Edit tour

Windows Analysis Report
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT1iOTZlMDJlZi1iNjQ3LTQ4ZjAtYWFmZC01YjQ4MDU2YTMxM2Umcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l

Overview

General Information

Sample URL:	https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT1iOTZlMDJlZi1iNjQ3LTQ4ZjAtYWFmZC01YjQ4MDU2YTMxM2Umcz0wMDAwM
Analysis ID:	1501337
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4080 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1804 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2312,i,17080303226475153156,8320770004345637706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6512 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT1iOTZlMDJlZi1iNjQ3LTQ4ZjAtYWFmZC01YjQ4MDU2YTMxM2Umcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DCIGXj7mln1pGG0x4fe6sLrbtVMiGvNwpAD4Jm-lqXcHXXkVIHueTN537rYLyP4bWcDqXtEsbqjDW5PBWzQ4rrVOFJL6N0jmu7Lc8SjPlxobKJW71GQTccjrAvJnuDxTydUHlzzV9rPUd40dj4h-UXcqFoU6qjvwG0t7QpJd7tPwqKG1xhHVEa0_352P5EYPp&response_mode=form_post&nonce=638605479439008456.ZTcxZTkzN2EtYzkwMS00YzIxLTkwMmQtNWUxNzY5NjhjNWQ0YzJmYmFhMTctYjNiZC00NjQ3LTlmYzctZGE5ZWJkYTRkYThk&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=decb0051-cb8e-476a-8a07-6ce0e7c3fbd0&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DCIGXj7mln1pGG0x4fe6sLrbtVMiGvNwpAD4Jm-lqXcHXXkVIHueTN537rYLyP4bWcDqXtEsbqjDW5PBWzQ4rrVOFJL6N0jmu7Lc8SjPlxobKJW71GQTccjrAvJnuDxTydUHlzzV9rPUd40dj4h-UXcqFoU6qjvwG0t7QpJd7tPwqKG1xhHVEa0_352P5EYPp&response_mode=form_post&nonce=638605479439008456.ZTcxZTkzN2EtYzkwMS00YzIxLTkwMmQtNWUxNzY5NjhjNWQ0YzJmYmFhMTctYjNiZC00NjQ3LTlmYzctZGE5ZWJkYTRkYThk&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=decb0051-cb8e-476a-8a07-6ce0e7c3fbd0&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DCIGXj7mln1pGG0x4fe6sLrbtVMiGvNwpAD4Jm-lqXcHXXkVIHueTN537rYLyP4bWcDqXtEsbqjDW5PBWzQ4rrVOFJL6N0jmu7Lc8SjPlxobKJW71GQTccjrAvJnuDxTydUHlzzV9rPUd40dj4h-UXcqFoU6qjvwG0t7QpJd7tPwqKG1xhHVEa0_352P5EYPp&response_mode=form_post&nonce=638605479439008456.ZTcxZTkzN2EtYzkwMS00YzIxLTkwMmQtNWUxNzY5NjhjNWQ0YzJmYmFhMTctYjNiZC00NjQ3LTlmYzctZGE5ZWJkYTRkYThk&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=decb0051-cb8e-476a-8a07-6ce0e7c3fbd0&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0

HTTP Parser: Base64 decoded: e71e937a-c901-4c21-902d-5e176968c5d4c2fbaa17-b3bd-4647-9fc7-da9ebda4da8d

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DCIGXj7mln1pGG0x4fe6sLrbtVMiGvNwpAD4Jm-lqXcHXXkVIHueTN537rYLyP4bWcDqXtEsbqjDW5PBWzQ4rrVOFJL6N0jmu7Lc8SjPlxobKJW71GQTccjrAvJnuDxTydUHlzzV9rPUd40dj4h-UXcqFoU6qjvwG0t7QpJd7tPwqKG1xhHVEa0_352P5EYPp&response_mode=form_post&nonce=638605479439008456.ZTcxZTkzN2EtYzkwMS00YzIxLTkwMmQtNWUxNzY5NjhjNWQ0YzJmYmFhMTctYjNiZC00NjQ3LTlmYzctZGE5ZWJkYTRkYThk&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=decb0051-cb8e-476a-8a07-6ce0e7c3fbd0&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DCIGXj7mln1pGG0x4fe6sLrbtVMiGvNwpAD4Jm-lqXcHXXkVIHueTN537rYLyP4bWcDqXtEsbqjDW5PBWzQ4rrVOFJL6N0jmu7Lc8SjPlxobKJW71GQTccjrAvJnuDxTydUHlzzV9rPUd40dj4h-UXcqFoU6qjvwG0t7QpJd7tPwqKG1xhHVEa0_352P5EYPp&response_mode=form_post&nonce=638605479439008456.ZTcxZTkzN2EtYzkwMS00YzIxLTkwMmQtNWUxNzY5NjhjNWQ0YzJmYmFhMTctYjNiZC00NjQ3LTlmYzctZGE5ZWJkYTRkYThk&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=decb0051-cb8e-476a-8a07-6ce0e7c3fbd0&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DCIGXj7mln1pGG0x4fe6sLrbtVMiGvNwpAD4Jm-lqXcHXXkVIHueTN537rYLyP4bWcDqXtEsbqjDW5PBWzQ4rrVOFJL6N0jmu7Lc8SjPlxobKJW71GQTccjrAvJnuDxTydUHlzzV9rPUd40dj4h-UXcqFoU6qjvwG0t7QpJd7tPwqKG1xhHVEa0_352P5EYPp&response_mode=form_post&nonce=638605479439008456.ZTcxZTkzN2EtYzkwMS00YzIxLTkwMmQtNWUxNzY5NjhjNWQ0YzJmYmFhMTctYjNiZC00NjQ3LTlmYzctZGE5ZWJkYTRkYThk&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=decb0051-cb8e-476a-8a07-6ce0e7c3fbd0&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: No favicon
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dABA2E8BF82A93191%26opidt%3d1724951162%26uaid%3ddecb0051cb8e476a8a076ce0e7c3fbd0%26contextid%3dC562B822C8B7AEFC%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=decb0051cb8e476a8a076ce0e7c3fbd0&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dABA2E8BF82A93191%26opidt%3d1724951162%26uaid%3ddecb0051cb8e476a8a076ce0e7c3fbd0%26contextid%3dC562B822C8B7AEFC%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=decb0051cb8e476a8a076ce0e7c3fbd0&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dABA2E8BF82A93191%26opidt%3d1724951162%26uaid%3ddecb0051cb8e476a8a076ce0e7c3fbd0%26contextid%3dC562B822C8B7AEFC%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=decb0051cb8e476a8a076ce0e7c3fbd0&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DCIGXj7mln1pGG0x4fe6sLrbtVMiGvNwpAD4Jm-lqXcHXXkVIHueTN537rYLyP4bWcDqXtEsbqjDW5PBWzQ4rrVOFJL6N0jmu7Lc8SjPlxobKJW71GQTccjrAvJnuDxTydUHlzzV9rPUd40dj4h-UXcqFoU6qjvwG0t7QpJd7tPwqKG1xhHVEa0_352P5EYPp&response_mode=form_post&nonce=638605479439008456.ZTcxZTkzN2EtYzkwMS00YzIxLTkwMmQtNWUxNzY5NjhjNWQ0YzJmYmFhMTctYjNiZC00NjQ3LTlmYzctZGE5ZWJkYTRkYThk&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=decb0051-cb8e-476a-8a07-6ce0e7c3fbd0&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DCIGXj7mln1pGG0x4fe6sLrbtVMiGvNwpAD4Jm-lqXcHXXkVIHueTN537rYLyP4bWcDqXtEsbqjDW5PBWzQ4rrVOFJL6N0jmu7Lc8SjPlxobKJW71GQTccjrAvJnuDxTydUHlzzV9rPUd40dj4h-UXcqFoU6qjvwG0t7QpJd7tPwqKG1xhHVEa0_352P5EYPp&response_mode=form_post&nonce=638605479439008456.ZTcxZTkzN2EtYzkwMS00YzIxLTkwMmQtNWUxNzY5NjhjNWQ0YzJmYmFhMTctYjNiZC00NjQ3LTlmYzctZGE5ZWJkYTRkYThk&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=decb0051-cb8e-476a-8a07-6ce0e7c3fbd0&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DCIGXj7mln1pGG0x4fe6sLrbtVMiGvNwpAD4Jm-lqXcHXXkVIHueTN537rYLyP4bWcDqXtEsbqjDW5PBWzQ4rrVOFJL6N0jmu7Lc8SjPlxobKJW71GQTccjrAvJnuDxTydUHlzzV9rPUd40dj4h-UXcqFoU6qjvwG0t7QpJd7tPwqKG1xhHVEa0_352P5EYPp&response_mode=form_post&nonce=638605479439008456.ZTcxZTkzN2EtYzkwMS00YzIxLTkwMmQtNWUxNzY5NjhjNWQ0YzJmYmFhMTctYjNiZC00NjQ3LTlmYzctZGE5ZWJkYTRkYThk&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=decb0051-cb8e-476a-8a07-6ce0e7c3fbd0&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DCIGXj7mln1pGG0x4fe6sLrbtVMiGvNwpAD4Jm-lqXcHXXkVIHueTN537rYLyP4bWcDqXtEsbqjDW5PBWzQ4rrVOFJL6N0jmu7Lc8SjPlxobKJW71GQTccjrAvJnuDxTydUHlzzV9rPUd40dj4h-UXcqFoU6qjvwG0t7QpJd7tPwqKG1xhHVEa0_352P5EYPp&response_mode=form_post&nonce=638605479439008456.ZTcxZTkzN2EtYzkwMS00YzIxLTkwMmQtNWUxNzY5NjhjNWQ0YzJmYmFhMTctYjNiZC00NjQ3LTlmYzctZGE5ZWJkYTRkYThk&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=decb0051-cb8e-476a-8a07-6ce0e7c3fbd0&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DCIGXj7mln1pGG0x4fe6sLrbtVMiGvNwpAD4Jm-lqXcHXXkVIHueTN537rYLyP4bWcDqXtEsbqjDW5PBWzQ4rrVOFJL6N0jmu7Lc8SjPlxobKJW71GQTccjrAvJnuDxTydUHlzzV9rPUd40dj4h-UXcqFoU6qjvwG0t7QpJd7tPwqKG1xhHVEa0_352P5EYPp&response_mode=form_post&nonce=638605479439008456.ZTcxZTkzN2EtYzkwMS00YzIxLTkwMmQtNWUxNzY5NjhjNWQ0YzJmYmFhMTctYjNiZC00NjQ3LTlmYzctZGE5ZWJkYTRkYThk&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=decb0051-cb8e-476a-8a07-6ce0e7c3fbd0&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DCIGXj7mln1pGG0x4fe6sLrbtVMiGvNwpAD4Jm-lqXcHXXkVIHueTN537rYLyP4bWcDqXtEsbqjDW5PBWzQ4rrVOFJL6N0jmu7Lc8SjPlxobKJW71GQTccjrAvJnuDxTydUHlzzV9rPUd40dj4h-UXcqFoU6qjvwG0t7QpJd7tPwqKG1xhHVEa0_352P5EYPp&response_mode=form_post&nonce=638605479439008456.ZTcxZTkzN2EtYzkwMS00YzIxLTkwMmQtNWUxNzY5NjhjNWQ0YzJmYmFhMTctYjNiZC00NjQ3LTlmYzctZGE5ZWJkYTRkYThk&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=decb0051-cb8e-476a-8a07-6ce0e7c3fbd0&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.4:50613 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:50428 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: nam.safelink.emails.azure.net to https://admin.microsoft.com/adminportal/home?#/subscriptions

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT1iOTZlMDJlZi1iNjQ3LTQ4ZjAtYWFmZC01YjQ4MDU2YTMxM2Umcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l HTTP/1.1Host: nam.safelink.emails.azure.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=fcd3f910-6628-11ef-966a-31fa2073d147 HTTP/1.1Host: stk.hsprotect.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://msft.hsprotect.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://msft.hsprotect.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=fcd3f910-6628-11ef-966a-31fa2073d147 HTTP/1.1Host: stk.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: nam.safelink.emails.azure.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: signup.live.com
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: fpt.live.com
Source: global traffic	DNS traffic detected: DNS query: msft.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: client.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: stk.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: collector-pxzc5j78di.hsprotect.net

Source: unknown

HTTP traffic detected: POST /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveContent-Length: 612sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: */*Origin: https://msft.hsprotect.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://msft.hsprotect.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_101.2.dr, chromecache_110.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_112.2.dr, chromecache_103.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_109.2.dr, chromecache_100.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_109.2.dr, chromecache_100.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_108.2.dr	String found in binary or memory: https://client.hsprotect.net/PXzC5j78di/main.min.js
Source: chromecache_88.2.dr	String found in binary or memory: https://fpt.live.com/
Source: chromecache_109.2.dr, chromecache_100.2.dr, chromecache_112.2.dr, chromecache_103.2.dr, chromecache_92.2.dr, chromecache_85.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_101.2.dr, chromecache_110.2.dr	String found in binary or memory: https://localcdn.centro-dev.com:5555/inline.bundle.js.map
Source: chromecache_75.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_75.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50656
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50651
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50654
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50653
Source: unknown	Network traffic detected: HTTP traffic on port 50649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50623
Source: unknown	Network traffic detected: HTTP traffic on port 50635 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50622
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50625
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50624
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50627
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50628
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50646 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50634
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50633
Source: unknown	Network traffic detected: HTTP traffic on port 50634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50635
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 50653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50644
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50647
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50646
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50649
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50648
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50641
Source: unknown	Network traffic detected: HTTP traffic on port 50633 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50642
Source: unknown	Network traffic detected: HTTP traffic on port 50623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@21/70@38/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2312,i,17080303226475153156,8320770004345637706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT1iOTZlMDJlZi1iNjQ3LTQ4ZjAtYWFmZC01YjQ4MDU2YTMxM2Umcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2312,i,17080303226475153156,8320770004345637706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT1iOTZlMDJlZi1iNjQ3LTQ4ZjAtYWFmZC01YjQ4MDU2YTMxM2Umcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://login.microsoftonline.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	URL Reputation	safe
http://knockoutjs.com/	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	0%	URL Reputation	safe
http://fb.me/use-check-prop-types	0%	URL Reputation	safe
http://feross.org	0%	URL Reputation	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js	0%	Avira URL Cloud	safe
https://login.windows-ppe.net	0%	Avira URL Cloud	safe
https://client.hsprotect.net/PXzC5j78di/main.min.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	0%	Avira URL Cloud	safe
https://fpt.live.com/	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe
https://github.com/douglascrockford/JSON-js	0%	Avira URL Cloud	safe
https://collector-pxzc5j78di.hsprotect.net/api/v2/msft	0%	Avira URL Cloud	safe
https://localcdn.centro-dev.com:5555/inline.bundle.js.map	0%	Avira URL Cloud	safe
https://stk.hsprotect.net/ns?c=fcd3f910-6628-11ef-966a-31fa2073d147	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
inbound-weighted.protechts.net	35.190.10.96	true	false	unknown
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.185.228	true	false	unknown
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	unknown
stk.hsprotect.net	34.107.199.61	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
nam.safelink.emails.azure.net	unknown	unknown	false	unknown
signup.live.com	unknown	unknown	false	unknown
client.hsprotect.net	unknown	unknown	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
msft.hsprotect.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
collector-pxzc5j78di.hsprotect.net	unknown	unknown	false	unknown
logincdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
fpt.live.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js	false	Avira URL Cloud: safe	unknown
https://collector-pxzc5j78di.hsprotect.net/api/v2/msft	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	false	URL Reputation: safe	unknown
https://stk.hsprotect.net/ns?c=fcd3f910-6628-11ef-966a-31fa2073d147	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://login.microsoftonline.com	chromecache_75.2.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_109.2.dr, chromecache_100.2.dr	false	URL Reputation: safe	unknown
http://knockoutjs.com/	chromecache_109.2.dr, chromecache_100.2.dr	false	URL Reputation: safe	unknown
https://client.hsprotect.net/PXzC5j78di/main.min.js	chromecache_108.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_109.2.dr, chromecache_100.2.dr, chromecache_112.2.dr, chromecache_103.2.dr, chromecache_92.2.dr, chromecache_85.2.dr	false	Avira URL Cloud: safe	unknown
https://login.windows-ppe.net	chromecache_75.2.dr	false	Avira URL Cloud: safe	unknown
https://fpt.live.com/	chromecache_88.2.dr	false	Avira URL Cloud: safe	unknown
http://fb.me/use-check-prop-types	chromecache_101.2.dr, chromecache_110.2.dr	false	URL Reputation: safe	unknown
http://feross.org	chromecache_112.2.dr, chromecache_103.2.dr	false	URL Reputation: safe	unknown
https://localcdn.centro-dev.com:5555/inline.bundle.js.map	chromecache_101.2.dr, chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
35.190.10.96	inbound-weighted.protechts.net	United States	15169	GOOGLEUS	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
34.107.199.61	stk.hsprotect.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1501337
Start date and time:	2024-08-29 19:04:47 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT1iOTZlMDJlZi1iNjQ3LTQ4ZjAtYWFmZC01YjQ4MDU2YTMxM2Umcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@21/70@38/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZLNS9twGMeTVlstTosbw6OwHcZc21_avLQyD7UvaWqN6Zo2TS-lJqlJmremv9aav2AvMDx7Gh49bOJpuMMGuykDzx6GjIHDwRg7CYOxFi877gvPly98n8vD8wkFqSgZjUfBQz8WxZbvgxuRkbFHQLuNRSRlnP6ROx8Kl5HTzy9Pdfp50Li4_Pj7bA-dbhraQIlKtnmA3lMhdHrLsVhLNjUramqSa_fsNhy3MaNlyZq19RZFz1D0G4ru-SYVK1KtHPh6ZCJJAgKnUngiBUASJ8hog5eGDb7jsfEcFL3O9noFANFjhiV-lM0yZIXqkPVEgtVVnRXKo65oimZeXeclKOqs1sgAwOrlRIk3TNGTYIPOEQ2h2BH5J6NRO-e-uY10H6rxsdmu5im_fNNt2zWbjt2De_5LdMNRLEbO2JalSDA6XlMsqEktqNkW59qO4kJN6a1kGLquU6ZhYQ5NgyHeVsheyd2EtXWNHrDbTjqLF82I0a1LhXq9U2MKfYVniQTliqUdDt8UpGy3DnO9za6eFQhuVfDKuOvWNvLFEskC3exTJSlZ0TljaG-uFQUKo8u8JOluelC0-tkhvyNXC4bn1VIuV5VxIOu4GqnWpW7erpJdfbBNA0iVnaJMQW67u0ZjQ7VQy7VAM0HEOSIncs6RPzD6jmlbJ_7Z0VGWJi86rt3WDOVsAr2auDsVDAcWfIvIgzvAvzw1FQojC8gicj2B7k-OeHhf_7r7-PUf9sUUvv_94gtyMhlrtYR1PcPhxYTal9MlNZ-Cq1uZnCJQdGFJLuBLpWQ6RsVWAcmsUMvYbgDdDQROAtNMtsnmeJyK_wygT4PI8fT_0HQ4g57P3A6F-lrTsKWWofTmb6j6cAu5nn13_ObVp2dHPwpXc488plAxmUx_wxBXYzXDSZNuPRUjsApmYhhj14i8pbCi66hGcuUwjFyEkb81&estsfed=1&uaid=decb0051cb8e476a8a076ce0e7c3fbd0&signup=1&lw=1&fl=easi2&fci=00000006-0000-0ff1-ce00-000000000000&mkt=en-US

