhzbUu8GNGxA== Content-Type: application/x-javascript Date: Tue, 27 Aug 2024 18:07:03 GMT Etag: 0x8DCB563C85A43C4 Last-Modified: Mon, 05 Aug 2024 15:32:14 GMT Server: ECAcc (lhc/78A8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb594470-e01e-0006-2151-e9b2d8000000 x-ms-version: 2009-09-19 Content-Length: 141866 Connection: close
2024-08-27 18:07:03 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-27 18:07:03 UTC	1	IN	Data Raw: 22 Data Ascii: "
2024-08-27 18:07:03 UTC	16383	IN	Data Raw: 5d 2c 5b 22 23 32 30 32 30 32 30 22 5d 29 2c 73 3d 65 28 72 2c 5b 22 34 35 2c 35 30 2c 35 34 22 5d 2c 5b 22 23 32 64 33 32 33 36 22 5d 29 2c 75 3d 65 28 72 2c 5b 22 32 35 35 2c 32 35 30 2c 32 33 39 22 5d 2c 5b 22 23 66 66 66 61 65 66 22 5d 29 3b 69 66 28 6f 7c 7c 61 7c 7c 73 29 72 65 74 75 72 6e 22 62 6c 61 63 6b 22 3b 69 66 28 69 7c 7c 75 29 72 65 74 75 72 6e 22 77 68 69 74 65 22 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d Data Ascii: ],["#202020"]),s=e(r,["45,50,54"],["#2d3236"]),u=e(r,["255,250,239"],["#fffaef"]);if(o\|\|a\|\|s)return"black";if(i\|\|u)return"white"}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getCom
2024-08-27 18:07:03 UTC	16383	IN	Data Raw: 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 35 35 37 22 2c 50 50 5f 45 5f 4f 54 54 5f 44 41 54 41 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 33 34 38 46 22 2c 50 50 5f 45 5f 4f 54 54 5f 41 4c 52 45 41 44 59 5f 43 4f 4e 53 55 4d 45 44 3a 22 38 30 30 34 33 34 39 30 22 2c 50 50 5f 45 5f 4f 54 54 5f 49 4e 56 41 4c 49 44 5f 50 55 52 50 4f 53 45 3a 22 38 30 30 34 33 34 39 36 22 2c 50 50 5f 45 5f 50 50 53 41 5f 52 50 54 5f 4e 4f 54 4f 41 44 44 52 45 53 53 3a 22 38 30 30 34 38 31 32 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 45 53 53 5f 42 41 44 44 45 56 49 43 45 4e 41 4d 45 3a 22 38 30 30 34 39 43 32 32 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c Data Ascii: PASSWORD:"80043557",PP_E_OTT_DATA_INVALID:"8004348F",PP_E_OTT_ALREADY_CONSUMED:"80043490",PP_E_OTT_INVALID_PURPOSE:"80043496",PP_E_PPSA_RPT_NOTOADDRESS:"80048120",PP_E_STRONGPROCESS_BADDEVICENAME:"80049C22",PP_E_INLINELOGIN_INVALID_SMS:"800434E1",PP_E_INL
2024-08-27 18:07:03 UTC	16383	IN	Data Raw: 2a 29 3f 24 2f 5d 2c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 74 2e 63 61 6c 6c 28 6e 2c 65 5b 72 5d 2c 72 2c 65 29 7d 2c 41 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 65 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 4c 62 Data Ascii: *)?$/],D:function(e,t,n){for(var r=0,o=e.length;r<o;r++)t.call(n,e[r],r,e)},A:"function"==typeof Array.prototype.indexOf?function(e,t){return Array.prototype.indexOf.call(e,t)}:function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},Lb
2024-08-27 18:07:03 UTC	3	IN	Data Raw: 6e 2e 71 Data Ascii: n.q
2024-08-27 18:07:03 UTC	16383	IN	Data Raw: 62 28 74 29 2c 53 2e 61 2e 41 62 28 74 2c 50 29 2c 53 2e 6f 70 74 69 6f 6e 73 2e 64 65 66 65 72 55 70 64 61 74 65 73 26 26 53 2e 54 61 2e 64 65 66 65 72 72 65 64 28 74 2c 21 30 29 2c 74 7d 3b 76 61 72 20 50 3d 7b 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 3a 6e 2c 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 77 5d 7d 2c 78 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 73 70 65 63 74 61 74 65 22 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 29 7d 2c 79 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 Data Ascii: b(t),S.a.Ab(t,P),S.options.deferUpdates&&S.Ta.deferred(t,!0),t};var P={equalityComparer:n,v:function(){return this[w]},xa:function(){this.notifySubscribers(this[w],"spectate"),this.notifySubscribers(this[w])},ya:function(){this.notifySubscribers(this[w],"
2024-08-27 18:07:03 UTC	16383	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 61 2e 47 61 28 53 2e 75 2e 47 28 65 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 5b 6e 5d 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6f 28 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 72 29 29 3a 53 2e 61 2e 47 61 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2e 67 65 74 42 69 6e 64 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 2c 65 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 74 29 3b 69 66 Data Ascii: (e){return S.a.Ga(S.u.G(e),(function(t,n){return function(){return e()[n]}}))}function i(e,t,r){return"function"==typeof e?o(e.bind(null,t,r)):S.a.Ga(e,n)}function c(e,t){return o(this.getBindings.bind(this,e,t))}function d(e,t){var n=S.h.firstChild(t);if
2024-08-27 18:07:03 UTC	16383	IN	Data Raw: 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 28 30 2c 74 29 2c 53 2e 75 2e 47 28 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 41 66 74 65 72 52 65 6e 64 65 72 22 29 2c 6e 75 6c 6c 2c 5b 74 5b 30 5d 2c 65 21 3d 3d 44 3f 65 3a 61 5d 29 7d 29 2c 53 2e 61 2e 65 63 28 65 2c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 26 26 28 70 3d 21 6c 26 26 69 5b 30 5d 2e 73 65 6c 65 63 74 65 64 3f 5b 53 2e 77 2e 4d 28 69 5b 30 5d 29 5d 3a 5b 5d 2c 68 3d 21 30 29 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 2c 74 3d 3d 3d 44 3f 28 53 2e 61 2e 42 62 28 72 2c 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 43 61 70 74 69 6f 6e 22 29 29 2c 53 Data Ascii: c=function(e,t){i(0,t),S.u.G(n.get("optionsAfterRender"),null,[t[0],e!==D?e:a])}),S.a.ec(e,f,(function(t,r,i){return i.length&&(p=!l&&i[0].selected?[S.w.M(i[0])]:[],h=!0),r=e.ownerDocument.createElement("option"),t===D?(S.a.Bb(r,n.get("optionsCaption")),S
2024-08-27 18:07:03 UTC	3	IN	Data Raw: 22 7d 2c Data Ascii: "},

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49795	188.114.97.3	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:04 UTC	762	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: ywnjb.tynurserys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fRIp=277ebffc0576bb673963fb1bfe25e277c8a5d8df5129a15a8289947c9a52d063
2024-08-27 18:07:04 UTC	1133	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 18:07:04 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=315360000 Expires: Fri, 25 Aug 2034 18:07:04 GMT P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Ppserver: PPV: 30 H: PH1PEPF00011FD5 V: 0 Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: uaid=e8473bd8885e46a693a74c663fb2872f; Path=/; Domain=ywnjb.tynurserys.com; HttpOnly; Secure; SameSite=None Set-Cookie: MSPRequ=id=N&lt=1724782024&co=1; Path=/; Domain=ywnjb.tynurserys.com; HttpOnly; Secure; SameSite=None Vary: Accept-Encoding X-Ms-Request-Id: 1292e3a1-b031-43d6-a1f5-e3553058c860 X-Ms-Route-Info: C555_BAY CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x2C70JemhWFNCZ%2Fzd6sYmBe8xH7uVKPfD9dA1%2B0ljTDRHi6x5kBpl6HW8pc02V2JPefAHnGu9Xal7W0eBrPVYC2TEqyAlLxQg086n%2BMFSZlWPNDh7YZyJfYSCjM7CHnPfIte4Imiwg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b9dffc29b194313-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 18:07:04 UTC	236	IN	Data Raw: 64 37 32 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 65 29 74 5b 73 5d 3d 65 5b 73 5d 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 69 66 28 73 5b 6e 5d 29 72 65 74 75 72 6e 20 73 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 73 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 65 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 Data Ascii: d72<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.expor
2024-08-27 18:07:04 UTC	1369	IN	Data Raw: 74 73 7d 76 61 72 20 73 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 2e 6d 3d 74 2c 65 2e 63 3d 73 2c 65 2e 70 3d 22 22 2c 65 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 66 5b 53 5d 2c 73 3d 30 2c 6e 3d 65 2e 6c 65 6e 67 74 68 3b 73 3c 6e 3b 2b 2b 73 29 69 66 28 65 5b 73 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 65 3d 74 2b 22 3d 22 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 6e 3d 30 2c 69 3d 73 2e 6c 65 6e 67 74 68 3b 6e 3c 69 3b 6e 2b 2b 29 7b 76 61 72 20 61 3d 73 5b 6e 5d 2e 72 65 Data Ascii: ts}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].re
