Edit tour

Windows Analysis Report
https://australianfoodandfibre.servicedeskplus.net.au/app/itdesk/ui/requests/867000003351579/details

Overview

General Information

Sample URL:	https://australianfoodandfibre.servicedeskplus.net.au/app/itdesk/ui/requests/867000003351579/details
Analysis ID:	1500939
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6612 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2360 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2596 --field-trial-handle=1680,i,1339453569381203706,9538536799603884749,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6512 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://australianfoodandfibre.servicedeskplus.net.au/app/itdesk/ui/requests/867000003351579/details" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D&sso_reload=true

HTTP Parser: <input type="password" .../> found

HTTP Parser: No favicon

Source: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:49774 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /app/itdesk/ui/requests/867000003351579/details HTTP/1.1Host: australianfoodandfibre.servicedeskplus.net.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Login.jsp?serviceurl=%2Fapp%2Fitdesk%2Fui%2Frequests%2F867000003351579%2Fdetails HTTP/1.1Host: australianfoodandfibre.servicedeskplus.net.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_d63ded2016=334acadbc5509b416865a4b31a1455f9; sdpcscook=e0a4aa81-c837-4c81-9c03-403e58b77894; _zcsr_tmp=e0a4aa81-c837-4c81-9c03-403e58b77894
Source: global traffic	HTTP traffic detected: GET /samlauthrequest/aff-limited.com.au?serviceurl=https%3A%2F%2Faustralianfoodandfibre.servicedeskplus.net.au%2Fapp%2Fitdesk%2Fui%2Frequests%2F867000003351579%2Fdetails&servicename=SDPOnDemand&portal_id=7001242490&hide_signup=false HTTP/1.1Host: accounts.zoho.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /81d6b03a-0oaqvemumiggapupispz73q-euqm382uqpsqys7gkkc/logintenantbranding/0/illustration?ts=637640617494988131 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /81d6b03a-0oaqvemumiggapupispz73q-euqm382uqpsqys7gkkc/logintenantbranding/0/illustration?ts=637640617494988131 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: australianfoodandfibre.servicedeskplus.net.au
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.zoho.com.au
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauthimages.net
Source: global traffic	DNS traffic detected: DNS query: autologon.microsoftazuread-sso.com

Source: chromecache_172.2.dr, chromecache_176.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_162.2.dr, chromecache_165.2.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: chromecache_166.2.dr, chromecache_171.2.dr, chromecache_150.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_166.2.dr, chromecache_171.2.dr, chromecache_150.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_179.2.dr, chromecache_156.2.dr, chromecache_166.2.dr, chromecache_171.2.dr, chromecache_172.2.dr, chromecache_176.2.dr, chromecache_150.2.dr, chromecache_149.2.dr, chromecache_160.2.dr, chromecache_168.2.dr, chromecache_163.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_146.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_146.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@22/59@24/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2596 --field-trial-handle=1680,i,1339453569381203706,9538536799603884749,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://australianfoodandfibre.servicedeskplus.net.au/app/itdesk/ui/requests/867000003351579/details"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2596 --field-trial-handle=1680,i,1339453569381203706,9538536799603884749,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://australianfoodandfibre.servicedeskplus.net.au/app/itdesk/ui/requests/867000003351579/details	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
http://knockoutjs.com/	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	URL Reputation	safe
http://gsgd.co.uk/sandbox/jquery/easing/	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	URL Reputation	safe
http://feross.org	0%	URL Reputation	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js	0%	Virustotal		Browse
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js	0%	Virustotal		Browse
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js	0%	Avira URL Cloud	safe
https://australianfoodandfibre.servicedeskplus.net.au/Login.jsp?serviceurl=%2Fapp%2Fitdesk%2Fui%2Frequests%2F867000003351579%2Fdetails	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js	0%	Avira URL Cloud	safe
https://accounts.zoho.com.au/samlauthrequest/aff-limited.com.au?serviceurl=https%3A%2F%2Faustralianfoodandfibre.servicedeskplus.net.au%2Fapp%2Fitdesk%2Fui%2Frequests%2F867000003351579%2Fdetails&servicename=SDPOnDemand&portal_id=7001242490&hide_signup=false	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js	0%	Virustotal		Browse
https://login.windows-ppe.net	0%	Avira URL Cloud	safe
https://github.com/douglascrockford/JSON-js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauthimages.net/81d6b03a-0oaqvemumiggapupispz73q-euqm382uqpsqys7gkkc/logintenantbranding/0/illustration?ts=637640617494988131	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	0%	Virustotal		Browse
https://login.windows-ppe.net	2%	Virustotal		Browse
https://github.com/douglascrockford/JSON-js	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	0%	Virustotal		Browse
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	Virustotal		Browse
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
zs-au1-lc1-h2.servicedeskplus.net.au	103.138.128.66	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	unknown
zs-au1-lc1-h2.zoho.com.au	103.138.128.66	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
autologon.microsoftazuread-sso.com	20.190.160.22	true	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
accounts.zoho.com.au	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
australianfoodandfibre.servicedeskplus.net.au	unknown	unknown	false	unknown
aadcdn.msftauthimages.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://accounts.zoho.com.au/samlauthrequest/aff-limited.com.au?serviceurl=https%3A%2F%2Faustralianfoodandfibre.servicedeskplus.net.au%2Fapp%2Fitdesk%2Fui%2Frequests%2F867000003351579%2Fdetails&servicename=SDPOnDemand&portal_id=7001242490&hide_signup=false	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://australianfoodandfibre.servicedeskplus.net.au/Login.jsp?serviceurl=%2Fapp%2Fitdesk%2Fui%2Frequests%2F867000003351579%2Fdetails	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://australianfoodandfibre.servicedeskplus.net.au/app/itdesk/ui/requests/867000003351579/details	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aadcdn.msftauthimages.net/81d6b03a-0oaqvemumiggapupispz73q-euqm382uqpsqys7gkkc/logintenantbranding/0/illustration?ts=637640617494988131	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://knockoutjs.com/	chromecache_166.2.dr, chromecache_171.2.dr, chromecache_150.2.dr	false	URL Reputation: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_179.2.dr, chromecache_156.2.dr, chromecache_166.2.dr, chromecache_171.2.dr, chromecache_172.2.dr, chromecache_176.2.dr, chromecache_150.2.dr, chromecache_149.2.dr, chromecache_160.2.dr, chromecache_168.2.dr, chromecache_163.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://login.windows-ppe.net	chromecache_146.2.dr	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://gsgd.co.uk/sandbox/jquery/easing/	chromecache_162.2.dr, chromecache_165.2.dr	false	URL Reputation: safe	unknown
https://login.microsoftonline.com	chromecache_146.2.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_166.2.dr, chromecache_171.2.dr, chromecache_150.2.dr	false	URL Reputation: safe	unknown
http://feross.org	chromecache_172.2.dr, chromecache_176.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
103.138.128.66	zs-au1-lc1-h2.servicedeskplus.net.au	Australia	139006	ZCPL-AS-APZohoCorporationPTYLTDAU	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1500939
Start date and time:	2024-08-29 06:41:23 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://australianfoodandfibre.servicedeskplus.net.au/app/itdesk/ui/requests/867000003351579/details
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@22/59@24/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 142.250.181.238, 66.102.1.84, 34.104.35.123, 40.126.31.71, 20.190.159.23, 20.190.159.2, 20.190.159.0, 20.190.159.73, 40.126.31.73, 20.190.159.75, 20.190.159.71, 95.101.54.225, 95.101.54.226, 20.190.160.17, 20.190.160.22, 40.126.32.134, 40.126.32.140, 40.126.32.72, 20.190.160.20, 40.126.32.76, 20.190.160.14, 13.85.23.86, 199.232.214.172, 192.229.221.95, 13.95.31.18, 40.126.32.138, 40.126.32.68, 40.126.32.136, 40.126.32.74, 142.250.184.202, 142.250.186.42, 142.250.185.138, 216.58.212.170, 142.250.185.106, 216.58.206.74, 142.250.186.106, 142.250.185.74, 142.250.186.170, 142.250.181.234, 216.58.206.42, 216.58.212.138, 172.217.18.10, 172.217.16.202, 142.250.186.74, 142.250.186.138, 20.3.187.198, 40.127.169.103, 142.250.185.195, 2.19.126.143, 2.19.126.146, 52.165.165.26
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, ak.privatelink.msidentity.com, a1894.dscb.akamai.net, clients2.google.com, ocsp.digicert.com, login.live.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, login.mso.msidentity.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, aadcdn-msft.azureedge.net, www.tm.ak.prd.aadg.akadns.net, www.tm.v4.a.prd.aadg.akadns.net, ctldl.windowsupdate.com, aadcdn-msft.afd.azureedge.net, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, w
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0n Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0n Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "prominent_button_name":"Next", "text_input_field_labels":["Sign-in options", "Terms of use", "Privacy & cookies"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 03:42:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.983293638762398
Encrypted:	false
SSDEEP:	48:8ddEcTkAzvHb0idAKZdA19ehwiZUklqehSy+3:8rzG1y
MD5:	859475963C4384BE33EE167F15940FC1
SHA1:	19D841B4BA7D540E08C42C8541AFB742D921FE3C
SHA-256:	21AC2F7D67A4499E7DA3D05AE17CF0121127AF0C0619975053FEA8B395407E4A
SHA-512:	DA8425A90A7FBE5E28838D47CE25ABD0041801EAD880260DF8B7D2A7626B4388E8D09D1B8477F8CBAB3F1ADF7FA4B0701DFC7475230D8CA0062B1B963449C8B1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....'.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YI%....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YI%....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YI%....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YI%..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YK%...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............<J......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 03:42:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9961827500434457
Encrypted:	false
SSDEEP:	48:8xdEcTkAzvHb0idAKZdA1weh/iZUkAQkqehly+2:8PzE9Q4y
MD5:	B8AF6B974E272FA284932295B347F2BA
SHA1:	EF48852323ABC3FF55DC055BBF5EEADA5659FD4D
SHA-256:	CCECE7622EDE38FE6E925CF3AEC42C3C92E0C47980E1D2F59FC3E00E906AB706
SHA-512:	D9AA9F673C9B4B2E0211E12DB227604948343F856266EB955D7F5062B337EBF0FB22B5EF8F8086C9F37F442C5B9A767FA08215AF22613325E32BA6102F4FBD77
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....B.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YI%....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YI%....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YI%....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YI%..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YK%...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............<J......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.005887694141887
Encrypted:	false
SSDEEP:	48:8xUdEcTkAzsHb0idAKZdA14tseh7sFiZUkmgqeh7sry+BX:8xczZnpy
MD5:	DEB25D4E38CAD38C5BA2F31FFA62F3A0
SHA1:	7431F6DB8C9D64B4DE4CC73EDAAF13F3C3BB2127
SHA-256:	F108DF91372AF3FF6344939D4C2F6A12376D619F81C6CAE682C734DE04F11B59
SHA-512:	39AE8739077F073A389067CA35E10A0D1EC7F8871287AE98DD45F6151C1EBC7048EF2EFCBB5C760A0FF52FC2397F8D44C8519663DD8293FDAEE706C7152C43E7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YI%....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YI%....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YI%....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YI%..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............<J......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 03:42:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.996039378464093
Encrypted:	false
SSDEEP:	48:8wwdEcTkAzvHb0idAKZdA1vehDiZUkwqehRy+R:8wIzPTy
MD5:	A3AE3D7D4F59EA3DE4989B92AD528AB2
SHA1:	0B45E88B20B32D13534E8243895E8AF812C89B94
SHA-256:	51490D237DBC28D16E3ABA5CC212E3CF01D956B9947C8040211AA4DA3B347439
SHA-512:	D26C61C823F8A7780863149A6A1A83F4552CB23C6379475D42817D8D4726D9FA948F30E76E0EFFA9B4BE810372998332566C090C6F4D2D92F7F92B113D05A8FF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YI%....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YI%....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YI%....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YI%..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YK%...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............<J......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 03:42:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.983124881143572
Encrypted:	false
SSDEEP:	48:8xdEcTkAzvHb0idAKZdA1hehBiZUk1W1qehfy+C:8Pzv9/y
MD5:	BA27830C8D8E735C0A9255A5FE5BF9C4
SHA1:	2B0A70D6542DAAEEC2DE059A7C828FDBED95CF42
SHA-256:	132509B20F24F4D7F3C7C7B4DA7D8FF48D7B2D16F8BF6241AA7554326EF9AF59
SHA-512:	363B7E201378FDBD979083E10A1FB974BCB64D462B7FACE91EF3D02DC89D7AA7D5AE645C3387950850F6F19286F90D72505ED7497332E043DFE006A92E6952A1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....L[......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YI%....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YI%....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YI%....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YI%..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YK%...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............<J......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 03:42:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.99302483727194
Encrypted:	false
SSDEEP:	48:8bdEcTkAzvHb0idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbpy+yT+:8pznT/TbxWOvTbpy7T
MD5:	161A1DCBFB889AB8D57AA9502C954A4D
SHA1:	E346C287EFD49B923668A88FB9CAEBBCBE72C8C2
SHA-256:	A3B111077CF26CCF2256A08AB0E9C1CF14D294C75C62AE581B49C78EDC6E919A
SHA-512:	3F1DDA9F19234861EC3D94E2A4CC422E8B78BF0CD7925E39E8C70DD0749C25EC30489870078D97CDAC5F4C3CB2A222AEE15740C05EF4B6106274676CF3AAECD0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....S.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YI%....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YI%....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YI%....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YI%..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YK%...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............<J......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	downloaded
Size (bytes):	11970
Entropy (8bit):	5.416120131770621
Encrypted:	false
SSDEEP:	192:FPpd9ihiovIZwqsTh8Mi0Yl82YmYZewHe+IkA1niOpVTChGZu3PcXVstaD:ddEIyi0u82Y9ZewHPIkA1niOpVmOUPcX
MD5:	39A0EB35CD7799A181D34F4AE1DDB496
SHA1:	E933CA8534BCB6AD79D240316CE23C8B870050D0
SHA-256:	C8CEF105FCAF7CBF3F8682C861045505C24D41CF6686C20C1C03E14031A3DB69
SHA-512:	0AE990F9B57B55C3A8025BBE13C98ECD8A40C38380F9E0EFEF2BE7B418642EB040E4C537E684D2FEF7E04113450CFD4DEFF3414310773177220209991BBF1643
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js
Preview:	/! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. .. json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain..Provided for Informational Purposes Only..Public Domain. .NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK..----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */."object"!=typeof JSON&&(JSON={}),

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46090)
Category:	downloaded
Size (bytes):	141866
Entropy (8bit):	5.429983887489752
Encrypted:	false
SSDEEP:	1536:PyeDOMSQ6fTPRUbx3XCg/MJA5N4ii5WLeV5guLDY2Js0VgtWiTJmxyCXP3onrGGW:wMc1g/Mq5p1Mv+UyJbBw+Icwf
MD5:	2509D4C564AFC2C77D16BA6CA509B39F
SHA1:	201F1D80F8EEA9F5E8A7A7224CFF18674344F886
SHA-256:	D468D9F009E53FE1C47B9D6FDEFA3FF1A8C239973F11A6F892848E341EA17CCD
SHA-512:	C928C36D58BB0B2740E9BE3F3CA3F49624253F8DAD93BA7524E55F24CCCAF630E35FCA8C596CBCE50A0C1214C4986034FD3E26D98F759949C179C54009D5D93E
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1017x678, components 3
Category:	dropped
Size (bytes):	141233
Entropy (8bit):	7.981206634239356
Encrypted:	false
SSDEEP:	3072:04GtHvtT97Zu/s1Ve8Spy586UTukvTmMOuNLiGG:0RpS0VeBy58LIft
MD5:	8412A6F74B196981D3BEE266B17BC756
SHA1:	90158D3FBAF87AB9D71D1A854DD1AFF6FB5CE8BA
SHA-256:	03EE2BCE70C9BE4D5E3A9B01DED41F4518F9C1050A2552DCD2F3225644937ECC
SHA-512:	E6ABEE27870E8A7E9D0F7E4A84AF3A67B6656AF055B16B16CA1AA7C0338888C548FF064D126E532ACEE1DD6BAC62730C40AA177FBDF1576E9719F0C40E893698
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;..........."....................................................................................\|.'....:...NQwI.a..z>..I...d.:.N...f.S'zf..N...d.:.N...h._\.+jTu....A..vdiY....V..)x..p..;3k.....Y....Bl.\|.Z._1...`...:..2L..Y.u1.O.....4.`........GY....A....(D....\|...j.[9.$T...;..4[..c(..%..P_.....&.Tv.>.i..U..=.......Y...:FN........d.:.N...d.:.N...d.:.N..N....n.U....{R.6...&.l..9....Nj.7.:.&.-...Y..L..+y.r.J...MZi...65..lk.....6....8LccP.l..].....1.T...5.J.WJ/...."...x..[......,nPI .$..X.F.@...].R....).2uL.S'T..2uL.S'T..2uL.S'T..2uL.S:T.R..d.:.N...N.S:.N.;).''...S.e..IN.6Bvgt.F\.1C...R....0...B.Q.x.kQ...r.J+......r..q.TJmU9N.A.)RN..z<..2.I(.e8.;.g\<.z.U8.`.gWX4.t..0....=kS.y...s.u..TT.EI....:.N...d.:.N...d.:.N....uL.S'T..L.S'T..2uL.S:B..u..K:zV1..M...p.>...JI....UB-.yT..)KSe.5.Z!U..7SP

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449540
Category:	downloaded
Size (bytes):	122157
Entropy (8bit):	7.997792045055063
Encrypted:	true
SSDEEP:	3072:17MEQ7cSw+Opzu8DVOKY22L2NYwrLiZI53Hybp+Y:yEYXOw2fY2NYQLiZI5Cbp+Y
MD5:	B9A054903589649EF9B8AC6373ABE4BF
SHA1:	B3E0D0512F7B1C59F89BD86338FCD73D57385672
SHA-256:	4EAFFBA1EDB780DEC8B10D44D25951D96BEE9E0F98E46F87849EDA4ECEEEAAB6
SHA-512:	E251F3B0B01E715957DC7356A14E919C8F9253135F1BD6733855F85244384D0BE100B73E174766BB333D4A4EFBE30CE1079C29F02FEEA084984325B991708736
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js
Preview:	...........{W.H.8....F3.......V..@...LU.,.pd)m..W.y..~._Dd...e.jv...;[X..........?o._..+..._ex....N+7...+W...........`...7.~R.......0....(.....(vR.T..o.;Ae.G.J...8...iR..$.B#.D.T.{.+'N_+gW.:..6..P.f...!..Q......G...<.X\y~.....Q...J.\.?A#...M..'f....q........!E..5.[L..:..{P.........8...L...u..Ye..b.iTy....x.pR..M.j.......M.a&,~...A%..B.J....2..$x.Lb'D...`.I......cTt.Z.3...L..$.f3...R..~....?.(l..L.avv...a.x.C.......>.Gu7.~..$p......>.m8...3...9....\|.=..GS..e[W.........%....Z.'.........x....-..JX..+..O. _....o.;=.?....w../Q=`.$}8Hvvj...&w.`......F.....d...Jf......W..mo;.....[...~@+5.....v ....2.S...n.;;..jT.....p.\..[O..qZ.UkK1@{...{.hY.. CC.h..U.6...,..a...Na!&.T..${.[..X[..2..ry .1,D}LeY=...Q.>.{.......G~.US.......Z.7...)..h.[..(......1p..=Wn .$..y.:+......i......-UF.,XL...vF..j...N...9..D7k..PL.L...h-.p..%V?.>e...C...3....P.......w?...................R.].....xY..~.........s...xZr.z.L..).j...p.)#..!Qr.#t..

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113769
Entropy (8bit):	5.4928592467688535
Encrypted:	false
SSDEEP:	1536:pd8gIRPY0+r5qnWisyOFa8nvUHCC4LgvbrGYXts1N5VFUnqGj:kgDTMnWsTkpLgv2Qe1bXA
MD5:	21FB66A712FCAB3BF6667404C78631D6
SHA1:	6011F3E397AEB5B807EB6BE1A08ABFD302E9D253
SHA-256:	BAB311BF22661B153353A159F0EC931DBCB79F950FA37DAF9D0FF180CBF45DEB
SHA-512:	CD310A2C00DB5E273091F45308227CC6CA5131767823C356013AAD5EB515E75048317C4E5A793955CFBC93CE015BAFB89463066ABF0E31870AF93076E98F2586
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1372:function(e,t,

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449540
Category:	dropped
Size (bytes):	122157
Entropy (8bit):	7.997792045055063
Encrypted:	true
SSDEEP:	3072:17MEQ7cSw+Opzu8DVOKY22L2NYwrLiZI53Hybp+Y:yEYXOw2fY2NYQLiZI5Cbp+Y
MD5:	B9A054903589649EF9B8AC6373ABE4BF
SHA1:	B3E0D0512F7B1C59F89BD86338FCD73D57385672
SHA-256:	4EAFFBA1EDB780DEC8B10D44D25951D96BEE9E0F98E46F87849EDA4ECEEEAAB6
SHA-512:	E251F3B0B01E715957DC7356A14E919C8F9253135F1BD6733855F85244384D0BE100B73E174766BB333D4A4EFBE30CE1079C29F02FEEA084984325B991708736
Malicious:	false
Reputation:	low
Preview:	...........{W.H.8....F3.......V..@...LU.,.pd)m..W.y..~._Dd...e.jv...;[X..........?o._..+..._ex....N+7...+W...........`...7.~R.......0....(.....(vR.T..o.;Ae.G.J...8...iR..$.B#.D.T.{.+'N_+gW.:..6..P.f...!..Q......G...<.X\y~.....Q...J.\.?A#...M..'f....q........!E..5.[L..:..{P.........8...L...u..Ye..b.iTy....x.pR..M.j.......M.a&,~...A%..B.J....2..$x.Lb'D...`.I......cTt.Z.3...L..$.f3...R..~....?.(l..L.avv...a.x.C.......>.Gu7.~..$p......>.m8...3...9....\|.=..GS..e[W.........%....Z.'.........x....-..JX..+..O. _....o.;=.?....w../Q=`.$}8Hvvj...&w.`......F.....d...Jf......W..mo;.....[...~@+5.....v ....2.S...n.;;..jT.....p.\..[O..qZ.UkK1@{...{.hY.. CC.h..U.6...,..a...Na!&.T..${.[..X[..2..ry .1,D}LeY=...Q.>.{.......G~.US.......Z.7...)..h.[..(......1p..=Wn .$..y.:+......i......-UF.,XL...vF..j...N...9..D7k..PL.L...h-.p..%V?.>e...C...3....P.......w?...................R.].....xY..~.........s...xZr.z.L..).j...p.)#..!Qr.#t..