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.35, 74.125.71.84, 142.250.186.174, 34.104.35.123, 13.107.6.156, 23.38.98.104, 23.38.98.96, 20.190.159.23, 20.190.159.73, 20.190.159.0, 40.126.31.69, 40.126.31.71, 20.190.159.68, 40.126.31.73, 40.126.31.67, 2.16.164.19, 2.16.164.49, 20.190.159.64, 20.190.159.4, 20.190.159.75, 20.190.159.71, 142.250.185.138, 142.250.185.202, 142.250.184.234, 142.250.181.234, 142.250.185.74, 142.250.186.170, 142.250.186.138, 142.250.185.106, 142.250.184.202, 142.250.185.170, 172.217.23.106, 216.58.206.42, 142.250.186.74, 172.217.16.138, 142.250.186.106, 142.250.185.234, 40.68.123.157, 199.232.214.172, 192.229.221.95, 52.165.164.15, 20.242.39.171, 20.3.187.198, 40.127.169.103, 40.126.29.8, 20.190.157.9, 40.126.29.13, 40.126.29.11, 40.126.29.12, 40.126.29.14, 40.126.29.10, 20.190.157.11, 13.107.42.22, 52.167.30.171, 2.23.209.55, 2.23.209.54, 142.250.186.42, 172.217.16.202, 216.58.206.74, 172.217.18.10, 13.89.179.13, 20.42.65.85, 142.250.184.227
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT1iOTZlMDJlZi1iNjQ3LTQ4ZjAtYWFmZC01YjQ4MDU2YTMxM2Umcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l

Input	Output
URL: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DCIGXj7mln1pGG0x4fe6sLrbtVMiGvNwpAD4Jm-lqXcHXXkVIHu Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "prominent_button_name":"Next", "text_input_field_labels":["Email, phone, or Skype", "No account? Create one! Can't access your account?"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dABA2E8BF82A93191%26opidt%3d1724951162%26uaid%3ddecb0051cb8e476a8a076ce0e7c3fbd0%2 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "prominent_button_name":"Next", "text_input_field_labels":["Create account", "Get a new email address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DCIGXj7mln1pGG0x4fe6sLrbtVMiGvNwpAD4Jm-lqXcHXXkVIHu Model: jbxai	{ "phishing_score":1, "brand_name":"Microsoft", "reasons":"The domain name is login.microsoftonline.com, which is a subdomain of microsoftonline.com, and the design is consistent with Microsoft's branding. The presence of common Microsoft services features such as sign-in, account creation, and account access support also suggests that the webpage is legitimate."}

URL: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dABA2E8BF82A93191%26opidt%3d1724951162%26uaid%3ddecb0051cb8e476a8a076ce0e7c3fbd0%2 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "prominent_button_name":"Next", "text_input_field_labels":["someone@example.com", "Get a new email address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dABA2E8BF82A93191%26opidt%3d1724951162%26uaid%3ddecb0051cb8e476a8a076ce0e7c3fbd0%2 Model: jbxai	{ "phishing_score":1, "brand_name":"Microsoft", "reasons":"The domain and brand association are consistent, the design is typical for a sign-up page, and the top level domain is a standard.com. The presence of the Microsoft logo and the domain'signup.live.com' confirms that this is an official Microsoft service."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	449540
Entropy (8bit):	5.448887818381794
Encrypted:	false
SSDEEP:	6144:U7lu66UglOK2d/VkpJYBsLLhkSB29OWtUJGcEHKE0H3NX44n:U7tjVkpq+LlkBUJEQ
MD5:	D8FF67E1334DAD67202B05BA32DEAD18
SHA1:	7AAA398BA53310D793E4BB28E6D5F118EF342254
SHA-256:	4DC06BDE66FF69C3CD7A67B5745C329571334A98ED7AF7C356241CFED32FA6D2
SHA-512:	67A56439845499BD65D1EDED96298FC6C3EEE99022861EC16AFD9E5D2BC7F94239CA0DD08C54A0C65B057625E59BE6362CBF74D7A97FCBEFE0F9AC88B2FE713E
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12836)
Category:	dropped
Size (bytes):	433324
Entropy (8bit):	5.340091614264426
Encrypted:	false
SSDEEP:	3072:t8S8CMMPE4XY9EmY6j8y9EkZdlDvH+qrtCsFQZ4yP6qdWsyBhwmoQMtU0ed+v/94:XE4KYk8orkvQXomoQ+U09/eVwMIeca
MD5:	F8448F28BA6D7FF9F90219E221984F89
SHA1:	52926E3F379DE8BBE2C2D9FB4FB04ED1617B4A1E
SHA-256:	BC1E3DD7D34F1CE25DDF6D222091C310D74B50A3DD8708AD2F6EC9BC14C709EF
SHA-512:	086957D290AAA008124486A19518D72D20FBE6070CD4E935900AEE43C082713493E0C9C8EA61E26066AEE3AAEC9358B85F3AFB9B86A4F6D1D4626B8FBE4D5965
Malicious:	false
Reputation:	low
Preview:	!function(){var e,t,n,r,i,o,a,s,u={647410:function(e,t,n){const r=n(702557),i=n(45984);window.$messageFormat={...r,...i}},911683:function(e){const t=[];e.exports={loadPolyfills:function(){return Promise.all(t)}}},758758:function(e,t){var n;n=function(e){"use strict";var t=document.createElement,n=0;document.createElement=function(e,r){var i=t.call(document,e,r);return"template"!==e&&(i.elementTiming=n++),i};var r=document.createElementNS;document.createElementNS=function(e,t,n){var i=r.call(document,e,t,n);return i.elementTiming=1,i};var i=function(e,t){return{name:e,value:void 0===t?-1:t,delta:0,entries:[],id:"v2-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12)}},o=function(e,t){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){if("first-input"===e&&!("PerformanceEventTiming"in self))return;var n=new PerformanceObserver((function(e){return e.getEntries().map(t)}));return n.observe({type:e,buffered:!0}),n}}catch(e){}},a=function(e,t){var n=functio

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.317614623419193
Encrypted:	false
SSDEEP:	3072:ew5iAZBaQxn7oW/gFDfmtGOOJcPSRTQLeUDdHm7mCId9hvuZTh910rOzPypRan4:ZiAhxp/mTmbraQJmvZxL4
MD5:	033A93064FBF6C5BEA2377A5D08D554D
SHA1:	75524ED095D9ACDD42EA8D67D38A5B0793081D70
SHA-256:	1EC87632EE58734951AA02813EF07AD377126A39A16F063C181519B98FFFFC07
SHA-512:	FD93A5DDF2CCE4AA956DF94E10F3791787E157BA8D6CFF8151163F719868105045F431901D496215E5959989A30969AC696C218B29B0AE343F2BF9E7F7D51078
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(532).concat([f

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90678
Category:	dropped
Size (bytes):	32811
Entropy (8bit):	7.993115726308211
Encrypted:	true
SSDEEP:	768:Tu4jwkrxI2adXpo9SSwpmUPieDFpfy2Ky4lS4ru4r0r:300CfRpFpmAieDFpfBbWbru4r0r
MD5:	BCD68C8A4F1BB13B272E02FDA0EB5460
SHA1:	57C81EE13D027556D54744C9246226E1E85C211C
SHA-256:	25D5832DE46E5170761BA826342655D7C5550451332E4086EC366E79D359BD51
SHA-512:	0D70D7476653949F79CC67897F9F36E6B2F503E5C308C59D0C349B841BC2A27CD6408ACB272568CCA6B593AF5060F93FADD217D1677DE0E897608BA3BBFB0493
Malicious:	false
Reputation:	low
Preview:	...........kW.H.?..\|.[g.[...$..Q..B&....e.a.....F.H2.`..S..Z.H..>..5..Z....U.U..~m.^.Yk..d..V.L..2.4i.2..\.V..q..%....G..?..Q..=.u..'..&.G...?y........N.h.z....h...Q...\N'.ky:.F.......2..2)...$..9...j-.G.Ag6..........mos.G..<...~".(....2.Eg.Kq.l6.M.....L....L..,i.....".0.L..DK.\|.d.....;..>QS....r/e...O.gq.Ps./..4...ZA...c.O...[...f......"..4..{......,.b.@.6d2.i..{....&..>.......Q......Q.4.W.....!.'...~...J~.QrF.=;.W2#<i...z..N..$...,N..z.P.....3...'..".h.yG+......>.^.....k.Y:.Y...N..............B...S......5r.E#.........O.t...I..~...3.4%.G.....I........(M/b..*.....SB.3Y......I. .,E.?..i.s.s...$?..f....?.$WLS".M.....{.=.P.~~y.1..uZ2..=!.U.`.s.....n.c...x......O.3B...q...r........).D.z..?.H.HCo...$..<..{./.a.ei..73)F...+"..Q&.JbJ..M..n.$.w.\|.:1Y.....OJ...&..t.:..<M.kk^....NL8..i6,w....,.....y...0...#j;.C..6.%$..o}.A.q-..0.O..g..U..[]j.:.'a...C...2.x..50.\|..}gBlg..i4=<..S...eA.P.S....L.&.Z.f]k.YA@.J......._.!I.k-.L.....XP....{.....i.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (918)
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	5.4604704891374
Encrypted:	false
SSDEEP:	24:hY/LLuvW9BokgrY7cMdhwCBie46Tz1QqIJIzcq9X5wXR5viRX4j:bCo5Y73hwCd4olUItp5wrNj
MD5:	5DC258F6742F6D22A4CD80F50926ED70
SHA1:	2925F965C31990E0F883E2E885A3D57056168DCC
SHA-256:	3B8D3C93FD78C24F4C175C8515E4A5DF79AEE536AF4CED58BA078EA591569EAC
SHA-512:	BB63B3078587A823CCBB2314EFF3CCC16B20A01AC717CE37289DA8B5118E5053F867CE62256CC1C9466A7E2CBF60C854F4DEA68A060D67CC51BAAB17179E140C
Malicious:	false
Reputation:	low
URL:	https://msft.hsprotect.net/index.html
Preview:	<!DOCTYPE html>.<html lang='en'>.<head>. <meta charset='UTF-8'>. <meta name='viewport' content='width=device-width, initial-scale=1.0'>. <title>Human Sensor Script Iframe</title>.</head>.<body>.<script>. var a=["_pxvid","_px3","_pxde"];function b(a){var b=new RegExp("(^\| )"+a+"=([^;]+)"),c=document.cookie.match(b);return c?c[2]:null}function c(a,b,c){window.parent.postMessage({type:"cookie",name:a,value:b,expires:c\|\|new Date(Date.now()+31536e6).toUTCString()},"")}function d(a){var b=/^([^=]+)=([^;])/,c=/expires=([^;]+)/,d=a.match(b),e=d?d[1]:null,f=d?d[2]:null,g=a.match(c),h=g?g[1]:null;return{cookieName:e,cookieValue:f,expires:h}}function e(b){var e=d(b);-1!==a.indexOf(e.cookieName)&&c(e.cookieName,e.cookieValue,e.expires)}function f(){try{var a=Object.getOwnPropertyDescriptor(Document.prototype,"cookie")\|\|Object.getOwnPropertyDescriptor(Object.getPrototypeOf(document),"cookie"),b=a.get.bind(document),c=a.set.bind(document);Object.defineProperty(document,"cookie",{get:fu

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	449540
Entropy (8bit):	5.448887818381794
Encrypted:	false
SSDEEP:	6144:U7lu66UglOK2d/VkpJYBsLLhkSB29OWtUJGcEHKE0H3NX44n:U7tjVkpq+LlkBUJEQ
MD5:	D8FF67E1334DAD67202B05BA32DEAD18
SHA1:	7AAA398BA53310D793E4BB28E6D5F118EF342254
SHA-256:	4DC06BDE66FF69C3CD7A67B5745C329571334A98ED7AF7C356241CFED32FA6D2
SHA-512:	67A56439845499BD65D1EDED96298FC6C3EEE99022861EC16AFD9E5D2BC7F94239CA0DD08C54A0C65B057625E59BE6362CBF74D7A97FCBEFE0F9AC88B2FE713E
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12836)
Category:	downloaded
Size (bytes):	433324
Entropy (8bit):	5.340091614264426
Encrypted:	false
SSDEEP:	3072:t8S8CMMPE4XY9EmY6j8y9EkZdlDvH+qrtCsFQZ4yP6qdWsyBhwmoQMtU0ed+v/94:XE4KYk8orkvQXomoQ+U09/eVwMIeca
MD5:	F8448F28BA6D7FF9F90219E221984F89
SHA1:	52926E3F379DE8BBE2C2D9FB4FB04ED1617B4A1E
SHA-256:	BC1E3DD7D34F1CE25DDF6D222091C310D74B50A3DD8708AD2F6EC9BC14C709EF
SHA-512:	086957D290AAA008124486A19518D72D20FBE6070CD4E935900AEE43C082713493E0C9C8EA61E26066AEE3AAEC9358B85F3AFB9B86A4F6D1D4626B8FBE4D5965
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/admincenter/admin-main/2024.8.22.2/inline.en.bundle.js
Preview:	!function(){var e,t,n,r,i,o,a,s,u={647410:function(e,t,n){const r=n(702557),i=n(45984);window.$messageFormat={...r,...i}},911683:function(e){const t=[];e.exports={loadPolyfills:function(){return Promise.all(t)}}},758758:function(e,t){var n;n=function(e){"use strict";var t=document.createElement,n=0;document.createElement=function(e,r){var i=t.call(document,e,r);return"template"!==e&&(i.elementTiming=n++),i};var r=document.createElementNS;document.createElementNS=function(e,t,n){var i=r.call(document,e,t,n);return i.elementTiming=1,i};var i=function(e,t){return{name:e,value:void 0===t?-1:t,delta:0,entries:[],id:"v2-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12)}},o=function(e,t){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){if("first-input"===e&&!("PerformanceEventTiming"in self))return;var n=new PerformanceObserver((function(e){return e.getEntries().map(t)}));return n.observe({type:e,buffered:!0}),n}}catch(e){}},a=function(e,t){var n=functio

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113401
Entropy (8bit):	5.284985933216009
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmchSeC1Jzc6VUW3:xkNhp6VU0
MD5:	41955034BB6BC6963DF5A8ECA72C5B81
SHA1:	D4B9E8C46100BDDACE8DFA08BDFF1F6F3D3B0A81
SHA-256:	1F8CEB44FE7CFCF7E71DBD5122210335CA3821D697A851D2900B95AF7D92D69D
SHA-512:	A52DF8961AC9964DE5202A52B4C38242368DC8898593BF3E8B3AFD3FC77C2C12FE72F27BB410DD4F7498643B69EEEFCCA1A566371E211F874C0BE22CF7E2A4E8
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.317614623419193
Encrypted:	false
SSDEEP:	3072:ew5iAZBaQxn7oW/gFDfmtGOOJcPSRTQLeUDdHm7mCId9hvuZTh910rOzPypRan4:ZiAhxp/mTmbraQJmvZxL4
MD5:	033A93064FBF6C5BEA2377A5D08D554D
SHA1:	75524ED095D9ACDD42EA8D67D38A5B0793081D70
SHA-256:	1EC87632EE58734951AA02813EF07AD377126A39A16F063C181519B98FFFFC07
SHA-512:	FD93A5DDF2CCE4AA956DF94E10F3791787E157BA8D6CFF8151163F719868105045F431901D496215E5959989A30969AC696C218B29B0AE343F2BF9E7F7D51078
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(532).concat([f