2024-08-27 18:07:04 UTC	1369	IN	Data Raw: 72 4c 69 73 74 3a 5b 5d 2c 74 69 6c 65 73 53 74 61 74 65 3a 72 7d 3b 74 72 79 7b 76 61 72 20 6c 3d 7b 7d 3b 69 28 73 2c 53 2e 75 73 65 72 4c 69 73 74 2c 6c 29 2c 69 28 61 2c 53 2e 75 73 65 72 4c 69 73 74 2c 6c 29 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 2e 75 73 65 4d 73 61 53 65 73 73 69 6f 6e 53 74 61 74 65 29 2c 65 2e 75 73 65 4d 73 61 53 65 73 73 69 6f 6e 53 74 61 74 65 3d 3d 3d 21 30 26 26 28 30 21 3d 53 2e 75 73 65 72 4c 69 73 74 2e 6c 65 6e 67 74 68 3f 28 53 2e 74 69 6c 65 73 53 74 61 74 65 2e 68 61 73 53 74 6f 72 61 67 65 41 63 63 65 73 73 3d 32 2c 53 2e 74 69 6c 65 73 53 74 61 74 65 2e 74 72 61 6e 73 69 65 6e 74 53 74 61 74 65 3d 73 2c 53 2e 74 69 6c 65 73 53 74 61 74 65 2e 70 65 72 73 69 73 74 65 6e 74 53 74 61 74 65 3d 61 29 3a 22 66 75 6e 63 Data Ascii: rList:[],tilesState:r};try{var l={};i(s,S.userList,l),i(a,S.userList,l),console.log(e.useMsaSessionState),e.useMsaSessionState===!0&&(0!=S.userList.length?(S.tilesState.hasStorageAccess=2,S.tilesState.transientState=s,S.tilesState.persistentState=a):"func
2024-08-27 18:07:04 UTC	475	IN	Data Raw: 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 65 76 69 63 65 2e 73 75 62 63 67 2e 74 79 6e 75 72 73 65 72 79 73 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 77 69 6e 64 6f 77 73 2d 70 70 65 2e 6e 65 74 22 2c 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 77 69 6e 64 6f 77 73 2e 6e 65 74 22 2c 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 64 65 22 2c 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 70 61 72 74 6e 65 72 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6e 22 2c 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 63 68 69 6e 61 63 6c 6f 75 64 61 70 69 2e 63 6e 22 2c 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 Data Ascii: //login.microsoft.com","https://device.subcg.tynurserys.com","https://login.windows-ppe.net","https://login.windows.net","https://login.microsoftonline.de","https://login.partner.microsoftonline.cn","https://login.chinacloudapi.cn","https://login.microsof
2024-08-27 18:07:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49792	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:04 UTC	650	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://subcg.tynurserys.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:04 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4688295 Cache-Control: public, max-age=31536000 Content-MD5: SJgdPPV+fFjKfj6FHvk1Tg== Content-Type: text/css Date: Tue, 27 Aug 2024 18:07:04 GMT Etag: 0x8DC9BAA0E5931F9 Last-Modified: Wed, 03 Jul 2024 21:49:46 GMT Server: ECAcc (lhc/794C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 6c7d298f-b01e-00dc-1d08-ce9a59000000 x-ms-version: 2009-09-19 Content-Length: 113401 Connection: close
2024-08-27 18:07:04 UTC	15668	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-08-27 18:07:04 UTC	16383	IN	Data Raw: 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6c 67 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 73 6d 2d 31 33 2c 2e 63 6f 6c 2d 6d 64 2d 31 33 2c 2e 63 6f 6c 2d 6c 67 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 73 6d 2d 31 34 2c 2e 63 6f 6c 2d 6d 64 2d 31 34 2c 2e 63 6f 6c 2d 6c 67 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 73 6d 2d 31 35 2c 2e 63 6f 6c 2d 6d 64 2d 31 35 2c 2e 63 6f 6c 2d 6c 67 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 Data Ascii: 10,.col-md-10,.col-lg-10,.col-xs-11,.col-sm-11,.col-md-11,.col-lg-11,.col-xs-12,.col-sm-12,.col-md-12,.col-lg-12,.col-xs-13,.col-sm-13,.col-md-13,.col-lg-13,.col-xs-14,.col-sm-14,.col-md-14,.col-lg-14,.col-xs-15,.col-sm-15,.col-md-15,.col-lg-15,.col-xs-16
2024-08-27 18:07:04 UTC	16383	IN	Data Raw: 31 36 2e 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 39 2e 31 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 37 2e 35 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 31 7b 6d 61 Data Ascii: 16.66667%}.col-xl-offset-5{margin-left:20.83333%}.col-xl-offset-6{margin-left:25%}.col-xl-offset-7{margin-left:29.16667%}.col-xl-offset-8{margin-left:33.33333%}.col-xl-offset-9{margin-left:37.5%}.col-xl-offset-10{margin-left:41.66667%}.col-xl-offset-11{ma
2024-08-27 18:07:04 UTC	16383	IN	Data Raw: 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 74 68 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 74 61 62 6c 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 7b 70 61 64 64 69 6e 67 3a 31 36 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 7b 76 65 72 74 69 63 61 6c Data Ascii: {background-color:transparent}th{text-align:left}.table{width:100%;max-width:100%}.table>thead>tr>th,.table>thead>tr>td,.table>tbody>tr>th,.table>tbody>tr>td,.table>tfoot>tr>th,.table>tfoot>tr>td{padding:16px;vertical-align:top}.table>thead>tr>th{vertical
2024-08-27 18:07:04 UTC	16383	IN	Data Raw: 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 20 57 65 62 66 6f 6e 74 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 65 67 6f 65 20 55 49 20 53 65 6d 69 6c 69 67 68 74 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 20 57 65 62 66 6f 6e 74 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 65 67 6f 65 20 55 49 20 42 6f 6c 64 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 20 57 65 62 66 6f 6e 74 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 65 Data Ascii: e{font-family:"Segoe UI Webfont";font-weight:300;src:local("Segoe UI Semilight")}@font-face{font-family:"Segoe UI Webfont";font-weight:700;src:local("Segoe UI Bold")}@font-face{font-family:"Segoe UI Webfont";font-style:italic;font-weight:400;src:local("Se
2024-08-27 18:07:04 UTC	16383	IN	Data Raw: 74 6e 3a 68 6f 76 65 72 2c 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 32 62 32 62 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 33 29 7d 2e 62 74 6e 2d 66 6f 63 75 73 2c 2e 62 74 6e 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b Data Ascii: tn:hover,button:hover,input[type="button"]:hover,input[type="submit"]:hover,input[type="reset"]:hover{background-color:#b2b2b2;background-color:rgba(0,0,0,0.3)}.btn-focus,.btn:focus,button:focus,input[type="button"]:focus,input[type="submit"]:focus,input[
2024-08-27 18:07:04 UTC	15818	IN	Data Raw: 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 Data Ascii: x;margin-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;padding:0;margin-top:16px;margin-bot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49793	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:04 UTC	627	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_Cr8LUIyurKoYeKwC2s2vJw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://subcg.tynurserys.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:04 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2115850 Cache-Control: public, max-age=31536000 Content-MD5: XdA3PTF7ELjiUxPFhCN6sg== Content-Type: application/x-javascript Date: Tue, 27 Aug 2024 18:07:04 GMT Etag: 0x8DCB28281F2768D Last-Modified: Thu, 01 Aug 2024 23:34:37 GMT Server: ECAcc (lhc/7943) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8acf04ea-101e-00ed-606d-e58161000000 x-ms-version: 2009-09-19 Content-Length: 449314 Connection: close
2024-08-27 18:07:04 UTC	15652	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-27 18:07:04 UTC	732	IN	Data Raw: 48 45 4e 54 49 43 41 54 45 44 3a 22 38 30 30 34 35 35 33 38 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 4f 54 48 45 52 3a 22 38 30 30 34 35 35 33 39 22 2c 50 50 5f 45 5f 53 51 5f 43 4f 4e 54 41 49 4e 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 34 31 45 22 2c 50 50 5f 45 5f 53 41 5f 43 4f 4e 54 41 49 4e 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 34 31 43 22 2c 50 50 5f 45 5f 53 41 5f 43 4f 4e 54 41 49 4e 45 44 5f 49 4e 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 34 31 44 22 2c 50 50 5f 45 5f 4c 49 42 50 48 4f 4e 45 4e 55 4d 42 45 52 49 4e 54 45 52 4f 50 5f 4e 55 4d 42 45 52 50 41 52 53 45 5f 45 58 43 45 50 54 49 4f 4e 3a 22 38 30 30 34 33 35 31 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 Data Ascii: HENTICATED:"80045538",PP_E_HIP_VALIDATION_ERROR_OTHER:"80045539",PP_E_SQ_CONTAINS_PASSWORD:"8004341E",PP_E_SA_CONTAINS_PASSWORD:"8004341C",PP_E_SA_CONTAINED_IN_PASSWORD:"8004341D",PP_E_LIBPHONENUMBERINTEROP_NUMBERPARSE_EXCEPTION:"80043510",PP_E_STRONGPROC
2024-08-27 18:07:04 UTC	16383	IN	Data Raw: 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 Data Ascii: ING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthorize