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32057)
Category:	downloaded
Size (bytes):	56391
Entropy (8bit):	5.37635913975141
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3Z1ym+d/ixLgT1wtuQixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJJ1ym+d/ihgT1wtuQiJig/Ml
MD5:	B59C16ABA59DB0BC490C85B30C0B60E8
SHA1:	7B708EC7EDC902283A755FC0BF4E767A2A28473E
SHA-256:	D65E2644BEA71489D43203AA2ABCBA471C847BF2A176963BE8DB62BF1A70F7A5
SHA-512:	F7E252E5B6046AFB46658F542233D7E1602C2638089B6BF4E1490643770A28D3DF1FFCB587699B82FD8E821495D69780E160EA8B7065519EEA8B34C98F4817AA
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	dropped
Size (bytes):	113769
Entropy (8bit):	5.4928592467688535
Encrypted:	false
SSDEEP:	1536:pd8gIRPY0+r5qnWisyOFa8nvUHCC4LgvbrGYXts1N5VFUnqGj:kgDTMnWsTkpLgv2Qe1bXA
MD5:	21FB66A712FCAB3BF6667404C78631D6
SHA1:	6011F3E397AEB5B807EB6BE1A08ABFD302E9D253
SHA-256:	BAB311BF22661B153353A159F0EC931DBCB79F950FA37DAF9D0FF180CBF45DEB
SHA-512:	CD310A2C00DB5E273091F45308227CC6CA5131767823C356013AAD5EB515E75048317C4E5A793955CFBC93CE015BAFB89463066ABF0E31870AF93076E98F2586
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1372:function(e,t,

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	9285
Entropy (8bit):	5.397876465825329
Encrypted:	false
SSDEEP:	192:U23y7LVYADenIY9uOqc4gIVH4VoXLIOjMuj4lMNVWmn4GHF5y8WC:U23y7hDTYvquI14i5EOvWmNl5y8h
MD5:	439A53994F1A9C860C7787ED5100CA0C
SHA1:	15BA120F64BBF6A59A457841B10DF0D6D1B4574C
SHA-256:	441BFA485FB0EB8AD2BE7001209868B57C41769CAE9512A774419F5882C093E6
SHA-512:	FB6002797BD9E28A352BCBE4643BC7E998C562218D9189AE879E1DC605BC79C3234435029B46667724E5C85A475A72C8DDDED17E3EEFD7791EC1FB21822D3804
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js
Preview:	!function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}function n(e,r,n){if(e&&r){n\|\|(e=e.toLowerCase());for(var t=0;t<r.length;t++){var o=r[t];if(o&&(n\|\|(o=o.toLowerCase()),e.indexOf(o)>=0)){return r[t]}}}return null}function t(e,r,n){return!!(0===n&&r&&r.indexOf("Script error.")>=0)}function o(e,r){.if(!e.expectedVersion\|\|e.expectedVersion!==E().jquery){if(r&&r.indexOf("jQuery.easing[jQuery.easing.def] is not a function")>=0){return!0}if(r&&r.indexOf("The bound jQuery version is not the expected version -- loaded")>=0){return!0}}return!1}function i(e){if(e){try{if("string"!==E.type(e)&&JSON&&JSON.stringify){var n=r(e),t=JSON.stringify(e);return t&&"{}"!==t\|\|(e.error&&(e=e.error,n=r(e)),(t=JSON.stringify(e))&&"{}"!==t\|\|(t=e.toString())),n+":"+t}}catch(e){}}return""+(e\|\|"")}function a(e,r){return{."sig

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	119648
Entropy (8bit):	5.356165204896218
Encrypted:	false
SSDEEP:	3072:/Yh8eip3huuf6IidlrvakdtQ47GKvPhQDvMwFdm:/i8eGRuufsr5zQ47GKvPyDvG
MD5:	75CF78D0E38C65A538AD253CA9E48DBE
SHA1:	BF0452E4A42A9AF3B69D5D8C3A3A0433F14921B6
SHA-256:	DF2AA8537C1992C94846A0FFFFAA9031D430D9D0210B9E396EC059AFF62627E0
SHA-512:	81383E4FDAE1F34F8E652F69058D57A2A4BD0A77C2C41C3174BEE0CEBA83A8326229C2A74EAF415BFBD34382B1C442A97C41034F43CD77A391BA9B4DAAE65463
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14782)
Category:	downloaded
Size (bytes):	15755
Entropy (8bit):	5.36744950996082
Encrypted:	false
SSDEEP:	384:D6eX/4OSgc82Z52ZfeXOh+rF3X1RDZD1zfXdv799PU:H/kD57fPU
MD5:	4597CCE81F8F3965937273110BE46419
SHA1:	4573D6EF25B3596572823B2C17D063D805201DE9
SHA-256:	8D31DBC6089DC6195B1945B85A7225A01DCF031BD8CBC3DF86029022FE64A5E5
SHA-512:	1E358B79944205C25DD1BFF0296B57EAC5F5CC3285468C8DE1B6D231E812EB6C6FD5D897BE694CAC757C167F9ED56DF67921187CB8815DDBD23A5A3AEEF03897
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{518:function(e,n,s

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	dropped
Size (bytes):	119648
Entropy (8bit):	5.356165204896218
Encrypted:	false
SSDEEP:	3072:/Yh8eip3huuf6IidlrvakdtQ47GKvPhQDvMwFdm:/i8eGRuufsr5zQ47GKvPyDvG
MD5:	75CF78D0E38C65A538AD253CA9E48DBE
SHA1:	BF0452E4A42A9AF3B69D5D8C3A3A0433F14921B6
SHA-256:	DF2AA8537C1992C94846A0FFFFAA9031D430D9D0210B9E396EC059AFF62627E0
SHA-512:	81383E4FDAE1F34F8E652F69058D57A2A4BD0A77C2C41C3174BEE0CEBA83A8326229C2A74EAF415BFBD34382B1C442A97C41034F43CD77A391BA9B4DAAE65463
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46090)
Category:	dropped
Size (bytes):	141866
Entropy (8bit):	5.429983887489752
Encrypted:	false
SSDEEP:	1536:PyeDOMSQ6fTPRUbx3XCg/MJA5N4ii5WLeV5guLDY2Js0VgtWiTJmxyCXP3onrGGW:wMc1g/Mq5p1Mv+UyJbBw+Icwf
MD5:	2509D4C564AFC2C77D16BA6CA509B39F
SHA1:	201F1D80F8EEA9F5E8A7A7224CFF18674344F886
SHA-256:	D468D9F009E53FE1C47B9D6FDEFA3FF1A8C239973F11A6F892848E341EA17CCD
SHA-512:	C928C36D58BB0B2740E9BE3F3CA3F49624253F8DAD93BA7524E55F24CCCAF630E35FCA8C596CBCE50A0C1214C4986034FD3E26D98F759949C179C54009D5D93E
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	dropped
Size (bytes):	11970
Entropy (8bit):	5.416120131770621
Encrypted:	false
SSDEEP:	192:FPpd9ihiovIZwqsTh8Mi0Yl82YmYZewHe+IkA1niOpVTChGZu3PcXVstaD:ddEIyi0u82Y9ZewHPIkA1niOpVmOUPcX
MD5:	39A0EB35CD7799A181D34F4AE1DDB496
SHA1:	E933CA8534BCB6AD79D240316CE23C8B870050D0
SHA-256:	C8CEF105FCAF7CBF3F8682C861045505C24D41CF6686C20C1C03E14031A3DB69
SHA-512:	0AE990F9B57B55C3A8025BBE13C98ECD8A40C38380F9E0EFEF2BE7B418642EB040E4C537E684D2FEF7E04113450CFD4DEFF3414310773177220209991BBF1643
Malicious:	false
Reputation:	low
Preview:	/! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. .. json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain..Provided for Informational Purposes Only..Public Domain. .NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK..----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */."object"!=typeof JSON&&(JSON={}),

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	409600
Entropy (8bit):	5.458274754495384
Encrypted:	false
SSDEEP:	3072:jfrg/MS5T7YmuMYafyhssgQnOPZ228l0Y06tsL7Km+9uVdOWSalwOzxkpB9ZywNH:U7lu66UglOK2d/VkpJYBsLLhkSB29OWo
MD5:	84E7BFC1E4648A74EB955B71B2B5BFB9
SHA1:	A1EBF9DCD7B149EC42B4F5638F86F226FFDE49F7
SHA-256:	59B56A6A4AFD6A3FBB519FF127D75AC134B7B2F51030EAB89724F59933F9DAFA
SHA-512:	545A97490C125C51DB743DEDA9B07772B170901AE62397E2C921B023FA943934ABEFE47C6D8D18E9CD555FFDFCFA8421F1674FD3B5B49558F5D05CB8E63361A0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.317614623419193
Encrypted:	false
SSDEEP:	3072:ew5iAZBaQxn7oW/gFDfmtGOOJcPSRTQLeUDdHm7mCId9hvuZTh910rOzPypRan4:ZiAhxp/mTmbraQJmvZxL4
MD5:	033A93064FBF6C5BEA2377A5D08D554D
SHA1:	75524ED095D9ACDD42EA8D67D38A5B0793081D70
SHA-256:	1EC87632EE58734951AA02813EF07AD377126A39A16F063C181519B98FFFFC07
SHA-512:	FD93A5DDF2CCE4AA956DF94E10F3791787E157BA8D6CFF8151163F719868105045F431901D496215E5959989A30969AC696C218B29B0AE343F2BF9E7F7D51078
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(532).concat([f

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	dropped
Size (bytes):	9285
Entropy (8bit):	5.397876465825329
Encrypted:	false
SSDEEP:	192:U23y7LVYADenIY9uOqc4gIVH4VoXLIOjMuj4lMNVWmn4GHF5y8WC:U23y7hDTYvquI14i5EOvWmNl5y8h
MD5:	439A53994F1A9C860C7787ED5100CA0C
SHA1:	15BA120F64BBF6A59A457841B10DF0D6D1B4574C
SHA-256:	441BFA485FB0EB8AD2BE7001209868B57C41769CAE9512A774419F5882C093E6
SHA-512:	FB6002797BD9E28A352BCBE4643BC7E998C562218D9189AE879E1DC605BC79C3234435029B46667724E5C85A475A72C8DDDED17E3EEFD7791EC1FB21822D3804
Malicious:	false
Reputation:	low
Preview:	!function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}function n(e,r,n){if(e&&r){n\|\|(e=e.toLowerCase());for(var t=0;t<r.length;t++){var o=r[t];if(o&&(n\|\|(o=o.toLowerCase()),e.indexOf(o)>=0)){return r[t]}}}return null}function t(e,r,n){return!!(0===n&&r&&r.indexOf("Script error.")>=0)}function o(e,r){.if(!e.expectedVersion\|\|e.expectedVersion!==E().jquery){if(r&&r.indexOf("jQuery.easing[jQuery.easing.def] is not a function")>=0){return!0}if(r&&r.indexOf("The bound jQuery version is not the expected version -- loaded")>=0){return!0}}return!1}function i(e){if(e){try{if("string"!==E.type(e)&&JSON&&JSON.stringify){var n=r(e),t=JSON.stringify(e);return t&&"{}"!==t\|\|(e.error&&(e=e.error,n=r(e)),(t=JSON.stringify(e))&&"{}"!==t\|\|(t=e.toString())),n+":"+t}}catch(e){}}return""+(e\|\|"")}function a(e,r){return{."sig

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113401
Entropy (8bit):	5.284985933216009
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmchSeC1Jzc6VUW3:xkNhp6VU0
MD5:	41955034BB6BC6963DF5A8ECA72C5B81
SHA1:	D4B9E8C46100BDDACE8DFA08BDFF1F6F3D3B0A81
SHA-256:	1F8CEB44FE7CFCF7E71DBD5122210335CA3821D697A851D2900B95AF7D92D69D
SHA-512:	A52DF8961AC9964DE5202A52B4C38242368DC8898593BF3E8B3AFD3FC77C2C12FE72F27BB410DD4F7498643B69EEEFCCA1A566371E211F874C0BE22CF7E2A4E8
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.317614623419193
Encrypted:	false
SSDEEP:	3072:ew5iAZBaQxn7oW/gFDfmtGOOJcPSRTQLeUDdHm7mCId9hvuZTh910rOzPypRan4:ZiAhxp/mTmbraQJmvZxL4
MD5:	033A93064FBF6C5BEA2377A5D08D554D
SHA1:	75524ED095D9ACDD42EA8D67D38A5B0793081D70
SHA-256:	1EC87632EE58734951AA02813EF07AD377126A39A16F063C181519B98FFFFC07
SHA-512:	FD93A5DDF2CCE4AA956DF94E10F3791787E157BA8D6CFF8151163F719868105045F431901D496215E5959989A30969AC696C218B29B0AE343F2BF9E7F7D51078
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(532).concat([f

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32057)
Category:	dropped
Size (bytes):	56391
Entropy (8bit):	5.37635913975141
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3Z1ym+d/ixLgT1wtuQixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJJ1ym+d/ihgT1wtuQiJig/Ml
MD5:	B59C16ABA59DB0BC490C85B30C0B60E8
SHA1:	7B708EC7EDC902283A755FC0BF4E767A2A28473E
SHA-256:	D65E2644BEA71489D43203AA2ABCBA471C847BF2A176963BE8DB62BF1A70F7A5
SHA-512:	F7E252E5B6046AFB46658F542233D7E1602C2638089B6BF4E1490643770A28D3DF1FFCB587699B82FD8E821495D69780E160EA8B7065519EEA8B34C98F4817AA
Malicious:	false
Reputation:	low
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1017x678, components 3
Category:	downloaded
Size (bytes):	141233
Entropy (8bit):	7.981206634239356
Encrypted:	false
SSDEEP:	3072:04GtHvtT97Zu/s1Ve8Spy586UTukvTmMOuNLiGG:0RpS0VeBy58LIft
MD5:	8412A6F74B196981D3BEE266B17BC756
SHA1:	90158D3FBAF87AB9D71D1A854DD1AFF6FB5CE8BA
SHA-256:	03EE2BCE70C9BE4D5E3A9B01DED41F4518F9C1050A2552DCD2F3225644937ECC
SHA-512:	E6ABEE27870E8A7E9D0F7E4A84AF3A67B6656AF055B16B16CA1AA7C0338888C548FF064D126E532ACEE1DD6BAC62730C40AA177FBDF1576E9719F0C40E893698
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauthimages.net/81d6b03a-0oaqvemumiggapupispz73q-euqm382uqpsqys7gkkc/logintenantbranding/0/illustration?ts=637640617494988131
Preview:	......JFIF.....H.H.....C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;..........."....................................................................................\|.'....:...NQwI.a..z>..I...d.:.N...f.S'zf..N...d.:.N...h._\.+jTu....A..vdiY....V..)x..p..;3k.....Y....Bl.\|.Z._1...`...:..2L..Y.u1.O.....4.`........GY....A....(D....\|...j.[9.$T...;..4[..c(..%..P_.....&.Tv.>.i..U..=.......Y...:FN........d.:.N...d.:.N...d.:.N..N....n.U....{R.6...&.l..9....Nj.7.:.&.-...Y..L..+y.r.J...MZi...65..lk.....6....8LccP.l..].....1.T...5.J.WJ/...."...x..[......,nPI .$..X.F.@...].R....).2uL.S'T..2uL.S'T..2uL.S'T..2uL.S:T.R..d.:.N...N.S:.N.;).''...S.e..IN.6Bvgt.F\.1C...R....0...B.Q.x.kQ...r.J+......r..q.TJmU9N.A.)RN..z<..2.I(.e8.;.g\<.z.U8.`.gWX4.t..0....=kS.y...s.u..TT.EI....:.N...d.:.N...d.:.N....uL.S'T..L.S'T..2uL.S:B..u..K:zV1..M...p.>...JI....UB-.yT..)KSe.5.Z!U..7SP

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14782)
Category:	dropped
Size (bytes):	15755
Entropy (8bit):	5.36744950996082
Encrypted:	false
SSDEEP:	384:D6eX/4OSgc82Z52ZfeXOh+rF3X1RDZD1zfXdv799PU:H/kD57fPU
MD5:	4597CCE81F8F3965937273110BE46419
SHA1:	4573D6EF25B3596572823B2C17D063D805201DE9
SHA-256:	8D31DBC6089DC6195B1945B85A7225A01DCF031BD8CBC3DF86029022FE64A5E5
SHA-512:	1E358B79944205C25DD1BFF0296B57EAC5F5CC3285468C8DE1B6D231E812EB6C6FD5D897BE694CAC757C167F9ED56DF67921187CB8815DDBD23A5A3AEEF03897
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{518:function(e,n,s