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90678
Category:	downloaded
Size (bytes):	32811
Entropy (8bit):	7.993115726308211
Encrypted:	true
SSDEEP:	768:Tu4jwkrxI2adXpo9SSwpmUPieDFpfy2Ky4lS4ru4r0r:300CfRpFpmAieDFpfBbWbru4r0r
MD5:	BCD68C8A4F1BB13B272E02FDA0EB5460
SHA1:	57C81EE13D027556D54744C9246226E1E85C211C
SHA-256:	25D5832DE46E5170761BA826342655D7C5550451332E4086EC366E79D359BD51
SHA-512:	0D70D7476653949F79CC67897F9F36E6B2F503E5C308C59D0C349B841BC2A27CD6408ACB272568CCA6B593AF5060F93FADD217D1677DE0E897608BA3BBFB0493
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js
Preview:	...........kW.H.?..\|.[g.[...$..Q..B&....e.a.....F.H2.`..S..Z.H..>..5..Z....U.U..~m.^.Yk..d..V.L..2.4i.2..\.V..q..%....G..?..Q..=.u..'..&.G...?y........N.h.z....h...Q...\N'.ky:.F.......2..2)...$..9...j-.G.Ag6..........mos.G..<...~".(....2.Eg.Kq.l6.M.....L....L..,i.....".0.L..DK.\|.d.....;..>QS....r/e...O.gq.Ps./..4...ZA...c.O...[...f......"..4..{......,.b.@.6d2.i..{....&..>.......Q......Q.4.W.....!.'...~...J~.QrF.=;.W2#<i...z..N..$...,N..z.P.....3...'..".h.yG+......>.^.....k.Y:.Y...N..............B...S......5r.E#.........O.t...I..~...3.4%.G.....I........(M/b..*.....SB.3Y......I. .,E.?..i.s.s...$?..f....?.$WLS".M.....{.=.P.~~y.1..uZ2..=!.U.`.s.....n.c...x......O.3B...q...r........).D.z..?.H.HCo...$..<..{./.a.ei..73)F...+"..Q&.JbJ..M..n.$.w.\|.:1Y.....OJ...&..t.:..<M.kk^....NL8..i6,w....,.....y...0...#j;.C..6.%$..o}.A.q-..0.O..g..U..[]j.:.'a...C...2.x..50.\|..}gBlg..i4=<..S...eA.P.S....L.&.Z.f]k.YA@.J......._.!I.k-.L.....XP....{.....i.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32057)
Category:	dropped
Size (bytes):	56391
Entropy (8bit):	5.37635913975141
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3Z1ym+d/ixLgT1wtuQixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJJ1ym+d/ihgT1wtuQiJig/Ml
MD5:	B59C16ABA59DB0BC490C85B30C0B60E8
SHA1:	7B708EC7EDC902283A755FC0BF4E767A2A28473E
SHA-256:	D65E2644BEA71489D43203AA2ABCBA471C847BF2A176963BE8DB62BF1A70F7A5
SHA-512:	F7E252E5B6046AFB46658F542233D7E1602C2638089B6BF4E1490643770A28D3DF1FFCB587699B82FD8E821495D69780E160EA8B7065519EEA8B34C98F4817AA
Malicious:	false
Reputation:	low
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:fCu:au
MD5:	AAAB7A355103063D9EEB4824A3A6B374
SHA1:	E51555F02C32321F3E48F07A0FA5AF46DF835BFC
SHA-256:	79BA862622D6FA84AC7E4F98EB95043A255FC2C81711E9400A8AA4D4B1608471
SHA-512:	D1A0C9C4F628459F5CA904405B2A66A69425A50E8DCE1BAA43161D784EB219BD3E1FD9447BCBACC314652EDA08CF0B02C863C87F3AC1534AE0F62A414C191F1B
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/Images/Clear.PNG?ctx=jscb1.0&session_id=decb0051cb8e476a8a076ce0e7c3fbd0&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=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&eci=eyJ1dmRyIjoiR29vZ2xlIEluYy4gKEdvb2dsZSkiLCJ1cmRyIjoiQU5HTEUgKEdvb2dsZSwgVnVsa2FuIDEuMy4wIChTd2lmdFNoYWRlciBEZXZpY2UgKFN1Ynplcm8pICgweDAwMDBDMERFKSksIFN3aWZ0U2hhZGVyIGRyaXZlcikiLCJ2ZHIiOiJXZWJLaXQiLCJyZHIiOiJXZWJLaXQgV2ViR0wiLCJpZHVoIjoiMTViNmNhNDcyNjliZTQyODc1Njg1MDY5MzdlOTkxN2MifQ==&PageId=SU&u1=&u3=10.0.0&u4=x86&u5=64&u2=(Google%20Chrome%2C117.0.5938.132)%2C(Not%3BA%3DBrand%2C8.0.0.0)%2C(Chromium%2C117.0.5938.132)
Preview:	dfp:OK

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
Category:	dropped
Size (bytes):	49804
Entropy (8bit):	7.994672288751266
Encrypted:	true
SSDEEP:	1536:SMuttwJ0uUmAcZjNL6nnQlL+mwKLiQC7Mn3dxPErr:SwJ0vmAcKnnQF+8LJOMn3DPE/
MD5:	6DE768A4DF1E0D0061CDB52EF06346C4
SHA1:	3829A667B97668008023DDA98F4C0772174C8EF6
SHA-256:	58732EEE2ED9091F4F5776DC8A8A14116CBE5A2BA1CCDA0256896BAB08A52128
SHA-512:	CC6966D2C2B43E762750102E734DA6B88D7BFB92DDB5D482EE25029337D95E997466E83001586F2B63DAEE890B5F3188E8EC0F1B084D5EB67CFEA55EDDFAD47D
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w..nf.0.ff.X.'V......4.r~........=........,..JU.......T~.l..?..E.....X..\|t~P9...TN..G..?^.~.............Xx.0..Q..Fa4.#7.q...F.;......4...Q.W&~.@....O.T.y.37J.+Ggf...P....Pz.N...>..a.D..<.m./A,...Q.....WN.Q...8.Db$.G.H<...'....J,..8..{nG.2@HYkL../......=.pL....A?.&Ng.i,......2lo...$.<.3...?~pW..=...L..&x.QR.u3..#6q2....U.Y1..".M. .<W."7@......w..."H,@......0..P....p:...[...E].A..%..V.K\.......F.ir.}.Lc{s..O.g..(\|.........9o..A.t.K....Wv.l6..T.......t.........+..........-w {l..g...V..\=W.j.oaT}t.J`E..$W......;.k.\.t.w~}".....jf..W..."..a..0y........@.T.1.G0........Y_....../..........@.....]+....q\.cR.....t.3S-5g....'U.j.d......y.n,:).\|.?.FW...d...\|.......*.`.3....kMKf...#..,DM.TY+..g.........e+.>...{y..N/..g-#FV.V.p.......Xs.(..{..}..-.O..H=."...........8M.g..!H..0.~.Tdf.;...$D%N .)..!..V...'r\.... ...&....J\|."Nd%D:uw:.<W.+...H&.Z...L=..U.v....J.t.0%+...U..3M....y...L..G...p='.....pB"-..\|.....j .a".i=O.R Q2..."...

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	244
Entropy (8bit):	3.9449173146554264
Encrypted:	false
SSDEEP:	6:N7QDxA21DVBKK+ehhWIGUN1zU+GsURWERRcOISqdPpVfBdW:NUDvrKKjhWft+GsuWMcOIBdPpVfC
MD5:	EA509B65B6AAD21248E6AFBC7C004331
SHA1:	1ADC38E9D013711F10966CA136779313C276C941
SHA-256:	E6808B6BE0BD116A83610690696619BC8E6E0D804EC51BB3636043700DAA06C0
SHA-512:	A4E2991B650FCE4F5557D338ADC7E069813DE836EE1A9F0CB427F741FCD4B028D7240D1C44BDD5EC4E102DF4961B99A47D459B48C07B4701CD1B20EB6B841D7B
Malicious:	false
Reputation:	low
URL:	https://stk.hsprotect.net/ns?c=fcd3f910-6628-11ef-966a-31fa2073d147
Preview:	c943b0e48513ab730d4b1380d245f9dab8f3bb9cc462310a11ed0bfe914c71216b0e89f25c4c7d1efd708fad3b29c0f9532e9c2c46ae209dbb875e214e544e7e51664033ed3a9c4b0aeb2e439e4bce51ed8e16da33a8c5f0b95cc9351eee8dac37bead12b5c388770889a947e885cbbbad80feef6b0c74b65183

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:fCu:au
MD5:	AAAB7A355103063D9EEB4824A3A6B374
SHA1:	E51555F02C32321F3E48F07A0FA5AF46DF835BFC
SHA-256:	79BA862622D6FA84AC7E4F98EB95043A255FC2C81711E9400A8AA4D4B1608471
SHA-512:	D1A0C9C4F628459F5CA904405B2A66A69425A50E8DCE1BAA43161D784EB219BD3E1FD9447BCBACC314652EDA08CF0B02C863C87F3AC1534AE0F62A414C191F1B
Malicious:	false
Reputation:	low
Preview:	dfp:OK

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/images/favicon.ico?v=2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65402)
Category:	downloaded
Size (bytes):	154827
Entropy (8bit):	5.673076560466366
Encrypted:	false
SSDEEP:	3072:BNeIKauytvrCcd9H22rDs7wssrVKhTXG6dVmyacEl:BN8auypCdwsIajG6dVmzl
MD5:	74B2BD9FAD9C8093FCE1AEC76DFB7884
SHA1:	99F49ED56FF7B69BD0262BE8537E1B3E6235C56D
SHA-256:	8FF2D77322DACB53996EB2DD2AD7B67C4ED8499B6F02C1ECA90B63646525008C
SHA-512:	C36D813A65914A86B98DDD2C2EF2B3AF085FA7678B44CF1E8083211AB5DB171FE3B9906B425E9B4FCA0BFA62387F993A669A7FBE9E47943DA19AD0D76527C560
Malicious:	false
Reputation:	low
URL:	https://client.hsprotect.net/PXzC5j78di/main.min.js
Preview:	// @license Copyright (C) 2014-2024 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed..try{window._pxAppId="PXzC5j78di",function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function n(t,n){if(t){if("string"==typeof t)return e(t,n);var r=Object.prototype.toString.call(t).slice(8,-1);return"Object"===r&&t.constructor&&(r=t.constructor.name),"Map"===r\|\|"Set"===r?Array.from(t):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?e(t,n):void 0}}function r(t){return function(t){if(Array.isArray(t))return e(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2628), with CRLF line terminators
Category:	downloaded
Size (bytes):	2749
Entropy (8bit):	5.659122080545116
Encrypted:	false
SSDEEP:	48:t1XXw+kOhX/BxVgnK/Q6GiuGq9juwbae13NhcKBLd4YiQT0SKr0PdktNb5U95SDS:H9W3iuV96wDrHBZ4RQTWolKbW5Ln/
MD5:	91DCAA1E4D74619B4608E47EA8248076
SHA1:	2BE32F5B3476DB4234677955829643A544ED3F97
SHA-256:	1D53C4B61DD3405A6F9B763BFC5748914FEAE7F0E77EB7F4EB99FB1A19A7B2B7
SHA-512:	2E40A3EBFA8EE328BAA09BBC1B637EC51CBB900FC481C58412793FAA8D798F6058C7562592EF4DA7AEFE8E0382891CE591A0FA98AF50AB44A93B842A0C1B2DDF
Malicious:	false
Reputation:	low
URL:	https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=decb0051cb8e476a8a076ce0e7c3fbd0&id=2ce6933d-ac68-e07b-68ce-0e46142704ae&w=8DCC84CE0569AC6&tkt=taBcrIH61PuCVH7eNCyH0FFaWZWIHTJWSYlBtG47cVstykLEb5SMoFGYqhAzSUhyIuthBDErqqO6BPEfythOxEXPu%252bz5apYljGZQiAl884ec02ukOJ%252fCs7Bb2Log7ULoI%252fLyJVd76W1r1vdWY66%252fBZf7n4aFkLclgxr0bq2kT8AqKpHE5J2NI0artVkGPQVLsvN4u4FtF2fhqGtzypPH%252bnwY3YvW6%252bwqa0QYG14204ar9GRnK22IaeJ4Y3G%252bihsA%252bgxkGbwoPk5V5qdaQc5%252f%252bmfCZVF%252fr0e7EO6RXNC%252bYaMnkVec6uOhR6MGpfgYul8K&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>..</head>..<script>function BaseStamp() { this.GetStorageQsInfo = function () { if (window.localStorage) { var n = window.localStorage.getItem(lsKey); var lsupd = "False"; if (lsupd === "true" && n) { var xhr = new XMLHttpRequest(), method = "GET", url = target + "updatels.html?ofid=" + n + "&session_id=" + sid + "&CustomerId=" + cid; xhr.open(method, url, true); xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE && xhr.status === 200) { var update = xhr.responseText; if (update && update.toLowerCase() === "true") { window.localStorage.setItem(lsKey, id); } } }; xhr.send(); } if (n && n != null && n != "" \|\| (window.localStorage.setItem(lsKey, id), n = id), id != n) return "session_id=" + sid + "&CustomerId=" + cid + "&fid=" + id + "&ofid=" + n + "&w=" + ticks + "&auth=" + encodeURIComponent(authKey) } return "" }; this.newXMLHttp = function () { var n = null; return

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113769
Entropy (8bit):	5.4928592467688535
Encrypted:	false
SSDEEP:	1536:pd8gIRPY0+r5qnWisyOFa8nvUHCC4LgvbrGYXts1N5VFUnqGj:kgDTMnWsTkpLgv2Qe1bXA
MD5:	21FB66A712FCAB3BF6667404C78631D6
SHA1:	6011F3E397AEB5B807EB6BE1A08ABFD302E9D253
SHA-256:	BAB311BF22661B153353A159F0EC931DBCB79F950FA37DAF9D0FF180CBF45DEB
SHA-512:	CD310A2C00DB5E273091F45308227CC6CA5131767823C356013AAD5EB515E75048317C4E5A793955CFBC93CE015BAFB89463066ABF0E31870AF93076E98F2586
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1372:function(e,t,

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	244
Entropy (8bit):	3.940944710485155
Encrypted:	false
SSDEEP:	6:+10z2owI8zBA+ckdvc/X6zL15UDkdLW/8P+:+1yND8FAQif6NKDkd6W+
MD5:	8364CE3F9A6CEB8F842C64B99FAB46AD
SHA1:	12D5CC2BEE037CE43F4BED52AB1ADFAE799A10FF
SHA-256:	CCB114C963E57DDB969F26AFC6D635B4CBE840645A50187418057990BC4DD838
SHA-512:	38DE156EA4600E0C1BE9D58F4C0E445B03018AE9329FFB606C9B9835655EF2E53F41F12A7E6A3F46EFCE689C3BBC428FD18B73D1F1448C959C34471553576CF2
Malicious:	false
Reputation:	low
Preview:	66ae516ceee2afc6f06c589a3b5da70b1f30c1ab913f6d3bb4e3b3903533a76f7cb651ec9482e8f05f1bbbff9ec6a93eeb0a49a2be0ca2097300e4365dc921308a415805ccd3e95a3ad61f56ff636189575fb6c213614afcda5e0285ed5e2b3e84438137ee191991ab499c6482827736e3aa9a3bc70bdcab469f

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.873235826376328
Encrypted:	false
SSDEEP:	3:YA8rQaC:YAoQaC
MD5:	5FC018D9E6C56911BBC8DC5DDCD0C768
SHA1:	70979F57A85D527ED8ABCBF02CFF44640C58BDE6
SHA-256:	2E6D78A4AE644F3B60AFD3C33E66539FF6C5F6A8ED6ABC40A3AF06AC020EC020
SHA-512:	1E3B86274B3590E28366F2D2DE86A1844058E213BD225AAA05D992CA70523F65D2BD543F9F762A805A2C4D5961AA34F5A19EBE70E135939C9CD3C63F6B5F5524
Malicious:	false
Reputation:	low
Preview:	{"error":"Method Not Allowed"}.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23194), with CRLF line terminators
Category:	downloaded
Size (bytes):	23658
Entropy (8bit):	5.7656150211018735
Encrypted:	false
SSDEEP:	384:HFD6bHIEsQdsQvZxyF1Aw8B7Nv0edjuDNaFTLLb2M/zvyMEZWpn:lDsH9yF1IBBdq5yF/2dE
MD5:	E645DCF75E2F0D4136AF0E43065A90AA
SHA1:	1E7E1996021BB882D72787B23B8247791126E351
SHA-256:	AD8CB8E443F482C994F1E5AA9F37FA90ADC3C48C4874E142A290BF6B57144EA7
SHA-512:	E0B479C1081320E40E0861E604BAAE2A0ECDD228D72210BDB5D154077F9B2D66B5FF730FAE0692C0CFDC5772DA02FA9687C8611C580F74D3E3A212E70108D8E2
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/?session_id=decb0051cb8e476a8a076ce0e7c3fbd0&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>var localTarget='https://fpt.live.com/',target='https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&',txnId='decb0051cb8e476a8a076ce0e7c3fbd0',ticks='8DCC84CE0569AC6',rid='2ce6933d-ac68-e07b-68ce-0e46142704ae',authKey='taBcrIH61PuCVH7eNCyH0FFaWZWIHTJWSYlBtG47cVstykLEb5SMoFGYqhAzSUhyIuthBDErqqO6BPEfythOxEXPu%252bz5apYljGZQiAl884ec02ukOJ%252fCs7Bb2Log7ULoI%252fLyJVd76W1r1vdWY66%252fBZf7n4aFkLclgxr0bq2kT8AqKpHE5J2NI0artVkGPQVLsvN4u4FtF2fhqGtzypPH%252bnwY3YvW6%252bwqa0QYG14204ar9GRnK22IaeJ4Y3G%252bihsA%252bgxkGbwoPk5V5qdaQc5%252f%252bmfCZVF%252fr0e7EO6RXNC%252bYaMnkVec6uOhR6MGpfgYul8K',cid='33e01921-4d64-4f8c-a055-5bdaffd5e33d',assessment='',waitresponse=true,bbwait=false,commonquery='&PageId=SU',lsInfo=true,splitFonts=false,noFonts=false,UCH=true,PTO=100,rticks=1724951168661,ipv6Url='',txnKey='session_id',ridKey='id',lskey='MUID';(function(){function w(){var i=0,n;return t&&t.length

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32057)
Category:	downloaded
Size (bytes):	56391
Entropy (8bit):	5.37635913975141
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3Z1ym+d/ixLgT1wtuQixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJJ1ym+d/ihgT1wtuQiJig/Ml
MD5:	B59C16ABA59DB0BC490C85B30C0B60E8
SHA1:	7B708EC7EDC902283A755FC0BF4E767A2A28473E
SHA-256:	D65E2644BEA71489D43203AA2ABCBA471C847BF2A176963BE8DB62BF1A70F7A5
SHA-512:	F7E252E5B6046AFB46658F542233D7E1602C2638089B6BF4E1490643770A28D3DF1FFCB587699B82FD8E821495D69780E160EA8B7065519EEA8B34C98F4817AA
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 901881
Category:	downloaded
Size (bytes):	231091
Entropy (8bit):	7.998390937544825
Encrypted:	true
SSDEEP:	6144:Z4w6J4OiKySVPhKwGX9rZUKsSqNNZPRNSBX:awkViKySV5KXX9mBS0NZZYX
MD5:	05A20B73D23C52A09386F3222045E62D
SHA1:	0991D7FD9A84F82DD39FBE065C0070D3196F497C
SHA-256:	BAB90DCF5FE87AB6DDEED7339CC36967BA7188CE3E01CCF7C65D9369056C41A4
SHA-512:	F93017FD9AC4A684D5BBC5BD44992D9687DDA5011050B9F7AA1718EA99F91E5BB7031854461E48316D10D095347E5953F376949EFCC57348980D792AD745BFCE
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js
Preview:	...........iw.8.(.....n....dg...M....l.'.N.}}h...H...8.....+E9.g.g.{&...A.K..T.j..........r#.Fy1K.4.6.S.@V)..:...QrV..S...,./....::hW_......6G.l.....yRlHQ.L.".i\|..nw.ndJ....+..j.."..](..<..L..p?...zw9.e.....\{..C9J...M...9-....U2..cY=...."=....a...."/.3.../iF.9d..T.%.:S.Ne6.&.h.W...t....../f2.J~H.K.,..n......z6O....n..4.Z..ll...^..Z..F.N.r.CV?.....=.......r...rt........:...:..8!$(..g..A.Z.Lb%....B.....t>VZ.y....Y>-...SY..t^..:%..Yz=.c.o..'...</.26 ..!{x....bt6nm.......,.x.da/...7.x.........&......$N.......=X.........~.PL.No.(i3....'..Y..ONz..f......[[.%f[[3JL........x.d.,.U..U..:....:0.......),..Kq.o..}oI....N..W..t~+...Y..j....h..,....m.T.J.e..RB..._..b.u.ql.7u.Nz_.-2..li.......`.`O+..1h.2..S.+..F.:...l.M...t.6..B.".;u...T.g.t....@..[-.Q........b..P..<...TLm.2...K%.e6p:....]S.`Q..S.....m.#Ur..w#x....CUl.V.M.N.i.....Tv.....8k,2M.^."..ec..i>..Z...a..a.8...{_\4.,d9.33k...y...,U..vU..u..]N.# ~..bk+[L...$oUl..^y..f.;..).<R...a..?..g.?