2024-08-27 18:07:04 UTC	16383	IN	Data Raw: 69 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 6f 2b 31 29 2c 22 26 22 2c 22 3d 22 29 29 3a 2d 31 21 3d 3d 61 26 26 2d 31 3d 3d 3d 6f 3f 28 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 29 2c 74 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 61 2b 31 29 2c 22 26 22 2c 22 3d 22 29 29 3a 2d 31 21 3d 3d 61 26 26 2d 31 21 3d 3d 6f 26 26 28 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 29 2c 74 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 61 2b 31 2c 6f 29 2c 22 26 22 2c 22 3d 22 29 2c 69 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 6f 2b 31 29 2c 22 26 22 2c 22 3d 22 29 29 7d 72 65 74 75 72 6e 7b 6f 72 69 67 Data Ascii: i=d.doubleSplit(e.substring(o+1),"&","=")):-1!==a&&-1===o?(n=e.substring(0,a),t=d.doubleSplit(e.substring(a+1),"&","=")):-1!==a&&-1!==o&&(n=e.substring(0,a),t=d.doubleSplit(e.substring(a+1,o),"&","="),i=d.doubleSplit(e.substring(o+1),"&","="))}return{orig
2024-08-27 18:07:04 UTC	16383	IN	Data Raw: 6e 7b 65 76 65 6e 74 49 64 3a 65 2c 65 76 65 6e 74 4c 65 76 65 6c 3a 74 7c 7c 69 2e 45 76 65 6e 74 4c 65 76 65 6c 2e 49 6e 66 6f 2c 68 69 64 69 6e 67 4d 6f 64 65 3a 6e 3f 69 2e 48 69 64 69 6e 67 4d 6f 64 65 2e 4e 6f 6e 65 3a 69 2e 48 69 64 69 6e 67 4d 6f 64 65 2e 48 69 64 65 7d 7d 2c 73 2e 61 74 74 61 63 68 56 69 65 77 4c 6f 61 64 43 6c 69 65 6e 74 54 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3d 28 6e 3d 22 61 74 74 61 63 68 56 69 65 77 4c 6f 61 64 43 6c 69 65 6e 74 54 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 5b 6e 5d 2e 61 70 70 6c 79 28 61 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 73 2e 6c 6f 67 45 76 65 6e 74 3d 75 28 22 6c 6f 67 45 76 65 6e 74 22 29 2c 73 2e 6c 6f 67 55 73 65 72 Data Ascii: n{eventId:e,eventLevel:t\|\|i.EventLevel.Info,hidingMode:n?i.HidingMode.None:i.HidingMode.Hide}},s.attachViewLoadClientTracingOptions=(n="attachViewLoadClientTracingOptions",function(){if(a)return a[n].apply(a,arguments)}),s.logEvent=u("logEvent"),s.logUser
2024-08-27 18:07:04 UTC	16383	IN	Data Raw: 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 77 3d 65 2e 6e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 3b 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 76 61 72 20 6e 3d 21 31 2c 74 3d 64 2e 67 65 74 52 65 73 70 6f 6e 73 65 4a 73 6f 6e 28 29 3b 67 3d 74 5b 73 2e 46 6c 6f 77 54 6f 6b 65 6e 5d 7c 7c 22 22 2c 74 5b 73 2e 53 74 61 74 65 5d 3f 28 6c 3d 74 5b 73 2e 53 74 61 74 65 5d 2c 75 3d 74 5b 73 2e 53 65 73 73 69 6f 6e 4c 6f 6f 6b 75 70 4b 65 79 5d 7c 7c 22 22 2c 66 3d 74 5b 73 2e 44 69 73 70 6c 61 79 53 69 67 6e 46 6f 72 55 49 5d 7c 7c 22 22 2c 6e 3d 6c 21 3d 3d 70 2e 53 75 63 63 65 73 73 29 3a 28 6c 3d 70 2e 45 72 72 6f 72 2c 75 3d 22 22 2c 66 3d 22 22 2c 6e 3d 21 30 29 2c 6e 3f 6c 3d 3d 3d 70 2e 46 54 45 72 72 6f 72 3f 68 28 65 2c 64 29 3a 76 28 Data Ascii: orwardedClientId,w=e.noPaBubbleVersion;function y(e){var n=!1,t=d.getResponseJson();g=t[s.FlowToken]\|\|"",t[s.State]?(l=t[s.State],u=t[s.SessionLookupKey]\|\|"",f=t[s.DisplaySignForUI]\|\|"",n=l!==p.Success):(l=p.Error,u="",f="",n=!0),n?l===p.FTError?h(e,d):v(
2024-08-27 18:07:04 UTC	4	IN	Data Raw: 64 70 52 65 Data Ascii: dpRe
2024-08-27 18:07:04 UTC	16383	IN	Data Raw: 64 69 72 65 63 74 50 6f 73 74 50 61 72 61 6d 73 3d 7b 53 41 4d 4c 52 65 71 75 65 73 74 3a 6f 2e 53 61 6d 6c 52 65 71 75 65 73 74 2c 52 65 6c 61 79 53 74 61 74 65 3a 6f 2e 52 65 6c 61 79 53 74 61 74 65 2c 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3a 65 7d 29 3a 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 62 65 29 7b 76 61 72 20 74 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 22 3f 22 2b 62 65 2c 22 77 63 74 78 22 2c 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 2b 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 22 3f 22 2b 62 65 29 29 3b 74 3d 74 2e 73 75 62 73 74 72 28 31 29 2c 65 3d 70 2e 61 70 70 65 6e 64 28 65 2c 74 29 7d 65 6c 73 65 20 65 3d 70 2e 61 70 70 65 Data Ascii: directPostParams={SAMLRequest:o.SamlRequest,RelayState:o.RelayState,unsafe_username:e}):i.idpRedirectUrl=function(e,n){if(be){var t=p.appendOrReplace("?"+be,"wctx","LoginOptions%3D3%26"+p.extract("wctx","?"+be));t=t.substr(1),e=p.append(e,t)}else e=p.appe
2024-08-27 18:07:04 UTC	16383	IN	Data Raw: 65 6c 65 63 74 65 64 43 72 65 64 53 68 6f 77 6e 4f 6e 6c 79 4f 6e 50 69 63 6b 65 72 3d 21 31 2c 6e 2e 73 77 69 74 63 68 54 6f 43 72 65 64 49 64 3d 6e 75 6c 6c 2c 6e 2e 73 77 69 74 63 68 54 6f 43 72 65 64 54 65 78 74 3d 6e 75 6c 6c 2c 6e 2e 73 68 6f 77 53 77 69 74 63 68 54 6f 43 72 65 64 50 69 63 6b 65 72 4c 69 6e 6b 3d 21 31 2c 6e 2e 73 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 3d 76 2c 6e 2e 69 73 55 73 65 72 4b 6e 6f 77 6e 3d 21 21 75 2e 63 72 65 64 54 79 70 65 2c 6e 2e 64 69 73 70 6c 61 79 48 65 6c 70 3d 21 75 2e 63 72 65 64 54 79 70 65 2c 6e 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 3d 68 2c 6e 2e 69 73 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 3d 44 2c 6e 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 3d Data Ascii: electedCredShownOnlyOnPicker=!1,n.switchToCredId=null,n.switchToCredText=null,n.showSwitchToCredPickerLink=!1,n.showForgotUsername=v,n.isUserKnown=!!u.credType,n.displayHelp=!u.credType,n.hideCredSwitchLink=h,n.isOfflineAccountVisible=D,n.ariaDescribedBy=
2024-08-27 18:07:04 UTC	16383	IN	Data Raw: 3a 65 2e 6e 61 6d 65 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 2c 69 64 70 3a 61 2e 53 65 73 73 69 6f 6e 49 64 70 2e 41 61 64 2c 73 73 6f 4c 69 6e 6b 3a 65 2e 75 72 6c 2c 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 2c 69 73 53 69 67 6e 65 64 49 6e 3a 65 2e 69 73 53 69 67 6e 65 64 49 6e 7d 7d 29 29 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 32 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 6f 3d 65 2c 72 3d 6f 2e 66 48 69 64 65 46 6f 6f 74 65 72 2c 73 3d 6f 2e 66 53 68 6f 77 50 61 67 65 4c 65 76 65 6c 54 69 74 6c 65 41 6e 64 44 65 73 63 2c Data Ascii: :e.name,displayName:e.displayName,idp:a.SessionIdp.Aad,ssoLink:e.url,isWindowsSso:e.isWindowsSso,isSignedIn:e.isSignedIn}}))}};e.exports=r},function(e,n,t){var i=t(2);e.exports=function(e,n,t){var a=this,o=e,r=o.fHideFooter,s=o.fShowPageLevelTitleAndDesc,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49794	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:04 UTC	646	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://subcg.tynurserys.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:04 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2115850 Cache-Control: public, max-age=31536000 Content-MD5: Rm+S3xFatg5Am1LOmufX9g== Content-Type: application/x-javascript Date: Tue, 27 Aug 2024 18:07:04 GMT Etag: 0x8DCB32DEE62CF26 Last-Modified: Fri, 02 Aug 2024 20:01:43 GMT Server: ECAcc (lhc/78A1) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 613e53e1-f01e-00f5-7a6d-e55e06000000 x-ms-version: 2009-09-19 Content-Length: 56391 Connection: close
2024-08-27 18:07:04 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-08-27 18:07:04 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-08-27 18:07:04 UTC	16383	IN	Data Raw: 6e 67 20 6f 75 72 20 3c 73 74 72 6f 6e 67 3e 6e 65 77 20 73 69 67 6e 2d 69 6e 20 65 78 70 65 72 69 65 6e 63 65 3c 2f 73 74 72 6f 6e 67 3e 22 2c 65 2e 57 46 5f 53 54 52 5f 53 69 67 6e 55 70 4c 69 6e 6b 5f 54 65 78 74 3d 27 4e 6f 20 61 63 63 6f 75 6e 74 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 73 69 67 6e 75 70 22 3e 43 72 65 61 74 65 20 6f 6e 65 21 3c 2f 61 3e 27 2c 65 2e 43 54 5f 48 52 44 5f 53 54 52 5f 53 70 6c 69 74 74 65 72 5f 52 65 6e 61 6d 65 3d 27 54 69 72 65 64 20 6f 66 20 73 65 65 69 6e 67 20 74 68 69 73 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 69 44 69 73 61 6d 62 69 67 52 65 6e 61 6d 65 4c 69 6e 6b 22 3e 52 65 6e 61 6d 65 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 2e Data Ascii: ng our <strong>new sign-in experience</strong>",e.WF_STR_SignUpLink_Text='No account? <a href="#" id="signup">Create one!</a>',e.CT_HRD_STR_Splitter_Rename='Tired of seeing this? <a href="#" id="iDisambigRenameLink">Rename your personal Microsoft account.