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 29, 2024 06:42:10.817043066 CEST	49674	443	192.168.2.5	23.1.237.91
Aug 29, 2024 06:42:10.830538988 CEST	49675	443	192.168.2.5	23.1.237.91
Aug 29, 2024 06:42:10.926430941 CEST	49673	443	192.168.2.5	23.1.237.91
Aug 29, 2024 06:42:20.519649029 CEST	49674	443	192.168.2.5	23.1.237.91
Aug 29, 2024 06:42:20.535238981 CEST	49673	443	192.168.2.5	23.1.237.91
Aug 29, 2024 06:42:20.535242081 CEST	49675	443	192.168.2.5	23.1.237.91
Aug 29, 2024 06:42:22.207072020 CEST	443	49703	23.1.237.91	192.168.2.5
Aug 29, 2024 06:42:22.207164049 CEST	49703	443	192.168.2.5	23.1.237.91
Aug 29, 2024 06:42:22.270091057 CEST	49710	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:22.270158052 CEST	443	49710	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:22.270226002 CEST	49710	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:22.275862932 CEST	49711	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:22.275916100 CEST	443	49711	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:22.275979996 CEST	49711	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:22.305728912 CEST	49712	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:22.305773973 CEST	443	49712	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:22.305905104 CEST	49712	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:22.309443951 CEST	49712	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:22.309459925 CEST	443	49712	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:22.309794903 CEST	49711	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:22.309818029 CEST	443	49711	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:22.310125113 CEST	49710	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:22.310139894 CEST	443	49710	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.003652096 CEST	49714	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:42:23.003700972 CEST	443	49714	142.250.185.100	192.168.2.5
Aug 29, 2024 06:42:23.003828049 CEST	49714	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:42:23.004515886 CEST	49714	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:42:23.004527092 CEST	443	49714	142.250.185.100	192.168.2.5
Aug 29, 2024 06:42:23.186060905 CEST	443	49710	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.240794897 CEST	49710	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.265032053 CEST	49710	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.265049934 CEST	443	49710	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.265543938 CEST	443	49710	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.265558004 CEST	443	49710	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.265621901 CEST	49710	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.266299963 CEST	443	49710	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.266355991 CEST	49710	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.266499996 CEST	443	49712	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.275409937 CEST	443	49711	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.316236973 CEST	49712	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.316240072 CEST	49711	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.326072931 CEST	49712	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.326086998 CEST	443	49712	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.326468945 CEST	49711	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.326481104 CEST	443	49711	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.326590061 CEST	443	49712	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.326658010 CEST	49712	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.326872110 CEST	443	49711	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.326929092 CEST	49711	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.327310085 CEST	443	49712	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.327368975 CEST	49712	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.327579975 CEST	443	49711	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.327637911 CEST	49711	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.328387976 CEST	49710	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.328469038 CEST	443	49710	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.328728914 CEST	49712	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.328799009 CEST	443	49712	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.329102993 CEST	49711	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.329171896 CEST	443	49711	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.329929113 CEST	49710	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.329937935 CEST	443	49710	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.378817081 CEST	49710	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.378817081 CEST	49712	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.378820896 CEST	49711	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.378833055 CEST	443	49712	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.378837109 CEST	443	49711	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.428185940 CEST	49711	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.428188086 CEST	49712	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.647713900 CEST	443	49714	142.250.185.100	192.168.2.5
Aug 29, 2024 06:42:23.670629025 CEST	49714	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:42:23.670654058 CEST	443	49714	142.250.185.100	192.168.2.5
Aug 29, 2024 06:42:23.671714067 CEST	443	49714	142.250.185.100	192.168.2.5
Aug 29, 2024 06:42:23.671799898 CEST	49714	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:42:23.695893049 CEST	49714	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:42:23.695980072 CEST	443	49714	142.250.185.100	192.168.2.5
Aug 29, 2024 06:42:23.710109949 CEST	443	49710	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.710181952 CEST	443	49710	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.710236073 CEST	49710	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.714087963 CEST	49710	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:23.714102983 CEST	443	49710	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:23.741790056 CEST	49714	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:42:23.741806030 CEST	443	49714	142.250.185.100	192.168.2.5
Aug 29, 2024 06:42:23.786442995 CEST	49714	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:42:24.138273001 CEST	49712	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:24.180504084 CEST	443	49712	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:24.410164118 CEST	49715	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:24.410197973 CEST	443	49715	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:24.410342932 CEST	49715	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:24.414681911 CEST	49715	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:24.414695978 CEST	443	49715	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:24.603367090 CEST	443	49712	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:24.603462934 CEST	443	49712	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:24.603530884 CEST	49712	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:24.603915930 CEST	49712	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:24.603939056 CEST	443	49712	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:24.875899076 CEST	49716	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:24.875942945 CEST	443	49716	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:24.876108885 CEST	49716	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:24.877108097 CEST	49716	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:24.877121925 CEST	443	49716	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:25.054822922 CEST	443	49715	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:25.054893017 CEST	49715	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:25.063894987 CEST	49715	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:25.063911915 CEST	443	49715	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:25.064169884 CEST	443	49715	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:25.114537954 CEST	49715	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:25.236293077 CEST	49715	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:25.280510902 CEST	443	49715	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:25.421998978 CEST	443	49715	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:25.422056913 CEST	443	49715	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:25.422118902 CEST	49715	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:25.468830109 CEST	49715	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:25.468839884 CEST	443	49715	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:25.740087032 CEST	49717	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:25.740103006 CEST	443	49717	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:25.740221024 CEST	49717	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:25.740648985 CEST	49717	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:25.740660906 CEST	443	49717	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:25.764843941 CEST	443	49716	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:25.765654087 CEST	49716	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:25.765675068 CEST	443	49716	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:25.766750097 CEST	443	49716	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:25.766814947 CEST	49716	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:25.774884939 CEST	49716	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:25.774940014 CEST	443	49716	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:25.775229931 CEST	49716	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:25.775242090 CEST	443	49716	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:25.890235901 CEST	49716	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:26.286976099 CEST	443	49716	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:26.287041903 CEST	443	49716	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:26.287055016 CEST	49716	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:26.287113905 CEST	49716	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:26.397922993 CEST	443	49717	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:26.397999048 CEST	49717	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:26.399456978 CEST	49717	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:26.399467945 CEST	443	49717	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:26.399715900 CEST	443	49717	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:26.400871038 CEST	49717	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:26.418363094 CEST	49716	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:42:26.418386936 CEST	443	49716	103.138.128.66	192.168.2.5
Aug 29, 2024 06:42:26.448492050 CEST	443	49717	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:26.678968906 CEST	443	49717	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:26.679052114 CEST	443	49717	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:26.679138899 CEST	49717	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:26.689481020 CEST	49717	443	192.168.2.5	184.28.90.27
Aug 29, 2024 06:42:26.689491987 CEST	443	49717	184.28.90.27	192.168.2.5
Aug 29, 2024 06:42:27.864401102 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:27.864425898 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:27.864598989 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:27.864866972 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:27.864877939 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:28.683263063 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:28.683530092 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:28.683551073 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:28.684515953 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:28.684585094 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:28.685646057 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:28.685700893 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:28.685866117 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:28.685872078 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:28.729687929 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:28.950489044 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:28.991440058 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:28.991451025 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:28.991462946 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:28.991518021 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:28.991539001 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:28.991548061 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:28.991586924 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.039525986 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.039535046 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.039582014 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.039599895 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.039608955 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.039623022 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.039666891 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.039679050 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.041244984 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.041260958 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.041331053 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.041337013 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.041380882 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.128233910 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.128252029 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.128319979 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.128336906 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.128444910 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.129570961 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.129585981 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.129637003 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.129642963 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.129676104 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.129698992 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.130515099 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.130527973 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.130597115 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.130601883 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.130645990 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.171535969 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.171551943 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.171612024 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.171623945 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.171672106 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.216579914 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.216598034 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.216658115 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.216665030 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.216716051 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.216737986 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.216873884 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.216902971 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.216929913 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.216933966 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.216948032 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.216970921 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.217003107 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.217575073 CEST	49719	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.217588902 CEST	443	49719	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.233474970 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.233494997 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:29.233650923 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.234152079 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:29.234160900 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.071639061 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.071836948 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.071857929 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.072882891 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.073045015 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.073292971 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.073350906 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.073432922 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.113141060 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.113152981 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.159427881 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.345179081 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.389555931 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.389566898 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.389620066 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.389621019 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.389632940 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.389640093 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.389657021 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.389667988 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.389704943 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.389704943 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.389708042 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.431476116 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.437107086 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.437114000 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.437155962 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.437160969 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.437165022 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.437189102 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.437194109 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.437222004 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.437257051 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.438973904 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.438982010 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.439023018 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.439043999 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.439049006 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.439078093 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.439091921 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.528132915 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.528151035 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.528202057 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.528214931 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.528244972 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.528261900 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.529526949 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.529546022 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.529588938 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.529637098 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.529640913 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.529685020 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.530548096 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.530564070 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.530631065 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.530636072 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.530730009 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.532125950 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.532140970 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.532205105 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.532210112 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.532263994 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.619177103 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.619195938 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.619260073 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.619273901 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.619314909 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.619345903 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.619399071 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.619404078 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.619419098 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:30.619448900 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.619462013 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.631582975 CEST	49723	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:30.631597996 CEST	443	49723	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.140640020 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.140666962 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.140794039 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.142047882 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.142062902 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.147192955 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.147222996 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.147373915 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.147738934 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.147768974 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.147847891 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.148745060 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.148757935 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.149277925 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.149291992 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.960813999 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.961069107 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.961086035 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.962074995 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.962156057 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.963417053 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.963474989 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.963773966 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.963782072 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.971084118 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.971391916 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.971404076 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.971731901 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.972173929 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.972244978 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.972280025 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.973436117 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.973824978 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.973844051 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.974201918 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.974704981 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:31.974766970 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:31.975039005 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.009499073 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.012504101 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.020509958 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.024033070 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.225653887 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.238579988 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.240473032 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.274167061 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.279767036 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.279777050 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.279800892 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.279817104 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.279824972 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.279884100 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.279895067 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.279942989 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.279948950 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.280011892 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.289397955 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.289505005 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.291596889 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.291605949 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.291637897 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.291649103 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.291659117 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.291670084 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.291677952 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.291711092 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.291750908 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.293468952 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.293486118 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.293508053 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.293534994 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.293545961 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.293554068 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.293571949 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.293677092 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.293680906 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.318456888 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.318468094 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.318504095 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.318528891 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.318538904 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.318573952 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.318593025 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.320302010 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.320317984 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.320363045 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.320369005 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.320404053 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.320425034 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.330362082 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.330370903 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.330394030 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.330435038 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.330445051 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.330497026 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.330497026 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.331969023 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.331984043 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.332078934 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.332087040 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.332190037 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.332209110 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.332210064 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.332252026 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.332261086 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.332278967 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.333689928 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.333708048 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.333758116 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.333770037 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.333795071 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.382857084 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.408644915 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.408664942 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.408744097 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.408751965 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.408803940 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.409610987 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.409626007 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.409691095 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.409698009 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.409740925 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.411312103 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.411326885 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.411379099 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.411386967 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.411427021 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.420057058 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.420075893 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.420319080 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.420329094 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.420392990 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.421438932 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.421452999 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.421550989 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.421557903 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.421689034 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.422522068 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.422543049 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.422636032 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.422641993 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.422700882 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.428283930 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.428299904 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.428349972 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.428358078 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.428380966 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.428395987 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.428438902 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.428843975 CEST	49727	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.428859949 CEST	443	49727	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.435554981 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.435564995 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.435703039 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.436005116 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.436017036 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.467909098 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.467928886 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.468033075 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.468043089 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.468348980 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.497124910 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.497200012 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.497210979 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.497216940 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.497226954 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.497286081 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.497313976 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.497822046 CEST	49729	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.497827053 CEST	443	49729	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.511240005 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.511260033 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.511317015 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.511331081 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.511389971 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.512043953 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.512061119 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.512171030 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.512178898 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.512341976 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.512924910 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.512939930 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.513021946 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.513031006 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.513155937 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.513901949 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.513919115 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.514018059 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.514025927 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.514070034 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.514797926 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.514813900 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.514895916 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.514904022 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.515084982 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.515717983 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.515733957 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.515820026 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.515831947 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.515883923 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.558615923 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.558636904 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.558732986 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.558743000 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.558828115 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.607300997 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.607332945 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.607392073 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.607403040 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.607465029 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.607489109 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.609544039 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.609568119 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.609620094 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.609627962 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.609652042 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.609688044 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.609714985 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.609735012 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.609774113 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.609780073 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.609824896 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.609824896 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.609961987 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.609981060 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.610054016 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.610054016 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.610059977 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.610101938 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.610137939 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.610157013 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.610197067 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.610203981 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.610232115 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.610240936 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.610439062 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.610459089 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.610527039 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.610527992 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.610533953 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.610702038 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.610955954 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.610975981 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.611041069 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.611047983 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.611074924 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.611084938 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.697916031 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.697942019 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.698035002 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.698045015 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.698101044 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.698185921 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.698205948 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.698251963 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.698257923 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.698293924 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.698334932 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.698724031 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.698743105 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.698786974 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.698791981 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.698828936 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.698828936 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.699043989 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.699065924 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.699110985 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.699117899 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.699155092 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.699155092 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.699348927 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.699400902 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.699455023 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.702244043 CEST	49728	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.702254057 CEST	443	49728	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.726202965 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:32.726223946 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:32.726281881 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:32.726902008 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.726921082 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:32.727003098 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.727178097 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:32.727190018 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:32.727401018 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:32.727415085 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.253237963 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.255109072 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.255116940 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.255644083 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.256829977 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.256923914 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.257281065 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.300509930 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.376842022 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.426449060 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.451602936 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.451615095 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.452893972 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.452970028 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.466696978 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.466792107 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.467793941 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.467807055 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.508162975 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.518423080 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.552732944 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.564976931 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.564995050 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.565072060 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.565097094 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.565152884 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.569541931 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.569570065 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.569577932 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.569596052 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.569605112 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.569619894 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.569647074 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.569659948 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.569673061 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.569710970 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.580382109 CEST	443	49714	142.250.185.100	192.168.2.5
Aug 29, 2024 06:42:33.580442905 CEST	443	49714	142.250.185.100	192.168.2.5
Aug 29, 2024 06:42:33.582041979 CEST	49714	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:42:33.600625038 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.608227968 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.608248949 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.608311892 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.608320951 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.608380079 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.610100031 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.610116959 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.610172987 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.610182047 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.610219955 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.615706921 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.615715027 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.616264105 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.618922949 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.618999958 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.619427919 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.636262894 CEST	49714	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:42:33.636292934 CEST	443	49714	142.250.185.100	192.168.2.5
Aug 29, 2024 06:42:33.652853966 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.652878046 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.652941942 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.652951956 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.653018951 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.653018951 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.654309988 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.654320002 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.654361010 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.654401064 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.654406071 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.654469967 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.660522938 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.695719004 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.695791006 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.695801020 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.695813894 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.695842981 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.695897102 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.696620941 CEST	49736	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.696631908 CEST	443	49736	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.738771915 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.738796949 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.738846064 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.738853931 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.738898993 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.740041971 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.740062952 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.740112066 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.740118027 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.740144014 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.740156889 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.741235018 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.741255999 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.741298914 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.741303921 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.741348028 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.780947924 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.780972004 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.781035900 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.781044960 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.781086922 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.825316906 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.825408936 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.825417995 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.825491905 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.826212883 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.826428890 CEST	49737	443	192.168.2.5	13.107.246.60
Aug 29, 2024 06:42:33.826442957 CEST	443	49737	13.107.246.60	192.168.2.5
Aug 29, 2024 06:42:33.853832006 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:33.853857040 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:33.853986025 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:33.854201078 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:33.854211092 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:33.867362022 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.867371082 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.867384911 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.867440939 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.867453098 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.867480040 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.867487907 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.867506027 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.912777901 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.915944099 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.915951967 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.915970087 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.915977955 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.915999889 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.916065931 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.916073084 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.916119099 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.916945934 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.916953087 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.916984081 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.917025089 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.917028904 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:33.917067051 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:33.917087078 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.004983902 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.005002975 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.005110979 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.005119085 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.005168915 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.006905079 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.006921053 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.007004976 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.007013083 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.007056952 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.008593082 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.008609056 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.008683920 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.008691072 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.008733988 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.009708881 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.009725094 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.009779930 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.009787083 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.009826899 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.094300032 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.094373941 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.094379902 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.094394922 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.094439983 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.095462084 CEST	49738	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.095469952 CEST	443	49738	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.125425100 CEST	49743	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.125435114 CEST	443	49743	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.125551939 CEST	49743	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.126029968 CEST	49743	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.126041889 CEST	443	49743	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.127043009 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.127053976 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.127111912 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.127305031 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.127314091 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.490806103 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.492006063 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.492017984 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.493046045 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.493165016 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.493479967 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.493536949 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.493717909 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.493722916 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.538482904 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.592637062 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.592655897 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.592665911 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.592691898 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.592721939 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.592725039 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.592739105 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.592782021 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.592818022 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.677589893 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.677611113 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.677680016 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.677690983 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.677764893 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.679425955 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.679455042 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.679559946 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.679567099 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.679653883 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.765193939 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.765214920 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.765289068 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.765297890 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.765497923 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.766057968 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.766072989 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.766144037 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.766149044 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.766192913 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.766690016 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.766705036 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.766772985 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.766786098 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.767018080 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.768182993 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.768198013 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.768255949 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.768270016 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.768501043 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.851393938 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.851471901 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.851480007 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.851540089 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.851944923 CEST	49741	443	192.168.2.5	13.107.246.67
Aug 29, 2024 06:42:34.851984024 CEST	443	49741	13.107.246.67	192.168.2.5
Aug 29, 2024 06:42:34.930748940 CEST	443	49743	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.931169033 CEST	49743	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.931180000 CEST	443	49743	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.931535006 CEST	443	49743	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.933515072 CEST	49743	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.933582067 CEST	443	49743	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.933727026 CEST	49743	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.948187113 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.949140072 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.949150085 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.949531078 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.949857950 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.949920893 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.950187922 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:34.980492115 CEST	443	49743	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:34.992506027 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.200438976 CEST	443	49743	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.201456070 CEST	443	49743	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.201502085 CEST	443	49743	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.201539040 CEST	443	49743	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.201545000 CEST	49743	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.201601028 CEST	49743	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.202013016 CEST	49743	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.202022076 CEST	443	49743	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.207811117 CEST	49745	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.207828045 CEST	443	49745	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.207945108 CEST	49745	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.208302021 CEST	49745	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.208316088 CEST	443	49745	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.209783077 CEST	49746	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.209789991 CEST	443	49746	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.209913015 CEST	49746	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.210150957 CEST	49746	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.210163116 CEST	443	49746	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.419642925 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.424587011 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.424606085 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.424807072 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.424819946 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.424947977 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.426306963 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.426326990 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.426912069 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.426919937 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.429606915 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.429626942 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.429733038 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.429733038 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.429740906 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.431973934 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.431988955 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.432081938 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.432081938 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.432094097 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.434473991 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.434493065 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.434551954 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.434560061 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.434586048 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.435471058 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.435483932 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.435615063 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.435622931 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.436718941 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.436738968 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.436789036 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.436795950 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.436821938 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.488449097 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.489458084 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.489542007 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:35.489561081 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.489655972 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.491094112 CEST	49744	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:35.491102934 CEST	443	49744	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.213685036 CEST	443	49745	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.213983059 CEST	49745	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.214001894 CEST	443	49745	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.214339018 CEST	443	49745	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.214802027 CEST	49745	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.214802027 CEST	49745	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.214823961 CEST	443	49745	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.214870930 CEST	443	49745	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.217673063 CEST	443	49746	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.217973948 CEST	49746	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.217983007 CEST	443	49746	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.218338013 CEST	443	49746	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.218719006 CEST	49746	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.218719006 CEST	49746	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.218791962 CEST	443	49746	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.269373894 CEST	49746	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.269654036 CEST	49745	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.476735115 CEST	443	49745	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.477996111 CEST	443	49745	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.478003979 CEST	443	49745	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.478038073 CEST	443	49745	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.478048086 CEST	49745	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.478053093 CEST	443	49745	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.478070021 CEST	443	49745	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.478085041 CEST	443	49745	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.478101015 CEST	49745	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.478111982 CEST	49745	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.478152990 CEST	49745	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.480259895 CEST	49745	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.480267048 CEST	443	49745	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.481522083 CEST	443	49746	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.482836962 CEST	443	49746	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.482844114 CEST	443	49746	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.482877970 CEST	443	49746	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.482891083 CEST	49746	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.482903004 CEST	443	49746	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.482925892 CEST	49746	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.482952118 CEST	49746	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.501127005 CEST	49746	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.501147985 CEST	443	49746	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.509859085 CEST	49747	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.509902954 CEST	443	49747	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.510076046 CEST	49747	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.510504961 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.510530949 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.510581017 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.510822058 CEST	49747	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.510838032 CEST	443	49747	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.511054039 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.511066914 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.545356035 CEST	49750	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.545368910 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:36.545459986 CEST	49750	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.545758963 CEST	49750	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:36.545770884 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.426564932 CEST	443	49747	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.427229881 CEST	49747	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.427244902 CEST	443	49747	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.427604914 CEST	443	49747	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.427997112 CEST	49747	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.427997112 CEST	49747	