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.646439344671015
Encrypted:	false
SSDEEP:	3:xRhVnCm:xrQm
MD5:	F79FFC1767406D43B996B050CEC09ED2
SHA1:	EA4F919251BCDE6EE3CB2E45C0356E1FA3B86661
SHA-256:	1E62D5B3EFE0ECE892FF79BD65457FF2DC48A840444AFD53DEEDF2F2869BD685
SHA-512:	1B4C7C09D52BB2D26F505C148FD92B987AD680E675E7496EB8E92279F750587EBCE45DECD718CBBDFB91A4CEAADCA14AD918C4F8AA7971D199593C82C31BB92F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnAwrJpDUzjsBIFDdbBmF8=?alt=proto
Preview:	Cg0KCw3WwZhfGgQIZBgC

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	dropped
Size (bytes):	113769
Entropy (8bit):	5.4928592467688535
Encrypted:	false
SSDEEP:	1536:pd8gIRPY0+r5qnWisyOFa8nvUHCC4LgvbrGYXts1N5VFUnqGj:kgDTMnWsTkpLgv2Qe1bXA
MD5:	21FB66A712FCAB3BF6667404C78631D6
SHA1:	6011F3E397AEB5B807EB6BE1A08ABFD302E9D253
SHA-256:	BAB311BF22661B153353A159F0EC931DBCB79F950FA37DAF9D0FF180CBF45DEB
SHA-512:	CD310A2C00DB5E273091F45308227CC6CA5131767823C356013AAD5EB515E75048317C4E5A793955CFBC93CE015BAFB89463066ABF0E31870AF93076E98F2586
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1372:function(e,t,

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65402)
Category:	dropped
Size (bytes):	154827
Entropy (8bit):	5.673076560466366
Encrypted:	false
SSDEEP:	3072:BNeIKauytvrCcd9H22rDs7wssrVKhTXG6dVmyacEl:BN8auypCdwsIajG6dVmzl
MD5:	74B2BD9FAD9C8093FCE1AEC76DFB7884
SHA1:	99F49ED56FF7B69BD0262BE8537E1B3E6235C56D
SHA-256:	8FF2D77322DACB53996EB2DD2AD7B67C4ED8499B6F02C1ECA90B63646525008C
SHA-512:	C36D813A65914A86B98DDD2C2EF2B3AF085FA7678B44CF1E8083211AB5DB171FE3B9906B425E9B4FCA0BFA62387F993A669A7FBE9E47943DA19AD0D76527C560
Malicious:	false
Reputation:	low
Preview:	// @license Copyright (C) 2014-2024 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed..try{window._pxAppId="PXzC5j78di",function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function n(t,n){if(t){if("string"==typeof t)return e(t,n);var r=Object.prototype.toString.call(t).slice(8,-1);return"Object"===r&&t.constructor&&(r=t.constructor.name),"Map"===r\|\|"Set"===r?Array.from(t):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?e(t,n):void 0}}function r(t){return function(t){if(Array.isArray(t))return e(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
Category:	downloaded
Size (bytes):	49804
Entropy (8bit):	7.994672288751266
Encrypted:	true
SSDEEP:	1536:SMuttwJ0uUmAcZjNL6nnQlL+mwKLiQC7Mn3dxPErr:SwJ0vmAcKnnQF+8LJOMn3DPE/
MD5:	6DE768A4DF1E0D0061CDB52EF06346C4
SHA1:	3829A667B97668008023DDA98F4C0772174C8EF6
SHA-256:	58732EEE2ED9091F4F5776DC8A8A14116CBE5A2BA1CCDA0256896BAB08A52128
SHA-512:	CC6966D2C2B43E762750102E734DA6B88D7BFB92DDB5D482EE25029337D95E997466E83001586F2B63DAEE890B5F3188E8EC0F1B084D5EB67CFEA55EDDFAD47D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	...........m[.8.0........OL....;w..nf.0.ff.X.'V......4.r~........=........,..JU.......T~.l..?..E.....X..\|t~P9...TN..G..?^.~.............Xx.0..Q..Fa4.#7.q...F.;......4...Q.W&~.@....O.T.y.37J.+Ggf...P....Pz.N...>..a.D..<.m./A,...Q.....WN.Q...8.Db$.G.H<...'....J,..8..{nG.2@HYkL../......=.pL....A?.&Ng.i,......2lo...$.<.3...?~pW..=...L..&x.QR.u3..#6q2....U.Y1..".M. .<W."7@......w..."H,@......0..P....p:...[...E].A..%..V.K\.......F.ir.}.Lc{s..O.g..(\|.........9o..A.t.K....Wv.l6..T.......t.........+..........-w {l..g...V..\=W.j.oaT}t.J`E..$W......;.k.\.t.w~}".....jf..W..."..a..0y........@.T.1.G0........Y_....../..........@.....]+....q\.cR.....t.3S-5g....'U.j.d......y.n,:).\|.?.FW...d...\|.......*.`.3....kMKf...#..,DM.TY+..g.........e+.>...{y..N/..g-#FV.V.p.......Xs.(..{..}..-.O..H=."...........8M.g..!H..0.~.Tdf.;...$D%N .)..!..V...'r\.... ...&....J\|."Nd%D:uw:.<W.+...H&.Z...L=..U.v....J.t.0%+...U..3M....y...L..G...p='.....pB"-..\|.....j .a".i=O.R Q2..."...

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 901881
Category:	dropped
Size (bytes):	231091
Entropy (8bit):	7.998390937544825
Encrypted:	true
SSDEEP:	6144:Z4w6J4OiKySVPhKwGX9rZUKsSqNNZPRNSBX:awkViKySV5KXX9mBS0NZZYX
MD5:	05A20B73D23C52A09386F3222045E62D
SHA1:	0991D7FD9A84F82DD39FBE065C0070D3196F497C
SHA-256:	BAB90DCF5FE87AB6DDEED7339CC36967BA7188CE3E01CCF7C65D9369056C41A4
SHA-512:	F93017FD9AC4A684D5BBC5BD44992D9687DDA5011050B9F7AA1718EA99F91E5BB7031854461E48316D10D095347E5953F376949EFCC57348980D792AD745BFCE
Malicious:	false
Reputation:	low
Preview:	...........iw.8.(.....n....dg...M....l.'.N.}}h...H...8.....+E9.g.g.{&...A.K..T.j..........r#.Fy1K.4.6.S.@V)..:...QrV..S...,./....::hW_......6G.l.....yRlHQ.L.".i\|..nw.ndJ....+..j.."..](..<..L..p?...zw9.e.....\{..C9J...M...9-....U2..cY=...."=....a...."/.3.../iF.9d..T.%.:S.Ne6.&.h.W...t....../f2.J~H.K.,..n......z6O....n..4.Z..ll...^..Z..F.N.r.CV?.....=.......r...rt........:...:..8!$(..g..A.Z.Lb%....B.....t>VZ.y....Y>-...SY..t^..:%..Yz=.c.o..'...</.26 ..!{x....bt6nm.......,.x.da/...7.x.........&......$N.......=X.........~.PL.No.(i3....'..Y..ONz..f......[[.%f[[3JL........x.d.,.U..U..:....:0.......),..Kq.o..}oI....N..W..t~+...Y..j....h..,....m.T.J.e..RB..._..b.u.ql.7u.Nz_.-2..li.......`.`O+..1h.2..S.+..F.:...l.M...t.6..B.".;u...T.g.t....@..[-.Q........b..P..<...TLm.2...K%.e6p:....]S.`Q..S.....m.#Ur..w#x....CUl.V.M.N.i.....Tv.....8k,2M.^."..ec..i>..Z...a..a.8...{_\4.,d9.33k...y...,U..vU..u..]N.# ~..bk+[L...$oUl..^y..f.;..).<R...a..?..g.?