2024-08-27 18:07:04 UTC	7242	IN	Data Raw: 6f 64 65 49 6e 63 6f 72 72 65 63 74 22 2c 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 3a 22 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 22 2c 4f 61 74 68 43 6f 64 65 4f 6c 64 3a 22 4f 61 74 68 43 6f 64 65 4f 6c 64 22 2c 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 3a 22 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 22 2c 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 3a 22 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 22 2c 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 65 61 63 68 65 64 3a 22 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 Data Ascii: odeIncorrect",OathCodeDuplicate:"OathCodeDuplicate",OathCodeOld:"OathCodeOld",ProofDataNotFound:"ProofDataNotFound",OathCodeCorrectButDeviceNotAllowed:"OathCodeCorrectButDeviceNotAllowed",OathCodeFailedMaxAllowedRetryReached:"OathCodeFailedMaxAllowedRetry

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49796	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:05 UTC	431	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:05 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2115851 Cache-Control: public, max-age=31536000 Content-MD5: Rm+S3xFatg5Am1LOmufX9g== Content-Type: application/x-javascript Date: Tue, 27 Aug 2024 18:07:05 GMT Etag: 0x8DCB32DEE62CF26 Last-Modified: Fri, 02 Aug 2024 20:01:43 GMT Server: ECAcc (lhc/78A1) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 613e53e1-f01e-00f5-7a6d-e55e06000000 x-ms-version: 2009-09-19 Content-Length: 56391 Connection: close
2024-08-27 18:07:05 UTC	15653	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-08-27 18:07:05 UTC	16383	IN	Data Raw: 6e 3d 22 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 50 65 6e 64 69 6e 67 5f 54 69 74 6c 65 3d 22 53 68 61 72 65 20 61 20 56 65 72 69 66 69 65 64 20 49 44 20 74 6f 20 61 63 63 65 73 73 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 50 65 6e 64 69 6e 67 5f 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 4f 70 65 6e 20 74 68 65 20 4d 69 63 72 6f 73 6f 66 74 20 41 75 74 68 65 6e 74 69 63 61 74 6f 72 20 61 70 70 20 61 6e 64 20 73 63 61 6e 20 74 68 65 20 51 52 20 63 6f 64 65 20 74 6f 20 73 68 61 72 65 20 74 68 65 20 72 65 71 75 65 73 74 65 64 20 56 65 72 69 66 69 65 64 20 49 44 73 2e 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 52 65 66 72 65 73 68 5f 42 75 74 74 6f 6e 3d 22 52 65 66 72 65 73 68 22 2c 6f 2e 66 55 73 65 4e 65 77 50 68 6f Data Ascii: n="Redirecting...",e.CT_VC_STR_Pending_Title="Share a Verified ID to access",e.CT_VC_STR_Pending_Description="Open the Microsoft Authenticator app and scan the QR code to share the requested Verified IDs.",e.CT_VC_STR_Refresh_Button="Refresh",o.fUseNewPho
2024-08-27 18:07:05 UTC	16383	IN	Data Raw: 70 6f 72 74 65 64 2e 20 54 72 79 20 73 69 67 6e 69 6e 67 20 69 6e 20 77 69 74 68 20 61 6e 6f 74 68 65 72 20 6d 65 74 68 6f 64 2e 22 2c 0a 6f 2e 66 53 68 6f 77 55 73 65 72 41 6c 72 65 61 64 79 45 78 69 73 74 45 72 72 6f 72 48 61 6e 64 6c 69 6e 67 26 26 28 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 45 72 72 6f 72 5f 45 6d 61 69 6c 41 63 63 6f 75 6e 74 45 78 69 73 74 73 3d 22 41 6e 20 61 63 63 6f 75 6e 74 20 77 69 74 68 20 74 68 61 74 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 61 6c 72 65 61 64 79 20 65 78 69 73 74 73 2e 22 2c 65 2e 43 54 5f 55 73 65 72 41 6c 72 65 61 64 79 45 78 69 73 74 73 5f 45 72 72 6f 72 5f 53 54 52 5f 54 69 74 6c 65 3d 22 41 63 63 6f 75 6e 74 20 61 6c 72 65 61 64 79 20 65 78 69 73 74 73 22 2c 65 2e 43 54 5f 55 73 65 72 41 6c 72 65 61 64 Data Ascii: ported. Try signing in with another method.",o.fShowUserAlreadyExistErrorHandling&&(e.CT_PWD_STR_Error_EmailAccountExists="An account with that email address already exists.",e.CT_UserAlreadyExists_Error_STR_Title="Account already exists",e.CT_UserAlread
2024-08-27 18:07:06 UTC	7972	IN	Data Raw: 61 6c 69 64 45 78 74 65 6e 73 69 6f 6e 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 45 78 74 65 6e 73 69 6f 6e 22 2c 49 6e 76 61 6c 69 64 46 6f 72 6d 61 74 3a 22 49 6e 76 61 6c 69 64 46 6f 72 6d 61 74 22 2c 55 73 65 72 41 75 74 68 46 61 69 6c 65 64 44 75 70 6c 69 63 61 74 65 52 65 71 75 65 73 74 3a 22 55 73 65 72 41 75 74 68 46 61 69 6c 65 64 44 75 70 6c 69 63 61 74 65 52 65 71 75 65 73 74 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 55 6e 72 65 61 63 68 61 62 6c 65 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 55 6e 72 65 61 63 68 61 62 6c 65 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 72 6f 76 69 64 65 72 43 6f 75 6c 64 6e 74 53 Data Ascii: alidExtension:"UserVoiceAuthFailedInvalidExtension",InvalidFormat:"InvalidFormat",UserAuthFailedDuplicateRequest:"UserAuthFailedDuplicateRequest",UserVoiceAuthFailedPhoneUnreachable:"UserVoiceAuthFailedPhoneUnreachable",UserVoiceAuthFailedProviderCouldntS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49797	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:05 UTC	412	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_Cr8LUIyurKoYeKwC2s2vJw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:06 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2115852 Cache-Control: public, max-age=31536000 Content-MD5: XdA3PTF7ELjiUxPFhCN6sg== Content-Type: application/x-javascript Date: Tue, 27 Aug 2024 18:07:06 GMT Etag: 0x8DCB28281F2768D Last-Modified: Thu, 01 Aug 2024 23:34:37 GMT Server: ECAcc (lhc/7943) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8acf04ea-101e-00ed-606d-e58161000000 x-ms-version: 2009-09-19 Content-Length: 449314 Connection: close
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: DING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthoriz
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 2c 69 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 6f 2b 31 29 2c 22 26 22 2c 22 3d 22 29 29 3a 2d 31 21 3d 3d 61 26 26 2d 31 3d 3d 3d 6f 3f 28 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 29 2c 74 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 61 2b 31 29 2c 22 26 22 2c 22 3d 22 29 29 3a 2d 31 21 3d 3d 61 26 26 2d 31 21 3d 3d 6f 26 26 28 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 29 2c 74 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 61 2b 31 2c 6f 29 2c 22 26 22 2c 22 3d 22 29 2c 69 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 6f 2b 31 29 2c 22 26 22 2c 22 3d 22 29 29 7d 72 65 74 75 72 6e 7b 6f 72 69 Data Ascii: ,i=d.doubleSplit(e.substring(o+1),"&","=")):-1!==a&&-1===o?(n=e.substring(0,a),t=d.doubleSplit(e.substring(a+1),"&","=")):-1!==a&&-1!==o&&(n=e.substring(0,a),t=d.doubleSplit(e.substring(a+1,o),"&","="),i=d.doubleSplit(e.substring(o+1),"&","="))}return{ori
2024-08-27 18:07:06 UTC	3	IN	Data Raw: 72 6e 7b Data Ascii: rn{
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 65 76 65 6e 74 49 64 3a 65 2c 65 76 65 6e 74 4c 65 76 65 6c 3a 74 7c 7c 69 2e 45 76 65 6e 74 4c 65 76 65 6c 2e 49 6e 66 6f 2c 68 69 64 69 6e 67 4d 6f 64 65 3a 6e 3f 69 2e 48 69 64 69 6e 67 4d 6f 64 65 2e 4e 6f 6e 65 3a 69 2e 48 69 64 69 6e 67 4d 6f 64 65 2e 48 69 64 65 7d 7d 2c 73 2e 61 74 74 61 63 68 56 69 65 77 4c 6f 61 64 43 6c 69 65 6e 74 54 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3d 28 6e 3d 22 61 74 74 61 63 68 56 69 65 77 4c 6f 61 64 43 6c 69 65 6e 74 54 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 5b 6e 5d 2e 61 70 70 6c 79 28 61 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 73 2e 6c 6f 67 45 76 65 6e 74 3d 75 28 22 6c 6f 67 45 76 65 6e 74 22 29 2c 73 2e 6c 6f 67 55 73 65 72 49 6e Data Ascii: eventId:e,eventLevel:t\|\|i.EventLevel.Info,hidingMode:n?i.HidingMode.None:i.HidingMode.Hide}},s.attachViewLoadClientTracingOptions=(n="attachViewLoadClientTracingOptions",function(){if(a)return a[n].apply(a,arguments)}),s.logEvent=u("logEvent"),s.logUserIn
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 77 3d 65 2e 6e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 3b 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 76 61 72 20 6e 3d 21 31 2c 74 3d 64 2e 67 65 74 52 65 73 70 6f 6e 73 65 4a 73 6f 6e 28 29 3b 67 3d 74 5b 73 2e 46 6c 6f 77 54 6f 6b 65 6e 5d 7c 7c 22 22 2c 74 5b 73 2e 53 74 61 74 65 5d 3f 28 6c 3d 74 5b 73 2e 53 74 61 74 65 5d 2c 75 3d 74 5b 73 2e 53 65 73 73 69 6f 6e 4c 6f 6f 6b 75 70 4b 65 79 5d 7c 7c 22 22 2c 66 3d 74 5b 73 2e 44 69 73 70 6c 61 79 53 69 67 6e 46 6f 72 55 49 5d 7c 7c 22 22 2c 6e 3d 6c 21 3d 3d 70 2e 53 75 63 63 65 73 73 29 3a 28 6c 3d 70 2e 45 72 72 6f 72 2c 75 3d 22 22 2c 66 3d 22 22 2c 6e 3d 21 30 29 2c 6e 3f 6c 3d 3d 3d 70 2e 46 54 45 72 72 6f 72 3f 68 28 65 2c 64 29 3a 76 28 65 2c Data Ascii: wardedClientId,w=e.noPaBubbleVersion;function y(e){var n=!1,t=d.getResponseJson();g=t[s.FlowToken]\|\|"",t[s.State]?(l=t[s.State],u=t[s.SessionLookupKey]\|\|"",f=t[s.DisplaySignForUI]\|\|"",n=l!==p.Success):(l=p.Error,u="",f="",n=!0),n?l===p.FTError?h(e,d):v(e,
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 52 65 64 69 72 65 63 74 50 6f 73 74 50 61 72 61 6d 73 3d 7b 53 41 4d 4c 52 65 71 75 65 73 74 3a 6f 2e 53 61 6d 6c 52 65 71 75 65 73 74 2c 52 65 6c 61 79 53 74 61 74 65 3a 6f 2e 52 65 6c 61 79 53 74 61 74 65 2c 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3a 65 7d 29 3a 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 62 65 29 7b 76 61 72 20 74 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 22 3f 22 2b 62 65 2c 22 77 63 74 78 22 2c 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 2b 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 22 3f 22 2b 62 65 29 29 3b 74 3d 74 2e 73 75 62 73 74 72 28 31 29 2c 65 3d 70 2e 61 70 70 65 6e 64 28 65 2c 74 29 7d 65 6c 73 65 20 65 3d 70 2e 61 70 Data Ascii: RedirectPostParams={SAMLRequest:o.SamlRequest,RelayState:o.RelayState,unsafe_username:e}):i.idpRedirectUrl=function(e,n){if(be){var t=p.appendOrReplace("?"+be,"wctx","LoginOptions%3D3%26"+p.extract("wctx","?"+be));t=t.substr(1),e=p.append(e,t)}else e=p.ap