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.428059101 CEST	443	49747	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.428494930 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.428958893 CEST	49750	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.428967953 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.430113077 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.430295944 CEST	49750	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.430725098 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.435199022 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.435209990 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.435461998 CEST	49750	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.435545921 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.435584068 CEST	49750	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.436203957 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.436268091 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.436665058 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.436665058 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.436676025 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.436722994 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.471962929 CEST	49747	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.476500034 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.488711119 CEST	49750	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.488719940 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.488758087 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.488766909 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.536153078 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.536154032 CEST	49750	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.691107035 CEST	443	49747	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.692089081 CEST	443	49747	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.692097902 CEST	443	49747	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.692116976 CEST	443	49747	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.692151070 CEST	49747	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.692159891 CEST	443	49747	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.692184925 CEST	443	49747	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.692291021 CEST	49747	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.695745945 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.701673985 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.706475973 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.706482887 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.706517935 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.706530094 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.706538916 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.706548929 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.706568956 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.706598043 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.706602097 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.706629038 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.720923901 CEST	49747	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.720936060 CEST	443	49747	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.737061977 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.737087011 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.737093925 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.737106085 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.737112999 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.737143040 CEST	49750	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.737158060 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.737168074 CEST	49750	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.737175941 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.737251997 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.737255096 CEST	49750	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.737318993 CEST	49750	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.737772942 CEST	49750	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.737777948 CEST	443	49750	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.754925013 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.790733099 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.790743113 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.790791035 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.790802956 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.790832996 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.790863037 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.790890932 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.790920973 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.792565107 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.792572021 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.792601109 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.792613983 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.792690992 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.792690992 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.792701006 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.793003082 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.850195885 CEST	49751	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.850230932 CEST	443	49751	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.850358963 CEST	49751	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.850946903 CEST	49751	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.850963116 CEST	443	49751	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.879784107 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.879801035 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.880239964 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.880256891 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.880443096 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.880655050 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.880670071 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.880748034 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.880748034 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.880754948 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.880851030 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.881499052 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.881513119 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.881609917 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.881616116 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.881871939 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.920058012 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.920073986 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.920150042 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:37.920157909 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:37.920233965 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.135742903 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.135752916 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.135792971 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.135835886 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.135859966 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.135869980 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.135890007 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.135921955 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.135936975 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.136029005 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.136043072 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.136177063 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.136183977 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.136205912 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.136223078 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.136257887 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.136265039 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.136296034 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.136431932 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.136445999 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.136502981 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.136502981 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.136511087 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.136657953 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.136681080 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.136710882 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.136718035 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.136749029 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.136857986 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.136869907 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.136938095 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.136938095 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.136945963 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.140283108 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.140301943 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.140397072 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.140403986 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.140604019 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.140619040 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.140665054 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.140671015 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.140692949 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.141539097 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.141556978 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.141649961 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.141649961 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.141658068 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.142522097 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.142534971 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.142632008 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.142632008 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.142640114 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.143441916 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.143459082 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.143541098 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.143541098 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.143548012 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.143687010 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.143698931 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.143745899 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.143757105 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.143757105 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.143763065 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.143774033 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.143795967 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.143886089 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.143893957 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.144252062 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.144265890 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.144340992 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.144340992 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.144346952 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.144962072 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.144992113 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.145068884 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.145068884 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.145076990 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.145206928 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.145225048 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.145267010 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.145277977 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.145307064 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.145337105 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.145371914 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.145406008 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.145412922 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.145425081 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.145441055 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.145545959 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.160501003 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.205607891 CEST	49748	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.205624104 CEST	443	49748	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.677470922 CEST	443	49751	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.680046082 CEST	49751	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.680056095 CEST	443	49751	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.680432081 CEST	443	49751	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.681169033 CEST	49751	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.681231022 CEST	443	49751	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.681997061 CEST	49751	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.698798895 CEST	49752	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.698828936 CEST	443	49752	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.698889971 CEST	49752	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.699657917 CEST	49752	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.699671984 CEST	443	49752	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.700594902 CEST	49753	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.700623035 CEST	443	49753	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.700675964 CEST	49753	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.701132059 CEST	49753	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.701143026 CEST	443	49753	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.702367067 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.702373981 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.702423096 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.702879906 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.702894926 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.714838982 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.714848995 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.714904070 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.715136051 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.715147972 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.724503994 CEST	443	49751	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.951634884 CEST	443	49751	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.990987062 CEST	49751	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.993607044 CEST	443	49751	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.993618011 CEST	443	49751	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.993649960 CEST	443	49751	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.993669987 CEST	443	49751	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.993693113 CEST	49751	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.993702888 CEST	443	49751	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.993740082 CEST	49751	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.993760109 CEST	49751	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.993763924 CEST	443	49751	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:38.993803024 CEST	49751	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.994086981 CEST	49751	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:38.994092941 CEST	443	49751	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.507508039 CEST	443	49752	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.507792950 CEST	49752	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.507812023 CEST	443	49752	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.508135080 CEST	443	49752	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.508882046 CEST	49752	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.508954048 CEST	443	49752	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.509457111 CEST	49752	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.510024071 CEST	443	49753	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.510322094 CEST	49753	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.510337114 CEST	443	49753	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.510690928 CEST	443	49753	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.511153936 CEST	49753	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.511238098 CEST	443	49753	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.511509895 CEST	49753	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.526279926 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.526544094 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.526556969 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.526887894 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.528079033 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.528142929 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.529242992 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.531388044 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.531578064 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.531589985 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.532620907 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.532686949 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.533591986 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.533649921 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.533808947 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.533817053 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.552496910 CEST	443	49752	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.556516886 CEST	443	49753	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.572515011 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.574776888 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.775559902 CEST	443	49752	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.777148008 CEST	443	49752	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.777163982 CEST	443	49752	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.777216911 CEST	49752	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.777234077 CEST	443	49752	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.777281046 CEST	49752	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.777775049 CEST	49752	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.777787924 CEST	443	49752	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.780525923 CEST	443	49753	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.780570984 CEST	443	49753	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.780616999 CEST	49753	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.780632019 CEST	443	49753	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.780646086 CEST	443	49753	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.780687094 CEST	49753	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.781152010 CEST	49753	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.781171083 CEST	443	49753	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.791258097 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.802881956 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.802925110 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.802973032 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.802978039 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.803020954 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.803627014 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.803637981 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.832556009 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.835464001 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.835472107 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.835510969 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.835550070 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.835558891 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.835567951 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.835597038 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.835616112 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.881010056 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.881026030 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.881074905 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.881083012 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.881108046 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.881122112 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.882664919 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.882679939 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.882730007 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:39.882738113 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:39.882966042 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.182990074 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.183001041 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.183033943 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.183072090 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.183095932 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.183120966 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.183141947 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.183206081 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.183223009 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.183259964 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.183267117 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.183291912 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.183296919 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.183310986 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.183326960 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.183336973 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.183337927 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.183370113 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.183391094 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.183600903 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.183617115 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.183670044 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.183677912 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.183687925 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.183716059 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.185075998 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.185091972 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.185162067 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.185168982 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.185214996 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.188074112 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.188095093 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.188158989 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.188165903 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.188226938 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.188886881 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.188901901 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.188975096 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.188982964 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.189095020 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.189805984 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.189821959 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.189868927 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.189874887 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.189904928 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.189913034 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.191534042 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.191548109 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.191621065 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.191627979 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.191684961 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.192770958 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.192785025 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.192848921 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.192854881 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.192881107 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.192899942 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.193670988 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.193685055 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.193732977 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.193739891 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.193847895 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.195311069 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.195324898 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.195369959 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.195377111 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.195421934 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.196770906 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.196785927 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.196829081 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.196835041 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.196856976 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.196867943 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.197731972 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.197746992 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.197784901 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.197791100 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.197809935 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.197833061 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.198683977 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.198700905 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.198760033 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.198765993 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.198860884 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.199362040 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.199383974 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.199443102 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.199449062 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.199666977 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.200196981 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.200212002 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.200277090 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.200284958 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.200392008 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.200411081 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.200421095 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.200426102 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.200444937 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.200479031 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.233953953 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.233969927 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.234029055 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.234045982 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.234083891 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.234100103 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.234117985 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.234138966 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.234189034 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.234194994 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.234255075 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.234461069 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.234474897 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.234517097 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.234524012 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.234546900 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.234589100 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.234668970 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.234725952 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.234730959 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.234735966 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.234745979 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.234781027 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.234795094 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.249572992 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.510809898 CEST	49757	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.510848999 CEST	443	49757	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.510967970 CEST	49757	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.513269901 CEST	49757	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.513292074 CEST	443	49757	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:40.522340059 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:40.522372961 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:40.522558928 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:40.523118973 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:40.523130894 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:40.526212931 CEST	49755	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:40.526223898 CEST	443	49755	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.017322063 CEST	49760	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.017365932 CEST	443	49760	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.017426968 CEST	49760	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.029475927 CEST	49760	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.029491901 CEST	443	49760	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.033974886 CEST	49761	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.034007072 CEST	443	49761	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.034070969 CEST	49761	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.034643888 CEST	49761	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.034655094 CEST	443	49761	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.039912939 CEST	49762	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.039921045 CEST	443	49762	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.039988041 CEST	49762	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.040510893 CEST	49762	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.040519953 CEST	443	49762	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.157984018 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:41.158813000 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:41.158833981 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:41.159847975 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:41.159912109 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:41.163283110 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:41.163358927 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:41.163943052 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:41.163949966 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:41.208919048 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:41.312732935 CEST	443	49757	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.313313007 CEST	49757	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.313335896 CEST	443	49757	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.313698053 CEST	443	49757	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.314517975 CEST	49757	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.314585924 CEST	443	49757	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.315012932 CEST	49757	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.360491991 CEST	443	49757	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.575947046 CEST	443	49757	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.575999022 CEST	443	49757	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.576045990 CEST	49757	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.576066017 CEST	443	49757	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.576081038 CEST	443	49757	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:41.576108932 CEST	49757	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.576124907 CEST	49757	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.576766968 CEST	49757	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:41.576781988 CEST	443	49757	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.003757954 CEST	443	49762	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.003869057 CEST	443	49761	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.003932953 CEST	443	49760	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.016128063 CEST	49760	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.016141891 CEST	443	49760	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.016550064 CEST	443	49760	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.016608953 CEST	49761	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.016622066 CEST	443	49761	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.016778946 CEST	49762	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.016786098 CEST	443	49762	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.016957045 CEST	443	49761	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.017767906 CEST	443	49762	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.017824888 CEST	49762	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.059880972 CEST	49761	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.059883118 CEST	49760	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.171835899 CEST	49760	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.172013998 CEST	443	49760	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.172421932 CEST	49761	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.172575951 CEST	443	49761	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.172868013 CEST	49762	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.172975063 CEST	443	49762	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.176223993 CEST	49760	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.179491997 CEST	49761	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.179558992 CEST	49762	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.179570913 CEST	443	49762	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.188899994 CEST	49764	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.188936949 CEST	443	49764	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.188997030 CEST	49764	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.189213991 CEST	49764	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.189220905 CEST	443	49764	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.220519066 CEST	443	49760	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.224503040 CEST	443	49761	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.225164890 CEST	49762	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.360671997 CEST	443	49760	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.362200022 CEST	443	49760	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.362207890 CEST	443	49760	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.362240076 CEST	443	49760	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.362265110 CEST	443	49760	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.362274885 CEST	49760	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.362298012 CEST	443	49760	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.362318993 CEST	49760	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.362346888 CEST	49760	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.365555048 CEST	443	49762	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.365592957 CEST	443	49762	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.365638971 CEST	49762	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.365650892 CEST	443	49762	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.365700960 CEST	49762	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.365742922 CEST	443	49762	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.365799904 CEST	443	49762	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.365848064 CEST	49762	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.366264105 CEST	443	49761	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.366389990 CEST	443	49761	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.366437912 CEST	443	49761	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.366440058 CEST	49761	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.366482973 CEST	49761	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.373514891 CEST	49761	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.373526096 CEST	443	49761	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.374417067 CEST	49762	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.374422073 CEST	443	49762	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.376250982 CEST	49760	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.376260996 CEST	443	49760	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.628103018 CEST	49765	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.628139973 CEST	443	49765	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.628299952 CEST	49765	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.628494024 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.628500938 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.628561020 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.629898071 CEST	49765	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.629909992 CEST	443	49765	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.630184889 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.630193949 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.910787106 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:42.910814047 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:42.910821915 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:42.910834074 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:42.910862923 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:42.910878897 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:42.910893917 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:42.910903931 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:42.910923958 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:42.910942078 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:42.996263027 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:42.996280909 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:42.996345043 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:42.996352911 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:42.996381998 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:42.996393919 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:42.997242928 CEST	443	49764	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.997529030 CEST	49764	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.997543097 CEST	443	49764	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.997862101 CEST	443	49764	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.997929096 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:42.997942924 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:42.997987032 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:42.997992992 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:42.998016119 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:42.998028994 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:42.998239994 CEST	49764	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:42.998287916 CEST	443	49764	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:42.998554945 CEST	49764	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:43.044502020 CEST	443	49764	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.081918955 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.081940889 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.082007885 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.082016945 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.082084894 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.082571030 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.082587957 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.082647085 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.082653046 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.082861900 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.084059954 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.084073067 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.084140062 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.084144115 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.084275007 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.085064888 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.085078955 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.085150003 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.085156918 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.085235119 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.168232918 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.168255091 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.168291092 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.168317080 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.168329954 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.168354988 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.168379068 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.168380976 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.168488979 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.168914080 CEST	49758	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.168931007 CEST	443	49758	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.220359087 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.220408916 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.220505953 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.222598076 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.222615004 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.267616034 CEST	443	49764	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.267688990 CEST	443	49764	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.267752886 CEST	49764	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:43.267765045 CEST	443	49764	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.267776012 CEST	443	49764	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.267796993 CEST	49764	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:43.267822981 CEST	49764	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:43.280385017 CEST	49764	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:43.280399084 CEST	443	49764	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.582247972 CEST	443	49765	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.582451105 CEST	49765	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:43.582473040 CEST	443	49765	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.582844019 CEST	443	49765	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.583622932 CEST	49765	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:43.583683968 CEST	443	49765	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.583739042 CEST	49765	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:43.624504089 CEST	443	49765	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.629242897 CEST	49765	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:43.800654888 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.801934958 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:43.801955938 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.802285910 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.803374052 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:43.803431988 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.803610086 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:43.844505072 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.977015972 CEST	443	49765	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.977231026 CEST	443	49765	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.977272987 CEST	49765	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:43.977291107 CEST	443	49765	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.977322102 CEST	443	49765	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.977437973 CEST	49765	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:43.981225967 CEST	49765	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:43.981242895 CEST	443	49765	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:43.986597061 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.989087105 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:43.989120007 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.990178108 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:43.990235090 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.001960993 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.002055883 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.002346039 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.002362013 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.051083088 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.070108891 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.105977058 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.105999947 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.106008053 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.106040001 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.106067896 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.106071949 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.106087923 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.106117010 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.106138945 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.113518000 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.113545895 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.113579035 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.113598108 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.113612890 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.113648891 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.162154913 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.162177086 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.162230968 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.162240982 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.162277937 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.162277937 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.164155006 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.164170980 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.164230108 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.164237022 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.165875912 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.194346905 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.194370031 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.194413900 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.194431067 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.194447041 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.194473028 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.195878983 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.195897102 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.195950985 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.195962906 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.196013927 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.255454063 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.255476952 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.255541086 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.255553961 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.255563021 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.255589962 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.256469011 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.256489038 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.256526947 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.256535053 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.256555080 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.256567955 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.258191109 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.258207083 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.258255959 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.258261919 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.258331060 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.259252071 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.259289026 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.259308100 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.259315968 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.259335041 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.259335995 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.259352922 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.259381056 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.264166117 CEST	49766	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.264182091 CEST	443	49766	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.281752110 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.281769991 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.281831026 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.281842947 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.281872034 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.281883001 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.282536030 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.282552004 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.282613039 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.282619953 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.282649994 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.282664061 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.283514023 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.283529043 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.283571959 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.283579111 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.283624887 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.285201073 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.285216093 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.285263062 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.285269976 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.285321951 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.370095968 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.370115042 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.370230913 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.370250940 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.370456934 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.370719910 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.370759010 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.370779037 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.370785952 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.370799065 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.370831013 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.440001965 CEST	49768	443	192.168.2.5	13.107.246.42
Aug 29, 2024 06:42:44.440026045 CEST	443	49768	13.107.246.42	192.168.2.5
Aug 29, 2024 06:42:44.453543901 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.453586102 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.453716040 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.454104900 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.454118967 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.456382036 CEST	49771	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.456420898 CEST	443	49771	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:44.456469059 CEST	49771	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.456691027 CEST	49771	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:44.456700087 CEST	443	49771	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.257577896 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.257610083 CEST	443	49771	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.257930040 CEST	49771	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.257945061 CEST	443	49771	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.258105040 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.258116961 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.258270979 CEST	443	49771	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.258447886 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.258840084 CEST	49771	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.258891106 CEST	443	49771	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.259367943 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.259428024 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.259627104 CEST	49771	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.259721994 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.300503016 CEST	443	49771	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.304502010 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.522090912 CEST	443	49771	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.522142887 CEST	443	49771	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.522183895 CEST	49771	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.522197008 CEST	443	49771	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.522237062 CEST	443	49771	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.522313118 CEST	49771	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.523520947 CEST	49771	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.523536921 CEST	443	49771	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.524974108 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.566411972 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.566430092 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.566492081 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.566513062 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.566561937 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.613960981 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.613981009 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.614061117 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.614073992 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.614118099 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.614141941 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.615787029 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.615801096 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.615876913 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.615889072 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.618268967 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.859553099 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.859572887 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.859668970 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.859680891 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.859709024 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.859726906 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.859778881 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.859785080 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.859795094 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.859823942 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.860286951 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.860300064 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.860378027 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.860379934 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.860394955 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.860411882 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.860438108 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.860441923 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.860460997 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.860475063 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:42:45.860477924 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.861156940 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.898143053 CEST	49770	443	192.168.2.5	152.199.21.175
Aug 29, 2024 06:42:45.898160934 CEST	443	49770	152.199.21.175	192.168.2.5
Aug 29, 2024 06:43:08.379620075 CEST	49711	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:43:08.379647970 CEST	443	49711	103.138.128.66	192.168.2.5
Aug 29, 2024 06:43:19.497365952 CEST	49774	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:43:19.502206087 CEST	53	49774	1.1.1.1	192.168.2.5
Aug 29, 2024 06:43:19.502268076 CEST	49774	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:43:19.502341986 CEST	49774	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:43:19.502358913 CEST	49774	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:43:19.507113934 CEST	53	49774	1.1.1.1	192.168.2.5
Aug 29, 2024 06:43:19.507124901 CEST	53	49774	1.1.1.1	192.168.2.5
Aug 29, 2024 06:43:19.947619915 CEST	53	49774	1.1.1.1	192.168.2.5
Aug 29, 2024 06:43:19.949023008 CEST	49774	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:43:19.954235077 CEST	53	49774	1.1.1.1	192.168.2.5
Aug 29, 2024 06:43:19.954281092 CEST	49774	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:43:23.060908079 CEST	49776	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:43:23.060947895 CEST	443	49776	142.250.185.100	192.168.2.5
Aug 29, 2024 06:43:23.061019897 CEST	49776	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:43:23.061238050 CEST	49776	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:43:23.061248064 CEST	443	49776	142.250.185.100	192.168.2.5
Aug 29, 2024 06:43:23.101378918 CEST	443	49711	103.138.128.66	192.168.2.5
Aug 29, 2024 06:43:23.101452112 CEST	443	49711	103.138.128.66	192.168.2.5
Aug 29, 2024 06:43:23.101548910 CEST	49711	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:43:23.521783113 CEST	49711	443	192.168.2.5	103.138.128.66
Aug 29, 2024 06:43:23.521825075 CEST	443	49711	103.138.128.66	192.168.2.5
Aug 29, 2024 06:43:23.711446047 CEST	443	49776	142.250.185.100	192.168.2.5
Aug 29, 2024 06:43:23.711688042 CEST	49776	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:43:23.711703062 CEST	443	49776	142.250.185.100	192.168.2.5
Aug 29, 2024 06:43:23.712079048 CEST	443	49776	142.250.185.100	192.168.2.5
Aug 29, 2024 06:43:23.712472916 CEST	49776	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:43:23.712533951 CEST	443	49776	142.250.185.100	192.168.2.5
Aug 29, 2024 06:43:23.754487038 CEST	49776	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:43:33.617664099 CEST	443	49776	142.250.185.100	192.168.2.5
Aug 29, 2024 06:43:33.617736101 CEST	443	49776	142.250.185.100	192.168.2.5
Aug 29, 2024 06:43:33.617801905 CEST	49776	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:43:35.805969954 CEST	49776	443	192.168.2.5	142.250.185.100
Aug 29, 2024 06:43:35.806025982 CEST	443	49776	142.250.185.100	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 29, 2024 06:42:19.150296926 CEST	53	55830	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:19.186419010 CEST	53	57237	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:20.309611082 CEST	53	60881	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:21.679054022 CEST	50319	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:21.679164886 CEST	53280	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:21.961610079 CEST	53	50319	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:22.182421923 CEST	53	53280	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:22.995268106 CEST	54377	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:22.995748043 CEST	64526	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:23.002315998 CEST	53	54377	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:23.002336025 CEST	53	64526	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:24.858369112 CEST	57344	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:24.858659029 CEST	57660	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:24.868083000 CEST	53	57344	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:24.874468088 CEST	53	57660	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:26.419440985 CEST	63611	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:26.419614077 CEST	50544	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:27.855377913 CEST	58073	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:27.855825901 CEST	53927	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:27.861876011 CEST	53	58073	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:27.862497091 CEST	53	53927	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:29.225507975 CEST	56246	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:29.225847960 CEST	53438	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:29.232152939 CEST	53	56246	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:29.232796907 CEST	53	53438	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:30.265475035 CEST	54077	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:30.265736103 CEST	57546	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:37.599160910 CEST	53	55593	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:38.717350006 CEST	59729	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:38.717550993 CEST	58852	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:40.505458117 CEST	55709	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:40.509476900 CEST	49840	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:40.518327951 CEST	60348	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:40.519292116 CEST	59007	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:40.525017977 CEST	53	60348	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:40.526982069 CEST	53	59007	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:42.779656887 CEST	53	59400	1.1.1.1	192.168.2.5
Aug 29, 2024 06:42:43.211844921 CEST	50011	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:43.212012053 CEST	61476	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:42:56.900055885 CEST	53	63255	1.1.1.1	192.168.2.5
Aug 29, 2024 06:43:18.547317982 CEST	53	52518	1.1.1.1	192.168.2.5
Aug 29, 2024 06:43:19.497070074 CEST	53	61332	1.1.1.1	192.168.2.5
Aug 29, 2024 06:43:19.498539925 CEST	53	49839	1.1.1.1	192.168.2.5
Aug 29, 2024 06:43:30.295890093 CEST	49710	53	192.168.2.5	1.1.1.1
Aug 29, 2024 06:43:30.296677113 CEST	49708	53	192.168.2.5	1.1.1.1