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 29, 2024 19:05:29.323534966 CEST	49678	443	192.168.2.4	104.46.162.224
Aug 29, 2024 19:05:30.214108944 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 29, 2024 19:05:39.822665930 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 29, 2024 19:05:41.224150896 CEST	49735	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:41.224199057 CEST	443	49735	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:41.224278927 CEST	49735	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:41.224663019 CEST	49736	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:41.224669933 CEST	443	49736	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:41.224716902 CEST	49736	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:41.224888086 CEST	49735	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:41.224900007 CEST	443	49735	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:41.225049973 CEST	49736	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:41.225056887 CEST	443	49736	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:41.925820112 CEST	443	49735	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:41.926140070 CEST	49735	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:41.926170111 CEST	443	49735	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:41.927048922 CEST	443	49735	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:41.927109957 CEST	49735	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:41.928627014 CEST	49735	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:41.928684950 CEST	443	49735	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:41.928894997 CEST	49735	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:41.928901911 CEST	443	49735	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:41.936865091 CEST	443	49736	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:41.937066078 CEST	49736	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:41.937072992 CEST	443	49736	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:41.937971115 CEST	443	49736	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:41.938030005 CEST	49736	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:41.938368082 CEST	49736	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:41.938416004 CEST	443	49736	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:41.968837023 CEST	49735	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:41.989331961 CEST	49736	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:41.989340067 CEST	443	49736	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:42.039057970 CEST	49736	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:42.392404079 CEST	443	49735	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:42.392654896 CEST	443	49735	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:42.392721891 CEST	49735	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:42.399763107 CEST	49735	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:42.399785995 CEST	443	49735	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:42.863931894 CEST	49740	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:05:42.863956928 CEST	443	49740	142.250.185.228	192.168.2.4
Aug 29, 2024 19:05:42.864020109 CEST	49740	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:05:42.866607904 CEST	49740	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:05:42.866621971 CEST	443	49740	142.250.185.228	192.168.2.4
Aug 29, 2024 19:05:43.527774096 CEST	443	49740	142.250.185.228	192.168.2.4
Aug 29, 2024 19:05:43.528016090 CEST	49740	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:05:43.528028011 CEST	443	49740	142.250.185.228	192.168.2.4
Aug 29, 2024 19:05:43.528901100 CEST	443	49740	142.250.185.228	192.168.2.4
Aug 29, 2024 19:05:43.528958082 CEST	49740	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:05:43.792160988 CEST	49740	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:05:43.792359114 CEST	443	49740	142.250.185.228	192.168.2.4
Aug 29, 2024 19:05:43.845503092 CEST	49740	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:05:43.845530033 CEST	443	49740	142.250.185.228	192.168.2.4
Aug 29, 2024 19:05:43.899933100 CEST	49740	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:05:44.653137922 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:44.653157949 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:44.653242111 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:44.657238007 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:44.657250881 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:45.394725084 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:45.394798040 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:45.397278070 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:45.397284031 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:45.397516966 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:45.434895992 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:45.476509094 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:45.636275053 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:45.636317015 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:45.636388063 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:45.636904001 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:45.636918068 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:45.668340921 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:45.668402910 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:45.668456078 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:45.673249960 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:45.673258066 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:45.673268080 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:45.673273087 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:45.766232967 CEST	49749	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:45.766278982 CEST	443	49749	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:45.766397953 CEST	49749	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:45.766879082 CEST	49749	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:45.766908884 CEST	443	49749	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:46.304451942 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.304924965 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.304953098 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.306005001 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.306066990 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.314068079 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.314126015 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.314506054 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.314512014 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.354964972 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.472877026 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.472899914 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.472906113 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.472939014 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.472955942 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.472970963 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.472986937 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.473001957 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.473023891 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.473041058 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.477495909 CEST	443	49749	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:46.477560043 CEST	49749	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:46.490622997 CEST	49749	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:46.490649939 CEST	443	49749	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:46.490900993 CEST	443	49749	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:46.493226051 CEST	49749	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:46.536509991 CEST	443	49749	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:46.546855927 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.546874046 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.546924114 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.546936989 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.547174931 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.558938026 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.558953047 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.559011936 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.559017897 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.559062958 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.559400082 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.559442997 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.559447050 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.559591055 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.559638977 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.567723036 CEST	49748	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.567739010 CEST	443	49748	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.603439093 CEST	443	49736	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.603507042 CEST	443	49736	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:46.603554010 CEST	49736	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:46.759337902 CEST	443	49749	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:46.759413004 CEST	443	49749	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:46.759511948 CEST	49749	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:46.760349989 CEST	49749	443	192.168.2.4	184.28.90.27
Aug 29, 2024 19:05:46.760369062 CEST	443	49749	184.28.90.27	192.168.2.4
Aug 29, 2024 19:05:47.096215963 CEST	49736	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:47.096239090 CEST	443	49736	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.114006042 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:47.114032984 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.114093065 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:47.114305019 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:47.114315987 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.796879053 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.858161926 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:47.872762918 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:47.872775078 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.873877048 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.873887062 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.873924971 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:47.876323938 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:47.876385927 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.879574060 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:47.879580975 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.926783085 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:47.990005970 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.990025043 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.990031958 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.990046978 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.990052938 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.990058899 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.990088940 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:47.990104914 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:47.990144968 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:47.990164042 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:48.079336882 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:48.079349041 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:48.079379082 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:48.079406977 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:48.079421997 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:48.079442978 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:48.079461098 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:48.082509995 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:48.082525015 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:48.082568884 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:48.082576036 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:48.082608938 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:48.082636118 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:48.082674026 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:48.082676888 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:48.082695007 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:48.082730055 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:48.083580017 CEST	49752	443	192.168.2.4	13.107.246.60
Aug 29, 2024 19:05:48.083591938 CEST	443	49752	13.107.246.60	192.168.2.4
Aug 29, 2024 19:05:48.471316099 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:48.471340895 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:48.471416950 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:48.472431898 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:48.472440958 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:48.474721909 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:48.474754095 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:48.474839926 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:48.475171089 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:48.475178003 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:48.475251913 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:48.475451946 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:48.475461960 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:48.475744009 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:48.475750923 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.294358015 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.296583891 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.304013014 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.324050903 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.324071884 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.324237108 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.324246883 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.324441910 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.324446917 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.325124979 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.325205088 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.325321913 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.325371981 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.325824022 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.325874090 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.326826096 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.326886892 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.327291012 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.327359915 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.328185081 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.328269005 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.329322100 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.329328060 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.329426050 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.329432011 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.329456091 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.329459906 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.369225979 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.369225979 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.369231939 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.562932014 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.563438892 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.563447952 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.563477039 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.563483953 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.563492060 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.563544035 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.563558102 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.563597918 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.563597918 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.573087931 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.579720020 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.621499062 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.621592045 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.621700048 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.621711016 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.621731997 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.621741056 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.621753931 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.621758938 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.621764898 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.621819019 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.621824026 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.652906895 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.652925968 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.653007030 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.653017044 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.653098106 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.656023026 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.656044006 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.656101942 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.656107903 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.656171083 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.663677931 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.663690090 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.663717985 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.663731098 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.663736105 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.663741112 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.663752079 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.663778067 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.663788080 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.663800001 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.663881063 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.665612936 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.665620089 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.665649891 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.665678024 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.665685892 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.665735960 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.665735960 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.668046951 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.668065071 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.668116093 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.668124914 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.668170929 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.668171883 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.668391943 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.671557903 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.671565056 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.671597958 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.671607018 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.671617031 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.671622038 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.671652079 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.671713114 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.672437906 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.672444105 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.672466040 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.672489882 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.672496080 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.672499895 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.672535896 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.738830090 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.738907099 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.738919020 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.738974094 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.739258051 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.739273071 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.753921032 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.753942966 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.753998995 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.754009008 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.754064083 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.754064083 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.756129026 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.756155014 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.756223917 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.756223917 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.756228924 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.756311893 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.756580114 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.756599903 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.756669044 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.756962061 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.756972075 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.758502960 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.758527994 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.758580923 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.758584976 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.758615971 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.758724928 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.759916067 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.759932995 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.759972095 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.759979963 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.760006905 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.760039091 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.760723114 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.760740995 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.760776043 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.760783911 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.760814905 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.760864019 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.762912035 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.762927055 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.762980938 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.762984991 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.763128996 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.765424967 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.765439034 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.765481949 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.765486956 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.765521049 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.765562057 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.808386087 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.808419943 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.808454990 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.808468103 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.808516979 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.808769941 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.808780909 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.845869064 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.845900059 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.845935106 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.845982075 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.845988035 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.846034050 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.847467899 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.847486019 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.847521067 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.847532034 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.847568035 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.847580910 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.849144936 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.849167109 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.849208117 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.849212885 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.849253893 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.849253893 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.853565931 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.853593111 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.854721069 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.854729891 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.854784012 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.856790066 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.856812954 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.856936932 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.856942892 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.856986046 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.932933092 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.932964087 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.933007956 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.933018923 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.933059931 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.933093071 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.934559107 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.934576988 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.934623003 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.934628010 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.934659958 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.934704065 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.937004089 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.937021017 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.937078953 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.937084913 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.937124968 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.938713074 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.938730955 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.938796997 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.938802004 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.938849926 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.940407991 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.940431118 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.940501928 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.940505981 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.940547943 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.942285061 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.942302942 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.942342043 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.942353010 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.942378044 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.942403078 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.944216967 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.944233894 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.944273949 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.944278002 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.944310904 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.944331884 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.945229053 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.945247889 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.945300102 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:49.945305109 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:49.945342064 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.019768000 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.019788980 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.019840002 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.019850969 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.019877911 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.019893885 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.021158934 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.021174908 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.021215916 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.021220922 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.021250010 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.021269083 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.022808075 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.022825956 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.022864103 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.022869110 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.022903919 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.024619102 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.024636030 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.024682045 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.024687052 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.024728060 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.026254892 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.026279926 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.026340008 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.026345015 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.026391983 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.027942896 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.027961016 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.027998924 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.028003931 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.028036118 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.028053045 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.030473948 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.030491114 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.030528069 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.030531883 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.030564070 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.030570030 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.030617952 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.030622005 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.030653000 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.030656099 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.030688047 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.030795097 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.030811071 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.030818939 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.030847073 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.035079002 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.035098076 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.035155058 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.035424948 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.035434961 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.070575953 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.070591927 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.070682049 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.070897102 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.070909023 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.097673893 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.097681999 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.097774029 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.097940922 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.097953081 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.576236010 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.581002951 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.581016064 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.581980944 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.582040071 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.582672119 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.582745075 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.582786083 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.582791090 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.623102903 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.854314089 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.856112957 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.856121063 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.856133938 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.856157064 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.857606888 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.857621908 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.857662916 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.875247002 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.875449896 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.875466108 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.876338959 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.876384974 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.876696110 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.876751900 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.876808882 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.876816988 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.891140938 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.891345024 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.891361952 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.892256975 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.892314911 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.892640114 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.892699003 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.892779112 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.911051989 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.911428928 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.911438942 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.912466049 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.912517071 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.913037062 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.913100958 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.913263083 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.913269997 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.932126045 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.940507889 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.942594051 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.942614079 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.942672968 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.942682028 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.942720890 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.946860075 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.946887970 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.946922064 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.946926117 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.946969032 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.947729111 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.947737932 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:50.963356972 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:50.994621992 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.027523994 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.027585983 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.027594090 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.027633905 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.027669907 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.027708054 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.027851105 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.027863026 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.141592026 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.161613941 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.190521955 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.191968918 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.191977024 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.192006111 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.192011118 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.192015886 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.192033052 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.192047119 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.192068100 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.192085981 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.192111969 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.202995062 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.204385042 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.204391956 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.204420090 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.204433918 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.204437971 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.204449892 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.204458952 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.204492092 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.204498053 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.204727888 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.204783916 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.204838991 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.205323935 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.205334902 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.209796906 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.209819078 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.210074902 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.210278988 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.210292101 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.224740028 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.224750042 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.224767923 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.224802017 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.224812984 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.224822044 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.224848032 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.224869013 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.233474970 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.233483076 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.233514071 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.233541012 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.233547926 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.233557940 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.233589888 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.235354900 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.235372066 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.235409021 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.235415936 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.235439062 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.275866985 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.278269053 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.278279066 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.278301001 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.278332949 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.278341055 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.278377056 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.278389931 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.281801939 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.281819105 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.281860113 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.281867027 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.281893015 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.281910896 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.322890043 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.322911978 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.322952986 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.322961092 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.322982073 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.323003054 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.325347900 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.325361967 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.325421095 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.325428009 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.325472116 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.326962948 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.326976061 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.327023983 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.327030897 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.327064037 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.327106953 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.363090992 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.363112926 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.363169909 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.363178968 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.363235950 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.364047050 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.364063978 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.364114046 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.364121914 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.364171982 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.365984917 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.366003036 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.366050005 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.366055965 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.366089106 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.366107941 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.367909908 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.367925882 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.367973089 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.367980957 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.368021011 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.399241924 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.399264097 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.399333954 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.399343014 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.399388075 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.412674904 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.412692070 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.412775993 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.412782907 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.412820101 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.414540052 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.414554119 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.414628983 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.414634943 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.414674997 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.416204929 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.416219950 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.416297913 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.416305065 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.416351080 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.417177916 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.417191982 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.417258978 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.417265892 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.417309046 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.418935061 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.418948889 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.419025898 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.419032097 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.419074059 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.420053959 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.420073986 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.420157909 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.420162916 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.420212030 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.450270891 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.450294018 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.450346947 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.450355053 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.450407028 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.451839924 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.451863050 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.451924086 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.451930046 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.451961040 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.451972961 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.454144955 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.454165936 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.454231977 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.454238892 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.454411983 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.454986095 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.455004930 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.455064058 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.455070972 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.455280066 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.456244946 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.456265926 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.456326008 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.456332922 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.456536055 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.458064079 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.458082914 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.458138943 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.458144903 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.458177090 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.458189964 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.487422943 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.487443924 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.487510920 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.487518072 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.487670898 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.499836922 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.499865055 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.499943018 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.499954939 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.499994040 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.501159906 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.501178980 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.501235962 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.501241922 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.501290083 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.502346039 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.502361059 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.502433062 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.502438068 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.502494097 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.503835917 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.503849983 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.503930092 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.503936052 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.504039049 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.504678011 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.504693031 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.504755020 