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 2e 73 65 6c 65 63 74 65 64 43 72 65 64 53 68 6f 77 6e 4f 6e 6c 79 4f 6e 50 69 63 6b 65 72 3d 21 31 2c 6e 2e 73 77 69 74 63 68 54 6f 43 72 65 64 49 64 3d 6e 75 6c 6c 2c 6e 2e 73 77 69 74 63 68 54 6f 43 72 65 64 54 65 78 74 3d 6e 75 6c 6c 2c 6e 2e 73 68 6f 77 53 77 69 74 63 68 54 6f 43 72 65 64 50 69 63 6b 65 72 4c 69 6e 6b 3d 21 31 2c 6e 2e 73 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 3d 76 2c 6e 2e 69 73 55 73 65 72 4b 6e 6f 77 6e 3d 21 21 75 2e 63 72 65 64 54 79 70 65 2c 6e 2e 64 69 73 70 6c 61 79 48 65 6c 70 3d 21 75 2e 63 72 65 64 54 79 70 65 2c 6e 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 3d 68 2c 6e 2e 69 73 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 3d 44 2c 6e 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 Data Ascii: .selectedCredShownOnlyOnPicker=!1,n.switchToCredId=null,n.switchToCredText=null,n.showSwitchToCredPickerLink=!1,n.showForgotUsername=v,n.isUserKnown=!!u.credType,n.displayHelp=!u.credType,n.hideCredSwitchLink=h,n.isOfflineAccountVisible=D,n.ariaDescribedB
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 6d 65 3a 65 2e 6e 61 6d 65 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 2c 69 64 70 3a 61 2e 53 65 73 73 69 6f 6e 49 64 70 2e 41 61 64 2c 73 73 6f 4c 69 6e 6b 3a 65 2e 75 72 6c 2c 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 2c 69 73 53 69 67 6e 65 64 49 6e 3a 65 2e 69 73 53 69 67 6e 65 64 49 6e 7d 7d 29 29 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 32 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 6f 3d 65 2c 72 3d 6f 2e 66 48 69 64 65 46 6f 6f 74 65 72 2c 73 3d 6f 2e 66 53 68 6f 77 50 61 67 65 4c 65 76 65 6c 54 69 74 6c 65 41 6e 64 44 65 73 Data Ascii: me:e.name,displayName:e.displayName,idp:a.SessionIdp.Aad,ssoLink:e.url,isWindowsSso:e.isWindowsSso,isSignedIn:e.isSignedIn}}))}};e.exports=r},function(e,n,t){var i=t(2);e.exports=function(e,n,t){var a=this,o=e,r=o.fHideFooter,s=o.fShowPageLevelTitleAndDes
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 74 72 61 63 74 28 22 63 62 63 78 74 22 29 29 29 29 2c 65 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 76 76 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 2e 65 78 74 72 61 63 74 28 22 63 62 63 78 74 22 29 29 29 29 2c 65 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 75 73 65 72 6e 61 6d 65 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 2c 65 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 6d 6b 74 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 2e 65 78 74 72 61 63 74 28 22 6d 6b 74 22 29 29 29 29 2c 65 3d 66 2e 61 70 70 65 Data Ascii: tract("cbcxt")))),e=f.appendOrReplace(e,"vv",encodeURIComponent(decodeURIComponent(f.extract("cbcxt")))),e=f.appendOrReplace(e,"username",encodeURIComponent(t)),e=f.appendOrReplace(e,"mkt",encodeURIComponent(decodeURIComponent(f.extract("mkt")))),e=f.appe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49798	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:05 UTC	574	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:06 UTC	751	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13523044 Cache-Control: public, max-age=31536000 Content-MD5: wegr9xrdYirQ87+FcvY0/A== Content-Type: application/x-javascript Date: Tue, 27 Aug 2024 18:07:06 GMT Etag: 0x8DB5D44A2CEB430 Last-Modified: Thu, 25 May 2023 17:22:37 GMT Server: ECAcc (lhc/7931) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e556728b-d01e-00f6-6fae-7d057f000000 x-ms-version: 2009-09-19 Content-Length: 190152 Connection: close
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 2c 2c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 22 56 61 6c 75 65 4b 69 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 4c 61 74 65 6e 63 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 50 65 72 73 69 73 74 65 6e 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 62 7d Data Ascii: (window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b}
2024-08-27 18:07:06 UTC	1	IN	Data Raw: 74 Data Ascii: t
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 2c 22 50 72 6f 70 65 72 74 69 65 73 50 6c 75 67 69 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 50 6f 73 74 43 68 61 6e 6e 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 43 6f 72 65 55 74 69 6c 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 42 45 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 4e 52 54 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 62 7d 29 29 2c 6e 2e 64 28 74 2c 22 52 54 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: ,"PropertiesPlugin",(function(){return g.a})),n.d(t,"PostChannel",(function(){return v.a})),n.d(t,"CoreUtils",(function(){return c.a})),n.d(t,"BE_PROFILE",(function(){return p.a})),n.d(t,"NRT_PROFILE",(function(){return p.b})),n.d(t,"RT_PROFILE",(function
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 69 73 2e 74 79 70 65 4e 61 6d 65 29 29 7c 7c 22 6e 6f 74 5f 73 70 65 63 69 66 69 65 64 22 3b 76 61 72 20 61 3d 74 2e 73 74 61 63 6b 44 65 74 61 69 6c 73 7c 7c 6c 65 28 74 29 3b 74 68 69 73 2e 70 61 72 73 65 64 53 74 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 65 2e 6f 62 6a 3b 69 66 28 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 3d 5b 5d 3b 76 61 72 20 72 3d 30 2c 69 3d 30 3b 4f 62 6a 65 63 74 28 53 2e 62 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 67 65 2e 72 65 67 65 78 2e 74 65 73 74 28 6e 29 29 7b 76 61 72 20 61 3d 6e 65 77 20 67 65 28 6e 2c 72 2b 2b 29 3b 69 2b 3d 61 2e 73 69 7a 65 49 6e 42 79 74 65 73 2c 74 2e 70 75 73 68 28 61 29 7d 7d 29 29 3b Data Ascii: is.typeName))\|\|"not_specified";var a=t.stackDetails\|\|le(t);this.parsedStack=function(e){var t,n=e.obj;if(n&&n.length>0){t=[];var r=0,i=0;Object(S.b)(n,(function(e){var n=e.toString();if(ge.regex.test(n)){var a=new ge(n,r++);i+=a.sizeInBytes,t.push(a)}}));
2024-08-27 18:07:06 UTC	2	IN	Data Raw: 63 79 Data Ascii: cy
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 20 70 72 65 76 65 6e 74 73 20 75 73 20 66 72 6f 6d 20 67 65 74 74 69 6e 67 20 74 68 65 20 64 65 74 61 69 6c 73 20 6f 66 20 74 68 69 73 20 65 78 63 65 70 74 69 6f 6e 2e 20 43 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 68 65 20 27 63 72 6f 73 73 6f 72 69 67 69 6e 27 20 61 74 74 72 69 62 75 74 65 2e 22 2c 61 2c 74 2e 6c 69 6e 65 4e 75 6d 62 65 72 7c 7c 30 2c 74 2e 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 7c 7c 30 2c 6e 2c 72 2c 6e 75 6c 6c 2c 6f 29 2c 63 29 3a 28 74 2e 65 72 72 6f 72 53 72 63 7c 7c 28 74 2e 65 72 72 6f 72 53 72 63 3d 6f 29 2c 65 2e 74 72 61 63 6b 45 78 63 65 70 74 69 6f 6e 28 7b 65 78 63 65 70 74 69 6f 6e 3a 74 2c 73 65 76 65 72 69 74 79 4c 65 76 65 6c 3a 33 7d 2c 63 29 29 7d 63 61 74 63 68 28 65 29 7b 76 61 72 20 75 3d 6e 3f 6e 2e 6e 61 6d 65 Data Ascii: prevents us from getting the details of this exception. Consider using the 'crossorigin' attribute.",a,t.lineNumber\|\|0,t.columnNumber\|\|0,n,r,null,o),c):(t.errorSrc\|\|(t.errorSrc=o),e.trackException({exception:t,severityLevel:3},c))}catch(e){var u=n?n.name
2024-08-27 18:07:06 UTC	1	IN	Data Raw: 4f Data Ascii: O
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 62 6a 65 63 74 28 63 2e 74 29 28 65 29 3f 65 3a 7b 7d 3b 76 61 72 20 6e 3d 7b 7d 2c 72 3d 4f 62 6a 65 63 74 28 63 2e 74 29 28 74 29 3f 74 3a 7b 7d 3b 74 68 69 73 2e 5f 73 65 74 42 61 73 69 63 50 72 6f 70 65 72 74 69 65 73 28 6e 2c 65 29 2c 74 68 69 73 2e 5f 73 65 74 50 61 67 65 54 61 67 73 28 6e 2c 65 29 2c 6e 2e 69 73 4d 61 6e 75 61 6c 3d 21 65 2e 69 73 41 75 74 6f 2c 72 2e 62 65 68 61 76 69 6f 72 3d 74 68 69 73 2e 5f 67 65 74 42 65 68 61 76 69 6f 72 28 65 29 2c 72 2e 76 70 48 65 69 67 68 74 3d 65 2e 76 70 48 65 69 67 68 74 2c 72 2e 76 70 57 69 64 74 68 3d 65 2e 76 70 57 69 64 74 68 2c 72 2e 66 72 61 6d 65 77 6f 72 6b 3d 65 2e 66 72 61 6d 65 77 6f 72 6b 2c 72 2e 73 79 73 74 65 6d 54 69 6d 69 6e 67 3d 65 2e 73 79 73 74 65 6d 54 69 6d 69 6e 67 2c 72 2e 63 Data Ascii: bject(c.t)(e)?e:{};var n={},r=Object(c.t)(t)?t:{};this._setBasicProperties(n,e),this._setPageTags(n,e),n.isManual=!e.isAuto,r.behavior=this._getBehavior(e),r.vpHeight=e.vpHeight,r.vpWidth=e.vpWidth,r.framework=e.framework,r.systemTiming=e.systemTiming,r.c
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 5d 29 2c 65 2e 65 6d 70 74 79 53 6e 69 70 70 65 74 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 29 7b 4f 62 6a 65 63 74 28 53 2e 73 29 28 6e 29 7c 7c 6e 2c 4f 62 6a 65 63 74 28 53 2e 43 29 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 69 66 28 4f 62 6a 65 63 74 28 53 2e 76 29 28 6e 29 26 26 21 4f 62 6a 65 63 74 28 53 2e 70 29 28 72 29 26 26 6e 26 26 22 5f 22 21 3d 3d 6e 5b 30 5d 26 26 2d 31 3d 3d 3d 4f 62 6a 65 63 74 28 53 2e 63 29 28 52 74 2c 6e 29 29 74 72 79 7b 74 5b 6e 5d 3d 72 7d 63 61 74 63 68 28 74 29 7b 4f 62 6a 65 63 74 28 66 2e 64 29 28 65 2e 6c 6f 67 67 65 72 2c 32 2c 35 31 34 2c 22 46 61 69 6c 65 64 20 74 6f 20 73 65 74 20 5b 22 2b 6e 2b 22 5d 20 64 75 72 69 6e Data Ascii: ]),e.emptySnippetQueue=function(t){try{if(function(){if(t){Object(S.s)(n)\|\|n,Object(S.C)(e,(function(n,r){if(Object(S.v)(n)&&!Object(S.p)(r)&&n&&"_"!==n[0]&&-1===Object(S.c)(Rt,n))try{t[n]=r}catch(t){Object(f.d)(e.logger,2,514,"Failed to set ["+n+"] durin
2024-08-27 18:07:06 UTC	16383	IN	Data Raw: 69 6e 64 65 78 4f 66 28 74 2c 6e 29 3b 76 61 72 20 72 3d 65 5b 61 2e 78 5d 2c 69 3d 6e 7c 7c 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6f 3d 4d 61 74 68 2e 6d 61 78 28 69 3e 3d 30 3f 69 3a 72 2d 4d 61 74 68 2e 61 62 73 28 69 29 2c 30 29 3b 6f 3c 72 3b 6f 2b 2b 29 69 66 28 6f 20 69 6e 20 65 26 26 65 5b 6f 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6f 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 65 29 7b 69 66 28 65 2e 6d 61 70 29 72 65 74 75 72 6e 20 65 2e 6d 61 70 28 74 2c 6e 29 3b 76 61 72 20 69 3d 65 5b 61 2e 78 5d 2c 6f 3d 6e 7c 7c 65 3b 72 3d 6e 65 77 20 41 72 72 61 79 28 69 29 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 69 3b 63 2b 2b 29 63 20 Data Ascii: indexOf(t,n);var r=e[a.x],i=n\|\|0;try{for(var o=Math.max(i>=0?i:r-Math.abs(i),0);o<r;o++)if(o in e&&e[o]===t)return o}catch(e){}}return-1}function W(e,t,n){var r;if(e){if(e.map)return e.map(t,n);var i=e[a.x],o=n\|\|e;r=new Array(i);try{for(var c=0;c<i;c++)c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49799	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:07 UTC	394	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:07 UTC	751	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13523045 Cache-Control: public, max-age=31536000 Content-MD5: wegr9xrdYirQ87+FcvY0/A== Content-Type: application/x-javascript Date: Tue, 27 Aug 2024 18:07:07 GMT Etag: 0x8DB5D44A2CEB430 Last-Modified: Thu, 25 May 2023 17:22:37 GMT Server: ECAcc (lhc/7931) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e556728b-d01e-00f6-6fae-7d057f000000 x-ms-version: 2009-09-19 Content-Length: 190152 Connection: close