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 29, 2024 06:42:21.679054022 CEST	192.168.2.5	1.1.1.1	0x520a	Standard query (0)	australianfoodandfibre.servicedeskplus.net.au	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:21.679164886 CEST	192.168.2.5	1.1.1.1	0xa041	Standard query (0)	australianfoodandfibre.servicedeskplus.net.au	65	IN (0x0001)	false
Aug 29, 2024 06:42:22.995268106 CEST	192.168.2.5	1.1.1.1	0xa425	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:22.995748043 CEST	192.168.2.5	1.1.1.1	0x36e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 29, 2024 06:42:24.858369112 CEST	192.168.2.5	1.1.1.1	0x58db	Standard query (0)	accounts.zoho.com.au	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:24.858659029 CEST	192.168.2.5	1.1.1.1	0x5e93	Standard query (0)	accounts.zoho.com.au	65	IN (0x0001)	false
Aug 29, 2024 06:42:26.419440985 CEST	192.168.2.5	1.1.1.1	0x984d	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:26.419614077 CEST	192.168.2.5	1.1.1.1	0xa51	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Aug 29, 2024 06:42:27.855377913 CEST	192.168.2.5	1.1.1.1	0xe579	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:27.855825901 CEST	192.168.2.5	1.1.1.1	0x8227	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 29, 2024 06:42:29.225507975 CEST	192.168.2.5	1.1.1.1	0x47a1	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:29.225847960 CEST	192.168.2.5	1.1.1.1	0x87d0	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 29, 2024 06:42:30.265475035 CEST	192.168.2.5	1.1.1.1	0xd825	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:30.265736103 CEST	192.168.2.5	1.1.1.1	0x1fd1	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Aug 29, 2024 06:42:38.717350006 CEST	192.168.2.5	1.1.1.1	0x1a47	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:38.717550993 CEST	192.168.2.5	1.1.1.1	0x3622	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Aug 29, 2024 06:42:40.505458117 CEST	192.168.2.5	1.1.1.1	0xb391	Standard query (0)	aadcdn.msftauthimages.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:40.509476900 CEST	192.168.2.5	1.1.1.1	0x5d75	Standard query (0)	aadcdn.msftauthimages.net	65	IN (0x0001)	false
Aug 29, 2024 06:42:40.518327951 CEST	192.168.2.5	1.1.1.1	0xcade	Standard query (0)	autologon.microsoftazuread-sso.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:40.519292116 CEST	192.168.2.5	1.1.1.1	0x2fd1	Standard query (0)	autologon.microsoftazuread-sso.com	65	IN (0x0001)	false
Aug 29, 2024 06:42:43.211844921 CEST	192.168.2.5	1.1.1.1	0x389c	Standard query (0)	aadcdn.msftauthimages.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:43.212012053 CEST	192.168.2.5	1.1.1.1	0xace5	Standard query (0)	aadcdn.msftauthimages.net	65	IN (0x0001)	false
Aug 29, 2024 06:43:30.295890093 CEST	192.168.2.5	1.1.1.1	0xdff7	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:43:30.296677113 CEST	192.168.2.5	1.1.1.1	0x9aa9	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 29, 2024 06:42:21.961610079 CEST	1.1.1.1	192.168.2.5	0x520a	No error (0)	australianfoodandfibre.servicedeskplus.net.au	zs-au1-lc1-h2.servicedeskplus.net.au		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:21.961610079 CEST	1.1.1.1	192.168.2.5	0x520a	No error (0)	zs-au1-lc1-h2.servicedeskplus.net.au		103.138.128.66	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:22.182421923 CEST	1.1.1.1	192.168.2.5	0xa041	No error (0)	australianfoodandfibre.servicedeskplus.net.au	zs-au1-lc1-h2.servicedeskplus.net.au		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:23.002315998 CEST	1.1.1.1	192.168.2.5	0xa425	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:23.002336025 CEST	1.1.1.1	192.168.2.5	0x36e	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 29, 2024 06:42:24.868083000 CEST	1.1.1.1	192.168.2.5	0x58db	No error (0)	accounts.zoho.com.au	zs-au1-lc1-h2.zoho.com.au		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:24.868083000 CEST	1.1.1.1	192.168.2.5	0x58db	No error (0)	zs-au1-lc1-h2.zoho.com.au		103.138.128.66	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:24.874468088 CEST	1.1.1.1	192.168.2.5	0x5e93	No error (0)	accounts.zoho.com.au	zs-au1-lc1-h2.zoho.com.au		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:26.425992966 CEST	1.1.1.1	192.168.2.5	0x984d	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:26.426203012 CEST	1.1.1.1	192.168.2.5	0xa51	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:27.861876011 CEST	1.1.1.1	192.168.2.5	0xe579	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:27.861876011 CEST	1.1.1.1	192.168.2.5	0xe579	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:27.861876011 CEST	1.1.1.1	192.168.2.5	0xe579	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:27.862497091 CEST	1.1.1.1	192.168.2.5	0x8227	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:27.862497091 CEST	1.1.1.1	192.168.2.5	0x8227	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:29.232152939 CEST	1.1.1.1	192.168.2.5	0x47a1	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:29.232152939 CEST	1.1.1.1	192.168.2.5	0x47a1	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:29.232152939 CEST	1.1.1.1	192.168.2.5	0x47a1	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:29.232796907 CEST	1.1.1.1	192.168.2.5	0x87d0	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:29.232796907 CEST	1.1.1.1	192.168.2.5	0x87d0	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:30.274354935 CEST	1.1.1.1	192.168.2.5	0xd825	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:30.274372101 CEST	1.1.1.1	192.168.2.5	0x1fd1	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:31.139974117 CEST	1.1.1.1	192.168.2.5	0x13a6	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:31.139974117 CEST	1.1.1.1	192.168.2.5	0x13a6	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:31.679877996 CEST	1.1.1.1	192.168.2.5	0xb013	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:31.679877996 CEST	1.1.1.1	192.168.2.5	0xb013	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:32.219655991 CEST	1.1.1.1	192.168.2.5	0xa064	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:32.219655991 CEST	1.1.1.1	192.168.2.5	0xa064	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:33.853336096 CEST	1.1.1.1	192.168.2.5	0x1930	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:33.853336096 CEST	1.1.1.1	192.168.2.5	0x1930	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:38.723944902 CEST	1.1.1.1	192.168.2.5	0x1a47	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:38.724106073 CEST	1.1.1.1	192.168.2.5	0x3622	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:40.512834072 CEST	1.1.1.1	192.168.2.5	0xb391	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:40.512834072 CEST	1.1.1.1	192.168.2.5	0xb391	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:40.512834072 CEST	1.1.1.1	192.168.2.5	0xb391	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:40.516228914 CEST	1.1.1.1	192.168.2.5	0x5d75	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:40.525017977 CEST	1.1.1.1	192.168.2.5	0xcade	No error (0)	autologon.microsoftazuread-sso.com		20.190.160.22	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:40.525017977 CEST	1.1.1.1	192.168.2.5	0xcade	No error (0)	autologon.microsoftazuread-sso.com		20.190.160.14	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:40.525017977 CEST	1.1.1.1	192.168.2.5	0xcade	No error (0)	autologon.microsoftazuread-sso.com		40.126.32.68	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:40.525017977 CEST	1.1.1.1	192.168.2.5	0xcade	No error (0)	autologon.microsoftazuread-sso.com		40.126.32.133	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:40.525017977 CEST	1.1.1.1	192.168.2.5	0xcade	No error (0)	autologon.microsoftazuread-sso.com		40.126.32.138	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:40.525017977 CEST	1.1.1.1	192.168.2.5	0xcade	No error (0)	autologon.microsoftazuread-sso.com		40.126.32.74	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:40.525017977 CEST	1.1.1.1	192.168.2.5	0xcade	No error (0)	autologon.microsoftazuread-sso.com		40.126.32.140	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:40.525017977 CEST	1.1.1.1	192.168.2.5	0xcade	No error (0)	autologon.microsoftazuread-sso.com		20.190.160.17	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:43.218563080 CEST	1.1.1.1	192.168.2.5	0x389c	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:43.218563080 CEST	1.1.1.1	192.168.2.5	0x389c	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:43.218563080 CEST	1.1.1.1	192.168.2.5	0x389c	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:42:43.219167948 CEST	1.1.1.1	192.168.2.5	0xace5	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:45.891563892 CEST	1.1.1.1	192.168.2.5	0x1412	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:42:45.891563892 CEST	1.1.1.1	192.168.2.5	0x1412	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 29, 2024 06:43:30.302824020 CEST	1.1.1.1	192.168.2.5	0xdff7	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 06:43:30.303244114 CEST	1.1.1.1	192.168.2.5	0x9aa9	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

australianfoodandfibre.servicedeskplus.net.au

accounts.zoho.com.au

fs.microsoft.com

https:

aadcdn.msftauth.net

aadcdn.msauth.net

aadcdn.msftauthimages.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	103.138.128.66	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:23 UTC	734	OUT	GET /app/itdesk/ui/requests/867000003351579/details HTTP/1.1 Host: australianfoodandfibre.servicedeskplus.net.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:23 UTC	731	IN	HTTP/1.1 302 Server: ZGS Date: Thu, 29 Aug 2024 04:42:23 GMT Content-Length: 0 Connection: close Set-Cookie: zalb_d63ded2016=334acadbc5509b416865a4b31a1455f9; Path=/ X-Content-Type-Options: nosniff Set-Cookie: sdpcscook=e0a4aa81-c837-4c81-9c03-403e58b77894;path=/;SameSite=None;Secure;priority=high Set-Cookie: _zcsr_tmp=e0a4aa81-c837-4c81-9c03-403e58b77894;path=/;SameSite=Strict;Secure;priority=high Cache-Control: private,no-cache,no-store,max-age=0,must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://australianfoodandfibre.servicedeskplus.net.au/Login.jsp?serviceurl=%2Fapp%2Fitdesk%2Fui%2Frequests%2F867000003351579%2Fdetails Strict-Transport-Security: max-age=63072000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49712	103.138.128.66	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:24 UTC	922	OUT	GET /Login.jsp?serviceurl=%2Fapp%2Fitdesk%2Fui%2Frequests%2F867000003351579%2Fdetails HTTP/1.1 Host: australianfoodandfibre.servicedeskplus.net.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zalb_d63ded2016=334acadbc5509b416865a4b31a1455f9; sdpcscook=e0a4aa81-c837-4c81-9c03-403e58b77894; _zcsr_tmp=e0a4aa81-c837-4c81-9c03-403e58b77894
2024-08-29 04:42:24 UTC	655	IN	HTTP/1.1 302 Server: ZGS Date: Thu, 29 Aug 2024 04:42:24 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 0 Connection: close X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-SDPOD-Version: 1946 Set-Cookie: JSESSIONID=35D0BC6C4F0B65A0FB7421208484F384; Path=/; Secure; HttpOnly LOGIN_PAGE_URL: /HomePage.do Location: https://accounts.zoho.com.au/samlauthrequest/aff-limited.com.au?serviceurl=https%3A%2F%2Faustralianfoodandfibre.servicedeskplus.net.au%2Fapp%2Fitdesk%2Fui%2Frequests%2F867000003351579%2Fdetails&servicename=SDPOnDemand&portal_id=7001242490&hide_signup=false Strict-Transport-Security: max-age=63072000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:25 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-29 04:42:25 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=190468 Date: Thu, 29 Aug 2024 04:42:25 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	103.138.128.66	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:25 UTC	890	OUT	GET /samlauthrequest/aff-limited.com.au?serviceurl=https%3A%2F%2Faustralianfoodandfibre.servicedeskplus.net.au%2Fapp%2Fitdesk%2Fui%2Frequests%2F867000003351579%2Fdetails&servicename=SDPOnDemand&portal_id=7001242490&hide_signup=false HTTP/1.1 Host: accounts.zoho.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:26 UTC	1654	IN	HTTP/1.1 302 Server: ZGS Date: Thu, 29 Aug 2024 04:42:26 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: zalb_3e285c6f31=7165323247d658488913e2292ba83474; Path=/ X-Content-Type-Options: nosniff Set-Cookie: iamcsr=c85602c5-cf4b-419d-a984-5b5d43d7755d;path=/;SameSite=None;Secure;priority=high Set-Cookie: _zcsr_tmp=c85602c5-cf4b-419d-a984-5b5d43d7755d;path=/;SameSite=Strict;Secure;priority=high Cache-Control: private,no-cache,no-store,max-age=0,must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Frame-Options: SAMEORIGIN P3P: CP="CAO PSA OUR" Set-Cookie: _scp_tmp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:01 GMT; Path=/; Secure; SameSite=None Location: https://login.microsoftonline.com/b2a7b211-552b-4fc5-ad0d-b35b3a237e3e/saml2?SAMLRequest=fVJbb5swFP4ryO%2BAMZckVojEGk2L1G2oyfrQl8rgQ2LJ2MzHZJdfP6BrFWlaX7%2Fj892Otyh6PfBq9BfzAN9HQB%2F87LVBvgxKMjrDrUCF3IgekPuWH6vP95xFlA%2FOettaTYLDviTPhcw2LE2STnarrBCySaEp0nzdrCnrRCGSFcs2tCDBIzhU1pRkIpl2EUc4GPTC%2BAmiLAvpOmSbE814xjgroiSlTyT4aF0Li9GSdEIjzKu1QFRXeEPqv5Y%2BKCOVOb%2Fvv3l5hPzT6VSH9dfjiQQVIjg%2FubuzBsce3BHcVbXw7eG%2BJBfvB%2BRxLNrWjsZj9NtebNTaPhJjjOpslInn3nCIV5QmLJsDk2A%2FtaqM8EvmVw5tz8pEvWqdRdt5a7QyMHPFDROrhiVJmOesCbOuzUMhqQybNG9SwdIVpLDIsCXvVUlwX6ZwJXma7JDddp7xpVZ3c8z3uxCvucnuJtQ2vuF6IR74rHXY11ar9ldQaW1%2F3DkQftL3boTlUL3w%2F5dLomRBlAy75SmHXihdSekAcfIf%2F6vzBt7%2B1N0f&RelayState=aHR0cHM6Ly9hdXN0cmFsaWFuZm9vZGFuZGZpYnJlLnNlcnZpY2VkZXNrcGx1cy5uZXQuYXUvYXBwL2l0ZGVzay91aS9yZXF1ZXN0cy84NjcwMDAwMDMzNTE1NzkvZGV0YWlsc19fSUFNX19TRFBPbkRlbWFuZF9fSUFNX19fX0lBTV9fZmFsc2U%3D Strict-Transport-Security: max-age=63072000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:26 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-29 04:42:26 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=190420 Date: Thu, 29 Aug 2024 04:42:26 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-29 04:42:26 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49719	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:28 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:28 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1812771 Cache-Control: public, max-age=31536000 Content-MD5: bedopN8eDQBhzbUu8GNGxA== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:28 GMT Etag: 0x8DCB563C85A43C4 Last-Modified: Mon, 05 Aug 2024 15:32:14 GMT Server: ECAcc (lhc/78A8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb594470-e01e-0006-2151-e9b2d8000000 x-ms-version: 2009-09-19 Content-Length: 141866 Connection: close
2024-08-29 04:42:28 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 04:42:28 UTC	1	IN	Data Raw: 22 Data Ascii: "
2024-08-29 04:42:29 UTC	16383	IN	Data Raw: 5d 2c 5b 22 23 32 30 32 30 32 30 22 5d 29 2c 73 3d 65 28 72 2c 5b 22 34 35 2c 35 30 2c 35 34 22 5d 2c 5b 22 23 32 64 33 32 33 36 22 5d 29 2c 75 3d 65 28 72 2c 5b 22 32 35 35 2c 32 35 30 2c 32 33 39 22 5d 2c 5b 22 23 66 66 66 61 65 66 22 5d 29 3b 69 66 28 6f 7c 7c 61 7c 7c 73 29 72 65 74 75 72 6e 22 62 6c 61 63 6b 22 3b 69 66 28 69 7c 7c 75 29 72 65 74 75 72 6e 22 77 68 69 74 65 22 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d Data Ascii: ],["#202020"]),s=e(r,["45,50,54"],["#2d3236"]),u=e(r,["255,250,239"],["#fffaef"]);if(o\|\|a\|\|s)return"black";if(i\|\|u)return"white"}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getCom
2024-08-29 04:42:29 UTC	16383	IN	Data Raw: 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 35 35 37 22 2c 50 50 5f 45 5f 4f 54 54 5f 44 41 54 41 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 33 34 38 46 22 2c 50 50 5f 45 5f 4f 54 54 5f 41 4c 52 45 41 44 59 5f 43 4f 4e 53 55 4d 45 44 3a 22 38 30 30 34 33 34 39 30 22 2c 50 50 5f 45 5f 4f 54 54 5f 49 4e 56 41 4c 49 44 5f 50 55 52 50 4f 53 45 3a 22 38 30 30 34 33 34 39 36 22 2c 50 50 5f 45 5f 50 50 53 41 5f 52 50 54 5f 4e 4f 54 4f 41 44 44 52 45 53 53 3a 22 38 30 30 34 38 31 32 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 45 53 53 5f 42 41 44 44 45 56 49 43 45 4e 41 4d 45 3a 22 38 30 30 34 39 43 32 32 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c Data Ascii: PASSWORD:"80043557",PP_E_OTT_DATA_INVALID:"8004348F",PP_E_OTT_ALREADY_CONSUMED:"80043490",PP_E_OTT_INVALID_PURPOSE:"80043496",PP_E_PPSA_RPT_NOTOADDRESS:"80048120",PP_E_STRONGPROCESS_BADDEVICENAME:"80049C22",PP_E_INLINELOGIN_INVALID_SMS:"800434E1",PP_E_INL
2024-08-29 04:42:29 UTC	16383	IN	Data Raw: 2a 29 3f 24 2f 5d 2c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 74 2e 63 61 6c 6c 28 6e 2c 65 5b 72 5d 2c 72 2c 65 29 7d 2c 41 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 65 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 4c 62 Data Ascii: *)?$/],D:function(e,t,n){for(var r=0,o=e.length;r<o;r++)t.call(n,e[r],r,e)},A:"function"==typeof Array.prototype.indexOf?function(e,t){return Array.prototype.indexOf.call(e,t)}:function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},Lb
2024-08-29 04:42:29 UTC	3	IN	Data Raw: 6e 2e 71 Data Ascii: n.q
2024-08-29 04:42:29 UTC	16383	IN	Data Raw: 62 28 74 29 2c 53 2e 61 2e 41 62 28 74 2c 50 29 2c 53 2e 6f 70 74 69 6f 6e 73 2e 64 65 66 65 72 55 70 64 61 74 65 73 26 26 53 2e 54 61 2e 64 65 66 65 72 72 65 64 28 74 2c 21 30 29 2c 74 7d 3b 76 61 72 20 50 3d 7b 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 3a 6e 2c 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 77 5d 7d 2c 78 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 73 70 65 63 74 61 74 65 22 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 29 7d 2c 79 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 Data Ascii: b(t),S.a.Ab(t,P),S.options.deferUpdates&&S.Ta.deferred(t,!0),t};var P={equalityComparer:n,v:function(){return this[w]},xa:function(){this.notifySubscribers(this[w],"spectate"),this.notifySubscribers(this[w])},ya:function(){this.notifySubscribers(this[w],"
2024-08-29 04:42:29 UTC	16383	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 61 2e 47 61 28 53 2e 75 2e 47 28 65 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 5b 6e 5d 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6f 28 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 72 29 29 3a 53 2e 61 2e 47 61 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2e 67 65 74 42 69 6e 64 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 2c 65 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 74 29 3b 69 66 Data Ascii: (e){return S.a.Ga(S.u.G(e),(function(t,n){return function(){return e()[n]}}))}function i(e,t,r){return"function"==typeof e?o(e.bind(null,t,r)):S.a.Ga(e,n)}function c(e,t){return o(this.getBindings.bind(this,e,t))}function d(e,t){var n=S.h.firstChild(t);if
2024-08-29 04:42:29 UTC	16383	IN	Data Raw: 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 28 30 2c 74 29 2c 53 2e 75 2e 47 28 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 41 66 74 65 72 52 65 6e 64 65 72 22 29 2c 6e 75 6c 6c 2c 5b 74 5b 30 5d 2c 65 21 3d 3d 44 3f 65 3a 61 5d 29 7d 29 2c 53 2e 61 2e 65 63 28 65 2c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 26 26 28 70 3d 21 6c 26 26 69 5b 30 5d 2e 73 65 6c 65 63 74 65 64 3f 5b 53 2e 77 2e 4d 28 69 5b 30 5d 29 5d 3a 5b 5d 2c 68 3d 21 30 29 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 2c 74 3d 3d 3d 44 3f 28 53 2e 61 2e 42 62 28 72 2c 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 43 61 70 74 69 6f 6e 22 29 29 2c 53 Data Ascii: c=function(e,t){i(0,t),S.u.G(n.get("optionsAfterRender"),null,[t[0],e!==D?e:a])}),S.a.ec(e,f,(function(t,r,i){return i.length&&(p=!l&&i[0].selected?[S.w.M(i[0])]:[],h=!0),r=e.ownerDocument.createElement("option"),t===D?(S.a.Bb(r,n.get("optionsCaption")),S
2024-08-29 04:42:29 UTC	16383	IN	Data Raw: 22 7d 2c 6c 2e 74 6d 70 6c 2e 74 61 67 2e 6b 6f 5f 77 69 74 68 3d 7b 6f 70 65 6e 3a 22 77 69 74 68 28 24 31 29 20 7b 22 2c 63 6c 6f 73 65 3a 22 7d 20 22 7d 29 7d 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 53 2e 63 61 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 53 2e 24 61 3b 76 61 72 20 65 3d 6e 65 77 20 53 2e 24 61 3b 30 3c 65 2e 48 64 26 26 53 2e 67 63 28 65 29 2c 53 2e 62 28 22 6a 71 75 65 72 79 54 6d 70 6c 54 65 6d 70 6c 61 74 65 45 6e 67 69 6e 65 22 2c 53 2e 24 61 29 7d 28 29 7d 29 29 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 Data Ascii: "},l.tmpl.tag.ko_with={open:"with($1) {",close:"} "})},S.$a.prototype=new S.ca,S.$a.prototype.constructor=S.$a;var e=new S.$a;0<e.Hd&&S.gc(e),S.b("jqueryTmplTemplateEngine",S.$a)}()}))}()},function(e,t,n){function r(e){return(r="function"==typeof Symbol&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49723	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:30 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:30 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1812773 Cache-Control: public, max-age=31536000 Content-MD5: bedopN8eDQBhzbUu8GNGxA== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:30 GMT Etag: 0x8DCB563C85A43C4 Last-Modified: Mon, 05 Aug 2024 15:32:14 GMT Server: ECAcc (lhc/78A8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb594470-e01e-0006-2151-e9b2d8000000 x-ms-version: 2009-09-19 Content-Length: 141866 Connection: close
2024-08-29 04:42:30 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 04:42:30 UTC	16383	IN	Data Raw: 22 5d 2c 5b 22 23 32 30 32 30 32 30 22 5d 29 2c 73 3d 65 28 72 2c 5b 22 34 35 2c 35 30 2c 35 34 22 5d 2c 5b 22 23 32 64 33 32 33 36 22 5d 29 2c 75 3d 65 28 72 2c 5b 22 32 35 35 2c 32 35 30 2c 32 33 39 22 5d 2c 5b 22 23 66 66 66 61 65 66 22 5d 29 3b 69 66 28 6f 7c 7c 61 7c 7c 73 29 72 65 74 75 72 6e 22 62 6c 61 63 6b 22 3b 69 66 28 69 7c 7c 75 29 72 65 74 75 72 6e 22 77 68 69 74 65 22 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f Data Ascii: "],["#202020"]),s=e(r,["45,50,54"],["#2d3236"]),u=e(r,["255,250,239"],["#fffaef"]);if(o\|\|a\|\|s)return"black";if(i\|\|u)return"white"}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getCo
2024-08-29 04:42:30 UTC	16383	IN	Data Raw: 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 35 35 37 22 2c 50 50 5f 45 5f 4f 54 54 5f 44 41 54 41 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 33 34 38 46 22 2c 50 50 5f 45 5f 4f 54 54 5f 41 4c 52 45 41 44 59 5f 43 4f 4e 53 55 4d 45 44 3a 22 38 30 30 34 33 34 39 30 22 2c 50 50 5f 45 5f 4f 54 54 5f 49 4e 56 41 4c 49 44 5f 50 55 52 50 4f 53 45 3a 22 38 30 30 34 33 34 39 36 22 2c 50 50 5f 45 5f 50 50 53 41 5f 52 50 54 5f 4e 4f 54 4f 41 44 44 52 45 53 53 3a 22 38 30 30 34 38 31 32 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 45 53 53 5f 42 41 44 44 45 56 49 43 45 4e 41 4d 45 3a 22 38 30 30 34 39 43 32 32 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e Data Ascii: _PASSWORD:"80043557",PP_E_OTT_DATA_INVALID:"8004348F",PP_E_OTT_ALREADY_CONSUMED:"80043490",PP_E_OTT_INVALID_PURPOSE:"80043496",PP_E_PPSA_RPT_NOTOADDRESS:"80048120",PP_E_STRONGPROCESS_BADDEVICENAME:"80049C22",PP_E_INLINELOGIN_INVALID_SMS:"800434E1",PP_E_IN
2024-08-29 04:42:30 UTC	16383	IN	Data Raw: 2e 2a 29 3f 24 2f 5d 2c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 74 2e 63 61 6c 6c 28 6e 2c 65 5b 72 5d 2c 72 2c 65 29 7d 2c 41 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 65 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 4c Data Ascii: .*)?$/],D:function(e,t,n){for(var r=0,o=e.length;r<o;r++)t.call(n,e[r],r,e)},A:"function"==typeof Array.prototype.indexOf?function(e,t){return Array.prototype.indexOf.call(e,t)}:function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},L
2024-08-29 04:42:30 UTC	16383	IN	Data Raw: 66 6e 2e 71 62 28 74 29 2c 53 2e 61 2e 41 62 28 74 2c 50 29 2c 53 2e 6f 70 74 69 6f 6e 73 2e 64 65 66 65 72 55 70 64 61 74 65 73 26 26 53 2e 54 61 2e 64 65 66 65 72 72 65 64 28 74 2c 21 30 29 2c 74 7d 3b 76 61 72 20 50 3d 7b 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 3a 6e 2c 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 77 5d 7d 2c 78 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 73 70 65 63 74 61 74 65 22 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 29 7d 2c 79 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b Data Ascii: fn.qb(t),S.a.Ab(t,P),S.options.deferUpdates&&S.Ta.deferred(t,!0),t};var P={equalityComparer:n,v:function(){return this[w]},xa:function(){this.notifySubscribers(this[w],"spectate"),this.notifySubscribers(this[w])},ya:function(){this.notifySubscribers(this[
2024-08-29 04:42:30 UTC	16383	IN	Data Raw: 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 61 2e 47 61 28 53 2e 75 2e 47 28 65 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 5b 6e 5d 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6f 28 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 72 29 29 3a 53 2e 61 2e 47 61 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2e 67 65 74 42 69 6e 64 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 2c 65 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 74 Data Ascii: on o(e){return S.a.Ga(S.u.G(e),(function(t,n){return function(){return e()[n]}}))}function i(e,t,r){return"function"==typeof e?o(e.bind(null,t,r)):S.a.Ga(e,n)}function c(e,t){return o(this.getBindings.bind(this,e,t))}function d(e,t){var n=S.h.firstChild(t
2024-08-29 04:42:30 UTC	16383	IN	Data Raw: 29 26 26 28 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 28 30 2c 74 29 2c 53 2e 75 2e 47 28 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 41 66 74 65 72 52 65 6e 64 65 72 22 29 2c 6e 75 6c 6c 2c 5b 74 5b 30 5d 2c 65 21 3d 3d 44 3f 65 3a 61 5d 29 7d 29 2c 53 2e 61 2e 65 63 28 65 2c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 26 26 28 70 3d 21 6c 26 26 69 5b 30 5d 2e 73 65 6c 65 63 74 65 64 3f 5b 53 2e 77 2e 4d 28 69 5b 30 5d 29 5d 3a 5b 5d 2c 68 3d 21 30 29 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 2c 74 3d 3d 3d 44 3f 28 53 2e 61 2e 42 62 28 72 2c 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 43 61 70 74 69 6f 6e 22 Data Ascii: )&&(c=function(e,t){i(0,t),S.u.G(n.get("optionsAfterRender"),null,[t[0],e!==D?e:a])}),S.a.ec(e,f,(function(t,r,i){return i.length&&(p=!l&&i[0].selected?[S.w.M(i[0])]:[],h=!0),r=e.ownerDocument.createElement("option"),t===D?(S.a.Bb(r,n.get("optionsCaption"
2024-08-29 04:42:30 UTC	16383	IN	Data Raw: 27 27 29 3b 22 7d 2c 6c 2e 74 6d 70 6c 2e 74 61 67 2e 6b 6f 5f 77 69 74 68 3d 7b 6f 70 65 6e 3a 22 77 69 74 68 28 24 31 29 20 7b 22 2c 63 6c 6f 73 65 3a 22 7d 20 22 7d 29 7d 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 53 2e 63 61 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 53 2e 24 61 3b 76 61 72 20 65 3d 6e 65 77 20 53 2e 24 61 3b 30 3c 65 2e 48 64 26 26 53 2e 67 63 28 65 29 2c 53 2e 62 28 22 6a 71 75 65 72 79 54 6d 70 6c 54 65 6d 70 6c 61 74 65 45 6e 67 69 6e 65 22 2c 53 2e 24 61 29 7d 28 29 7d 29 29 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 Data Ascii: '');"},l.tmpl.tag.ko_with={open:"with($1) {",close:"} "})},S.$a.prototype=new S.ca,S.$a.prototype.constructor=S.$a;var e=new S.$a;0<e.Hd&&S.gc(e),S.b("jqueryTmplTemplateEngine",S.$a)}()}))}()},function(e,t,n){function r(e){return(r="function"==typeof Symb
2024-08-29 04:42:30 UTC	10802	IN	Data Raw: 72 69 6e 67 69 66 79 28 6e 29 7d 72 65 74 75 72 6e 20 74 26 26 28 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 5c 3f 2f 67 2c 22 5c 5c 75 30 30 33 46 22 29 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 65 2e 68 65 61 64 65 72 73 3d 62 28 29 2c 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 61 2c 65 2e 62 72 65 61 6b 43 61 63 68 65 3d 73 2c 65 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 3d 68 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 3b 69 66 28 74 29 7b 76 61 72 20 73 3d 74 2e 65 76 65 6e 74 4f 70 74 69 6f 6e 73 7c 7c 7b 7d 3b 69 66 28 73 2e 65 76 65 6e 74 49 64 3d 74 2e 65 76 65 6e 74 49 64 7c 7c 73 2e 65 76 65 6e 74 49 64 2c 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 68 69 64 Data Ascii: ringify(n)}return t&&(t=t.replace(/\?/g,"\\u003F")),t}function S(e){e.headers=b(),e.withCredentials=a,e.breakCache=s,e.responseType=h}function E(e,t,n,r,o,i){var a=null;if(t){var s=t.eventOptions\|\|{};if(s.eventId=t.eventId\|\|s.eventId,s.hasOwnProperty("hid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49729	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:31 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:32 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4812823 Cache-Control: public, max-age=31536000 Content-MD5: SJgdPPV+fFjKfj6FHvk1Tg== Content-Type: text/css Date: Thu, 29 Aug 2024 04:42:32 GMT Etag: 0x8DC9BAA0E5931F9 Last-Modified: Wed, 03 Jul 2024 21:49:46 GMT Server: ECAcc (lhc/794C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 6c7d298f-b01e-00dc-1d08-ce9a59000000 x-ms-version: 2009-09-19 Content-Length: 113401 Connection: close
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-08-29 04:42:32 UTC	1	IN	Data Raw: 73 Data Ascii: s
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a 6c Data Ascii: -1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:l
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f Data Ascii: gin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-bo
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 6c 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 Data Ascii: low-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.tab
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 49 22 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 Data Ascii: I","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mong
2024-08-29 04:42:32 UTC	4	IN	Data Raw: 5b 74 79 70 Data Ascii: [typ
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: e="reset"].btn-primary:hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{background-col
2024-08-29 04:42:32 UTC	15098	IN	Data Raw: 4d 61 74 68 22 7d 2e 61 70 70 2d 6e 61 6d 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 Data Ascii: Math"}.app-name{margin-bottom:20px;margin-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;pad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49728	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:31 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:32 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1819676 Cache-Control: public, max-age=31536000 Content-MD5: uaBUkDWJZJ75uKxjc6vkvw== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:32 GMT Etag: 0x8DCB563CA8588E7 Last-Modified: Mon, 05 Aug 2024 15:32:18 GMT Server: ECAcc (lhc/7971) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9a732ed0-201e-0054-8041-e9ce30000000 x-ms-version: 2009-09-19 Content-Length: 449540 Connection: close
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: DING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthoriz
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 54 61 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 74 61 72 67 65 74 3f 65 2e 74 61 72 67 65 74 3a 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3f 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3a 6e 75 6c 6c 3a 6e 75 6c 6c 7d 7d 2c 44 3d 6e 2e 51 75 65 72 79 53 74 72 69 6e 67 3d 7b 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2c 74 3d 6e 75 6c 6c 2c 69 3d 6e 75 6c 6c 3b 69 66 28 65 29 7b 76 61 72 20 61 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 2c 6f 3d 65 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 2d 31 21 3d 3d 6f 26 26 28 2d 31 3d 3d 3d 61 7c 7c 6f 3c 61 29 3f 28 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6f 29 2c 69 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 Data Ascii: Target:function(e){return e?e.target?e.target:e.srcElement?e.srcElement:null:null}},D=n.QueryString={parse:function(e){var n=e,t=null,i=null;if(e){var a=e.indexOf("?"),o=e.indexOf("#");-1!==o&&(-1===a\|\|o<a)?(n=e.substring(0,o),i=d.doubleSplit(e.substring(
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 50 61 73 73 77 6f 72 64 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 69 64 69 6e 67 4d 6f 64 65 3d 69 2e 48 69 64 69 6e 67 4d 6f 64 65 2e 48 69 64 65 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 45 76 65 6e 74 54 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 72 65 74 75 72 6e 7b 65 76 65 6e 74 49 64 3a 65 2c 65 76 65 6e 74 4c 65 76 65 6c 3a 74 7c 7c 69 2e Data Ascii: ultTextBoxPropertyLogOption(e,n)},s.getPasswordTextBoxPropertyLogOption=function(e,n){return(n=n\|\|{}).hidingMode=i.HidingMode.Hide,s.getDefaultTextBoxPropertyLogOption(e,n)},s.getDefaultEventTracingOptions=function(e,n,t){return{eventId:e,eventLevel:t\|\|i.
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 26 28 74 68 69 73 5b 75 2e 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 5d 3d 62 29 2c 76 26 26 28 74 68 69 73 5b 75 2e 43 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 5d 3d 76 29 7d 2c 6e 2e 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 2c 61 2c 63 2c 64 3d 74 68 69 73 2c 6c 3d 70 2e 4e 6f 6e 65 2c 75 3d 22 22 2c 66 3d 22 22 2c 67 3d 22 22 2c 6d 3d 65 2e 64 61 74 61 2c 62 3d 65 2e 6f 6e 53 65 6e 64 2c 76 3d 65 2e 6f 6e 53 65 6e 64 46 61 69 6c 2c 68 3d 65 2e 6f 6e 46 6c 6f 77 45 78 70 69 72 65 64 2c 5f 3d 65 2e 74 69 6d 65 6f 75 74 7c 7c 33 65 34 2c 43 3d 65 2e 73 69 74 65 49 64 2c 53 3d 65 2e 63 6c 69 65 6e 74 49 64 2c 78 3d 65 2e 66 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 77 3d 65 2e 6e 6f 50 61 42 75 62 Data Ascii: &(this[u.ProofConfirmation]=b),v&&(this[u.CanaryFlowToken]=v)},n.Request=function(e){var n,t,a,c,d=this,l=p.None,u="",f="",g="",m=e.data,b=e.onSend,v=e.onSendFail,h=e.onFlowExpired,_=e.timeout\|\|3e4,C=e.siteId,S=e.clientId,x=e.forwardedClientId,w=e.noPaBub
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 61 72 61 6d 73 7c 7c 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 61 63 65 62 6f 6f 6b 50 61 72 61 6d 73 29 29 29 72 65 74 75 72 6e 20 69 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 6d 2e 52 65 6d 6f 74 65 4e 47 43 3a 63 61 73 65 20 6d 2e 46 65 64 65 72 61 74 69 6f 6e 3a 63 61 73 65 20 6d 2e 41 63 63 65 73 73 50 61 73 73 3a 63 61 73 65 20 6d 2e 4e 6f 50 72 65 66 65 72 72 65 64 43 72 65 64 65 6e 74 69 61 6c 3a 6f 26 26 6f 2e 53 61 6d 6c 52 65 71 75 65 73 74 26 26 6f 2e 52 65 6c 61 79 53 74 61 74 65 3f 28 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 2c 69 2e 69 64 70 52 65 64 69 72 65 63 74 50 6f 73 74 50 61 72 61 6d 73 3d 7b 53 41 4d 4c 52 65 Data Ascii: arams\|\|n.Credentials.FacebookParams)))return i;switch(a){case m.RemoteNGC:case m.Federation:case m.AccessPass:case m.NoPreferredCredential:o&&o.SamlRequest&&o.RelayState?(i.idpRedirectUrl=n.Credentials.FederationRedirectUrl,i.idpRedirectPostParams={SAMLRe
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 52 65 64 69 72 65 63 74 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 52 65 67 69 73 74 65 72 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 55 6e 72 65 67 69 73 74 65 72 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 68 6f 77 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 55 70 64 61 74 65 46 6c 6f 77 54 6f 6b 65 6e 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 63 72 65 64 65 6e 74 69 61 6c 43 6f 75 6e 74 3d 30 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 54 79 70 65 3d 6e 75 6c 6c 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 53 68 6f 77 6e 4f 6e 6c 79 4f 6e 50 69 Data Ascii: reate(),n.onRedirect=o.create(),n.onRegisterDialog=o.create(),n.onUnregisterDialog=o.create(),n.onShowDialog=o.create(),n.onSetPendingRequest=o.create(),n.onUpdateFlowToken=o.create(),n.credentialCount=0,n.selectedCredType=null,n.selectedCredShownOnlyOnPi
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 65 2e 61 75 74 68 65 6e 74 69 63 61 74 65 64 53 74 61 74 65 7c 7c 32 3d 3d 3d 65 2e 61 75 74 68 65 6e 74 69 63 61 74 65 64 53 74 61 74 65 2c 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 7c 7c 21 31 2c 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 3a 21 30 2c 69 73 47 69 74 48 75 62 46 65 64 3a 65 2e 69 73 47 69 74 48 75 62 46 65 64 7c 7c 21 31 7d 7d 29 29 7d 2c 70 61 72 73 65 42 73 73 6f 53 65 73 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 2e 6d 61 70 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 73 73 6f 55 6e 69 71 75 65 49 64 3a 65 2e 73 73 6f 55 6e 69 71 75 65 49 64 2c 6e 61 6d 65 3a 65 2e 6e 61 6d 65 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 65 2e 64 69 Data Ascii: e.authenticatedState\|\|2===e.authenticatedState,isWindowsSso:e.isWindowsSso\|\|!1,isMeControlSession:!0,isGitHubFed:e.isGitHubFed\|\|!1}}))},parseBssoSessions:function(e){return o.map(e,(function(e){return{ssoUniqueId:e.ssoUniqueId,name:e.name,displayName:e.di
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 65 64 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 29 7b 76 61 72 20 61 3d 69 2e 73 46 65 64 51 53 3b 6e 3d 3d 3d 6d 2e 4e 6f 74 68 69 6e 67 43 68 65 63 6b 65 64 26 26 28 61 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 22 3f 22 2b 61 2c 22 77 63 74 78 22 2c 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 2b 66 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 22 3f 22 2b 61 29 29 2e 73 75 62 73 74 72 28 31 29 29 3b 65 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 63 62 63 78 74 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 2e 65 78 74 72 61 63 74 28 22 63 62 63 78 74 22 29 29 29 29 2c 65 3d 66 2e 61 70 70 65 Data Ascii: ed)return function(e,n,t,i){var a=i.sFedQS;n===m.NothingChecked&&(a=f.appendOrReplace("?"+a,"wctx","LoginOptions%3D3%26"+f.extract("wctx","?"+a)).substr(1));e=f.appendOrReplace(e,"cbcxt",encodeURIComponent(decodeURIComponent(f.extract("cbcxt")))),e=f.appe
2024-08-29 04:42:32 UTC	9	IN	Data Raw: 2e 48 62 3d 21 31 2c 72 3d Data Ascii: .Hb=!1,r=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49727	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:31 UTC	656	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:32 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2240378 Cache-Control: public, max-age=31536000 Content-MD5: Rm+S3xFatg5Am1LOmufX9g== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:32 GMT Etag: 0x8DCB32DEE62CF26 Last-Modified: Fri, 02 Aug 2024 20:01:43 GMT Server: ECAcc (lhc/78A1) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 613e53e1-f01e-00f5-7a6d-e55e06000000 x-ms-version: 2009-09-19 Content-Length: 56391 Connection: close
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-08-29 04:42:32 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 2e Data Ascii: escription_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time.
2024-08-29 04:42:32 UTC	16383	IN	Data Raw: 67 20 6f 75 72 20 3c 73 74 72 6f 6e 67 3e 6e 65 77 20 73 69 67 6e 2d 69 6e 20 65 78 70 65 72 69 65 6e 63 65 3c 2f 73 74 72 6f 6e 67 3e 22 2c 65 2e 57 46 5f 53 54 52 5f 53 69 67 6e 55 70 4c 69 6e 6b 5f 54 65 78 74 3d 27 4e 6f 20 61 63 63 6f 75 6e 74 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 73 69 67 6e 75 70 22 3e 43 72 65 61 74 65 20 6f 6e 65 21 3c 2f 61 3e 27 2c 65 2e 43 54 5f 48 52 44 5f 53 54 52 5f 53 70 6c 69 74 74 65 72 5f 52 65 6e 61 6d 65 3d 27 54 69 72 65 64 20 6f 66 20 73 65 65 69 6e 67 20 74 68 69 73 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 69 44 69 73 61 6d 62 69 67 52 65 6e 61 6d 65 4c 69 6e 6b 22 3e 52 65 6e 61 6d 65 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 2e 3c Data Ascii: g our <strong>new sign-in experience</strong>",e.WF_STR_SignUpLink_Text='No account? <a href="#" id="signup">Create one!</a>',e.CT_HRD_STR_Splitter_Rename='Tired of seeing this? <a href="#" id="iDisambigRenameLink">Rename your personal Microsoft account.<
2024-08-29 04:42:32 UTC	7241	IN	Data Raw: 64 65 49 6e 63 6f 72 72 65 63 74 22 2c 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 3a 22 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 22 2c 4f 61 74 68 43 6f 64 65 4f 6c 64 3a 22 4f 61 74 68 43 6f 64 65 4f 6c 64 22 2c 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 3a 22 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 22 2c 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 3a 22 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 22 2c 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 65 61 63 68 65 64 3a 22 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 Data Ascii: deIncorrect",OathCodeDuplicate:"OathCodeDuplicate",OathCodeOld:"OathCodeOld",ProofDataNotFound:"ProofDataNotFound",OathCodeCorrectButDeviceNotAllowed:"OathCodeCorrectButDeviceNotAllowed",OathCodeFailedMaxAllowedRetryReached:"OathCodeFailedMaxAllowedRetryR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49736	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:33 UTC	431	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:33 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2240379 Cache-Control: public, max-age=31536000 Content-MD5: Rm+S3xFatg5Am1LOmufX9g== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:33 GMT Etag: 0x8DCB32DEE62CF26 Last-Modified: Fri, 02 Aug 2024 20:01:43 GMT Server: ECAcc (lhc/78A1) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 613e53e1-f01e-00f5-7a6d-e55e06000000 x-ms-version: 2009-09-19 Content-Length: 56391 Connection: close
2024-08-29 04:42:33 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-08-29 04:42:33 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-08-29 04:42:33 UTC	16383	IN	Data Raw: 6e 67 20 6f 75 72 20 3c 73 74 72 6f 6e 67 3e 6e 65 77 20 73 69 67 6e 2d 69 6e 20 65 78 70 65 72 69 65 6e 63 65 3c 2f 73 74 72 6f 6e 67 3e 22 2c 65 2e 57 46 5f 53 54 52 5f 53 69 67 6e 55 70 4c 69 6e 6b 5f 54 65 78 74 3d 27 4e 6f 20 61 63 63 6f 75 6e 74 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 73 69 67 6e 75 70 22 3e 43 72 65 61 74 65 20 6f 6e 65 21 3c 2f 61 3e 27 2c 65 2e 43 54 5f 48 52 44 5f 53 54 52 5f 53 70 6c 69 74 74 65 72 5f 52 65 6e 61 6d 65 3d 27 54 69 72 65 64 20 6f 66 20 73 65 65 69 6e 67 20 74 68 69 73 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 69 44 69 73 61 6d 62 69 67 52 65 6e 61 6d 65 4c 69 6e 6b 22 3e 52 65 6e 61 6d 65 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 2e Data Ascii: ng our <strong>new sign-in experience</strong>",e.WF_STR_SignUpLink_Text='No account? <a href="#" id="signup">Create one!</a>',e.CT_HRD_STR_Splitter_Rename='Tired of seeing this? <a href="#" id="iDisambigRenameLink">Rename your personal Microsoft account.
2024-08-29 04:42:33 UTC	7242	IN	Data Raw: 6f 64 65 49 6e 63 6f 72 72 65 63 74 22 2c 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 3a 22 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 22 2c 4f 61 74 68 43 6f 64 65 4f 6c 64 3a 22 4f 61 74 68 43 6f 64 65 4f 6c 64 22 2c 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 3a 22 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 22 2c 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 3a 22 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 22 2c 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 65 61 63 68 65 64 3a 22 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 Data Ascii: odeIncorrect",OathCodeDuplicate:"OathCodeDuplicate",OathCodeOld:"OathCodeOld",ProofDataNotFound:"ProofDataNotFound",OathCodeCorrectButDeviceNotAllowed:"OathCodeCorrectButDeviceNotAllowed",OathCodeFailedMaxAllowedRetryReached:"OathCodeFailedMaxAllowedRetry