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.504761934 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.504992008 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.507755995 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.507770061 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.507842064 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.507848978 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.508128881 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.509272099 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.509284973 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.509335041 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.509341955 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.510062933 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.511745930 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.542960882 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.542989969 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.543080091 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.543093920 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.543801069 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.551599979 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.551618099 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.551657915 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.551665068 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.551695108 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.551708937 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.556632042 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.556651115 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.556687117 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.556695938 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.556727886 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.557981968 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.561810017 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.561825991 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.561872005 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.561880112 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.564729929 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.568521023 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.568538904 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.568598032 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.568604946 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.568725109 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.569498062 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.569516897 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.569547892 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.569555998 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.569583893 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.572803020 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.576191902 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.576210976 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.576245070 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.576256990 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.576297045 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.576842070 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.577585936 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.577605963 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.577660084 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.577670097 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.580779076 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.583348989 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.583368063 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.583403111 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.583410025 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.583434105 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.583442926 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.598592043 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.598607063 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.598666906 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.598674059 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.600799084 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.601411104 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.601423979 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.601484060 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.601489067 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.605057955 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.605353117 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.605365992 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.605428934 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.605436087 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.605789900 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.606040955 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.606056929 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.606100082 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.606106043 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.606115103 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.606158018 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.606559038 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.606573105 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.606617928 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.606625080 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.606671095 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.611849070 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.611860991 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.611886978 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.611916065 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.611921072 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.611943960 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.611964941 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.612005949 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.634011030 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.634036064 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.634161949 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.634172916 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.634341955 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.635642052 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.635663033 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.635729074 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.635735989 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.635780096 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.636490107 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.636528969 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.636544943 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.636552095 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.636569977 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.636578083 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.636578083 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.636717081 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.760905027 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.766524076 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.902344942 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.902354002 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:51.905793905 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:51.905806065 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.055800915 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.064313889 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.064322948 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.064851046 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.065824986 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.065840960 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.066068888 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.066751003 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.066761971 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.066982031 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.067784071 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.067790985 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.068052053 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.069154024 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.069242954 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.069933891 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.069948912 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.071360111 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.071371078 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.072211981 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.072222948 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.106277943 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.148502111 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.334990025 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.375907898 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.375916958 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.375957012 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.376005888 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.376013041 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.376019955 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.376077890 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.379396915 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.379468918 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.379473925 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.379535913 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.379576921 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.429080009 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.429092884 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.429152966 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.429681063 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.429687977 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.431246996 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.431260109 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.922486067 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.922720909 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.922736883 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.923022032 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.923357964 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.923415899 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.923521042 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.925019026 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.925246000 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.925261974 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.925535917 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.925889015 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.925945997 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.925945997 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.934490919 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.934654951 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.934662104 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.935497999 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.935547113 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.935842037 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.935893059 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.935935020 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.964505911 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.968499899 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.972589016 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.980494022 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:52.988241911 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:52.988248110 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.034240007 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.048413038 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.048429012 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.048500061 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.049359083 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.049376011 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.192117929 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.192889929 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.192935944 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.192945004 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.192955017 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.192987919 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.193011045 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.199320078 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.199351072 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.199393034 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.199404001 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.199414968 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.199459076 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.207082987 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.207292080 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.207330942 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.207339048 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.207349062 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.207381010 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.279150963 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.279160023 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.290746927 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.290757895 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.321619034 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.370687008 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.400737047 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.400743008 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.401813030 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.401875973 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.402987957 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.402987957 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.403000116 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.403048038 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.404869080 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.404875994 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.424061060 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.424074888 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.424144983 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.424688101 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.424700022 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.427905083 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.427915096 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.427979946 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.428445101 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.428457975 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.428627968 CEST	443	49740	142.250.185.228	192.168.2.4
Aug 29, 2024 19:05:53.428683996 CEST	443	49740	142.250.185.228	192.168.2.4
Aug 29, 2024 19:05:53.428901911 CEST	49740	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:05:53.430037022 CEST	49740	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:05:53.430042028 CEST	443	49740	142.250.185.228	192.168.2.4
Aug 29, 2024 19:05:53.432761908 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.432770014 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.432832003 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.433125973 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.433137894 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.464713097 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.464720011 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.510175943 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.598031044 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.600193024 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.600199938 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.600225925 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.600239038 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.600245953 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.600254059 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.600266933 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.600297928 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.600321054 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.600321054 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.650815964 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.690263033 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.690272093 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.690306902 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.690316916 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.690330029 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.690335035 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.690336943 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.690356016 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.690419912 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.692935944 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.692943096 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.692969084 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.692990065 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.692996979 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.693005085 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.693048000 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.693048000 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.781466007 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.781481981 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.781570911 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.781584978 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.781683922 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.782701015 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.782718897 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.782865047 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.782871008 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.783226967 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.783771992 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.783783913 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.783870935 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.783879995 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.783970118 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.785245895 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.785275936 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.785314083 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.785320997 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.785346031 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.785391092 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.785417080 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.785455942 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.787600994 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.787609100 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.811423063 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.811443090 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.811579943 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.811835051 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.811846972 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.936017036 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.949312925 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.949322939 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.949675083 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.950789928 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.950850964 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:53.951594114 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:53.992505074 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.206938982 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.246961117 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.246978998 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.248740911 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.248752117 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.252151966 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.252185106 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.287467003 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.297066927 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.297636032 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.298151970 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.298167944 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.301229954 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.301238060 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.301368952 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.301386118 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.301470995 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.301470995 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.301482916 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.308706045 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.344537973 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.344542980 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.376223087 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.376230001 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.376342058 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.376347065 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.376534939 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.376539946 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.376732111 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.377353907 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.377366066 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.377453089 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.377715111 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.377928972 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.379347086 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.379414082 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.379798889 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.379865885 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.380592108 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.380727053 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.381819010 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.381903887 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.381910086 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.381910086 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.381916046 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.387048006 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.387069941 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.387165070 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.387171984 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.388559103 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.388576031 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.388683081 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.388689995 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.388808966 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.389926910 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.389940977 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.389987946 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.389995098 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.390041113 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.421617031 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.421633959 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.421693087 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.421700954 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.421746969 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.422552109 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.422553062 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.428493977 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.474143028 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.474157095 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.474205017 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.474212885 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.474242926 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.474257946 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.475732088 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.475747108 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.475785017 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.475791931 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.475816965 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.475837946 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.476686954 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.476701021 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.476746082 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.476752996 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.476788998 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.478421926 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.478435040 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.478480101 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.478487968 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.478527069 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.479126930 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.479140997 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.479181051 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.479187965 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.479222059 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.480559111 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.480572939 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.480618954 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.480626106 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.480663061 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.565135002 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.565150976 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.565186024 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.565192938 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.565218925 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.565231085 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.565742970 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.565754890 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.565805912 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.565813065 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.565860987 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.566754103 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.566766024 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.566812038 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.566819906 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.566857100 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.567389965 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.568917990 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.568928957 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.568957090 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.568964958 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.568988085 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.570826054 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.570852041 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.570879936 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.570888042 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.570915937 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.572130919 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.572143078 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.572195053 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.572201967 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.572252989 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.572271109 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.572299004 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.572305918 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.572323084 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.573359966 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.573371887 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.573417902 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.573426962 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.573687077 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.573719978 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.573729038 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.573753119 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.573756933 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.573765993 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.573776960 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.573793888 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.573801041 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.573822021 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.573822021 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.573859930 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.574434042 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.574440956 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.574490070 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.574835062 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.574898958 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.574906111 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.574920893 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.574942112 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.574944973 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.574944973 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.574973106 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.576163054 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.576169968 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.625664949 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.652301073 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.652316093 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.652367115 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.652376890 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.652429104 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.653409004 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.653592110 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.653599024 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.653599024 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.653615952 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.653644085 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.653683901 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.653688908 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.653732061 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.654264927 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.654279947 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.654316902 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.654321909 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.654349089 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.654366970 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.654956102 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.655003071 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.655152082 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.655189037 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.655215979 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.655224085 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.655229092 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.655277967 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.655343056 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.655560017 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.655653954 CEST	49770	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.655658960 CEST	443	49770	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.655667067 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.703790903 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.703798056 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.745698929 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.927702904 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.968599081 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.970922947 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.970932961 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.970967054 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.970978022 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.970983028 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.971009970 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.971029043 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.971029043 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:54.971054077 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.971054077 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:54.971071005 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.019872904 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.019881010 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.019922018 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.019936085 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.019948006 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.019968033 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.019984007 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.020004034 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.022181034 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.022198915 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.022237062 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.022248030 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.022264957 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.022279978 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.022289038 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.062350035 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.112354994 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.112363100 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.112396955 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.112418890 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.112432003 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.112462044 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.112473965 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.114039898 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.114053965 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.114104033 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.114111900 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.114144087 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.114994049 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.115008116 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.115039110 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.115046978 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.115072012 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.115089893 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.116525888 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.116549969 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.116580963 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.116588116 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.116621971 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.116638899 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.116806030 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:55.116847038 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.279361963 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:05:55.279376984 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 19:05:58.220699072 CEST	50428	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:58.225830078 CEST	53	50428	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:58.225899935 CEST	50428	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:58.225939035 CEST	50428	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:58.230809927 CEST	53	50428	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:58.698457003 CEST	53	50428	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:58.699069023 CEST	50428	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:58.704708099 CEST	53	50428	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:58.704869986 CEST	50428	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:59.709784985 CEST	50613	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:59.719038010 CEST	53	50613	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:59.719103098 CEST	50613	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:59.719137907 CEST	50613	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:59.728334904 CEST	53	50613	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:00.189874887 CEST	53	50613	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:00.190211058 CEST	50613	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:00.195641041 CEST	53	50613	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:00.195715904 CEST	50613	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:06.036262989 CEST	50622	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:06:06.036295891 CEST	443	50622	152.199.21.175	192.168.2.4
Aug 29, 2024 19:06:06.036346912 CEST	50622	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:06:06.037697077 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:06.037735939 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:06.037781954 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:06.090904951 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:06.090922117 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:06.091053963 CEST	50622	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:06:06.091073036 CEST	443	50622	152.199.21.175	192.168.2.4
Aug 29, 2024 19:06:06.780524969 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:06.780776978 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:06.780791998 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:06.781653881 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:06.781711102 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:06.782658100 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:06.782710075 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:06.782820940 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:06.782825947 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:06.824343920 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:06.937056065 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:06.937077999 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:06.937088966 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:06.937119961 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:06.937134981 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:06.937149048 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:06.937156916 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:06.937167883 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:06.937195063 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:06.941410065 CEST	443	50622	152.199.21.175	192.168.2.4
Aug 29, 2024 19:06:06.941632986 CEST	50622	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:06:06.941654921 CEST	443	50622	152.199.21.175	192.168.2.4
Aug 29, 2024 19:06:06.942522049 CEST	443	50622	152.199.21.175	192.168.2.4
Aug 29, 2024 19:06:06.942578077 CEST	50622	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:06:06.943449020 CEST	50622	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:06:06.943502903 CEST	443	50622	152.199.21.175	192.168.2.4
Aug 29, 2024 19:06:06.997023106 CEST	50622	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:06:06.997035980 CEST	443	50622	152.199.21.175	192.168.2.4
Aug 29, 2024 19:06:07.027520895 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.027539015 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.027590036 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.027597904 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.027661085 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.030119896 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.030133963 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.030159950 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.030205011 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.030208111 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.030435085 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.042901993 CEST	50622	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:06:07.121237040 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.121253967 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.121340036 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.121346951 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.121377945 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.121516943 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.124105930 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.124120951 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.124202967 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.124202967 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.124207973 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.124299049 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.125166893 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.125180006 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.125225067 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.125231028 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.125263929 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.125263929 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.134027004 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.134041071 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.134109020 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.134114027 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.134175062 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.525305033 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.525330067 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.525434971 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.525454998 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.525660038 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.526345015 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.526359081 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.526437998 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.526443958 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.526485920 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.528821945 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.528836012 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.528906107 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.528911114 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.528992891 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.531049013 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.531068087 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.531116962 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.531121969 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.531164885 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.534606934 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.534620047 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.534692049 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.534698009 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.534751892 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.536098957 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.536112070 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.536170006 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.536175013 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.536247969 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.537713051 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.537725925 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.537755966 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.537781954 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.537791014 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.537822962 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.537857056 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.537857056 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.549841881 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.559155941 CEST	50623	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.559165955 CEST	443	50623	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.594769955 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:07.594809055 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:07.594950914 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:07.595308065 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:07.595325947 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:07.606822968 CEST	50625	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.606848955 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.606991053 CEST	50625	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.607166052 CEST	50625	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.607181072 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.662688971 CEST	50627	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.662709951 CEST	443	50627	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.662766933 CEST	50627	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.662985086 CEST	50628	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.662995100 CEST	443	50628	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.663116932 CEST	50628	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.663461924 CEST	50627	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.663475037 CEST	443	50627	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:07.663635015 CEST	50628	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:07.663645029 CEST	443	50628	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.298975945 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.299159050 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.299175978 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.300035954 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.300091982 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.300364971 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.300424099 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.300467014 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.300474882 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.311526060 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.311695099 CEST	50625	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.311709881 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.312000990 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.312268972 CEST	50625	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.312326908 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.312361956 CEST	50625	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.323847055 CEST	443	50627	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.324009895 CEST	50627	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.324031115 CEST	443	50627	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.324888945 CEST	443	50627	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.324935913 CEST	50627	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.325347900 CEST	50627	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.325402975 CEST	443	50627	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.325611115 CEST	50627	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.325618982 CEST	443	50627	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.339597940 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.352493048 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.354820967 CEST	50625	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.370137930 CEST	50627	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.376786947 CEST	443	50628	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.376971960 CEST	50628	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.376983881 CEST	443	50628	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.377846003 CEST	443	50628	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.377912998 CEST	50628	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.378667116 CEST	50628	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.378725052 CEST	443	50628	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.379020929 CEST	50628	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.379029989 CEST	443	50628	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.411592007 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.411608934 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.411614895 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.411636114 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.411648035 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.411665916 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.411681890 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.411699057 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.411726952 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.426592112 CEST	50628	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.426592112 CEST	443	50627	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.426642895 CEST	443	50627	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.426688910 CEST	50627	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.426692009 CEST	443	50627	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.426733971 CEST	50627	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.428054094 CEST	50627	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.428065062 CEST	443	50627	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.438565969 CEST	50633	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.438584089 CEST	443	50633	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.438730001 CEST	50633	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.438921928 CEST	50633	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.438936949 CEST	443	50633	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.452322960 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.452347994 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.452354908 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.452384949 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.452399969 CEST	50625	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.452411890 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.452420950 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.452442884 CEST	50625	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.452478886 CEST	50625	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.492486000 CEST	443	50628	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.492747068 CEST	443	50628	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.492793083 CEST	50628	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.493185997 CEST	50628	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.493196964 CEST	443	50628	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.496700048 CEST	50634	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.496715069 CEST	443	50634	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.496861935 CEST	50634	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.497205973 CEST	50634	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.497220039 CEST	443	50634	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.501183033 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.501204014 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.501245975 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.501255035 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.501285076 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.501293898 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.503371954 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.503385067 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.503427982 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.503436089 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.503468990 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.503468990 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.543075085 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.543093920 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.543123007 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.543142080 CEST	50625	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.543150902 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.543180943 CEST	50625	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.543181896 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.543236971 CEST	50625	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.543663025 CEST	50625	443	192.168.2.4	13.107.246.67