2024-08-27 18:07:07 UTC	16383	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 2c 2c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 22 56 61 6c 75 65 4b 69 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 4c 61 74 65 6e 63 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 50 65 72 73 69 73 74 65 6e 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 62 7d Data Ascii: (window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b}
2024-08-27 18:07:07 UTC	1	IN	Data Raw: 74 Data Ascii: t
2024-08-27 18:07:07 UTC	16383	IN	Data Raw: 2c 22 50 72 6f 70 65 72 74 69 65 73 50 6c 75 67 69 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 50 6f 73 74 43 68 61 6e 6e 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 43 6f 72 65 55 74 69 6c 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 42 45 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 4e 52 54 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 62 7d 29 29 2c 6e 2e 64 28 74 2c 22 52 54 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: ,"PropertiesPlugin",(function(){return g.a})),n.d(t,"PostChannel",(function(){return v.a})),n.d(t,"CoreUtils",(function(){return c.a})),n.d(t,"BE_PROFILE",(function(){return p.a})),n.d(t,"NRT_PROFILE",(function(){return p.b})),n.d(t,"RT_PROFILE",(function
2024-08-27 18:07:07 UTC	16383	IN	Data Raw: 69 73 2e 74 79 70 65 4e 61 6d 65 29 29 7c 7c 22 6e 6f 74 5f 73 70 65 63 69 66 69 65 64 22 3b 76 61 72 20 61 3d 74 2e 73 74 61 63 6b 44 65 74 61 69 6c 73 7c 7c 6c 65 28 74 29 3b 74 68 69 73 2e 70 61 72 73 65 64 53 74 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 65 2e 6f 62 6a 3b 69 66 28 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 3d 5b 5d 3b 76 61 72 20 72 3d 30 2c 69 3d 30 3b 4f 62 6a 65 63 74 28 53 2e 62 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 67 65 2e 72 65 67 65 78 2e 74 65 73 74 28 6e 29 29 7b 76 61 72 20 61 3d 6e 65 77 20 67 65 28 6e 2c 72 2b 2b 29 3b 69 2b 3d 61 2e 73 69 7a 65 49 6e 42 79 74 65 73 2c 74 2e 70 75 73 68 28 61 29 7d 7d 29 29 3b Data Ascii: is.typeName))\|\|"not_specified";var a=t.stackDetails\|\|le(t);this.parsedStack=function(e){var t,n=e.obj;if(n&&n.length>0){t=[];var r=0,i=0;Object(S.b)(n,(function(e){var n=e.toString();if(ge.regex.test(n)){var a=new ge(n,r++);i+=a.sizeInBytes,t.push(a)}}));
2024-08-27 18:07:07 UTC	16383	IN	Data Raw: 63 79 20 70 72 65 76 65 6e 74 73 20 75 73 20 66 72 6f 6d 20 67 65 74 74 69 6e 67 20 74 68 65 20 64 65 74 61 69 6c 73 20 6f 66 20 74 68 69 73 20 65 78 63 65 70 74 69 6f 6e 2e 20 43 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 68 65 20 27 63 72 6f 73 73 6f 72 69 67 69 6e 27 20 61 74 74 72 69 62 75 74 65 2e 22 2c 61 2c 74 2e 6c 69 6e 65 4e 75 6d 62 65 72 7c 7c 30 2c 74 2e 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 7c 7c 30 2c 6e 2c 72 2c 6e 75 6c 6c 2c 6f 29 2c 63 29 3a 28 74 2e 65 72 72 6f 72 53 72 63 7c 7c 28 74 2e 65 72 72 6f 72 53 72 63 3d 6f 29 2c 65 2e 74 72 61 63 6b 45 78 63 65 70 74 69 6f 6e 28 7b 65 78 63 65 70 74 69 6f 6e 3a 74 2c 73 65 76 65 72 69 74 79 4c 65 76 65 6c 3a 33 7d 2c 63 29 29 7d 63 61 74 63 68 28 65 29 7b 76 61 72 20 75 3d 6e 3f 6e 2e 6e 61 Data Ascii: cy prevents us from getting the details of this exception. Consider using the 'crossorigin' attribute.",a,t.lineNumber\|\|0,t.columnNumber\|\|0,n,r,null,o),c):(t.errorSrc\|\|(t.errorSrc=o),e.trackException({exception:t,severityLevel:3},c))}catch(e){var u=n?n.na
2024-08-27 18:07:07 UTC	3	IN	Data Raw: 65 3d 4f Data Ascii: e=O
2024-08-27 18:07:07 UTC	16383	IN	Data Raw: 62 6a 65 63 74 28 63 2e 74 29 28 65 29 3f 65 3a 7b 7d 3b 76 61 72 20 6e 3d 7b 7d 2c 72 3d 4f 62 6a 65 63 74 28 63 2e 74 29 28 74 29 3f 74 3a 7b 7d 3b 74 68 69 73 2e 5f 73 65 74 42 61 73 69 63 50 72 6f 70 65 72 74 69 65 73 28 6e 2c 65 29 2c 74 68 69 73 2e 5f 73 65 74 50 61 67 65 54 61 67 73 28 6e 2c 65 29 2c 6e 2e 69 73 4d 61 6e 75 61 6c 3d 21 65 2e 69 73 41 75 74 6f 2c 72 2e 62 65 68 61 76 69 6f 72 3d 74 68 69 73 2e 5f 67 65 74 42 65 68 61 76 69 6f 72 28 65 29 2c 72 2e 76 70 48 65 69 67 68 74 3d 65 2e 76 70 48 65 69 67 68 74 2c 72 2e 76 70 57 69 64 74 68 3d 65 2e 76 70 57 69 64 74 68 2c 72 2e 66 72 61 6d 65 77 6f 72 6b 3d 65 2e 66 72 61 6d 65 77 6f 72 6b 2c 72 2e 73 79 73 74 65 6d 54 69 6d 69 6e 67 3d 65 2e 73 79 73 74 65 6d 54 69 6d 69 6e 67 2c 72 2e 63 Data Ascii: bject(c.t)(e)?e:{};var n={},r=Object(c.t)(t)?t:{};this._setBasicProperties(n,e),this._setPageTags(n,e),n.isManual=!e.isAuto,r.behavior=this._getBehavior(e),r.vpHeight=e.vpHeight,r.vpWidth=e.vpWidth,r.framework=e.framework,r.systemTiming=e.systemTiming,r.c
2024-08-27 18:07:07 UTC	16383	IN	Data Raw: 5d 29 2c 65 2e 65 6d 70 74 79 53 6e 69 70 70 65 74 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 29 7b 4f 62 6a 65 63 74 28 53 2e 73 29 28 6e 29 7c 7c 6e 2c 4f 62 6a 65 63 74 28 53 2e 43 29 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 69 66 28 4f 62 6a 65 63 74 28 53 2e 76 29 28 6e 29 26 26 21 4f 62 6a 65 63 74 28 53 2e 70 29 28 72 29 26 26 6e 26 26 22 5f 22 21 3d 3d 6e 5b 30 5d 26 26 2d 31 3d 3d 3d 4f 62 6a 65 63 74 28 53 2e 63 29 28 52 74 2c 6e 29 29 74 72 79 7b 74 5b 6e 5d 3d 72 7d 63 61 74 63 68 28 74 29 7b 4f 62 6a 65 63 74 28 66 2e 64 29 28 65 2e 6c 6f 67 67 65 72 2c 32 2c 35 31 34 2c 22 46 61 69 6c 65 64 20 74 6f 20 73 65 74 20 5b 22 2b 6e 2b 22 5d 20 64 75 72 69 6e Data Ascii: ]),e.emptySnippetQueue=function(t){try{if(function(){if(t){Object(S.s)(n)\|\|n,Object(S.C)(e,(function(n,r){if(Object(S.v)(n)&&!Object(S.p)(r)&&n&&"_"!==n[0]&&-1===Object(S.c)(Rt,n))try{t[n]=r}catch(t){Object(f.d)(e.logger,2,514,"Failed to set ["+n+"] durin
2024-08-27 18:07:07 UTC	16383	IN	Data Raw: 69 6e 64 65 78 4f 66 28 74 2c 6e 29 3b 76 61 72 20 72 3d 65 5b 61 2e 78 5d 2c 69 3d 6e 7c 7c 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6f 3d 4d 61 74 68 2e 6d 61 78 28 69 3e 3d 30 3f 69 3a 72 2d 4d 61 74 68 2e 61 62 73 28 69 29 2c 30 29 3b 6f 3c 72 3b 6f 2b 2b 29 69 66 28 6f 20 69 6e 20 65 26 26 65 5b 6f 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6f 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 65 29 7b 69 66 28 65 2e 6d 61 70 29 72 65 74 75 72 6e 20 65 2e 6d 61 70 28 74 2c 6e 29 3b 76 61 72 20 69 3d 65 5b 61 2e 78 5d 2c 6f 3d 6e 7c 7c 65 3b 72 3d 6e 65 77 20 41 72 72 61 79 28 69 29 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 69 3b 63 2b 2b 29 63 20 Data Ascii: indexOf(t,n);var r=e[a.x],i=n\|\|0;try{for(var o=Math.max(i>=0?i:r-Math.abs(i),0);o<r;o++)if(o in e&&e[o]===t)return o}catch(e){}}return-1}function W(e,t,n){var r;if(e){if(e.map)return e.map(t,n);var i=e[a.x],o=n\|\|e;r=new Array(i);try{for(var c=0;c<i;c++)c
2024-08-27 18:07:07 UTC	16383	IN	Data Raw: 5d 7c 7c 39 3d 3d 3d 65 5b 69 2e 45 5d 7c 7c 21 2b 65 5b 69 2e 45 5d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 5b 65 2e 69 64 5d 3b 69 66 28 21 6e 29 7b 6e 3d 7b 7d 3b 74 72 79 7b 6c 28 74 29 26 26 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 75 29 74 72 79 7b 72 65 74 75 72 6e 20 75 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 21 31 7d 28 74 2c 65 2e 69 64 2c 6e 29 7c 7c 28 74 5b 65 2e 69 64 5d 3d 6e 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d Data Ascii: ]\|\|9===e[i.E]\|\|!+e[i.E]}function d(e,t){var n=t[e.id];if(!n){n={};try{l(t)&&(function(e,t,n){if(u)try{return u(e,t,{value:n,enumerable:!1,configurable:!0}),!0}catch(e){}return!1}(t,e.id,n)\|\|(t[e.id]=n))}catch(e){}}return n}function b(e,t){return void 0===

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49800	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:07 UTC	615	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:07 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5781477 Cache-Control: public, max-age=31536000 Content-MD5: /tr7rG0APA0Nym9G/DMFwg== Content-Type: application/x-javascript Date: Tue, 27 Aug 2024 18:07:07 GMT Etag: 0x8DC90CF0C1378C3 Last-Modified: Thu, 20 Jun 2024 02:16:51 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 281a1f59-901e-00f2-0416-c4a977000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-08-27 18:07:07 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-27 18:07:07 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-08-27 18:07:07 UTC	16383	IN	Data Raw: 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e Data Ascii: =Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(536);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var n
2024-08-27 18:07:07 UTC	1	IN	Data Raw: 31 Data Ascii: 1
2024-08-27 18:07:07 UTC	16383	IN	Data Raw: 7d 29 2c 65 7d 28 72 28 36 38 31 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c 65 22 Data Ascii: }),e}(r(681));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rule"
2024-08-27 18:07:07 UTC	16383	IN	Data Raw: 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 22 Data Ascii: !=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary"
2024-08-27 18:07:07 UTC	2	IN	Data Raw: 3b 66 Data Ascii: ;f
2024-08-27 18:07:07 UTC	16383	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d 3d 33 29 Data Ascii: unction N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-=3)