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49737	13.107.246.60	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:33 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:33 UTC	798	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 04:42:33 GMT Content-Type: application/x-javascript Content-Length: 122157 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:30 GMT ETag: 0x8DCB563D185FB49 x-ms-request-id: 849b7260-401e-0037-6e1d-f911fa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T044233Z-16579567576rt7gkm43y59pk3800000001cg0000000004td x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 04:42:33 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b e1 92 fc 02 8b 56 b3 c6 40 15 d3 80 19 4c 55 f7 2c c5 70 64 29 6d d4 c8 92 57 92 79 8c f1 7e f6 5f 44 64 a6 94 b2 65 aa 6a 76 cf bd e7 9e db 3b 5b 58 99 91 af c8 c8 c8 88 c8 c8 c8 0f 3f 6f fd 5f 95 9f 2b bb df ff 5f 65 78 d3 bb be a9 0c 4e 2b 37 9f ce ae 8f 2b 57 f0 f5 8f ca e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 37 0f 7e 52 19 fb 01 ab c0 df 91 93 30 af 12 85 95 28 ae f8 a1 1b c5 b3 28 76 52 96 54 a6 f0 6f ec 3b 41 65 1c 47 d3 4a fa c0 2a b3 38 fa 93 b9 69 52 09 fc 24 85 42 23 16 44 cf 95 2a 54 17 7b 95 2b 27 4e 5f 2b 67 57 b5 3a d4 cf a0 36 7f e2 87 50 da 8d 66 af f0 fb 21 ad 84 51 ea bb ac e2 84 1e d5 16 c0 47 98 b0 ca 3c f4 58 5c 79 7e f0 dd 87 ca 85 ef c6 51 12 8d d3 4a cc Data Ascii: {WH8F3V@LU,pd)mWy~_Ddejv;[X?o_+_exN+7+W`7~R0((vRTo;AeGJ8iR$B#DT{+'N_+gW:6Pf!QG<X\y~QJ
2024-08-29 04:42:33 UTC	16384	IN	Data Raw: e7 df 29 77 61 a8 aa 85 66 8c 3d 56 b9 f2 8a 13 86 16 b2 e9 0c 6f 67 70 f7 12 bb 6c cf 01 9e 02 80 83 7c 30 2c af b0 f6 0d 93 d3 41 6e df f0 a5 27 ee 7b d3 a6 a3 09 c0 44 13 80 50 f9 41 fa 16 17 7e f3 19 4b 56 ca a1 fe 8e 1e 28 a0 30 1d 3b f1 63 7e 35 1f 7d 3f 0b de 71 47 e8 b3 45 fe 86 78 e3 60 35 f7 77 f4 dd 52 72 d7 ea b3 1d 14 9b d0 9f 95 ae 69 5c e2 95 66 d8 43 ea 1e 40 e5 29 a9 ae d0 2d ac f1 78 83 8b 1e b3 e3 7a 99 2b 64 b5 f6 5e bf 85 df 19 6e a3 ef 0d 40 38 a2 21 d8 12 8d 4a 7e dd 95 33 9d c0 a2 c3 80 71 b0 4d 6b 0e 05 91 c0 70 8e bb 3e 0e 80 fb 78 46 81 a6 2f 9e 7c f6 8c b6 c1 c0 5a f0 95 f4 25 4b 28 5b dd fe 3a cf 44 3d 4f 84 bd 40 c4 24 a5 37 2f b8 6a 12 42 3e 7a 5c 2f f3 0b 16 c8 68 70 a6 53 f2 51 44 cb 21 d0 9a ac cf 4a ab cd 36 90 0b ba e5 Data Ascii: )waf=Vogpl\|0,An'{DPA~KV(0;c~5}?qGEx`5wRri\fC@)-xz+d^n@8!J~3qMkp>xF/\|Z%K([:D=O@$7/jB>z\/hpSQD!J6
2024-08-29 04:42:33 UTC	16384	IN	Data Raw: 27 68 0d de 85 5c 19 de fc 9e d8 38 89 11 d3 fc 46 a4 15 81 cc fb e4 7d e0 3c 89 d8 ff c0 95 33 9d 7e f5 3e 1c ef 1e 1c be 21 73 28 ee e7 ea 0c 2b 40 45 3d 96 79 a9 ea de 9c aa f2 c4 26 5a 8c f4 53 a0 04 8b d6 28 e9 61 3a 3d 13 73 a3 a0 ee 21 ee a6 4c c0 1b 18 8c c5 64 c4 d4 27 22 13 4e c8 61 dc 8b 90 08 b8 25 94 46 5b f8 11 d2 19 f2 bc 51 37 fb 88 b0 94 ce 5c f0 06 8b 61 33 f0 fb 00 7b 29 5f d9 e0 1a 52 eb ae 6c 70 67 4e e3 2a 4d f8 28 e9 ac 65 bb e7 15 8b a0 15 26 14 4c 2d ca bc aa 67 e9 44 2f c6 01 37 f4 39 cd ab 58 5c b4 52 05 6a 22 63 e7 8d 59 5d 6d f3 70 db 18 e6 2e 7a 0f 67 1a 40 e4 41 f6 81 f5 cf a9 91 f2 4a ce 1b ca 8e 56 ae a6 1a b5 75 27 ee 42 5d 1b 3b 80 e9 33 9d a3 ed 2e d3 95 4b d5 fb 66 3b f5 f7 b7 f6 72 22 87 ac 74 1b 91 91 20 d6 a8 da a1 Data Ascii: 'h\8F}<3~>!s(+@E=y&ZS(a:=s!Ld'"Na%F[Q7\a3{)_RlpgN*M(e&L-gD/79X\Rj"cY]mp.zg@AJVu'B];3.Kf;r"t
2024-08-29 04:42:33 UTC	16384	IN	Data Raw: c0 9c e5 fd d1 35 72 c7 93 e4 4d 38 1e 3e 8a dc 53 ba bb 67 61 40 4a 64 79 3e 8c ca b2 68 4f 66 bc 41 b1 09 db 1a 27 d2 f7 32 fa 59 52 34 f2 0f f6 13 6e 26 3c 02 5f c7 71 ae 35 14 7f 83 6d 9e a1 6d 85 f8 3a 29 c0 a1 df 93 31 86 9a 8a ef e2 b2 ee 1c 0d c1 4d dd 71 db 4a 26 77 dd 68 ac 8b 7b 61 6c 3e e2 fa 14 52 16 3d fb a7 41 22 a4 56 48 53 bf 47 d7 12 f0 44 d4 60 cb 69 07 5e fe 24 cd e3 c1 e3 e7 9b 28 61 33 c0 ec 34 4f 47 50 26 ed 84 7e 8c 11 6d ba 76 8d 52 03 c6 1e 71 85 32 c9 cc 25 a3 33 c0 d6 6b 54 b8 9a e4 01 af a2 9b f4 a3 ac f2 63 83 25 12 a8 dc 86 28 55 d8 43 c7 e7 59 03 88 d0 06 09 af 1a 3f a2 df a0 1f 5d c0 13 7a e1 04 9f da bc 11 67 0d 94 e0 2a 9f ff 88 78 b1 ad 38 b5 1a 0e 1b e9 00 a6 87 f2 55 61 4e ee 91 e2 cf fb 2e d9 83 be 17 56 df c6 d4 d4 Data Ascii: 5rM8>Sga@Jdy>hOfA'2YR4n&<_q5mm:)1MqJ&wh{al>R=A"VHSGD`i^$(a34OGP&~mvRq2%3kTc%(UCY?]zg*x8UaN.V
2024-08-29 04:42:33 UTC	16384	IN	Data Raw: 59 61 e5 30 30 3d 4c b0 98 ac 1a e0 0d fc b4 d4 5b 2b b2 2e 2c df 2c 6a 6d 92 02 f2 33 7d 9e 8d 8a 38 bf e1 7c 1b 3c 0a fd 67 da 0f 0d 7e f1 c8 84 44 07 7c 45 1f 24 c3 95 e6 f4 11 34 6a fc 73 7e 1d 39 35 69 28 91 10 7a 1a 63 5b 33 2c cd 76 54 56 5d c1 08 59 7f e9 74 64 09 d2 1c 48 e3 d4 d9 d4 ec 79 45 f5 d5 c2 33 50 82 e6 81 12 fe 56 6e 43 20 0a 72 1a 3a f8 cc db ed 5d d2 b8 7f 27 8a a2 11 f0 3b 60 97 83 44 cc c0 cd 99 77 d2 c0 38 34 0f 61 26 81 23 b4 59 0a 29 b1 c2 0c 32 14 7b 08 87 51 89 32 cc 6a 3a c5 4d 46 2c 27 aa 2e 61 32 a6 88 36 f1 f4 f9 be 94 59 cd e4 d1 06 e7 71 11 22 a1 e0 ce 02 d0 6d a0 ad 02 b3 4e 3d e2 b5 85 7c 8f a1 eb 97 43 07 e9 37 18 f1 b8 fa 48 b7 57 80 84 c9 82 8a a6 1d 71 b2 69 9b 90 76 9e 8a 82 30 44 87 0d 35 8a 73 5f 4a 3a 62 89 40 Data Ascii: Ya00=L[+.,,jm3}8\|<g~D\|E$4js~95i(zc[3,vTV]YtdHyE3PVnC r:]';`Dw84a&#Y)2{Q2j:MF,'.a26Yq"mN=\|C7HWqiv0D5s_J:b@
2024-08-29 04:42:33 UTC	16384	IN	Data Raw: 73 98 58 3c bf 9b e5 bc da 4d cd 41 53 06 a4 83 8d 0e 7c 03 a7 4a 60 47 4b c6 13 81 37 10 b0 98 c9 fd a0 b9 97 02 cb 04 48 33 f7 78 20 13 cc a1 e3 e4 b6 cc 02 57 e4 b1 97 87 de 7e 70 af e6 f8 a9 9f 48 d7 77 12 ee 32 16 4b cf f1 a5 6d f3 24 0b 9c 40 c4 36 e6 75 3f e4 e4 a7 4e 02 76 13 f8 be c8 93 28 0e 82 04 13 96 25 51 98 24 49 1e 70 70 89 bd 74 53 4b a8 d4 06 09 e5 8e 2b 40 b1 b9 97 d8 7e e2 06 1e 86 13 24 22 0f 6c 96 dd cd fb b4 d6 59 1a 3b 9c 45 2e 0f 5c f5 af ef 31 0e a2 4a e2 dc b7 81 14 8e 7b 37 87 dd 6a 37 a1 e1 11 59 04 ae 9d 67 e0 aa d2 0e 6d 70 0a 19 7b 81 08 99 cd 84 cf e3 fd 10 6f 98 26 3c 14 36 b8 a8 2d 64 92 81 a3 82 0d e5 60 ed 58 bc d0 8f 44 b0 9f 6e 22 83 7b 6e 20 22 8f 65 6e ec 42 4a 41 01 94 22 04 ab cd 23 16 00 1b 83 fd 4c 60 94 72 3b Data Ascii: sX<MAS\|J`GK7H3x W~pHw2Km$@6u?Nv(%Q$IpptSK+@~$"lY;E.\1J{7j7Ygmp{o&<6-d`XDn"{n "enBJA"#L`r;
2024-08-29 04:42:33 UTC	16384	IN	Data Raw: df 9b e9 ad fa 56 bd f6 87 4d fd d5 09 2b 7f 60 b4 19 bd 5c 57 63 fe 76 e1 f8 44 e1 4d eb 56 ce cf ca 85 e1 99 6b 46 fe fa e7 2f c7 e3 f0 f9 bc 2a 5f a6 2f 43 db cb df 2e 09 6d 93 6d fc ed 27 a8 4e 67 a6 55 fb 42 bd 32 7c f9 79 ff 5e 15 95 06 f7 79 b3 cf de f6 6c d6 2f ff de 4c d0 b2 e0 66 95 e4 1b c6 df 68 75 5a 49 b2 b6 4b 7e 29 f3 3b 45 7e 35 f5 e6 d3 86 c8 49 f5 b7 f9 e3 52 c8 e7 05 26 bd de 5c da c9 00 69 9a fb 8d 94 9f 7f 52 40 81 90 87 74 8b d8 97 a5 ff fc 53 cd cc 93 55 2e bc 7c 7d 07 9a df 99 8e ee 84 bf bf be 46 ad 7d da 44 8b bf 2a 5a 69 99 a1 14 ea 2f 0c 99 ee a4 4c cf 2a 96 cb f4 2e 3a 75 5d f5 ee aa f5 ae aa eb dd 94 bb a2 7a c9 2e 49 ce cd 95 5e fa 53 55 74 aa af 7f be 03 09 7e 39 32 71 9f b2 e8 8b b2 d2 ef e8 0a 93 14 fc f4 6c 7e c6 66 b5 Data Ascii: VM+`\WcvDMVkF/_/C.mm'NgUB2\|y^yl/LfhuZIK~);E~5IR&\iR@tSU.\|}F}DZi/L*.:u]z.I^SUt~92ql~f
2024-08-29 04:42:33 UTC	8267	IN	Data Raw: f0 fc a5 43 72 38 1d 22 f1 2d b4 98 cc 76 76 a8 f4 f5 3c f4 e3 dc 94 ae 25 24 07 1c d0 13 14 76 92 1b 2d 25 0c 04 b8 70 30 25 0c 49 a5 79 fc d9 8f 61 f6 e2 da c5 27 be 78 12 c7 17 0b 82 4f 16 fc c9 73 c7 23 2e 8c 07 9f 5d f3 67 27 1c 85 19 a6 6a a0 de f4 e8 70 28 92 3f 4d e0 df 44 83 07 a7 40 08 24 39 48 d3 d8 0b 91 f6 01 24 b0 08 0c e0 af a9 99 2b c0 06 c3 53 1e 09 89 47 cb a2 64 7b 81 6f 80 83 2a de 31 aa b8 e2 40 c0 c3 64 86 64 78 7e c8 66 74 12 2d 6e 4e 22 2c 7f 0a da 08 0c c6 55 16 46 e8 9d 44 02 b9 90 9e 1f 3d 62 70 45 ac fa 40 c4 29 05 8f 81 ab 7d 94 5a 39 09 02 3c 92 e4 84 f3 92 38 49 84 3e 01 da 25 5d f9 77 91 73 9d 5d 8a cc e2 cf b4 39 9d 27 0f 8b fe f2 10 9e 1c 32 98 bd 40 fb 57 a9 a9 d7 e4 13 f5 81 e7 8c 2d 19 c4 3f 32 9a c4 a9 33 2e 06 cc 96 Data Ascii: Cr8"-vv<%$v-%p0%Iya'xOs#.]g'jp(?MD@$9H$+SGd{o*1@ddx~ft-nN",UFD=bpE@)}Z9<8I>%]ws]9'2@W-?23.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49738	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:33 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:33 UTC	751	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13647670 Cache-Control: public, max-age=31536000 Content-MD5: HWW92uTq7vx3y5z+zFZbXQ== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:33 GMT Etag: 0x8D8DA1E5A71125A Last-Modified: Fri, 26 Feb 2021 06:18:37 GMT Server: ECAcc (lhc/789B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 206d711a-c01e-002f-46ad-7d420a000000 x-ms-version: 2009-09-19 Content-Length: 119648 Connection: close
2024-08-29 04:42:33 UTC	16383	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-08-29 04:42:33 UTC	16383	IN	Data Raw: 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 6b 2c 64 5d 29 2c 61 3d 3d 3d Data Ascii: =(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[k,d]),a===
2024-08-29 04:42:33 UTC	2	IN	Data Raw: 28 65 Data Ascii: (e
2024-08-29 04:42:33 UTC	16383	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 Data Ascii: ){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{value
2024-08-29 04:42:34 UTC	16383	IN	Data Raw: 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e Data Ascii: st(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:fun
2024-08-29 04:42:34 UTC	16383	IN	Data Raw: 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 70 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d 6f 76 65 Data Ascii: xtend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?pt:void 0)),void 0!==n?null===n?void S.remove
2024-08-29 04:42:34 UTC	16383	IN	Data Raw: 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 3d 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 29 2c 65 29 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 6e 2c 65 5b 6e 5d 29 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 28 6f 3d Data Ascii: n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-Requested-With"]="XMLHttpRequest"),e)r.setRequestHeader(n,e[n]);o=function(e){return function(){o&&(o=
2024-08-29 04:42:34 UTC	4	IN	Data Raw: 78 74 65 6e Data Ascii: xten
2024-08-29 04:42:34 UTC	16383	IN	Data Raw: 64 28 7b 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 62 69 6e 64 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 6e 28 65 2c 6e 75 6c 6c 2c 74 2c 72 29 7d 2c 75 6e 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 75 6e 62 69 6e 64 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 66 66 28 65 2c 6e 75 6c 6c 2c 74 29 7d 2c 64 65 6c 65 67 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 64 65 6c 65 67 61 74 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 6e Data Ascii: d({bind:function(e,t,r){return u("jQuery.fn.bind() is deprecated"),this.on(e,null,t,r)},unbind:function(e,t){return u("jQuery.fn.unbind() is deprecated"),this.off(e,null,t)},delegate:function(e,t,r,n){return u("jQuery.fn.delegate() is deprecated"),this.on
2024-08-29 04:42:34 UTC	4961	IN	Data Raw: 28 61 2d 31 29 29 2b 62 3b 72 65 74 75 72 6e 20 63 2f 32 2a 28 2d 4d 61 74 68 2e 70 6f 77 28 32 2c 2d 31 30 2a 2d 2d 61 29 2b 32 29 2b 62 7d 2c 65 61 73 65 49 6e 43 69 72 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 2d 63 2a 28 4d 61 74 68 2e 73 71 72 74 28 31 2d 28 61 2f 3d 64 29 2a 61 29 2d 31 29 2b 62 7d 2c 65 61 73 65 4f 75 74 43 69 72 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 63 2a 4d 61 74 68 2e 73 71 72 74 28 31 2d 28 61 3d 61 2f 64 2d 31 29 2a 61 29 2b 62 7d 2c 65 61 73 65 49 6e 4f 75 74 43 69 72 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 62 2c 63 2c 64 29 7b 69 66 28 28 61 2f 3d 64 2f 32 29 3c 31 29 72 65 74 75 72 6e 20 2d 63 2f 32 2a 28 4d 61 74 68 2e 73 71 Data Ascii: (a-1))+b;return c/2(-Math.pow(2,-10--a)+2)+b},easeInCirc:function(e,a,b,c,d){return -c(Math.sqrt(1-(a/=d)a)-1)+b},easeOutCirc:function(e,a,b,c,d){return cMath.sqrt(1-(a=a/d-1)a)+b},easeInOutCirc:function(e,a,b,c,d){if((a/=d/2)<1)return -c/2*(Math.sq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49741	13.107.246.67	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:34 UTC	410	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:34 UTC	798	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 04:42:34 GMT Content-Type: application/x-javascript Content-Length: 122157 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:30 GMT ETag: 0x8DCB563D185FB49 x-ms-request-id: 849b7260-401e-0037-6e1d-f911fa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T044234Z-16579567576w5bqfyu10zdac7g000000012000000000m7rt x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 04:42:34 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b e1 92 fc 02 8b 56 b3 c6 40 15 d3 80 19 4c 55 f7 2c c5 70 64 29 6d d4 c8 92 57 92 79 8c f1 7e f6 5f 44 64 a6 94 b2 65 aa 6a 76 cf bd e7 9e db 3b 5b 58 99 91 af c8 c8 c8 88 c8 c8 c8 0f 3f 6f fd 5f 95 9f 2b bb df ff 5f 65 78 d3 bb be a9 0c 4e 2b 37 9f ce ae 8f 2b 57 f0 f5 8f ca e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 37 0f 7e 52 19 fb 01 ab c0 df 91 93 30 af 12 85 95 28 ae f8 a1 1b c5 b3 28 76 52 96 54 a6 f0 6f ec 3b 41 65 1c 47 d3 4a fa c0 2a b3 38 fa 93 b9 69 52 09 fc 24 85 42 23 16 44 cf 95 2a 54 17 7b 95 2b 27 4e 5f 2b 67 57 b5 3a d4 cf a0 36 7f e2 87 50 da 8d 66 af f0 fb 21 ad 84 51 ea bb ac e2 84 1e d5 16 c0 47 98 b0 ca 3c f4 58 5c 79 7e f0 dd 87 ca 85 ef c6 51 12 8d d3 4a cc Data Ascii: {WH8F3V@LU,pd)mWy~_Ddejv;[X?o_+_exN+7+W`7~R0((vRTo;AeGJ8iR$B#DT{+'N_+gW:6Pf!QG<X\y~QJ
2024-08-29 04:42:34 UTC	16384	IN	Data Raw: e7 df 29 77 61 a8 aa 85 66 8c 3d 56 b9 f2 8a 13 86 16 b2 e9 0c 6f 67 70 f7 12 bb 6c cf 01 9e 02 80 83 7c 30 2c af b0 f6 0d 93 d3 41 6e df f0 a5 27 ee 7b d3 a6 a3 09 c0 44 13 80 50 f9 41 fa 16 17 7e f3 19 4b 56 ca a1 fe 8e 1e 28 a0 30 1d 3b f1 63 7e 35 1f 7d 3f 0b de 71 47 e8 b3 45 fe 86 78 e3 60 35 f7 77 f4 dd 52 72 d7 ea b3 1d 14 9b d0 9f 95 ae 69 5c e2 95 66 d8 43 ea 1e 40 e5 29 a9 ae d0 2d ac f1 78 83 8b 1e b3 e3 7a 99 2b 64 b5 f6 5e bf 85 df 19 6e a3 ef 0d 40 38 a2 21 d8 12 8d 4a 7e dd 95 33 9d c0 a2 c3 80 71 b0 4d 6b 0e 05 91 c0 70 8e bb 3e 0e 80 fb 78 46 81 a6 2f 9e 7c f6 8c b6 c1 c0 5a f0 95 f4 25 4b 28 5b dd fe 3a cf 44 3d 4f 84 bd 40 c4 24 a5 37 2f b8 6a 12 42 3e 7a 5c 2f f3 0b 16 c8 68 70 a6 53 f2 51 44 cb 21 d0 9a ac cf 4a ab cd 36 90 0b ba e5 Data Ascii: )waf=Vogpl\|0,An'{DPA~KV(0;c~5}?qGEx`5wRri\fC@)-xz+d^n@8!J~3qMkp>xF/\|Z%K([:D=O@$7/jB>z\/hpSQD!J6
2024-08-29 04:42:34 UTC	16384	IN	Data Raw: 27 68 0d de 85 5c 19 de fc 9e d8 38 89 11 d3 fc 46 a4 15 81 cc fb e4 7d e0 3c 89 d8 ff c0 95 33 9d 7e f5 3e 1c ef 1e 1c be 21 73 28 ee e7 ea 0c 2b 40 45 3d 96 79 a9 ea de 9c aa f2 c4 26 5a 8c f4 53 a0 04 8b d6 28 e9 61 3a 3d 13 73 a3 a0 ee 21 ee a6 4c c0 1b 18 8c c5 64 c4 d4 27 22 13 4e c8 61 dc 8b 90 08 b8 25 94 46 5b f8 11 d2 19 f2 bc 51 37 fb 88 b0 94 ce 5c f0 06 8b 61 33 f0 fb 00 7b 29 5f d9 e0 1a 52 eb ae 6c 70 67 4e e3 2a 4d f8 28 e9 ac 65 bb e7 15 8b a0 15 26 14 4c 2d ca bc aa 67 e9 44 2f c6 01 37 f4 39 cd ab 58 5c b4 52 05 6a 22 63 e7 8d 59 5d 6d f3 70 db 18 e6 2e 7a 0f 67 1a 40 e4 41 f6 81 f5 cf a9 91 f2 4a ce 1b ca 8e 56 ae a6 1a b5 75 27 ee 42 5d 1b 3b 80 e9 33 9d a3 ed 2e d3 95 4b d5 fb 66 3b f5 f7 b7 f6 72 22 87 ac 74 1b 91 91 20 d6 a8 da a1 Data Ascii: 'h\8F}<3~>!s(+@E=y&ZS(a:=s!Ld'"Na%F[Q7\a3{)_RlpgN*M(e&L-gD/79X\Rj"cY]mp.zg@AJVu'B];3.Kf;r"t
2024-08-29 04:42:34 UTC	16384	IN	Data Raw: c0 9c e5 fd d1 35 72 c7 93 e4 4d 38 1e 3e 8a dc 53 ba bb 67 61 40 4a 64 79 3e 8c ca b2 68 4f 66 bc 41 b1 09 db 1a 27 d2 f7 32 fa 59 52 34 f2 0f f6 13 6e 26 3c 02 5f c7 71 ae 35 14 7f 83 6d 9e a1 6d 85 f8 3a 29 c0 a1 df 93 31 86 9a 8a ef e2 b2 ee 1c 0d c1 4d dd 71 db 4a 26 77 dd 68 ac 8b 7b 61 6c 3e e2 fa 14 52 16 3d fb a7 41 22 a4 56 48 53 bf 47 d7 12 f0 44 d4 60 cb 69 07 5e fe 24 cd e3 c1 e3 e7 9b 28 61 33 c0 ec 34 4f 47 50 26 ed 84 7e 8c 11 6d ba 76 8d 52 03 c6 1e 71 85 32 c9 cc 25 a3 33 c0 d6 6b 54 b8 9a e4 01 af a2 9b f4 a3 ac f2 63 83 25 12 a8 dc 86 28 55 d8 43 c7 e7 59 03 88 d0 06 09 af 1a 3f a2 df a0 1f 5d c0 13 7a e1 04 9f da bc 11 67 0d 94 e0 2a 9f ff 88 78 b1 ad 38 b5 1a 0e 1b e9 00 a6 87 f2 55 61 4e ee 91 e2 cf fb 2e d9 83 be 17 56 df c6 d4 d4 Data Ascii: 5rM8>Sga@Jdy>hOfA'2YR4n&<_q5mm:)1MqJ&wh{al>R=A"VHSGD`i^$(a34OGP&~mvRq2%3kTc%(UCY?]zg*x8UaN.V
2024-08-29 04:42:34 UTC	16384	IN	Data Raw: 59 61 e5 30 30 3d 4c b0 98 ac 1a e0 0d fc b4 d4 5b 2b b2 2e 2c df 2c 6a 6d 92 02 f2 33 7d 9e 8d 8a 38 bf e1 7c 1b 3c 0a fd 67 da 0f 0d 7e f1 c8 84 44 07 7c 45 1f 24 c3 95 e6 f4 11 34 6a fc 73 7e 1d 39 35 69 28 91 10 7a 1a 63 5b 33 2c cd 76 54 56 5d c1 08 59 7f e9 74 64 09 d2 1c 48 e3 d4 d9 d4 ec 79 45 f5 d5 c2 33 50 82 e6 81 12 fe 56 6e 43 20 0a 72 1a 3a f8 cc db ed 5d d2 b8 7f 27 8a a2 11 f0 3b 60 97 83 44 cc c0 cd 99 77 d2 c0 38 34 0f 61 26 81 23 b4 59 0a 29 b1 c2 0c 32 14 7b 08 87 51 89 32 cc 6a 3a c5 4d 46 2c 27 aa 2e 61 32 a6 88 36 f1 f4 f9 be 94 59 cd e4 d1 06 e7 71 11 22 a1 e0 ce 02 d0 6d a0 ad 02 b3 4e 3d e2 b5 85 7c 8f a1 eb 97 43 07 e9 37 18 f1 b8 fa 48 b7 57 80 84 c9 82 8a a6 1d 71 b2 69 9b 90 76 9e 8a 82 30 44 87 0d 35 8a 73 5f 4a 3a 62 89 40 Data Ascii: Ya00=L[+.,,jm3}8\|<g~D\|E$4js~95i(zc[3,vTV]YtdHyE3PVnC r:]';`Dw84a&#Y)2{Q2j:MF,'.a26Yq"mN=\|C7HWqiv0D5s_J:b@
2024-08-29 04:42:34 UTC	16384	IN	Data Raw: 73 98 58 3c bf 9b e5 bc da 4d cd 41 53 06 a4 83 8d 0e 7c 03 a7 4a 60 47 4b c6 13 81 37 10 b0 98 c9 fd a0 b9 97 02 cb 04 48 33 f7 78 20 13 cc a1 e3 e4 b6 cc 02 57 e4 b1 97 87 de 7e 70 af e6 f8 a9 9f 48 d7 77 12 ee 32 16 4b cf f1 a5 6d f3 24 0b 9c 40 c4 36 e6 75 3f e4 e4 a7 4e 02 76 13 f8 be c8 93 28 0e 82 04 13 96 25 51 98 24 49 1e 70 70 89 bd 74 53 4b a8 d4 06 09 e5 8e 2b 40 b1 b9 97 d8 7e e2 06 1e 86 13 24 22 0f 6c 96 dd cd fb b4 d6 59 1a 3b 9c 45 2e 0f 5c f5 af ef 31 0e a2 4a e2 dc b7 81 14 8e 7b 37 87 dd 6a 37 a1 e1 11 59 04 ae 9d 67 e0 aa d2 0e 6d 70 0a 19 7b 81 08 99 cd 84 cf e3 fd 10 6f 98 26 3c 14 36 b8 a8 2d 64 92 81 a3 82 0d e5 60 ed 58 bc d0 8f 44 b0 9f 6e 22 83 7b 6e 20 22 8f 65 6e ec 42 4a 41 01 94 22 04 ab cd 23 16 00 1b 83 fd 4c 60 94 72 3b Data Ascii: sX<MAS\|J`GK7H3x W~pHw2Km$@6u?Nv(%Q$IpptSK+@~$"lY;E.\1J{7j7Ygmp{o&<6-d`XDn"{n "enBJA"#L`r;
2024-08-29 04:42:34 UTC	16384	IN	Data Raw: df 9b e9 ad fa 56 bd f6 87 4d fd d5 09 2b 7f 60 b4 19 bd 5c 57 63 fe 76 e1 f8 44 e1 4d eb 56 ce cf ca 85 e1 99 6b 46 fe fa e7 2f c7 e3 f0 f9 bc 2a 5f a6 2f 43 db cb df 2e 09 6d 93 6d fc ed 27 a8 4e 67 a6 55 fb 42 bd 32 7c f9 79 ff 5e 15 95 06 f7 79 b3 cf de f6 6c d6 2f ff de 4c d0 b2 e0 66 95 e4 1b c6 df 68 75 5a 49 b2 b6 4b 7e 29 f3 3b 45 7e 35 f5 e6 d3 86 c8 49 f5 b7 f9 e3 52 c8 e7 05 26 bd de 5c da c9 00 69 9a fb 8d 94 9f 7f 52 40 81 90 87 74 8b d8 97 a5 ff fc 53 cd cc 93 55 2e bc 7c 7d 07 9a df 99 8e ee 84 bf bf be 46 ad 7d da 44 8b bf 2a 5a 69 99 a1 14 ea 2f 0c 99 ee a4 4c cf 2a 96 cb f4 2e 3a 75 5d f5 ee aa f5 ae aa eb dd 94 bb a2 7a c9 2e 49 ce cd 95 5e fa 53 55 74 aa af 7f be 03 09 7e 39 32 71 9f b2 e8 8b b2 d2 ef e8 0a 93 14 fc f4 6c 7e c6 66 b5 Data Ascii: VM+`\WcvDMVkF/_/C.mm'NgUB2\|y^yl/LfhuZIK~);E~5IR&\iR@tSU.\|}F}DZi/L*.:u]z.I^SUt~92ql~f
2024-08-29 04:42:34 UTC	8267	IN	Data Raw: f0 fc a5 43 72 38 1d 22 f1 2d b4 98 cc 76 76 a8 f4 f5 3c f4 e3 dc 94 ae 25 24 07 1c d0 13 14 76 92 1b 2d 25 0c 04 b8 70 30 25 0c 49 a5 79 fc d9 8f 61 f6 e2 da c5 27 be 78 12 c7 17 0b 82 4f 16 fc c9 73 c7 23 2e 8c 07 9f 5d f3 67 27 1c 85 19 a6 6a a0 de f4 e8 70 28 92 3f 4d e0 df 44 83 07 a7 40 08 24 39 48 d3 d8 0b 91 f6 01 24 b0 08 0c e0 af a9 99 2b c0 06 c3 53 1e 09 89 47 cb a2 64 7b 81 6f 80 83 2a de 31 aa b8 e2 40 c0 c3 64 86 64 78 7e c8 66 74 12 2d 6e 4e 22 2c 7f 0a da 08 0c c6 55 16 46 e8 9d 44 02 b9 90 9e 1f 3d 62 70 45 ac fa 40 c4 29 05 8f 81 ab 7d 94 5a 39 09 02 3c 92 e4 84 f3 92 38 49 84 3e 01 da 25 5d f9 77 91 73 9d 5d 8a cc e2 cf b4 39 9d 27 0f 8b fe f2 10 9e 1c 32 98 bd 40 fb 57 a9 a9 d7 e4 13 f5 81 e7 8c 2d 19 c4 3f 32 9a c4 a9 33 2e 06 cc 96 Data Ascii: Cr8"-vv<%$v-%p0%Iya'xOs#.]g'jp(?MD@$9H$+SGd{o*1@ddx~ft-nN",UFD=bpE@)}Z9<8I>%]ws]9'2@W-?23.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49743	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:34 UTC	643	OUT	GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:35 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13561786 Cache-Control: public, max-age=31536000 Content-MD5: A8dgUeRfi6/VknMbox6Cuw== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:35 GMT Etag: 0x8D876CB1F3EA0D9 Last-Modified: Thu, 22 Oct 2020 20:43:24 GMT Server: ECAcc (lhc/7916) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 6e90de5d-e01e-00c1-2e75-7ef560000000 x-ms-version: 2009-09-19 Content-Length: 11970 Connection: close
2024-08-29 04:42:35 UTC	11970	IN	Data Raw: 2f 2a 21 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 65 20 6c 69 Data Ascii: /*! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49744	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:34 UTC	429	OUT	GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:35 UTC	751	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13647672 Cache-Control: public, max-age=31536000 Content-MD5: HWW92uTq7vx3y5z+zFZbXQ== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:35 GMT Etag: 0x8D8DA1E5A71125A Last-Modified: Fri, 26 Feb 2021 06:18:37 GMT Server: ECAcc (lhc/789B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 206d711a-c01e-002f-46ad-7d420a000000 x-ms-version: 2009-09-19 Content-Length: 119648 Connection: close
2024-08-29 04:42:35 UTC	16383	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-08-29 04:42:35 UTC	1	IN	Data Raw: 3d Data Ascii: =
2024-08-29 04:42:35 UTC	16383	IN	Data Raw: 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 6b 2c 64 5d 29 2c 61 3d 3d 3d 65 Data Ascii: (a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[k,d]),a===e
2024-08-29 04:42:35 UTC	16383	IN	Data Raw: 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 Data Ascii: e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{valu
2024-08-29 04:42:35 UTC	16383	IN	Data Raw: 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 Data Ascii: est(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:fu
2024-08-29 04:42:35 UTC	16383	IN	Data Raw: 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 70 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d 6f 76 Data Ascii: extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?pt:void 0)),void 0!==n?null===n?void S.remov
2024-08-29 04:42:35 UTC	4	IN	Data Raw: 28 6e 20 69 Data Ascii: (n i
2024-08-29 04:42:35 UTC	16383	IN	Data Raw: 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 3d 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 29 2c 65 29 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 6e 2c 65 5b 6e 5d 29 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 28 6f 3d 61 3d 72 Data Ascii: n i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-Requested-With"]="XMLHttpRequest"),e)r.setRequestHeader(n,e[n]);o=function(e){return function(){o&&(o=a=r
2024-08-29 04:42:35 UTC	16383	IN	Data Raw: 6e 64 28 7b 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 62 69 6e 64 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 6e 28 65 2c 6e 75 6c 6c 2c 74 2c 72 29 7d 2c 75 6e 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 75 6e 62 69 6e 64 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 66 66 28 65 2c 6e 75 6c 6c 2c 74 29 7d 2c 64 65 6c 65 67 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 64 65 6c 65 67 61 74 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f Data Ascii: nd({bind:function(e,t,r){return u("jQuery.fn.bind() is deprecated"),this.on(e,null,t,r)},unbind:function(e,t){return u("jQuery.fn.unbind() is deprecated"),this.off(e,null,t)},delegate:function(e,t,r,n){return u("jQuery.fn.delegate() is deprecated"),this.o
2024-08-29 04:42:35 UTC	4962	IN	Data Raw: 2a 28 61 2d 31 29 29 2b 62 3b 72 65 74 75 72 6e 20 63 2f 32 2a 28 2d 4d 61 74 68 2e 70 6f 77 28 32 2c 2d 31 30 2a 2d 2d 61 29 2b 32 29 2b 62 7d 2c 65 61 73 65 49 6e 43 69 72 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 2d 63 2a 28 4d 61 74 68 2e 73 71 72 74 28 31 2d 28 61 2f 3d 64 29 2a 61 29 2d 31 29 2b 62 7d 2c 65 61 73 65 4f 75 74 43 69 72 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 63 2a 4d 61 74 68 2e 73 71 72 74 28 31 2d 28 61 3d 61 2f 64 2d 31 29 2a 61 29 2b 62 7d 2c 65 61 73 65 49 6e 4f 75 74 43 69 72 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 62 2c 63 2c 64 29 7b 69 66 28 28 61 2f 3d 64 2f 32 29 3c 31 29 72 65 74 75 72 6e 20 2d 63 2f 32 2a 28 4d 61 74 68 2e 73 Data Ascii: (a-1))+b;return c/2(-Math.pow(2,-10--a)+2)+b},easeInCirc:function(e,a,b,c,d){return -c(Math.sqrt(1-(a/=d)a)-1)+b},easeOutCirc:function(e,a,b,c,d){return cMath.sqrt(1-(a=a/d-1)a)+b},easeInOutCirc:function(e,a,b,c,d){if((a/=d/2)<1)return -c/2(Math.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49745	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:36 UTC	633	OUT	GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:36 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13561672 Cache-Control: public, max-age=31536000 Content-MD5: up2irhKVlrgd4fr/sCzQ9w== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:36 GMT Etag: 0x8DA5944E2DB65A3 Last-Modified: Tue, 28 Jun 2022 20:29:22 GMT Server: ECAcc (lhc/7891) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e4cc39b6-101e-0042-5b76-7edf33000000 x-ms-version: 2009-09-19 Content-Length: 9285 Connection: close
2024-08-29 04:42:36 UTC	9285	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 28 78 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 22 29 2e 63 6f 6e 63 61 74 28 22 2f 2f 22 2c 78 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 78 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 65 29 7b 74 72 79 7b 76 61 72 20 72 3d 2f 66 75 6e 63 74 69 6f 6e 20 28 2e 7b 31 2c 7d 29 5c 28 2f 2c 6e 3d 72 2e 65 78 65 63 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 31 3f 6e 5b 31 5d 3a 22 22 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c Data Ascii: !function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}function n(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49746	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:36 UTC	418	OUT	GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:36 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13561787 Cache-Control: public, max-age=31536000 Content-MD5: A8dgUeRfi6/VknMbox6Cuw== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:36 GMT Etag: 0x8D876CB1F3EA0D9 Last-Modified: Thu, 22 Oct 2020 20:43:24 GMT Server: ECAcc (lhc/7916) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 6e90de5d-e01e-00c1-2e75-7ef560000000 x-ms-version: 2009-09-19 Content-Length: 11970 Connection: close
2024-08-29 04:42:36 UTC	11970	IN	Data Raw: 2f 2a 21 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 65 20 6c 69 Data Ascii: /*! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49747	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:37 UTC	408	OUT	GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:37 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13561673 Cache-Control: public, max-age=31536000 Content-MD5: up2irhKVlrgd4fr/sCzQ9w== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:37 GMT Etag: 0x8DA5944E2DB65A3 Last-Modified: Tue, 28 Jun 2022 20:29:22 GMT Server: ECAcc (lhc/7891) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e4cc39b6-101e-0042-5b76-7edf33000000 x-ms-version: 2009-09-19 Content-Length: 9285 Connection: close
2024-08-29 04:42:37 UTC	9285	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 28 78 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 22 29 2e 63 6f 6e 63 61 74 28 22 2f 2f 22 2c 78 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 78 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 65 29 7b 74 72 79 7b 76 61 72 20 72 3d 2f 66 75 6e 63 74 69 6f 6e 20 28 2e 7b 31 2c 7d 29 5c 28 2f 2c 6e 3d 72 2e 65 78 65 63 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 31 3f 6e 5b 31 5d 3a 22 22 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c Data Ascii: !function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}function n(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49750	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:37 UTC	651	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:37 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13647835 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Thu, 29 Aug 2024 04:42:37 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-08-29 04:42:37 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-29 04:42:37 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49748	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:37 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:37 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5906007 Cache-Control: public, max-age=31536000 Content-MD5: /tr7rG0APA0Nym9G/DMFwg== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:37 GMT Etag: 0x8DC90CF0C1378C3 Last-Modified: Thu, 20 Jun 2024 02:16:51 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 281a1f59-901e-00f2-0416-c4a977000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-08-29 04:42:37 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 04:42:37 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-08-29 04:42:37 UTC	16383	IN	Data Raw: 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e Data Ascii: =Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(536);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var n
2024-08-29 04:42:37 UTC	16383	IN	Data Raw: 31 7d 29 2c 65 7d 28 72 28 36 38 31 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c 65 Data Ascii: 1}),e}(r(681));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rule
2024-08-29 04:42:37 UTC	16383	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 Data Ascii: "!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary
2024-08-29 04:42:37 UTC	16383	IN	Data Raw: 67 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d Data Ascii: g;function N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-
2024-08-29 04:42:37 UTC	16383	IN	Data Raw: 76 61 72 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 Data Ascii: var r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(
2024-08-29 04:42:37 UTC	16383	IN	Data Raw: 29 7d 72 65 74 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b 22 Data Ascii: )}return new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s["
2024-08-29 04:42:37 UTC	6	IN	Data Raw: 65 78 70 6f 72 74 Data Ascii: export
2024-08-29 04:42:38 UTC	16383	IN	Data Raw: 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 6f 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 29 66 6f 72 28 3b 65 2d 2d 3b 29 74 3d 69 28 74 2c 75 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: s=function(t,e){if(a&&"string"==typeof t&&!o.prepareStackTrace)for(;e--;)t=i(t,u,"");return t}},function(t,e,r){"use strict";var n=r(536);t.exports=!n((function(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.prototype