Aug 29, 2024 19:06:08.543668985 CEST	443	50625	13.107.246.67	192.168.2.4
Aug 29, 2024 19:06:08.547765970 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.547776937 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.547830105 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.548012972 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.548027039 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.591819048 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.591842890 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.591881990 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.591891050 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.591907024 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.591926098 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.593683004 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.593697071 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.593754053 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.593764067 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.593805075 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.596564054 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.596585035 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.596617937 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.596625090 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.596652985 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.596674919 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.598371983 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.598383904 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.598434925 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.598442078 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.598491907 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.682014942 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.682037115 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.682068110 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.682077885 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.682097912 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.682111025 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.683518887 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.683532953 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.683589935 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.683598995 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.683708906 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.685077906 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.685095072 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.685138941 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.685148001 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.685348034 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.686748028 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.686762094 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.686811924 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.686820030 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.686856985 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.688113928 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.688132048 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.688180923 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.688189983 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.688288927 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.689877033 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.689891100 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.689928055 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.689935923 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.689960957 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.689973116 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.691581011 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.691595078 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.691646099 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.691653967 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.691667080 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.691729069 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.692444086 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.692504883 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.692507029 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.692603111 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.692744017 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.692753077 CEST	443	50624	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:08.692764997 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:08.692823887 CEST	50624	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.106281996 CEST	443	50633	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.107194901 CEST	50633	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.107215881 CEST	443	50633	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.107562065 CEST	443	50633	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.111417055 CEST	50633	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.111493111 CEST	443	50633	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.112498045 CEST	50633	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.137082100 CEST	443	50634	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.141629934 CEST	50634	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.141638041 CEST	443	50634	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.141989946 CEST	443	50634	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.142383099 CEST	50634	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.142469883 CEST	443	50634	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.142586946 CEST	50634	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.156501055 CEST	443	50633	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.188498974 CEST	443	50634	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.194793940 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.195167065 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.195174932 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.196201086 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.196258068 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.196930885 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.196993113 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.197236061 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.197242975 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.212634087 CEST	443	50633	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.213274002 CEST	443	50633	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.213314056 CEST	443	50633	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.213316917 CEST	50633	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.213366032 CEST	50633	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.215477943 CEST	50633	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.215487003 CEST	443	50633	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.239892006 CEST	443	50634	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.240456104 CEST	443	50634	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.240525007 CEST	50634	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.240724087 CEST	50634	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.240730047 CEST	443	50634	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.244961023 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.301006079 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.301026106 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.301033974 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.301071882 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.301095963 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.301106930 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.301125050 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.301140070 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.301140070 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.301171064 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.436827898 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.436850071 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.436887980 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.436927080 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.436943054 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.436969995 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:09.436970949 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.437016010 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.447683096 CEST	50635	443	192.168.2.4	13.107.246.42
Aug 29, 2024 19:06:09.447693110 CEST	443	50635	13.107.246.42	192.168.2.4
Aug 29, 2024 19:06:10.594891071 CEST	50641	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:10.594918966 CEST	443	50641	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:10.594975948 CEST	50641	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:10.595139980 CEST	50641	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:10.595155001 CEST	443	50641	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:10.615243912 CEST	50642	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:10.615274906 CEST	443	50642	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:10.615389109 CEST	50642	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:10.615565062 CEST	50642	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:10.615576029 CEST	443	50642	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.053746939 CEST	50644	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.053761005 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.053831100 CEST	50644	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.054045916 CEST	50644	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.054059029 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.110652924 CEST	443	50642	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.110905886 CEST	50642	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.110927105 CEST	443	50642	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.112590075 CEST	443	50642	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.112654924 CEST	50642	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.113586903 CEST	50642	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.113666058 CEST	443	50642	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.113739967 CEST	50642	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.160511017 CEST	443	50642	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.164928913 CEST	50642	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.164943933 CEST	443	50642	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.212958097 CEST	50642	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.214175940 CEST	443	50641	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:11.214416027 CEST	50641	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:11.214426994 CEST	443	50641	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:11.215308905 CEST	443	50641	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:11.215374947 CEST	50641	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:11.216296911 CEST	50641	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:11.216351986 CEST	443	50641	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:11.216500998 CEST	50641	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:11.216506958 CEST	443	50641	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:11.260200024 CEST	50641	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:11.266289949 CEST	443	50642	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.267755985 CEST	443	50642	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.267976999 CEST	50642	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.268624067 CEST	50642	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.268639088 CEST	443	50642	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.319293976 CEST	50646	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.319334984 CEST	443	50646	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.319458008 CEST	50646	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.319788933 CEST	50646	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.319801092 CEST	443	50646	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.328502893 CEST	443	50641	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:11.329550028 CEST	443	50641	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:11.329602003 CEST	50641	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:11.329884052 CEST	50641	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:11.329891920 CEST	443	50641	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:11.347810030 CEST	50647	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:11.347820997 CEST	443	50647	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:11.347996950 CEST	50647	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:11.348903894 CEST	50647	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:11.348922014 CEST	443	50647	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:11.744280100 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.744746923 CEST	50644	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.744767904 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.745657921 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.745728016 CEST	50644	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.748308897 CEST	50644	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.748367071 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.748648882 CEST	50644	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.748656988 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.789865971 CEST	443	50646	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.790060043 CEST	50646	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.790077925 CEST	443	50646	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.793670893 CEST	443	50646	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.793737888 CEST	50646	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.793968916 CEST	50646	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.794069052 CEST	50646	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.794136047 CEST	443	50646	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.807102919 CEST	50644	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.838361025 CEST	50646	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.838373899 CEST	443	50646	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.866271973 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.866291046 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.866297960 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.866329908 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.866339922 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.866348028 CEST	50644	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.866348982 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.866364002 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.866390944 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.866393089 CEST	50644	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.866410017 CEST	50644	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.866415977 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.866426945 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.866471052 CEST	50644	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.867422104 CEST	50644	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.867434025 CEST	443	50644	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.880264997 CEST	50648	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.880280018 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.880338907 CEST	50648	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.880522966 CEST	50648	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:11.880537987 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:11.885230064 CEST	50646	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.900582075 CEST	443	50646	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.900788069 CEST	443	50646	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.900862932 CEST	50646	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.901269913 CEST	50646	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.901284933 CEST	443	50646	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.930237055 CEST	443	50647	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:11.930423975 CEST	50647	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:11.930433035 CEST	443	50647	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:11.931428909 CEST	443	50647	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:11.931483030 CEST	50647	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:11.931765079 CEST	50647	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:11.931823015 CEST	443	50647	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:11.931879997 CEST	50647	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:11.931886911 CEST	443	50647	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:11.978979111 CEST	50647	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:11.985301018 CEST	50649	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.985323906 CEST	443	50649	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:11.985488892 CEST	50649	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.985760927 CEST	50649	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:11.985771894 CEST	443	50649	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:12.037956953 CEST	443	50647	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:12.038005114 CEST	443	50647	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:12.038095951 CEST	50647	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:12.038501978 CEST	50647	443	192.168.2.4	34.107.199.61
Aug 29, 2024 19:06:12.038507938 CEST	443	50647	34.107.199.61	192.168.2.4
Aug 29, 2024 19:06:12.471559048 CEST	443	50649	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:12.494896889 CEST	50649	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:12.494921923 CEST	443	50649	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:12.495294094 CEST	443	50649	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:12.501446009 CEST	50649	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:12.501506090 CEST	443	50649	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:12.501516104 CEST	50649	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:12.501564026 CEST	50649	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:12.501585007 CEST	443	50649	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:12.520855904 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:12.556541920 CEST	50649	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:12.572284937 CEST	50648	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:12.587029934 CEST	50648	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:12.587038040 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:12.588238001 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:12.588310957 CEST	50648	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:12.588684082 CEST	50648	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:12.588748932 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:12.588896036 CEST	50648	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:12.588905096 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:12.634674072 CEST	50648	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:12.650063992 CEST	443	50649	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:12.650137901 CEST	443	50649	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:12.650316954 CEST	50649	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:12.651168108 CEST	50649	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:12.651185989 CEST	443	50649	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:12.658286095 CEST	50651	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:12.658322096 CEST	443	50651	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:12.658375025 CEST	50651	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:12.658580065 CEST	50651	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:12.658592939 CEST	443	50651	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:12.687545061 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:12.687563896 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:12.687571049 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:12.687596083 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:12.687608957 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:12.687616110 CEST	50648	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:12.687617064 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:12.687630892 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:12.687658072 CEST	50648	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:12.687683105 CEST	50648	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:12.687688112 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:12.687700987 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:12.687742949 CEST	50648	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:12.689085960 CEST	50648	443	192.168.2.4	13.107.246.45
Aug 29, 2024 19:06:12.689095020 CEST	443	50648	13.107.246.45	192.168.2.4
Aug 29, 2024 19:06:13.138170004 CEST	443	50651	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:13.138434887 CEST	50651	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:13.138452053 CEST	443	50651	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:13.138787985 CEST	443	50651	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:13.139163971 CEST	50651	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:13.139221907 CEST	443	50651	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:13.139281988 CEST	50651	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:13.180497885 CEST	443	50651	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:13.257960081 CEST	443	50651	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:13.259673119 CEST	443	50651	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:13.259800911 CEST	50651	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:13.260241985 CEST	50651	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:13.260256052 CEST	443	50651	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:13.497303963 CEST	80	49724	84.201.210.18	192.168.2.4
Aug 29, 2024 19:06:13.497399092 CEST	49724	80	192.168.2.4	84.201.210.18
Aug 29, 2024 19:06:13.497617006 CEST	49724	80	192.168.2.4	84.201.210.18
Aug 29, 2024 19:06:13.503465891 CEST	80	49724	84.201.210.18	192.168.2.4
Aug 29, 2024 19:06:15.811800957 CEST	50653	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:15.811836958 CEST	443	50653	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:15.812021017 CEST	50653	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:15.812201977 CEST	50653	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:15.812216997 CEST	443	50653	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:16.293633938 CEST	443	50653	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:16.293900013 CEST	50653	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:16.293915987 CEST	443	50653	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:16.294214964 CEST	443	50653	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:16.294704914 CEST	50653	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:16.294704914 CEST	50653	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:16.294761896 CEST	443	50653	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:16.294784069 CEST	50653	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:16.294791937 CEST	443	50653	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:16.339119911 CEST	50653	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:16.577168941 CEST	443	50653	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:16.577385902 CEST	443	50653	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:16.577428102 CEST	50653	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:16.577804089 CEST	50653	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:16.577817917 CEST	443	50653	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:16.581835032 CEST	50654	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:16.581851959 CEST	443	50654	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:16.581913948 CEST	50654	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:16.582118988 CEST	50654	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:16.582129002 CEST	443	50654	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:17.055109978 CEST	443	50654	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:17.055361986 CEST	50654	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:17.055381060 CEST	443	50654	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:17.055731058 CEST	443	50654	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:17.056207895 CEST	50654	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:17.056258917 CEST	443	50654	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:17.056399107 CEST	50654	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:17.096499920 CEST	443	50654	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:17.180973053 CEST	443	50654	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:17.182601929 CEST	443	50654	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:17.182743073 CEST	50654	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:17.183062077 CEST	50654	443	192.168.2.4	35.190.10.96
Aug 29, 2024 19:06:17.183073997 CEST	443	50654	35.190.10.96	192.168.2.4
Aug 29, 2024 19:06:42.839719057 CEST	50656	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:06:42.839786053 CEST	443	50656	142.250.185.228	192.168.2.4
Aug 29, 2024 19:06:42.840065002 CEST	50656	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:06:42.840646029 CEST	50656	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:06:42.840672970 CEST	443	50656	142.250.185.228	192.168.2.4
Aug 29, 2024 19:06:43.482125044 CEST	443	50656	142.250.185.228	192.168.2.4
Aug 29, 2024 19:06:43.482963085 CEST	50656	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:06:43.482985020 CEST	443	50656	142.250.185.228	192.168.2.4
Aug 29, 2024 19:06:43.483306885 CEST	443	50656	142.250.185.228	192.168.2.4
Aug 29, 2024 19:06:43.485549927 CEST	50656	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:06:43.485622883 CEST	443	50656	142.250.185.228	192.168.2.4
Aug 29, 2024 19:06:43.540534019 CEST	50656	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:06:48.275155067 CEST	49723	80	192.168.2.4	88.221.110.91
Aug 29, 2024 19:06:48.281519890 CEST	80	49723	88.221.110.91	192.168.2.4
Aug 29, 2024 19:06:48.281594992 CEST	49723	80	192.168.2.4	88.221.110.91
Aug 29, 2024 19:06:52.010080099 CEST	50622	443	192.168.2.4	152.199.21.175
Aug 29, 2024 19:06:52.010099888 CEST	443	50622	152.199.21.175	192.168.2.4
Aug 29, 2024 19:06:53.433979988 CEST	443	50656	142.250.185.228	192.168.2.4
Aug 29, 2024 19:06:53.434052944 CEST	443	50656	142.250.185.228	192.168.2.4
Aug 29, 2024 19:06:53.434245110 CEST	50656	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:06:53.907402992 CEST	50656	443	192.168.2.4	142.250.185.228
Aug 29, 2024 19:06:53.907430887 CEST	443	50656	142.250.185.228	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 29, 2024 19:05:39.298778057 CEST	53	55016	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:39.310950041 CEST	53	51179	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:40.276987076 CEST	53	54479	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:41.178311110 CEST	50021	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:41.178455114 CEST	59606	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:42.836323023 CEST	57854	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:42.837517023 CEST	62709	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:42.843339920 CEST	53	57854	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:42.845227957 CEST	53	62709	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:44.009566069 CEST	54283	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:44.010452032 CEST	63989	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:48.086685896 CEST	59824	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:48.087025881 CEST	55554	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:48.223740101 CEST	56446	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:48.224433899 CEST	53916	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:48.466469049 CEST	53	56446	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:48.466480970 CEST	53	53916	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:49.742762089 CEST	51261	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:49.742969036 CEST	50547	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:05:49.754688025 CEST	53	51261	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:49.756061077 CEST	53	50547	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:52.148073912 CEST	53	57398	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:58.064975023 CEST	53	56632	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:58.220192909 CEST	53	51163	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:59.709307909 CEST	53	63123	1.1.1.1	192.168.2.4
Aug 29, 2024 19:05:59.849728107 CEST	138	138	192.168.2.4	192.168.2.255
Aug 29, 2024 19:06:03.061744928 CEST	55016	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:03.062006950 CEST	50590	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:06.006942987 CEST	51013	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:06.007363081 CEST	56843	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:06.014729023 CEST	53	56843	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:06.015264988 CEST	53	51013	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:08.020217896 CEST	60096	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:08.020376921 CEST	56242	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:08.020931959 CEST	58664	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:08.021066904 CEST	60533	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:08.035614967 CEST	53	49915	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:08.380831957 CEST	53360	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:08.380985022 CEST	58020	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:09.020169973 CEST	53029	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:09.020365953 CEST	63769	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:10.562998056 CEST	57152	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:10.563278913 CEST	49203	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:10.582602978 CEST	60131	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:10.582947016 CEST	49658	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:10.590909958 CEST	53	60131	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:10.593758106 CEST	53	49658	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:10.605493069 CEST	56497	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:10.605622053 CEST	54549	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:10.614557028 CEST	53	56497	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:10.614573002 CEST	53	54549	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:11.014893055 CEST	59890	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:11.015047073 CEST	54050	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:11.305867910 CEST	61339	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:11.306149960 CEST	51251	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:11.316173077 CEST	53	51251	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:11.318866014 CEST	53	61339	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:11.336575031 CEST	60778	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:11.336944103 CEST	60380	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:11.344830990 CEST	53	60778	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:11.345474005 CEST	53	60380	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:17.038062096 CEST	53	58961	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:38.612173080 CEST	53	60892	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:39.908524990 CEST	53	52314	1.1.1.1	192.168.2.4
Aug 29, 2024 19:06:49.045672894 CEST	52544	53	192.168.2.4	1.1.1.1
Aug 29, 2024 19:06:49.045809984 CEST	59998	53	192.168.2.4	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 29, 2024 19:05:41.225110054 CEST	192.168.2.4	1.1.1.1	c2e8	(Port unreachable)	Destination Unreachable
Aug 29, 2024 19:05:47.122026920 CEST	192.168.2.4	1.1.1.1	c2dc	(Port unreachable)	Destination Unreachable
Aug 29, 2024 19:06:03.090568066 CEST	192.168.2.4	1.1.1.1	c28d	(Port unreachable)	Destination Unreachable
Aug 29, 2024 19:06:08.047547102 CEST	192.168.2.4	1.1.1.1	c2a1	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 29, 2024 19:05:41.178311110 CEST	192.168.2.4	1.1.1.1	0x32e6	Standard query (0)	nam.safelink.emails.azure.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:05:41.178455114 CEST	192.168.2.4	1.1.1.1	0xd191	Standard query (0)	nam.safelink.emails.azure.net	65	IN (0x0001)	false
Aug 29, 2024 19:05:42.836323023 CEST	192.168.2.4	1.1.1.1	0x3e8f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:05:42.837517023 CEST	192.168.2.4	1.1.1.1	0xc36e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 29, 2024 19:05:44.009566069 CEST	192.168.2.4	1.1.1.1	0x5f61	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:05:44.010452032 CEST	192.168.2.4	1.1.1.1	0xb87a	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Aug 29, 2024 19:05:48.086685896 CEST	192.168.2.4	1.1.1.1	0x4e7d	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:05:48.087025881 CEST	192.168.2.4	1.1.1.1	0x466b	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Aug 29, 2024 19:05:48.223740101 CEST	192.168.2.4	1.1.1.1	0x93e2	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:05:48.224433899 CEST	192.168.2.4	1.1.1.1	0x336a	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 29, 2024 19:05:49.742762089 CEST	192.168.2.4	1.1.1.1	0x687b	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:05:49.742969036 CEST	192.168.2.4	1.1.1.1	0x63d6	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 29, 2024 19:06:03.061744928 CEST	192.168.2.4	1.1.1.1	0x2b7e	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:03.062006950 CEST	192.168.2.4	1.1.1.1	0x53b7	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Aug 29, 2024 19:06:06.006942987 CEST	192.168.2.4	1.1.1.1	0x17d0	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:06.007363081 CEST	192.168.2.4	1.1.1.1	0x5746	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Aug 29, 2024 19:06:08.020217896 CEST	192.168.2.4	1.1.1.1	0xac07	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:08.020376921 CEST	192.168.2.4	1.1.1.1	0x47d3	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Aug 29, 2024 19:06:08.020931959 CEST	192.168.2.4	1.1.1.1	0xcfd2	Standard query (0)	msft.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:08.021066904 CEST	192.168.2.4	1.1.1.1	0x9879	Standard query (0)	msft.hsprotect.net	65	IN (0x0001)	false
Aug 29, 2024 19:06:08.380831957 CEST	192.168.2.4	1.1.1.1	0x76d5	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:08.380985022 CEST	192.168.2.4	1.1.1.1	0x7b9a	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Aug 29, 2024 19:06:09.020169973 CEST	192.168.2.4	1.1.1.1	0x4923	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:09.020365953 CEST	192.168.2.4	1.1.1.1	0x4c21	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Aug 29, 2024 19:06:10.562998056 CEST	192.168.2.4	1.1.1.1	0x384e	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:10.563278913 CEST	192.168.2.4	1.1.1.1	0x9074	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Aug 29, 2024 19:06:10.582602978 CEST	192.168.2.4	1.1.1.1	0x4996	Standard query (0)	stk.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:10.582947016 CEST	192.168.2.4	1.1.1.1	0xc143	Standard query (0)	stk.hsprotect.net	65	IN (0x0001)	false
Aug 29, 2024 19:06:10.605493069 CEST	192.168.2.4	1.1.1.1	0xdafc	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:10.605622053 CEST	192.168.2.4	1.1.1.1	0xfcf0	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Aug 29, 2024 19:06:11.014893055 CEST	192.168.2.4	1.1.1.1	0xdfa9	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:11.015047073 CEST	192.168.2.4	1.1.1.1	0x9a6	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Aug 29, 2024 19:06:11.305867910 CEST	192.168.2.4	1.1.1.1	0x7909	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:11.306149960 CEST	192.168.2.4	1.1.1.1	0xe37e	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Aug 29, 2024 19:06:11.336575031 CEST	192.168.2.4	1.1.1.1	0xf93d	Standard query (0)	stk.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:11.336944103 CEST	192.168.2.4	1.1.1.1	0xb1a9	Standard query (0)	stk.hsprotect.net	65	IN (0x0001)	false
Aug 29, 2024 19:06:49.045672894 CEST	192.168.2.4	1.1.1.1	0x98c7	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:49.045809984 CEST	192.168.2.4	1.1.1.1	0xfce8	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 29, 2024 19:05:41.209331989 CEST	1.1.1.1	192.168.2.4	0x32e6	No error (0)	nam.safelink.emails.azure.net	meo-traf-nam.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:41.209331989 CEST	1.1.1.1	192.168.2.4	0x32e6	No error (0)	meo-afd-nam-ggd3beb3e0hnezbu.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:41.209331989 CEST	1.1.1.1	192.168.2.4	0x32e6	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:41.209331989 CEST	1.1.1.1	192.168.2.4	0x32e6	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:05:41.225048065 CEST	1.1.1.1	192.168.2.4	0xd191	No error (0)	nam.safelink.emails.azure.net	meo-traf-nam.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:41.225048065 CEST	1.1.1.1	192.168.2.4	0xd191	No error (0)	meo-afd-nam-ggd3beb3e0hnezbu.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:42.410938978 CEST	1.1.1.1	192.168.2.4	0xd956	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:42.412368059 CEST	1.1.1.1	192.168.2.4	0x4382	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:42.843339920 CEST	1.1.1.1	192.168.2.4	0x3e8f	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:05:42.845227957 CEST	1.1.1.1	192.168.2.4	0xc36e	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 29, 2024 19:05:44.017033100 CEST	1.1.1.1	192.168.2.4	0x5f61	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:44.017960072 CEST	1.1.1.1	192.168.2.4	0xb87a	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:45.635169029 CEST	1.1.1.1	192.168.2.4	0xb722	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:45.635169029 CEST	1.1.1.1	192.168.2.4	0xb722	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:05:47.106779099 CEST	1.1.1.1	192.168.2.4	0x571f	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:47.106779099 CEST	1.1.1.1	192.168.2.4	0x571f	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:05:48.098716021 CEST	1.1.1.1	192.168.2.4	0x4e7d	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:48.098726988 CEST	1.1.1.1	192.168.2.4	0x466b	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:48.466469049 CEST	1.1.1.1	192.168.2.4	0x93e2	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:48.466469049 CEST	1.1.1.1	192.168.2.4	0x93e2	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:48.466469049 CEST	1.1.1.1	192.168.2.4	0x93e2	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:05:48.466480970 CEST	1.1.1.1	192.168.2.4	0x336a	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:48.466480970 CEST	1.1.1.1	192.168.2.4	0x336a	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:49.754688025 CEST	1.1.1.1	192.168.2.4	0x687b	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:49.754688025 CEST	1.1.1.1	192.168.2.4	0x687b	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:49.754688025 CEST	1.1.1.1	192.168.2.4	0x687b	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:05:49.756061077 CEST	1.1.1.1	192.168.2.4	0x63d6	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:49.756061077 CEST	1.1.1.1	192.168.2.4	0x63d6	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:53.776884079 CEST	1.1.1.1	192.168.2.4	0xec6e	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:05:53.776884079 CEST	1.1.1.1	192.168.2.4	0xec6e	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:05:54.424465895 CEST	1.1.1.1	192.168.2.4	0x44fb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:05:54.424465895 CEST	1.1.1.1	192.168.2.4	0x44fb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:03.068372965 CEST	1.1.1.1	192.168.2.4	0x2b7e	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:03.090354919 CEST	1.1.1.1	192.168.2.4	0x53b7	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:06.012984037 CEST	1.1.1.1	192.168.2.4	0x3ede	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:06.012984037 CEST	1.1.1.1	192.168.2.4	0x3ede	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:06.014729023 CEST	1.1.1.1	192.168.2.4	0x5746	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:06.014729023 CEST	1.1.1.1	192.168.2.4	0x5746	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:06.015264988 CEST	1.1.1.1	192.168.2.4	0x17d0	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:06.015264988 CEST	1.1.1.1	192.168.2.4	0x17d0	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:06.015264988 CEST	1.1.1.1	192.168.2.4	0x17d0	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:06.060336113 CEST	1.1.1.1	192.168.2.4	0xbb74	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:06.060336113 CEST	1.1.1.1	192.168.2.4	0xbb74	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:06.061733961 CEST	1.1.1.1	192.168.2.4	0xc40a	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:06.061733961 CEST	1.1.1.1	192.168.2.4	0xc40a	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:06.063965082 CEST	1.1.1.1	192.168.2.4	0x14ee	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:07.593955994 CEST	1.1.1.1	192.168.2.4	0xba7	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:07.593955994 CEST	1.1.1.1	192.168.2.4	0xba7	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:08.028748035 CEST	1.1.1.1	192.168.2.4	0xac07	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:08.030209064 CEST	1.1.1.1	192.168.2.4	0xcfd2	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:08.030544043 CEST	1.1.1.1	192.168.2.4	0x9879	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:08.047493935 CEST	1.1.1.1	192.168.2.4	0x47d3	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:08.389111042 CEST	1.1.1.1	192.168.2.4	0x76d5	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:08.390244007 CEST	1.1.1.1	192.168.2.4	0x7b9a	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:09.029177904 CEST	1.1.1.1	192.168.2.4	0x4c21	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:09.030083895 CEST	1.1.1.1	192.168.2.4	0x4923	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:10.572742939 CEST	1.1.1.1	192.168.2.4	0x9074	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:10.574233055 CEST	1.1.1.1	192.168.2.4	0x384e	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:10.590909958 CEST	1.1.1.1	192.168.2.4	0x4996	No error (0)	stk.hsprotect.net		34.107.199.61	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:10.614557028 CEST	1.1.1.1	192.168.2.4	0xdafc	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:10.614557028 CEST	1.1.1.1	192.168.2.4	0xdafc	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:10.614573002 CEST	1.1.1.1	192.168.2.4	0xfcf0	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:11.024132013 CEST	1.1.1.1	192.168.2.4	0xdfa9	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:11.024240017 CEST	1.1.1.1	192.168.2.4	0x9a6	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:11.052355051 CEST	1.1.1.1	192.168.2.4	0xa7e9	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:11.052355051 CEST	1.1.1.1	192.168.2.4	0xa7e9	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:11.316173077 CEST	1.1.1.1	192.168.2.4	0xe37e	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:11.318866014 CEST	1.1.1.1	192.168.2.4	0x7909	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:11.318866014 CEST	1.1.1.1	192.168.2.4	0x7909	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:11.344830990 CEST	1.1.1.1	192.168.2.4	0xf93d	No error (0)	stk.hsprotect.net		34.107.199.61	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:11.879551888 CEST	1.1.1.1	192.168.2.4	0x2965	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:11.879551888 CEST	1.1.1.1	192.168.2.4	0x2965	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Aug 29, 2024 19:06:49.054264069 CEST	1.1.1.1	192.168.2.4	0x98c7	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 19:06:49.055021048 CEST	1.1.1.1	192.168.2.4	0xfce8	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