2024-08-27 18:07:07 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-08-27 18:07:07 UTC	16383	IN	Data Raw: 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 70 Data Ascii: r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(t,"p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49801	52.98.171.226	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:07 UTC	705	OUT	GET /owa/prefetch.aspx HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:07 UTC	1903	IN	HTTP/1.1 200 OK Cache-Control: private, no-store Content-Length: 2745 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 request-id: f1e4bed9-e4dc-0b66-241d-83b06aaa09ed Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedFETarget: FR4P281CU025.internal.outlook.com X-BackEndHttpStatus: 200 Set-Cookie: ClientId=01D9417E596F4F329573AD3168026165; expires=Wed, 27-Aug-2025 18:07:07 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=01D9417E596F4F329573AD3168026165; expires=Wed, 27-Aug-2025 18:07:07 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Thu, 27-Feb-2025 18:07:07 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OWAPF=v:15.20.7897.25&l:mouse; path=/; secure; HttpOnly X-CalculatedBETarget: FR4P281MB3495.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS7 X-OWA-Version: 15.20.7897.23 X-OWA-DiagnosticsInfo: 5;0;0; X-BackEnd-Begin: 2024-08-27T18:07:07.484 X-BackEnd-End: 2024-08-27T18:07:07.484 X-DiagInfo: FR4P281MB3495 X-BEServer: FR4P281MB3495 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 200 X-FEProxyInfo: FR0P281CA0039.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-FEServer: FR4P281CA0375 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=HHN&RemoteIP=8.46.123.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FirstHopCafeEFZ: HHN X-FEServer: FR0P281CA0039 Date: Tue, 27 Aug 2024 18:07:06 GMT Connection: close
2024-08-27 18:07:07 UTC	2745	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 65 66 65 74 63 68 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f Data Ascii: <!DOCTYPE html><html><head> <title>Prefetch</title> <meta http-equiv="x-ua-compatible" content="IE=Edge"> <style> @font-face { font-family: 'office365icons'; src: url('https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49803	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:08 UTC	435	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:09 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5781479 Cache-Control: public, max-age=31536000 Content-MD5: /tr7rG0APA0Nym9G/DMFwg== Content-Type: application/x-javascript Date: Tue, 27 Aug 2024 18:07:09 GMT Etag: 0x8DC90CF0C1378C3 Last-Modified: Thu, 20 Jun 2024 02:16:51 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 281a1f59-901e-00f2-0416-c4a977000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-08-27 18:07:09 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-27 18:07:09 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-08-27 18:07:09 UTC	16383	IN	Data Raw: 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e Data Ascii: =Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(536);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var n
2024-08-27 18:07:09 UTC	16383	IN	Data Raw: 31 7d 29 2c 65 7d 28 72 28 36 38 31 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c 65 Data Ascii: 1}),e}(r(681));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rule
2024-08-27 18:07:09 UTC	16383	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 Data Ascii: "!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary
2024-08-27 18:07:09 UTC	3	IN	Data Raw: 67 3b 66 Data Ascii: g;f
2024-08-27 18:07:09 UTC	16383	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d 3d 33 29 Data Ascii: unction N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-=3)
2024-08-27 18:07:09 UTC	16383	IN	Data Raw: 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 Data Ascii: r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(t,"
2024-08-27 18:07:09 UTC	2	IN	Data Raw: 65 74 Data Ascii: et
2024-08-27 18:07:09 UTC	16383	IN	Data Raw: 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b 22 64 65 66 61 75 Data Ascii: urn new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s["defau

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49805	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:08 UTC	646	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:09 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13523307 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Tue, 27 Aug 2024 18:07:09 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-08-27 18:07:09 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-27 18:07:09 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49806	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:08 UTC	660	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:09 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13437134 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Tue, 27 Aug 2024 18:07:09 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-08-27 18:07:09 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49804	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:08 UTC	669	OUT	GET /shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:09 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13523229 Cache-Control: public, max-age=31536000 Content-MD5: 5YqvyYBhSpzXeWvqe16o8A== Content-Type: image/jpeg Date: Tue, 27 Aug 2024 18:07:09 GMT Etag: 0x8DB5C3F41C14038 Last-Modified: Wed, 24 May 2023 10:11:35 GMT Server: ECAcc (lhc/789F) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9b1ee7da-501e-002e-3bad-7d6908000000 x-ms-version: 2009-09-19 Content-Length: 987 Connection: close
2024-08-27 18:07:09 UTC	987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 66 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 10 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 39 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIFHHfExifMM*>F(1NHHpaint.net 4.2.9CC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49807	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:08 UTC	663	OUT	GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:09 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13523229 Cache-Control: public, max-age=31536000 Content-MD5: eRaolOvefSnCzCmyZ/Epnw== Content-Type: image/jpeg Date: Tue, 27 Aug 2024 18:07:09 GMT Etag: 0x8DB5C3F41AC335E Last-Modified: Wed, 24 May 2023 10:11:35 GMT Server: ECAcc (lhc/789F) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1356cd23-101e-0042-53ad-7ddf33000000 x-ms-version: 2009-09-19 Content-Length: 17453 Connection: close
2024-08-27 18:07:09 UTC	15684	IN	Data Raw: ff d8 ff e1 09 50 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e Data Ascii: Phttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syn
2024-08-27 18:07:09 UTC	1769	IN	Data Raw: 8a 02 00 00 00 00 04 48 aa 0e 45 15 10 00 00 00 00 00 04 82 80 90 50 10 00 04 01 44 14 51 14 10 51 11 05 01 05 40 00 00 00 00 15 40 00 00 00 40 54 50 42 28 00 00 00 00 00 00 00 02 80 00 00 00 20 00 02 a2 8a 00 00 00 00 0a 02 00 00 00 02 28 00 8a 80 00 a0 02 0a 08 a8 28 08 a0 00 02 80 a8 22 80 88 a0 2a 28 00 02 00 28 20 a2 08 28 08 00 02 88 00 0a 82 80 8a 00 00 8a 00 00 08 00 00 02 00 00 00 0a 00 a8 a8 a0 82 a2 00 00 00 8a 00 a0 02 00 02 80 20 00 00 00 00 80 00 00 22 a0 a0 20 00 2a 2a 00 02 8a 80 8a 20 82 88 00 00 00 0a 00 a0 00 00 08 02 a8 8a 02 00 28 00 80 02 80 02 00 00 02 82 2a 28 00 02 80 00 00 8a 00 02 80 00 00 20 02 80 00 ff d4 db c5 46 dc c0 00 45 14 40 00 00 00 01 05 40 40 00 00 00 00 54 00 d4 51 51 05 88 00 00 00 00 00 00 00 00 90 8a 03 91 d2 40 Data Ascii: HEPDQQ@@@TPB( (("(( ( " * (*( FE@@@TQQ@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49808	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:08 UTC	657	OUT	GET /shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:09 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13437698 Cache-Control: public, max-age=31536000 Content-MD5: izYzcDfP+Iw98gO7c9WOQQ== Content-Type: image/png Date: Tue, 27 Aug 2024 18:07:09 GMT Etag: 0x8DB5C3F457C234F Last-Modified: Wed, 24 May 2023 10:11:42 GMT Server: ECAcc (lhc/7888) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4bd57a90-801e-00bf-3874-7ea57d000000 x-ms-version: 2009-09-19 Content-Length: 5139 Connection: close
2024-08-27 18:07:09 UTC	5139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 56 00 00 00 48 08 06 00 00 00 ad 04 dd dc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 Data Ascii: PNGIHDRVHtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49809	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:08 UTC	660	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:09 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13523152 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Tue, 27 Aug 2024 18:07:09 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-08-27 18:07:09 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49812	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:09 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:10 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13437135 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Tue, 27 Aug 2024 18:07:10 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-08-27 18:07:10 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49813	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:09 UTC	429	OUT	GET /shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:10 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13523230 Cache-Control: public, max-age=31536000 Content-MD5: 5YqvyYBhSpzXeWvqe16o8A== Content-Type: image/jpeg Date: Tue, 27 Aug 2024 18:07:10 GMT Etag: 0x8DB5C3F41C14038 Last-Modified: Wed, 24 May 2023 10:11:35 GMT Server: ECAcc (lhc/789F) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9b1ee7da-501e-002e-3bad-7d6908000000 x-ms-version: 2009-09-19 Content-Length: 987 Connection: close