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49751	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:38 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:38 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13647836 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Thu, 29 Aug 2024 04:42:38 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-08-29 04:42:38 UTC	15682	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-29 04:42:38 UTC	1492	IN	Data Raw: 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""33

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49752	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:39 UTC	622	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:39 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5901137 Cache-Control: public, max-age=31536000 Content-MD5: IMkyhRIRvkJUeG4IEtZVuA== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:39 GMT Etag: 0x8DC90CF0CCB4B72 Last-Modified: Thu, 20 Jun 2024 02:16:52 GMT Server: ECAcc (lhc/7936) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a4323966-a01e-0015-6822-c46d0e000000 x-ms-version: 2009-09-19 Content-Length: 15755 Connection: close
2024-08-29 04:42:39 UTC	15755	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49753	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:39 UTC	670	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:39 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13647786 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Thu, 29 Aug 2024 04:42:39 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7945) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8ea465c-601e-0025-11ad-7d4c1f000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-08-29 04:42:39 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49755	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:39 UTC	435	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:39 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5906009 Cache-Control: public, max-age=31536000 Content-MD5: /tr7rG0APA0Nym9G/DMFwg== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:39 GMT Etag: 0x8DC90CF0C1378C3 Last-Modified: Thu, 20 Jun 2024 02:16:51 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 281a1f59-901e-00f2-0416-c4a977000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-08-29 04:42:39 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 04:42:39 UTC	16383	IN	Data Raw: 69 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 Data Ascii: i=Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(536);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var
2024-08-29 04:42:39 UTC	16383	IN	Data Raw: 21 31 7d 29 2c 65 7d 28 72 28 36 38 31 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c Data Ascii: !1}),e}(r(681));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rul
2024-08-29 04:42:39 UTC	3	IN	Data Raw: 64 22 21 Data Ascii: d"!
2024-08-29 04:42:40 UTC	16383	IN	Data Raw: 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 22 3a Data Ascii: =typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary":
2024-08-29 04:42:40 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d 3d 33 Data Ascii: function N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-=3
2024-08-29 04:42:40 UTC	16383	IN	Data Raw: 72 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c Data Ascii: r r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(t,
2024-08-29 04:42:40 UTC	16383	IN	Data Raw: 72 65 74 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b 22 64 65 Data Ascii: return new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s["de
2024-08-29 04:42:40 UTC	16383	IN	Data Raw: 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 6f 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 29 66 6f 72 28 3b 65 2d 2d 3b 29 74 3d 69 28 74 2c 75 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f 74 6f Data Ascii: ports=function(t,e){if(a&&"string"==typeof t&&!o.prepareStackTrace)for(;e--;)t=i(t,u,"");return t}},function(t,e,r){"use strict";var n=r(536);t.exports=!n((function(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.proto
2024-08-29 04:42:40 UTC	16383	IN	Data Raw: 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 65 2e 70 6c 75 67 69 6e 7c 7c 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 26 26 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 26 26 28 65 2e 70 6c 75 67 69 6e 3d 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 29 3b 76 61 72 20 72 3d 6e 65 77 20 73 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 70 75 73 68 28 72 29 2c 72 7d 7d 2c 7b 6b 65 79 3a 22 77 61 72 6e 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 Data Ascii: rguments[1]!==undefined?arguments[1]:{};e.plugin\|\|this.lastPlugin&&this.lastPlugin.postcssPlugin&&(e.plugin=this.lastPlugin.postcssPlugin);var r=new s(t,e);return this.messages.push(r),r}},{key:"warnings",value:function(){return this.messages.filter((func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49754	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:39 UTC	664	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:39 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13647964 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Thu, 29 Aug 2024 04:42:39 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7941) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d63faa2-d01e-009e-5cad-7d1f4c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-08-29 04:42:39 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49758	13.107.246.42	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:41 UTC	703	OUT	GET /81d6b03a-0oaqvemumiggapupispz73q-euqm382uqpsqys7gkkc/logintenantbranding/0/illustration?ts=637640617494988131 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:42 UTC	765	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 04:42:42 GMT Content-Type: image/* Content-Length: 141233 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Sun, 08 Aug 2021 23:22:29 GMT ETag: 0x8D95AC3644BF561 x-ms-request-id: d9693128-601e-004e-19cd-f9543c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T044241Z-16579567576kv75wmks9m65qec00000001gg00000000byg8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-08-29 04:42:42 UTC	15619	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 0a 0b 0b 0e 0d 0e 1c 10 10 1c 3b 28 22 28 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b ff c2 00 11 08 02 a6 03 f9 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 00 01 02 03 05 06 07 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 00 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 bd 8c af db e3 15 88 a7 7c Data Ascii: JFIFHHC#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"\|
2024-08-29 04:42:42 UTC	16384	IN	Data Raw: b5 66 51 8c 34 ae 82 9b c5 5d ce 71 fa 59 2b 0b 7f f8 aa f1 74 ba ae 59 75 d3 c5 2c 60 97 61 73 eb ce 5e bc 8a 98 35 9f 50 5e 58 fc ed 0b 5b 28 9d 49 bb f9 f0 aa cf 8b da 85 c0 5e ba 97 c1 63 58 43 b3 6a a9 c6 aa 9d a7 4f e3 67 40 13 c6 3e 2d 76 09 7a f0 b5 f9 b5 3f 13 29 05 de 8a 78 41 f8 f2 df 5e fe cf 8e 47 2a c0 b3 95 96 64 3d dd 78 6f c2 ac 9b 5a 9a 8d f5 e4 0c ba 55 56 ca c3 e1 d0 e0 8c aa 3e 18 a9 ed da df 8a 17 b1 c2 d7 5f 5a 57 c9 57 8a ad d4 2d f5 55 85 91 4a e4 a1 4c 7c 8a 55 5e d3 5d 29 d4 f6 d1 8b 6b 71 6e 25 80 af 4e a1 ea e9 b6 32 55 52 ae 42 76 64 51 66 f1 d1 9e aa ea a8 04 ba d6 c8 1b e5 cb 4d c1 6a cc ad d5 91 b8 57 4e 4b 2d 98 97 72 e5 c7 ad 16 93 90 dd 16 5b 4d 23 8a 58 bf ee 5f 21 bb 12 d4 36 eb 50 19 92 39 23 b5 a5 f1 ac d5 19 2e b6 Data Ascii: fQ4]qY+tYu,`as^5P^X[(I^cXCjOg@>-vz?)xA^G*d=xoZUV>_ZWW-UJL\|U^])kqn%N2URBvdQfMjWNK-r[M#X_!6P9#.
2024-08-29 04:42:42 UTC	16384	IN	Data Raw: 82 c6 22 8a 1f f6 39 32 95 92 e8 6a 85 c8 e6 b6 28 b9 c6 8a 3a 50 e1 cd 97 b5 97 36 6a 3b 9b 86 8d 22 e0 b2 e2 84 56 da 28 4c b1 bb 85 93 2e 28 43 dc ba de 91 45 1e 8e 84 55 ef 71 7b 68 7b 6e 10 ca 8e a1 78 18 87 0a 12 11 43 5b 9f 1b 68 a1 23 39 d2 75 0e 35 22 f7 2d 88 fe 15 08 45 42 10 d7 82 e5 c5 6e 59 1a cb 10 e5 51 ec 7b 51 63 71 88 c4 2c a8 7c 9e a5 78 ec b1 09 4a 1b 2c e3 75 cd 45 c2 d9 77 e1 5d 56 de 28 5b 31 75 e0 5e 2b 32 9b 86 cb fd 16 38 52 a1 cb d8 a7 2d 8b 6b 97 b7 21 42 9f 50 e1 8b 7a 94 65 e0 5b 3f ff c4 00 25 11 00 02 02 01 04 02 02 03 01 01 00 00 00 00 00 00 00 01 10 11 20 02 12 21 31 30 41 03 40 51 61 71 13 50 ff da 00 08 01 02 01 01 3f 01 5a c4 ec 6c 5a 8b 87 a9 21 6b 4f e8 51 45 0f 41 b0 db 14 24 2e 4a 2e a1 a1 a2 86 84 8a 2a 2b 1d 51 Data Ascii: "92j(:P6j;"V(L.(CEUq{h{nxC[h#9u5"-EBnYQ{Qcq,\|xJ,uEw]V([1u^+28R-k!BPze[?% !10A@QaqP?ZlZ!kOQEA$.J.*+Q
2024-08-29 04:42:43 UTC	16384	IN	Data Raw: 07 08 53 62 bb cc 29 73 9d 64 59 70 4e 25 52 7e a8 ab a2 23 01 7b 55 2d 12 7a 7a 63 a3 bc a0 55 0e 74 2a b5 09 79 fe 17 b2 27 85 6d 47 08 c2 bc be 30 de 54 ea 11 3c 0e 81 8d 03 b4 4d d4 bf 61 b2 96 82 f0 9c c1 fb a7 e3 94 6e 8d 2d 40 9b 04 1e 3b 9a bf 20 d6 ef 0a 5f 51 d7 39 2e 50 aa a1 df 64 6a d3 71 fa 2f 6c 2a 45 96 65 41 ed ff 00 cf 4f aa c7 4c f5 2f fc 04 16 98 f0 a9 85 c7 41 d4 e9 30 4c a9 a3 f9 54 ee 9b b0 e5 76 bd 3b 4c fd 10 9c 22 fb 7b ba b5 af e1 5a 20 59 50 eb 29 23 b5 f8 29 aa a1 75 64 e6 5a 4a 0c 26 3c a9 0b 54 13 00 99 5d b6 f2 56 4b 9c 79 56 11 e5 4b c5 67 ca 1a 9a 73 1b 85 64 77 2b b4 4a 8e d5 f9 8d ed 07 ee aa a6 25 52 d1 ee d9 0a ba 63 a4 3b db ba 86 b4 2f cb 78 a7 ca 35 77 03 b8 55 6c ad 77 37 fc 2a 81 b8 4e d2 19 25 0d 5d 4b ce 02 6b Data Ascii: Sb)sdYpN%R~#{U-zzcUty'mG0T<Man-@; _Q9.Pdjq/lEeAOL/A0LTv;L"{Z YP)#)udZJ&<T]VKyVKgsdw+J%Rc;/x5wUlw7*N%]Kk
2024-08-29 04:42:43 UTC	16384	IN	Data Raw: c4 b6 c5 38 7e 0c b3 30 5a dd 6e 55 6f 1a 04 9d 80 5f 69 5f 5b 79 ee 01 bb 33 41 8b e7 34 65 7a 58 fd 10 5d bb b6 3b 81 31 a3 c9 c4 a2 2a 36 f5 dc 55 ab bc b0 65 7d 58 c5 2d 4d c9 2e e4 ba 9e 3f 3c cc a0 16 d4 5a ea 0a 25 c3 0d b6 99 5c 76 c0 e3 9b 03 84 3a e7 8e 0a fc fc 09 6e 76 b9 48 60 0c 4b e4 97 56 aa fa f7 09 22 f6 90 e9 d2 1b fa 98 36 a6 ad 5d c2 09 69 65 e3 71 3d 60 53 6e 6a 37 aa 62 43 03 34 5b 3e b1 82 ec 6b 23 0a ab 7a bc 92 db 94 d1 d4 0a 32 a5 c5 01 3f cd 2b 03 c4 26 0f 33 15 1b 95 e2 41 f4 62 c0 3f ca 98 27 0e ef 52 a5 07 5d 47 d9 5d d3 71 1c 8b 5d cc 1c e0 46 dd 40 5c f1 63 a8 01 78 25 09 16 66 8c 4e 27 cf 57 10 ad 12 a6 5f 9b 1c 82 92 35 2d a0 8c 97 33 1a 7d 08 b6 33 0d 26 06 f1 4e 07 b9 ba d7 a5 99 c0 0b 45 75 33 01 c8 c4 8d 5f 09 df f7 Data Ascii: 8~0ZnUo_i_[y3A4ezX];1*6Ue}X-M.?<Z%\v:nvH`KV"6]ieq=`Snj7bC4[>k#z2?+&3Ab?'R]G]q]F@\cx%fN'W_5-3}3&NEu3_
2024-08-29 04:42:43 UTC	16384	IN	Data Raw: 54 a7 94 80 58 02 6a 38 a9 54 46 d3 a7 88 d0 9b 63 a2 3d 4a ed b1 6a a0 79 da cc f2 9a e1 82 34 15 29 ce 49 05 94 6b f9 4d a5 d1 e3 13 90 8b 33 79 79 b8 71 23 54 c2 79 dc ba 9b 8c a5 e3 9b 89 d9 b9 da 4a b9 fd a5 3a c3 16 8c 1b 33 cb 3e f6 52 c6 60 44 b1 dc 1c 43 5e d3 18 9e 20 77 b4 b3 0f d8 48 6d b2 4b 2a ca 86 1c 79 65 06 c6 35 5c 10 6e 3c 84 13 b9 13 26 f7 2f c9 f8 a4 9b 4b 25 dd 01 b1 89 f7 0d b0 87 79 10 04 45 22 6d 3d 4a b8 34 46 c3 8e 44 f5 41 20 58 91 a4 f1 6c 99 e1 71 5a 78 c0 a6 67 9e 5c cc c0 08 da 65 06 df 7c 7c 38 2e cf de 1b f2 74 f1 0e 0f 82 3e c7 7d c1 90 bf dd 09 b8 de fc 4c 8f da 13 b0 cb 6c ca 80 4c 11 31 d0 e3 89 7d a6 5a 5f b4 70 89 2f 85 ce e7 4b 71 bd 14 0d 0c 04 30 29 b8 80 6a 52 87 64 76 f3 c6 2e 67 be c4 d9 36 4c 64 06 5b 47 72 Data Ascii: TXj8TFc=Jjy4)IkM3yyq#TyJ:3>R`DC^ wHmK*ye5\n<&/K%yE"m=J4FDA XlqZxg\e\|\|8.t>}LlL1}Z_p/Kq0)jRdv.g6Ld[Gr
2024-08-29 04:42:43 UTC	16384	IN	Data Raw: fc c4 1a 6d 8c 78 be 65 af 02 8d 71 04 6d ae a1 43 b8 00 d8 0e cc b1 d0 b0 c3 7b 89 83 f1 66 65 32 63 4a 70 5f 54 dc f1 13 4f 8d 53 f6 3f 10 53 7e 90 5f c4 b4 5d 18 ab ff 00 53 25 65 ff 00 1c 4a da 65 f6 89 76 f3 e6 d5 31 3c 2d 6f 98 b0 ba 09 83 f3 50 5e 67 76 af b8 d0 2f 65 bf 53 96 00 b5 c0 13 2c 97 6c 65 96 03 01 40 77 be a6 a5 b4 34 41 54 6c f1 2c 70 80 e5 16 25 77 e3 66 1e 9b 85 03 69 66 0b f0 77 06 05 16 2b 06 60 01 4b cd 6f d4 b0 a8 ab 06 d9 aa e2 b3 0a 23 04 bb 2a 94 b3 35 5a 8a fa 76 2c 0e df 2e fe a2 12 a6 07 c1 2b fa 66 7a 71 70 57 fd 20 43 22 46 4c 6e d2 6c f0 0d 28 01 c3 73 0a 1e 04 bb 74 9f 32 a9 57 85 ba 22 8d 74 66 12 33 f2 12 dd f7 57 f9 94 b6 a0 4b a5 dd 16 5e 70 e2 21 16 0b a0 0b 7b be 2a 12 45 d4 6c 37 55 ee 39 69 41 cb 42 3d 3a c5 44 Data Ascii: mxeqmC{fe2cJp_TOS?S~_]S%eJev1<-oP^gv/eS,le@w4ATl,p%wfifw+`Ko#5Zv,.+fzqpW C"FLnl(st2W"tf3WK^p!{El7U9iAB=:D
2024-08-29 04:42:43 UTC	16384	IN	Data Raw: c0 21 d1 54 52 75 ee 51 62 4c c7 1b 9f 36 62 09 c4 e0 a9 8c 7e 11 8f 3c f5 32 db f1 71 5a 15 6c 9f b9 14 2c 30 2c f4 eb 10 ae b2 bc 05 5e ca 8b 4c 91 46 b4 50 a3 be 96 61 16 e4 e1 a0 12 b9 6e 9e a5 46 9d 62 47 85 1c b1 31 b1 4b c3 39 74 84 10 76 71 09 29 a9 08 bc 53 8c 2b f5 2c 06 d4 8a 5a 0c 6e f6 c4 97 55 1c a3 ab 63 56 ba 21 4b 87 c5 fe 20 bf 37 25 7a d2 6e 5c 48 d8 af f1 ba f7 28 05 0a a0 a5 86 b1 d4 07 29 98 db 27 37 df f3 0c f0 76 97 98 a2 fa 32 c7 6c b0 90 1b 34 73 47 34 08 7c cb d5 0c 8d b6 67 9b 09 64 02 10 f9 88 98 c6 be 61 9b 0a e4 45 5b 6c d9 6d 92 c7 05 39 65 3d c2 41 16 aa ce ff 00 a9 59 64 09 74 c3 5d 63 19 9b e1 32 7e 0d 11 50 82 ac d9 e0 2e ef a6 62 71 b4 70 1c bd da be 20 65 d6 b1 cd b5 06 c0 a1 b1 74 25 1d 66 a1 8f 66 04 94 ee df c5 ca Data Ascii: !TRuQbL6b~<2qZl,0,^LFPanFbG1K9tvq)S+,ZnUcV!K 7%zn\H()'7v2l4sG4\|gdaE[lm9e=AYdt]c2~P.bqp et%ff
2024-08-29 04:42:43 UTC	10926	IN	Data Raw: 5f 0c 62 02 02 c0 d2 22 83 a7 2f dc 24 62 d4 d0 0f e4 b1 3e b0 ac 93 e2 19 88 f3 1b fe a2 f3 18 e6 2e 54 99 0d 0f 8f 72 fe ab f3 cb eb f9 8a 15 5b 89 50 3b ff 00 36 fe 71 4c d8 c0 86 1e d9 78 4e 9b b1 df 26 ff 00 12 f8 79 0e fa 81 79 0a f8 78 c4 4f 9a 72 ea bf d5 01 93 92 18 31 ff 00 92 9b 1b 24 5b ee ab 98 2a a4 28 ac df 85 43 01 76 f3 11 a8 6a 53 50 1d 9c 51 6b a9 80 68 5b 61 75 b8 77 3b bb d6 c8 b9 80 e0 45 a7 93 c7 9f d2 f0 a8 b0 7a 5e e2 f8 e5 81 70 3f e6 1e 1b 0d 21 f7 7b 8f ba 42 39 ff 00 75 2f 13 92 eb 75 01 11 6b 0a a7 29 e6 05 66 b0 2a 7b ba 8d 22 05 83 67 a8 1d d7 d6 76 89 e8 a8 d5 c5 57 20 16 03 fd fb c3 ca b8 67 53 ba 8b 5a 8b 6d 55 ee 63 59 42 3a 28 14 f2 63 f3 32 07 30 b2 22 f6 ca 2c 38 54 0b c2 7b 6b b8 b0 40 63 aa 07 b9 8b 8a 36 cb 7e e0 Data Ascii: _b"/$b>.Tr[P;6qLxN&yyxOr1$[(CvjSPQkh[auw;Ez^p?!{B9u/uk)f{"gvW gSZmUcYB:(c20",8T{k@c6~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49757	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:41 UTC	665	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:41 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13647684 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 04:42:41 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-08-29 04:42:41 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49760	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:42 UTC	437	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:42 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5901140 Cache-Control: public, max-age=31536000 Content-MD5: IMkyhRIRvkJUeG4IEtZVuA== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:42 GMT Etag: 0x8DC90CF0CCB4B72 Last-Modified: Thu, 20 Jun 2024 02:16:52 GMT Server: ECAcc (lhc/7936) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a4323966-a01e-0015-6822-c46d0e000000 x-ms-version: 2009-09-19 Content-Length: 15755 Connection: close
2024-08-29 04:42:42 UTC	15755	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49761	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:42 UTC	425	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:42 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13647789 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Thu, 29 Aug 2024 04:42:42 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7945) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8ea465c-601e-0025-11ad-7d4c1f000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-08-29 04:42:42 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49762	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:42 UTC	419	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:42 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13647967 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Thu, 29 Aug 2024 04:42:42 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7941) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d63faa2-d01e-009e-5cad-7d1f4c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-08-29 04:42:42 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49764	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:42 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:43 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13647686 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 04:42:43 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-08-29 04:42:43 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49765	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:43 UTC	665	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:43 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13561668 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 04:42:43 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-08-29 04:42:43 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49766	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:43 UTC	626	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:44 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5906012 Cache-Control: public, max-age=31536000 Content-MD5: FXzSZAYOwKp2jFj6XjvNRQ== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:43 GMT Etag: 0x8DC90CF0D8CB039 Last-Modified: Thu, 20 Jun 2024 02:16:53 GMT Server: ECAcc (lhc/7968) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 736bdcfa-101e-003a-3f16-c47522000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-08-29 04:42:44 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 04:42:44 UTC	16383	IN	Data Raw: 75 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 Data Ascii: u200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u2
2024-08-29 04:42:44 UTC	16383	IN	Data Raw: 32 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 Data Ascii: 290f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdc
2024-08-29 04:42:44 UTC	16383	IN	Data Raw: 73 74 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 33 29 2c 74 2e 43 63 3d 72 28 38 38 34 29 2c 74 2e 43 66 3d 72 28 31 33 38 30 29 2c 74 2e 50 3d 72 28 37 38 33 29 2c 74 2e 5a 3d 72 28 38 38 35 29 7d 2c 31 33 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d Data Ascii: strict";t.Any=r(883),t.Cc=r(884),t.Cf=r(1380),t.P=r(783),t.Z=r(885)},1380:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-
2024-08-29 04:42:44 UTC	4	IN	Data Raw: 65 4d 61 72 Data Ascii: eMar
2024-08-29 04:42:44 UTC	16383	IN	Data Raw: 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 6b 75 70 Data Ascii: ks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.markup
2024-08-29 04:42:44 UTC	16383	IN	Data Raw: 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 2c 2d Data Ascii: r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a",-
2024-08-29 04:42:44 UTC	15467	IN	Data Raw: 6c 61 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 69 Data Ascii: lance_pairs","emphasis","text_collapse"]}}}},1427:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49768	13.107.246.42	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:44 UTC	458	OUT	GET /81d6b03a-0oaqvemumiggapupispz73q-euqm382uqpsqys7gkkc/logintenantbranding/0/illustration?ts=637640617494988131 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:44 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 04:42:44 GMT Content-Type: image/* Content-Length: 141233 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Sun, 08 Aug 2021 23:22:29 GMT ETag: 0x8D95AC3644BF561 x-ms-request-id: d9693128-601e-004e-19cd-f9543c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T044244Z-16579567576pg4fvvmc18u0v4g00000001e000000000ck9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-08-29 04:42:44 UTC	15599	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 0a 0b 0b 0e 0d 0e 1c 10 10 1c 3b 28 22 28 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b ff c2 00 11 08 02 a6 03 f9 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 00 01 02 03 05 06 07 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 00 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 bd 8c af db e3 15 88 a7 7c Data Ascii: JFIFHHC#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"\|
2024-08-29 04:42:44 UTC	16384	IN	Data Raw: 46 4d f8 e8 20 6d a6 32 39 8b 47 44 46 69 75 fa 03 21 85 8a b5 66 51 8c 34 ae 82 9b c5 5d ce 71 fa 59 2b 0b 7f f8 aa f1 74 ba ae 59 75 d3 c5 2c 60 97 61 73 eb ce 5e bc 8a 98 35 9f 50 5e 58 fc ed 0b 5b 28 9d 49 bb f9 f0 aa cf 8b da 85 c0 5e ba 97 c1 63 58 43 b3 6a a9 c6 aa 9d a7 4f e3 67 40 13 c6 3e 2d 76 09 7a f0 b5 f9 b5 3f 13 29 05 de 8a 78 41 f8 f2 df 5e fe cf 8e 47 2a c0 b3 95 96 64 3d dd 78 6f c2 ac 9b 5a 9a 8d f5 e4 0c ba 55 56 ca c3 e1 d0 e0 8c aa 3e 18 a9 ed da df 8a 17 b1 c2 d7 5f 5a 57 c9 57 8a ad d4 2d f5 55 85 91 4a e4 a1 4c 7c 8a 55 5e d3 5d 29 d4 f6 d1 8b 6b 71 6e 25 80 af 4e a1 ea e9 b6 32 55 52 ae 42 76 64 51 66 f1 d1 9e aa ea a8 04 ba d6 c8 1b e5 cb 4d c1 6a cc ad d5 91 b8 57 4e 4b 2d 98 97 72 e5 c7 ad 16 93 90 dd 16 5b 4d 23 8a 58 bf ee Data Ascii: FM m29GDFiu!fQ4]qY+tYu,`as^5P^X[(I^cXCjOg@>-vz?)xA^G*d=xoZUV>_ZWW-UJL\|U^])kqn%N2URBvdQfMjWNK-r[M#X
2024-08-29 04:42:44 UTC	16384	IN	Data Raw: 0a 54 58 8b e4 5d 73 0d c3 8a 1a 19 50 b7 39 c7 63 13 8a 17 82 c6 22 8a 1f f6 39 32 95 92 e8 6a 85 c8 e6 b6 28 b9 c6 8a 3a 50 e1 cd 97 b5 97 36 6a 3b 9b 86 8d 22 e0 b2 e2 84 56 da 28 4c b1 bb 85 93 2e 28 43 dc ba de 91 45 1e 8e 84 55 ef 71 7b 68 7b 6e 10 ca 8e a1 78 18 87 0a 12 11 43 5b 9f 1b 68 a1 23 39 d2 75 0e 35 22 f7 2d 88 fe 15 08 45 42 10 d7 82 e5 c5 6e 59 1a cb 10 e5 51 ec 7b 51 63 71 88 c4 2c a8 7c 9e a5 78 ec b1 09 4a 1b 2c e3 75 cd 45 c2 d9 77 e1 5d 56 de 28 5b 31 75 e0 5e 2b 32 9b 86 cb fd 16 38 52 a1 cb d8 a7 2d 8b 6b 97 b7 21 42 9f 50 e1 8b 7a 94 65 e0 5b 3f ff c4 00 25 11 00 02 02 01 04 02 02 03 01 01 00 00 00 00 00 00 00 01 10 11 20 02 12 21 31 30 41 03 40 51 61 71 13 50 ff da 00 08 01 02 01 01 3f 01 5a c4 ec 6c 5a 8b 87 a9 21 6b 4f e8 51 Data Ascii: TX]sP9c"92j(:P6j;"V(L.(CEUq{h{nxC[h#9u5"-EBnYQ{Qcq,\|xJ,uEw]V([1u^+28R-k!BPze[?% !10A@QaqP?ZlZ!kOQ
2024-08-29 04:42:44 UTC	16384	IN	Data Raw: 97 b8 5b eb d2 97 63 f0 ca 12 ac b3 08 03 d2 66 df 0a b1 85 07 08 53 62 bb cc 29 73 9d 64 59 70 4e 25 52 7e a8 ab a2 23 01 7b 55 2d 12 7a 7a 63 a3 bc a0 55 0e 74 2a b5 09 79 fe 17 b2 27 85 6d 47 08 c2 bc be 30 de 54 ea 11 3c 0e 81 8d 03 b4 4d d4 bf 61 b2 96 82 f0 9c c1 fb a7 e3 94 6e 8d 2d 40 9b 04 1e 3b 9a bf 20 d6 ef 0a 5f 51 d7 39 2e 50 aa a1 df 64 6a d3 71 fa 2f 6c 2a 45 96 65 41 ed ff 00 cf 4f aa c7 4c f5 2f fc 04 16 98 f0 a9 85 c7 41 d4 e9 30 4c a9 a3 f9 54 ee 9b b0 e5 76 bd 3b 4c fd 10 9c 22 fb 7b ba b5 af e1 5a 20 59 50 eb 29 23 b5 f8 29 aa a1 75 64 e6 5a 4a 0c 26 3c a9 0b 54 13 00 99 5d b6 f2 56 4b 9c 79 56 11 e5 4b c5 67 ca 1a 9a 73 1b 85 64 77 2b b4 4a 8e d5 f9 8d ed 07 ee aa a6 25 52 d1 ee d9 0a ba 63 a4 3b db ba 86 b4 2f cb 78 a7 ca 35 77 03 Data Ascii: [cfSb)sdYpN%R~#{U-zzcUty'mG0T<Man-@; _Q9.Pdjq/lEeAOL/A0LTv;L"{Z YP)#)udZJ&<T]VKyVKgsdw+J%Rc;/x5w
2024-08-29 04:42:44 UTC	16384	IN	Data Raw: cf 7b e4 81 79 25 85 cb ac 9d 46 e8 e2 e1 c4 67 22 6c 2c e3 c4 b6 c5 38 7e 0c b3 30 5a dd 6e 55 6f 1a 04 9d 80 5f 69 5f 5b 79 ee 01 bb 33 41 8b e7 34 65 7a 58 fd 10 5d bb b6 3b 81 31 a3 c9 c4 a2 2a 36 f5 dc 55 ab bc b0 65 7d 58 c5 2d 4d c9 2e e4 ba 9e 3f 3c cc a0 16 d4 5a ea 0a 25 c3 0d b6 99 5c 76 c0 e3 9b 03 84 3a e7 8e 0a fc fc 09 6e 76 b9 48 60 0c 4b e4 97 56 aa fa f7 09 22 f6 90 e9 d2 1b fa 98 36 a6 ad 5d c2 09 69 65 e3 71 3d 60 53 6e 6a 37 aa 62 43 03 34 5b 3e b1 82 ec 6b 23 0a ab 7a bc 92 db 94 d1 d4 0a 32 a5 c5 01 3f cd 2b 03 c4 26 0f 33 15 1b 95 e2 41 f4 62 c0 3f ca 98 27 0e ef 52 a5 07 5d 47 d9 5d d3 71 1c 8b 5d cc 1c e0 46 dd 40 5c f1 63 a8 01 78 25 09 16 66 8c 4e 27 cf 57 10 ad 12 a6 5f 9b 1c 82 92 35 2d a0 8c 97 33 1a 7d 08 b6 33 0d 26 06 f1 Data Ascii: {y%Fg"l,8~0ZnUo_i_[y3A4ezX];1*6Ue}X-M.?<Z%\v:nvH`KV"6]ieq=`Snj7bC4[>k#z2?+&3Ab?'R]G]q]F@\cx%fN'W_5-3}3&
2024-08-29 04:42:44 UTC	16384	IN	Data Raw: b4 c9 91 d3 2b 2b 5a 7b 82 b2 d5 a6 0a 62 7a 12 c1 a6 92 12 54 a7 94 80 58 02 6a 38 a9 54 46 d3 a7 88 d0 9b 63 a2 3d 4a ed b1 6a a0 79 da cc f2 9a e1 82 34 15 29 ce 49 05 94 6b f9 4d a5 d1 e3 13 90 8b 33 79 79 b8 71 23 54 c2 79 dc ba 9b 8c a5 e3 9b 89 d9 b9 da 4a b9 fd a5 3a c3 16 8c 1b 33 cb 3e f6 52 c6 60 44 b1 dc 1c 43 5e d3 18 9e 20 77 b4 b3 0f d8 48 6d b2 4b 2a ca 86 1c 79 65 06 c6 35 5c 10 6e 3c 84 13 b9 13 26 f7 2f c9 f8 a4 9b 4b 25 dd 01 b1 89 f7 0d b0 87 79 10 04 45 22 6d 3d 4a b8 34 46 c3 8e 44 f5 41 20 58 91 a4 f1 6c 99 e1 71 5a 78 c0 a6 67 9e 5c cc c0 08 da 65 06 df 7c 7c 38 2e cf de 1b f2 74 f1 0e 0f 82 3e c7 7d c1 90 bf dd 09 b8 de fc 4c 8f da 13 b0 cb 6c ca 80 4c 11 31 d0 e3 89 7d a6 5a 5f b4 70 89 2f 85 ce e7 4b 71 bd 14 0d 0c 04 30 29 b8 Data Ascii: ++Z{bzTXj8TFc=Jjy4)IkM3yyq#TyJ:3>R`DC^ wHmK*ye5\n<&/K%yE"m=J4FDA XlqZxg\e\|\|8.t>}LlL1}Z_p/Kq0)
2024-08-29 04:42:44 UTC	16384	IN	Data Raw: 82 c0 5d 71 dc 50 70 d6 cb 2f 82 4d e6 b2 c1 a9 b1 ba bc 10 fc c4 1a 6d 8c 78 be 65 af 02 8d 71 04 6d ae a1 43 b8 00 d8 0e cc b1 d0 b0 c3 7b 89 83 f1 66 65 32 63 4a 70 5f 54 dc f1 13 4f 8d 53 f6 3f 10 53 7e 90 5f c4 b4 5d 18 ab ff 00 53 25 65 ff 00 1c 4a da 65 f6 89 76 f3 e6 d5 31 3c 2d 6f 98 b0 ba 09 83 f3 50 5e 67 76 af b8 d0 2f 65 bf 53 96 00 b5 c0 13 2c 97 6c 65 96 03 01 40 77 be a6 a5 b4 34 41 54 6c f1 2c 70 80 e5 16 25 77 e3 66 1e 9b 85 03 69 66 0b f0 77 06 05 16 2b 06 60 01 4b cd 6f d4 b0 a8 ab 06 d9 aa e2 b3 0a 23 04 bb 2a 94 b3 35 5a 8a fa 76 2c 0e df 2e fe a2 12 a6 07 c1 2b fa 66 7a 71 70 57 fd 20 43 22 46 4c 6e d2 6c f0 0d 28 01 c3 73 0a 1e 04 bb 74 9f 32 a9 57 85 ba 22 8d 74 66 12 33 f2 12 dd f7 57 f9 94 b6 a0 4b a5 dd 16 5e 70 e2 21 16 0b a0 Data Ascii: ]qPp/MmxeqmC{fe2cJp_TOS?S~_]S%eJev1<-oP^gv/eS,le@w4ATl,p%wfifw+`Ko#*5Zv,.+fzqpW C"FLnl(st2W"tf3WK^p!
2024-08-29 04:42:44 UTC	16384	IN	Data Raw: 26 e1 e9 a8 b0 2e f6 45 25 c6 3d 4a 16 e9 5c 53 41 de 0b 7d c0 21 d1 54 52 75 ee 51 62 4c c7 1b 9f 36 62 09 c4 e0 a9 8c 7e 11 8f 3c f5 32 db f1 71 5a 15 6c 9f b9 14 2c 30 2c f4 eb 10 ae b2 bc 05 5e ca 8b 4c 91 46 b4 50 a3 be 96 61 16 e4 e1 a0 12 b9 6e 9e a5 46 9d 62 47 85 1c b1 31 b1 4b c3 39 74 84 10 76 71 09 29 a9 08 bc 53 8c 2b f5 2c 06 d4 8a 5a 0c 6e f6 c4 97 55 1c a3 ab 63 56 ba 21 4b 87 c5 fe 20 bf 37 25 7a d2 6e 5c 48 d8 af f1 ba f7 28 05 0a a0 a5 86 b1 d4 07 29 98 db 27 37 df f3 0c f0 76 97 98 a2 fa 32 c7 6c b0 90 1b 34 73 47 34 08 7c cb d5 0c 8d b6 67 9b 09 64 02 10 f9 88 98 c6 be 61 9b 0a e4 45 5b 6c d9 6d 92 c7 05 39 65 3d c2 41 16 aa ce ff 00 a9 59 64 09 74 c3 5d 63 19 9b e1 32 7e 0d 11 50 82 ac d9 e0 2e ef a6 62 71 b4 70 1c bd da be 20 65 d6 Data Ascii: &.E%=J\SA}!TRuQbL6b~<2qZl,0,^LFPanFbG1K9tvq)S+,ZnUcV!K 7%zn\H()'7v2l4sG4\|gdaE[lm9e=AYdt]c2~P.bqp e
2024-08-29 04:42:44 UTC	10946	IN	Data Raw: 40 a8 f1 ff 00 22 27 67 50 42 c2 1a 89 4a c7 8c fd c4 88 28 5f 0c 62 02 02 c0 d2 22 83 a7 2f dc 24 62 d4 d0 0f e4 b1 3e b0 ac 93 e2 19 88 f3 1b fe a2 f3 18 e6 2e 54 99 0d 0f 8f 72 fe ab f3 cb eb f9 8a 15 5b 89 50 3b ff 00 36 fe 71 4c d8 c0 86 1e d9 78 4e 9b b1 df 26 ff 00 12 f8 79 0e fa 81 79 0a f8 78 c4 4f 9a 72 ea bf d5 01 93 92 18 31 ff 00 92 9b 1b 24 5b ee ab 98 2a a4 28 ac df 85 43 01 76 f3 11 a8 6a 53 50 1d 9c 51 6b a9 80 68 5b 61 75 b8 77 3b bb d6 c8 b9 80 e0 45 a7 93 c7 9f d2 f0 a8 b0 7a 5e e2 f8 e5 81 70 3f e6 1e 1b 0d 21 f7 7b 8f ba 42 39 ff 00 75 2f 13 92 eb 75 01 11 6b 0a a7 29 e6 05 66 b0 2a 7b ba 8d 22 05 83 67 a8 1d d7 d6 76 89 e8 a8 d5 c5 57 20 16 03 fd fb c3 ca b8 67 53 ba 8b 5a 8b 6d 55 ee 63 59 42 3a 28 14 f2 63 f3 32 07 30 b2 22 f6 ca Data Ascii: @"'gPBJ(_b"/$b>.Tr[P;6qLxN&yyxOr1$[(CvjSPQkh[auw;Ez^p?!{B9u/uk)f{"gvW gSZmUcYB:(c20"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49771	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:45 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:45 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13561670 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 04:42:45 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-08-29 04:42:45 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49770	152.199.21.175	443	2360	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 04:42:45 UTC	441	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 04:42:45 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5906014 Cache-Control: public, max-age=31536000 Content-MD5: FXzSZAYOwKp2jFj6XjvNRQ== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 04:42:45 GMT Etag: 0x8DC90CF0D8CB039 Last-Modified: Thu, 20 Jun 2024 02:16:53 GMT Server: ECAcc (lhc/7968) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 736bdcfa-101e-003a-3f16-c47522000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-08-29 04:42:45 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 04:42:45 UTC	16383	IN	Data Raw: 75 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 Data Ascii: u200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u2
2024-08-29 04:42:45 UTC	2	IN	Data Raw: 32 39 Data Ascii: 29
2024-08-29 04:42:45 UTC	16383	IN	Data Raw: 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 61 22 Data Ascii: 0f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdca"
2024-08-29 04:42:45 UTC	16383	IN	Data Raw: 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 33 29 2c 74 2e 43 63 3d 72 28 38 38 34 29 2c 74 2e 43 66 3d 72 28 31 33 38 30 29 2c 74 2e 50 3d 72 28 37 38 33 29 2c 74 2e 5a 3d 72 28 38 38 35 29 7d 2c 31 33 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c 75 Data Ascii: rict";t.Any=r(883),t.Cc=r(884),t.Cf=r(1380),t.P=r(783),t.Z=r(885)},1380:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\u
2024-08-29 04:42:45 UTC	16383	IN	Data Raw: 61 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 6b Data Ascii: arks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.mark
2024-08-29 04:42:45 UTC	16383	IN	Data Raw: 72 6e 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 Data Ascii: rn r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a"
2024-08-29 04:42:45 UTC	15469	IN	Data Raw: 62 61 6c 61 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d Data Ascii: balance_pairs","emphasis","text_collapse"]}}}},1427:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag=

Target ID:	0
Start time:	00:42:12
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	00:42:17
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2596 --field-trial-handle=1680,i,1339453569381203706,9538536799603884749,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	00:42:20
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://australianfoodandfibre.servicedeskplus.net.au/app/itdesk/ui/requests/867000003351579/details"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://australianfoodandfibre.servicedeskplus.net.au/app/itdesk/ui/requests/867000003351579/details

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Windows Analysis Report
https://australianfoodandfibre.servicedeskplus.net.au/app/itdesk/ui/requests/867000003351579/details