2024-08-27 18:07:10 UTC	987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 66 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 10 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 39 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIFHHfExifMM*>F(1NHHpaint.net 4.2.9CC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49811	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:10 UTC	621	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://subcg.tynurserys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:10 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5781479 Cache-Control: public, max-age=31536000 Content-MD5: FXzSZAYOwKp2jFj6XjvNRQ== Content-Type: application/x-javascript Date: Tue, 27 Aug 2024 18:07:10 GMT Etag: 0x8DC90CF0D8CB039 Last-Modified: Thu, 20 Jun 2024 02:16:53 GMT Server: ECAcc (lhc/7968) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 736bdcfa-101e-003a-3f16-c47522000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-08-27 18:07:10 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-27 18:07:10 UTC	16383	IN	Data Raw: 75 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 Data Ascii: u200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u2
2024-08-27 18:07:10 UTC	2	IN	Data Raw: 32 39 Data Ascii: 29
2024-08-27 18:07:10 UTC	16383	IN	Data Raw: 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 61 22 Data Ascii: 0f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdca"
2024-08-27 18:07:10 UTC	16383	IN	Data Raw: 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 33 29 2c 74 2e 43 63 3d 72 28 38 38 34 29 2c 74 2e 43 66 3d 72 28 31 33 38 30 29 2c 74 2e 50 3d 72 28 37 38 33 29 2c 74 2e 5a 3d 72 28 38 38 35 29 7d 2c 31 33 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c 75 Data Ascii: rict";t.Any=r(883),t.Cc=r(884),t.Cf=r(1380),t.P=r(783),t.Z=r(885)},1380:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\u
2024-08-27 18:07:10 UTC	16383	IN	Data Raw: 61 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 6b Data Ascii: arks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.mark
2024-08-27 18:07:10 UTC	16383	IN	Data Raw: 72 6e 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 Data Ascii: rn r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a"
2024-08-27 18:07:10 UTC	15469	IN	Data Raw: 62 61 6c 61 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d Data Ascii: balance_pairs","emphasis","text_collapse"]}}}},1427:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49814	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:10 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:10 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13523308 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Tue, 27 Aug 2024 18:07:10 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-08-27 18:07:10 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-27 18:07:10 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49816	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:10 UTC	423	OUT	GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:10 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13523230 Cache-Control: public, max-age=31536000 Content-MD5: eRaolOvefSnCzCmyZ/Epnw== Content-Type: image/jpeg Date: Tue, 27 Aug 2024 18:07:10 GMT Etag: 0x8DB5C3F41AC335E Last-Modified: Wed, 24 May 2023 10:11:35 GMT Server: ECAcc (lhc/789F) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1356cd23-101e-0042-53ad-7ddf33000000 x-ms-version: 2009-09-19 Content-Length: 17453 Connection: close
2024-08-27 18:07:10 UTC	15684	IN	Data Raw: ff d8 ff e1 09 50 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e Data Ascii: Phttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syn
2024-08-27 18:07:10 UTC	1769	IN	Data Raw: 8a 02 00 00 00 00 04 48 aa 0e 45 15 10 00 00 00 00 00 04 82 80 90 50 10 00 04 01 44 14 51 14 10 51 11 05 01 05 40 00 00 00 00 15 40 00 00 00 40 54 50 42 28 00 00 00 00 00 00 00 02 80 00 00 00 20 00 02 a2 8a 00 00 00 00 0a 02 00 00 00 02 28 00 8a 80 00 a0 02 0a 08 a8 28 08 a0 00 02 80 a8 22 80 88 a0 2a 28 00 02 00 28 20 a2 08 28 08 00 02 88 00 0a 82 80 8a 00 00 8a 00 00 08 00 00 02 00 00 00 0a 00 a8 a8 a0 82 a2 00 00 00 8a 00 a0 02 00 02 80 20 00 00 00 00 80 00 00 22 a0 a0 20 00 2a 2a 00 02 8a 80 8a 20 82 88 00 00 00 0a 00 a0 00 00 08 02 a8 8a 02 00 28 00 80 02 80 02 00 00 02 82 2a 28 00 02 80 00 00 8a 00 02 80 00 00 20 02 80 00 ff d4 db c5 46 dc c0 00 45 14 40 00 00 00 01 05 40 40 00 00 00 00 54 00 d4 51 51 05 88 00 00 00 00 00 00 00 00 90 8a 03 91 d2 40 Data Ascii: HEPDQQ@@@TPB( (("(( ( " * (*( FE@@@TQQ@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49815	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:10 UTC	417	OUT	GET /shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:10 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13437699 Cache-Control: public, max-age=31536000 Content-MD5: izYzcDfP+Iw98gO7c9WOQQ== Content-Type: image/png Date: Tue, 27 Aug 2024 18:07:10 GMT Etag: 0x8DB5C3F457C234F Last-Modified: Wed, 24 May 2023 10:11:42 GMT Server: ECAcc (lhc/7888) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4bd57a90-801e-00bf-3874-7ea57d000000 x-ms-version: 2009-09-19 Content-Length: 5139 Connection: close
2024-08-27 18:07:10 UTC	5139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 56 00 00 00 48 08 06 00 00 00 ad 04 dd dc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 Data Ascii: PNGIHDRVHtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49818	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:10 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:10 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13523153 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Tue, 27 Aug 2024 18:07:10 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-08-27 18:07:10 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49819	152.199.21.175	443	3596	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:11 UTC	441	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 18:07:11 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5781480 Cache-Control: public, max-age=31536000 Content-MD5: FXzSZAYOwKp2jFj6XjvNRQ== Content-Type: application/x-javascript Date: Tue, 27 Aug 2024 18:07:11 GMT Etag: 0x8DC90CF0D8CB039 Last-Modified: Thu, 20 Jun 2024 02:16:53 GMT Server: ECAcc (lhc/7968) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 736bdcfa-101e-003a-3f16-c47522000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-08-27 18:07:11 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-27 18:07:11 UTC	16383	IN	Data Raw: 75 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 Data Ascii: u200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u2
2024-08-27 18:07:11 UTC	16383	IN	Data Raw: 32 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 Data Ascii: 290f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdc
2024-08-27 18:07:11 UTC	3	IN	Data Raw: 73 74 72 Data Ascii: str
2024-08-27 18:07:11 UTC	16383	IN	Data Raw: 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 33 29 2c 74 2e 43 63 3d 72 28 38 38 34 29 2c 74 2e 43 66 3d 72 28 31 33 38 30 29 2c 74 2e 50 3d 72 28 37 38 33 29 2c 74 2e 5a 3d 72 28 38 38 35 29 7d 2c 31 33 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c 75 44 Data Ascii: ict";t.Any=r(883),t.Cc=r(884),t.Cf=r(1380),t.P=r(783),t.Z=r(885)},1380:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\uD
2024-08-27 18:07:11 UTC	16383	IN	Data Raw: 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 6b 75 Data Ascii: rks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.marku
2024-08-27 18:07:11 UTC	16383	IN	Data Raw: 6e 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 2c Data Ascii: n r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a",
2024-08-27 18:07:11 UTC	15468	IN	Data Raw: 61 6c 61 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 Data Ascii: alance_pairs","emphasis","text_collapse"]}}}},1427:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49826	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-08-27 18:07:23 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=B3PZfKzHNmcUX1d&MD=887pveRe HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-27 18:07:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 1f8c621f-2863-47be-8149-78e721063f1f MS-RequestId: b0dd68a5-d8a0-4fd2-a5e8-7a64cb6a73ea MS-CV: FUTBu1O/UU+5h30i.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 27 Aug 2024 18:07:22 GMT Connection: close Content-Length: 30005
2024-08-27 18:07:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-08-27 18:07:24 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Target ID:	0
Start time:	14:06:32
Start date:	27/08/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Madisonwellsmedia546.pdf"
Imagebase:	0x7ff743980000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:06:33
Start date:	27/08/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff7047a0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:06:34
Start date:	27/08/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2252 --field-trial-handle=1580,i,18033727624882255278,16233875503812827206,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff7047a0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	14:06:34
Start date:	27/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.fortismerchants.co.uk/rd?cmnpn=93885&ct=90493&u=https%3A%2F%2Fsubcg.tynurserys.com%2FpCavcKaS#aHdpbGxhdWVyQG1hZGlzb253ZWxsc21lZGlhLmNvbQ==
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	14:06:35
Start date:	27/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1832,i,10525007346694860206,14711578944265795269,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Madisonwellsmedia546.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\4b1b4a6b-3746-4da3-8a8f-3588479148b4.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\57178d7e-aca5-42d6-842c-4ca2e9bfa1ba.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF4719e7.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240827180642Z-293.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Windows Analysis Report
Madisonwellsmedia546.pdf