nam.safelink.emails.azure.net

https:

aadcdn.msauth.net

aadcdn.msftauth.net

logincdn.msauth.net

collector-pxzc5j78di.hsprotect.net

stk.hsprotect.net

acctcdn.msauth.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	13.107.246.60	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:41 UTC	893	OUT	GET /redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT1iOTZlMDJlZi1iNjQ3LTQ4ZjAtYWFmZC01YjQ4MDU2YTMxM2Umcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l HTTP/1.1 Host: nam.safelink.emails.azure.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:42 UTC	786	IN	HTTP/1.1 302 Found Date: Thu, 29 Aug 2024 17:05:42 GMT Content-Type: text/html; charset=utf-8 Content-Length: 177 Connection: close Cache-Control: private Location: https://admin.microsoft.com/adminportal/home?#/subscriptions Set-Cookie: ASP.NET_SessionId=ffwjqwwmhiss1ovned1fkhyl; path=/; secure; HttpOnly; SameSite=Lax Strict-Transport-Security: max-age=31536000 Azure-Version: 20240826-0702-420163 Azure-SiteName: meo-api-nam-cu10-mwh Azure-InstanceId: de84ecad81fffeff079ac405504b6f244085dd949abe8a1b471a7b2bc0de1fca Azure-RegionName: West US 2 Azure-SlotName: unknown X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Arr-Disable-Session-Affinity: true x-azure-ref: 20240829T170541Z-165795675762h26c6ze2t4q76000000002b0000000001056 X-Cache: CONFIG_NOCACHE
2024-08-29 17:05:42 UTC	177	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 64 6d 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 61 64 6d 69 6e 70 6f 72 74 61 6c 2f 68 6f 6d 65 3f 23 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://admin.microsoft.com/adminportal/home?#/subscriptions">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49746	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:45 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-29 17:05:45 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=145868 Date: Thu, 29 Aug 2024 17:05:45 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49748	13.107.246.60	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:46 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:46 UTC	818	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:05:46 GMT Content-Type: application/x-javascript Content-Length: 49804 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:28 GMT ETag: 0x8DCB563D09FF90F x-ms-request-id: 55534830-d01e-0036-3c4f-f9718b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T170546Z-165795675767hwjqv3v00bvq34000000024g00000000tu2y x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-08-29 17:05:46 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a e8 6e 66 80 30 04 66 66 17 58 2e 27 56 c0 dd c1 ce da 0e 34 13 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 c1 45 ef fc a2 d2 ff 58 b9 f8 7c 74 7e 50 39 83 b7 7f 54 4e fb 17 47 fb 87 3f 5e 0f 7e 14 ff bf b8 f7 e3 ca d8 9f 88 0a fc 0e dd 58 78 95 30 a8 84 51 c5 0f 46 61 34 0d 23 37 11 71 e5 01 fe 46 be 3b a9 8c a3 f0 a1 92 dc 8b ca 34 0a bf 88 51 12 57 26 7e 9c 40 a1 a1 98 84 4f 95 2a 54 17 79 95 33 37 4a 9e 2b 47 67 66 1d ea 17 50 9b 7f e7 07 50 7a 14 4e 9f e1 f9 3e a9 04 61 e2 8f 44 c5 0d 3c aa 6d 02 2f 41 2c 2a b3 c0 13 51 e5 e9 de 1f dd 57 4e fc 51 14 c6 e1 38 a9 44 62 24 Data Ascii: m[80OL;wnf0ffX.'V4r~=,JUT~l?EX\|t~P9TNG?^~Xx0QFa4#7qF;4QW&~@OTy37J+GgfPPzN>aD<m/A,QWNQ8Db$
2024-08-29 17:05:46 UTC	16384	IN	Data Raw: 39 ce 05 9e bd 43 1a 07 3e e0 59 bf e7 e2 51 a8 73 30 56 ec 10 a1 fe a6 75 c8 0d 27 1c c8 cc 3b 47 70 68 d3 97 de 38 51 da 2b 6d ae c3 c3 92 66 30 2c c7 e2 0e a7 d6 2d 0d 94 23 88 9f 19 2d 1f 22 de b2 95 e2 e1 43 fe ba 22 db f8 db c7 de c7 bd 8f bb 46 5e a9 e2 79 8b bb 39 80 f2 13 69 1c da 46 ac bd 01 17 40 95 be ca 7a c8 5e 78 9e 4e f0 34 2a 49 07 20 d2 55 18 4e aa f9 a9 79 19 46 01 fd be 74 21 2c 48 25 ed 0b d8 5c e1 21 97 5b fb 1f fa e7 08 c5 f1 db 24 52 d4 24 94 ea 86 a0 ac 71 9b a5 70 df 6e 64 32 7d bb 49 7e 1c 3a 35 86 3a 0b bc 11 b9 bc 63 53 13 db b6 21 b2 17 b6 8c 6c 3a de c8 b0 48 30 1a 78 e1 93 b1 f2 84 d9 a0 da 32 3b 49 9d 0e a3 ba 0c c0 20 f1 60 44 0e bf e1 b1 1f 00 db 07 eb f8 0b 93 7a ee 80 51 71 65 d0 f1 46 c6 4d b5 e4 80 4a d1 c1 db 33 01 Data Ascii: 9C>YQs0Vu';Gph8Q+mf0,-#-"C"F^y9iF@z^xN4*I UNyFt!,H%\![$R$qpnd2}I~:5:cS!l:H0x2;I `DzQqeFMJ3
2024-08-29 17:05:46 UTC	16384	IN	Data Raw: 6a cd f9 76 21 34 7e 0a 9b e9 a1 b3 3a b4 f9 ab b6 41 4a 73 39 49 49 78 a3 6d 90 4f f2 d1 5f e3 49 57 25 53 20 30 da 2c 5f 9e fb be 25 d9 53 ac e2 06 6d fc 67 4d 28 10 b5 f0 53 88 c0 7e 3e c3 5e b0 96 88 a4 6a 56 81 ac 3c e2 4c 74 3e 79 ed bb 38 fd f9 09 7e 74 9f 32 42 c7 41 04 97 ac e7 a6 59 52 fe 59 8b 9a b4 f3 4a 8b b4 d6 10 bd d9 0f af 84 78 1b c9 34 c0 e1 99 a8 cd 23 a0 ce 8d b4 0e 00 99 43 46 38 aa 5e e1 a4 f2 b1 1e 2b 7f d5 16 32 3e 8d f2 99 ec b5 f7 ea 3d de 6a 55 6b ab 45 a6 da 10 6c 86 da dd 41 0a 35 3a 57 9c 6d af f8 17 dd 86 fe 9a 8f 67 27 ed 3a 5b 96 b7 fe 68 25 95 d8 2b b0 d4 b5 c8 c6 c9 ae 2d 62 2a 76 b4 6a a4 5b 48 7c 83 75 29 d5 f1 80 c1 6d 15 f3 46 e2 9d 67 bd 75 10 d5 0f fa 52 85 d6 65 ac 67 bd 66 c1 72 a4 33 6d ea 5c 99 93 86 6e a9 fd Data Ascii: jv!4~:AJs9IIxmO_IW%S 0,_%SmgM(S~>^jV<Lt>y8~t2BAYRYJx4#CF8^+2>=jUkElA5:Wmg':[h%+-b*vj[H\|u)mFguRegfr3m\n
2024-08-29 17:05:46 UTC	1470	IN	Data Raw: 8a 48 6d df 91 4c 54 19 a7 6a 04 24 62 96 25 0b 24 d4 c0 a5 a6 45 2f 63 f8 e4 e0 0e d0 f4 68 6c d8 37 44 70 d3 c6 9c 6a 8d 33 2e 82 62 3b 12 9c f1 56 32 89 89 b7 1c f8 4d 92 80 1d 13 a3 81 6b 0f 74 b0 f6 84 70 e9 e9 2c 49 af 92 78 a0 74 57 ec ad 25 df 18 38 c3 d4 53 29 e6 ae 8e 8b 93 b1 d2 56 e2 b7 bf 85 b6 94 6e 6e da cf 4a 54 d6 75 6d ac a3 fc 6d 23 e6 09 04 32 6d 06 4d 28 cf 16 35 28 24 8a d7 e3 11 0c 87 53 1f 83 11 24 c4 fc c3 89 41 42 39 c4 98 16 56 9e 4f 6d b3 c6 ef 84 26 af d9 dd a3 84 63 8c fa 7b eb 2a bd af dc 00 b7 88 03 05 8e ec fa fd 82 bd 9f 8c 0b 40 5f cc ab 16 c9 2c 13 c1 24 45 9b f2 c5 95 32 0f ac 16 0c f7 e9 05 a9 ed 10 12 2b 87 10 71 c9 25 6e 4c d0 b4 d8 26 e3 b3 13 af d7 74 bb 7d 5f d3 95 83 db 5b 37 ea 39 ca bb f7 00 bc c7 7d 71 70 80 Data Ascii: HmLTj$b%$E/chl7Dpj3.b;V2Mktp,IxtW%8S)VnnJTumm#2mM(5($S$AB9VOm&c{*@_,$E2+q%nL&t}_[79}qp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49749	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:46 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-29 17:05:46 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=145820 Date: Thu, 29 Aug 2024 17:05:46 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-29 17:05:46 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49752	13.107.246.60	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:47 UTC	408	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:47 UTC	797	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:05:47 GMT Content-Type: application/x-javascript Content-Length: 49804 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:28 GMT ETag: 0x8DCB563D09FF90F x-ms-request-id: 55534830-d01e-0036-3c4f-f9718b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T170547Z-165795675762h26c6ze2t4q760000000027000000000gcs6 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 17:05:47 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a e8 6e 66 80 30 04 66 66 17 58 2e 27 56 c0 dd c1 ce da 0e 34 13 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 c1 45 ef fc a2 d2 ff 58 b9 f8 7c 74 7e 50 39 83 b7 7f 54 4e fb 17 47 fb 87 3f 5e 0f 7e 14 ff bf b8 f7 e3 ca d8 9f 88 0a fc 0e dd 58 78 95 30 a8 84 51 c5 0f 46 61 34 0d 23 37 11 71 e5 01 fe 46 be 3b a9 8c a3 f0 a1 92 dc 8b ca 34 0a bf 88 51 12 57 26 7e 9c 40 a1 a1 98 84 4f 95 2a 54 17 79 95 33 37 4a 9e 2b 47 67 66 1d ea 17 50 9b 7f e7 07 50 7a 14 4e 9f e1 f9 3e a9 04 61 e2 8f 44 c5 0d 3c aa 6d 02 2f 41 2c 2a b3 c0 13 51 e5 e9 de 1f dd 57 4e fc 51 14 c6 e1 38 a9 44 62 24 Data Ascii: m[80OL;wnf0ffX.'V4r~=,JUT~l?EX\|t~P9TNG?^~Xx0QFa4#7qF;4QW&~@OTy37J+GgfPPzN>aD<m/A,QWNQ8Db$
2024-08-29 17:05:48 UTC	16384	IN	Data Raw: a1 fe a6 75 c8 0d 27 1c c8 cc 3b 47 70 68 d3 97 de 38 51 da 2b 6d ae c3 c3 92 66 30 2c c7 e2 0e a7 d6 2d 0d 94 23 88 9f 19 2d 1f 22 de b2 95 e2 e1 43 fe ba 22 db f8 db c7 de c7 bd 8f bb 46 5e a9 e2 79 8b bb 39 80 f2 13 69 1c da 46 ac bd 01 17 40 95 be ca 7a c8 5e 78 9e 4e f0 34 2a 49 07 20 d2 55 18 4e aa f9 a9 79 19 46 01 fd be 74 21 2c 48 25 ed 0b d8 5c e1 21 97 5b fb 1f fa e7 08 c5 f1 db 24 52 d4 24 94 ea 86 a0 ac 71 9b a5 70 df 6e 64 32 7d bb 49 7e 1c 3a 35 86 3a 0b bc 11 b9 bc 63 53 13 db b6 21 b2 17 b6 8c 6c 3a de c8 b0 48 30 1a 78 e1 93 b1 f2 84 d9 a0 da 32 3b 49 9d 0e a3 ba 0c c0 20 f1 60 44 0e bf e1 b1 1f 00 db 07 eb f8 0b 93 7a ee 80 51 71 65 d0 f1 46 c6 4d b5 e4 80 4a d1 c1 db 33 01 93 60 94 84 63 3e bb 8d 4e f6 d7 4e 72 4b bf 55 91 07 da 56 22 Data Ascii: u';Gph8Q+mf0,-#-"C"F^y9iF@z^xN4*I UNyFt!,H%\![$R$qpnd2}I~:5:cS!l:H0x2;I `DzQqeFMJ3`c>NNrKUV"
2024-08-29 17:05:48 UTC	16384	IN	Data Raw: 49 49 78 a3 6d 90 4f f2 d1 5f e3 49 57 25 53 20 30 da 2c 5f 9e fb be 25 d9 53 ac e2 06 6d fc 67 4d 28 10 b5 f0 53 88 c0 7e 3e c3 5e b0 96 88 a4 6a 56 81 ac 3c e2 4c 74 3e 79 ed bb 38 fd f9 09 7e 74 9f 32 42 c7 41 04 97 ac e7 a6 59 52 fe 59 8b 9a b4 f3 4a 8b b4 d6 10 bd d9 0f af 84 78 1b c9 34 c0 e1 99 a8 cd 23 a0 ce 8d b4 0e 00 99 43 46 38 aa 5e e1 a4 f2 b1 1e 2b 7f d5 16 32 3e 8d f2 99 ec b5 f7 ea 3d de 6a 55 6b ab 45 a6 da 10 6c 86 da dd 41 0a 35 3a 57 9c 6d af f8 17 dd 86 fe 9a 8f 67 27 ed 3a 5b 96 b7 fe 68 25 95 d8 2b b0 d4 b5 c8 c6 c9 ae 2d 62 2a 76 b4 6a a4 5b 48 7c 83 75 29 d5 f1 80 c1 6d 15 f3 46 e2 9d 67 bd 75 10 d5 0f fa 52 85 d6 65 ac 67 bd 66 c1 72 a4 33 6d ea 5c 99 93 86 6e a9 fd 34 e0 24 b4 0d 56 b1 61 56 94 05 d2 f1 9b 06 fa d6 bf 56 69 91 Data Ascii: IIxmO_IW%S 0,_%SmgM(S~>^jV<Lt>y8~t2BAYRYJx4#CF8^+2>=jUkElA5:Wmg':[h%+-b*vj[H\|u)mFguRegfr3m\n4$VaVVi
2024-08-29 17:05:48 UTC	1449	IN	Data Raw: 45 2f 63 f8 e4 e0 0e d0 f4 68 6c d8 37 44 70 d3 c6 9c 6a 8d 33 2e 82 62 3b 12 9c f1 56 32 89 89 b7 1c f8 4d 92 80 1d 13 a3 81 6b 0f 74 b0 f6 84 70 e9 e9 2c 49 af 92 78 a0 74 57 ec ad 25 df 18 38 c3 d4 53 29 e6 ae 8e 8b 93 b1 d2 56 e2 b7 bf 85 b6 94 6e 6e da cf 4a 54 d6 75 6d ac a3 fc 6d 23 e6 09 04 32 6d 06 4d 28 cf 16 35 28 24 8a d7 e3 11 0c 87 53 1f 83 11 24 c4 fc c3 89 41 42 39 c4 98 16 56 9e 4f 6d b3 c6 ef 84 26 af d9 dd a3 84 63 8c fa 7b eb 2a bd af dc 00 b7 88 03 05 8e ec fa fd 82 bd 9f 8c 0b 40 5f cc ab 16 c9 2c 13 c1 24 45 9b f2 c5 95 32 0f ac 16 0c f7 e9 05 a9 ed 10 12 2b 87 10 71 c9 25 6e 4c d0 b4 d8 26 e3 b3 13 af d7 74 bb 7d 5f d3 95 83 db 5b 37 ea 39 ca bb f7 00 bc c7 7d 71 70 80 36 07 87 17 11 46 47 79 ad 8b 01 fd 00 09 4b 55 8e 3a 38 8f 1e Data Ascii: E/chl7Dpj3.b;V2Mktp,IxtW%8S)VnnJTumm#2mM(5($S$AB9VOm&c{*@_,$E2+q%nL&t}_[79}qp6FGyKU:8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49755	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:49 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:49 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4857420 Cache-Control: public, max-age=31536000 Content-MD5: SJgdPPV+fFjKfj6FHvk1Tg== Content-Type: text/css Date: Thu, 29 Aug 2024 17:05:49 GMT Etag: 0x8DC9BAA0E5931F9 Last-Modified: Wed, 03 Jul 2024 21:49:46 GMT Server: ECAcc (lhc/794C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 6c7d298f-b01e-00dc-1d08-ce9a59000000 x-ms-version: 2009-09-19 Content-Length: 113401 Connection: close
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-08-29 17:05:49 UTC	1	IN	Data Raw: 73 Data Ascii: s
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a 6c Data Ascii: -1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:l
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f Data Ascii: gin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-bo
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 6c 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 Data Ascii: low-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.tab
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 49 22 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 Data Ascii: I","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mong
2024-08-29 17:05:49 UTC	4	IN	Data Raw: 5b 74 79 70 Data Ascii: [typ
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: e="reset"].btn-primary:hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{background-col
2024-08-29 17:05:49 UTC	15098	IN	Data Raw: 4d 61 74 68 22 7d 2e 61 70 70 2d 6e 61 6d 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 Data Ascii: Math"}.app-name{margin-bottom:20px;margin-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;pad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49756	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:49 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:49 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1864273 Cache-Control: public, max-age=31536000 Content-MD5: uaBUkDWJZJ75uKxjc6vkvw== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 17:05:49 GMT Etag: 0x8DCB563CA8588E7 Last-Modified: Mon, 05 Aug 2024 15:32:18 GMT Server: ECAcc (lhc/7971) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9a732ed0-201e-0054-8041-e9ce30000000 x-ms-version: 2009-09-19 Content-Length: 449540 Connection: close
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: DING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthoriz
2024-08-29 17:05:49 UTC	2	IN	Data Raw: 54 61 Data Ascii: Ta
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 74 61 72 67 65 74 3f 65 2e 74 61 72 67 65 74 3a 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3f 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3a 6e 75 6c 6c 3a 6e 75 6c 6c 7d 7d 2c 44 3d 6e 2e 51 75 65 72 79 53 74 72 69 6e 67 3d 7b 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2c 74 3d 6e 75 6c 6c 2c 69 3d 6e 75 6c 6c 3b 69 66 28 65 29 7b 76 61 72 20 61 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 2c 6f 3d 65 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 2d 31 21 3d 3d 6f 26 26 28 2d 31 3d 3d 3d 61 7c 7c 6f 3c 61 29 3f 28 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6f 29 2c 69 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 6f 2b Data Ascii: rget:function(e){return e?e.target?e.target:e.srcElement?e.srcElement:null:null}},D=n.QueryString={parse:function(e){var n=e,t=null,i=null;if(e){var a=e.indexOf("?"),o=e.indexOf("#");-1!==o&&(-1===a\|\|o<a)?(n=e.substring(0,o),i=d.doubleSplit(e.substring(o+
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 50 61 73 73 77 6f 72 64 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 69 64 69 6e 67 4d 6f 64 65 3d 69 2e 48 69 64 69 6e 67 4d 6f 64 65 2e 48 69 64 65 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 45 76 65 6e 74 54 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 72 65 74 75 72 6e 7b 65 76 65 6e 74 49 64 3a 65 2c 65 76 65 6e 74 4c 65 76 65 6c 3a 74 7c 7c 69 2e 45 76 Data Ascii: tTextBoxPropertyLogOption(e,n)},s.getPasswordTextBoxPropertyLogOption=function(e,n){return(n=n\|\|{}).hidingMode=i.HidingMode.Hide,s.getDefaultTextBoxPropertyLogOption(e,n)},s.getDefaultEventTracingOptions=function(e,n,t){return{eventId:e,eventLevel:t\|\|i.Ev
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 74 68 69 73 5b 75 2e 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 5d 3d 62 29 2c 76 26 26 28 74 68 69 73 5b 75 2e 43 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 5d 3d 76 29 7d 2c 6e 2e 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 2c 61 2c 63 2c 64 3d 74 68 69 73 2c 6c 3d 70 2e 4e 6f 6e 65 2c 75 3d 22 22 2c 66 3d 22 22 2c 67 3d 22 22 2c 6d 3d 65 2e 64 61 74 61 2c 62 3d 65 2e 6f 6e 53 65 6e 64 2c 76 3d 65 2e 6f 6e 53 65 6e 64 46 61 69 6c 2c 68 3d 65 2e 6f 6e 46 6c 6f 77 45 78 70 69 72 65 64 2c 5f 3d 65 2e 74 69 6d 65 6f 75 74 7c 7c 33 65 34 2c 43 3d 65 2e 73 69 74 65 49 64 2c 53 3d 65 2e 63 6c 69 65 6e 74 49 64 2c 78 3d 65 2e 66 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 77 3d 65 2e 6e 6f 50 61 42 75 62 62 6c Data Ascii: this[u.ProofConfirmation]=b),v&&(this[u.CanaryFlowToken]=v)},n.Request=function(e){var n,t,a,c,d=this,l=p.None,u="",f="",g="",m=e.data,b=e.onSend,v=e.onSendFail,h=e.onFlowExpired,_=e.timeout\|\|3e4,C=e.siteId,S=e.clientId,x=e.forwardedClientId,w=e.noPaBubbl
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 61 6d 73 7c 7c 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 61 63 65 62 6f 6f 6b 50 61 72 61 6d 73 29 29 29 72 65 74 75 72 6e 20 69 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 6d 2e 52 65 6d 6f 74 65 4e 47 43 3a 63 61 73 65 20 6d 2e 46 65 64 65 72 61 74 69 6f 6e 3a 63 61 73 65 20 6d 2e 41 63 63 65 73 73 50 61 73 73 3a 63 61 73 65 20 6d 2e 4e 6f 50 72 65 66 65 72 72 65 64 43 72 65 64 65 6e 74 69 61 6c 3a 6f 26 26 6f 2e 53 61 6d 6c 52 65 71 75 65 73 74 26 26 6f 2e 52 65 6c 61 79 53 74 61 74 65 3f 28 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 2c 69 2e 69 64 70 52 65 64 69 72 65 63 74 50 6f 73 74 50 61 72 61 6d 73 3d 7b 53 41 4d 4c 52 65 71 75 Data Ascii: ams\|\|n.Credentials.FacebookParams)))return i;switch(a){case m.RemoteNGC:case m.Federation:case m.AccessPass:case m.NoPreferredCredential:o&&o.SamlRequest&&o.RelayState?(i.idpRedirectUrl=n.Credentials.FederationRedirectUrl,i.idpRedirectPostParams={SAMLRequ
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 61 74 65 28 29 2c 6e 2e 6f 6e 52 65 64 69 72 65 63 74 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 52 65 67 69 73 74 65 72 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 55 6e 72 65 67 69 73 74 65 72 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 68 6f 77 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 55 70 64 61 74 65 46 6c 6f 77 54 6f 6b 65 6e 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 63 72 65 64 65 6e 74 69 61 6c 43 6f 75 6e 74 3d 30 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 54 79 70 65 3d 6e 75 6c 6c 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 53 68 6f 77 6e 4f 6e 6c 79 4f 6e 50 69 63 6b Data Ascii: ate(),n.onRedirect=o.create(),n.onRegisterDialog=o.create(),n.onUnregisterDialog=o.create(),n.onShowDialog=o.create(),n.onSetPendingRequest=o.create(),n.onUpdateFlowToken=o.create(),n.credentialCount=0,n.selectedCredType=null,n.selectedCredShownOnlyOnPick
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 61 75 74 68 65 6e 74 69 63 61 74 65 64 53 74 61 74 65 7c 7c 32 3d 3d 3d 65 2e 61 75 74 68 65 6e 74 69 63 61 74 65 64 53 74 61 74 65 2c 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 7c 7c 21 31 2c 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 3a 21 30 2c 69 73 47 69 74 48 75 62 46 65 64 3a 65 2e 69 73 47 69 74 48 75 62 46 65 64 7c 7c 21 31 7d 7d 29 29 7d 2c 70 61 72 73 65 42 73 73 6f 53 65 73 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 2e 6d 61 70 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 73 73 6f 55 6e 69 71 75 65 49 64 3a 65 2e 73 73 6f 55 6e 69 71 75 65 49 64 2c 6e 61 6d 65 3a 65 2e 6e 61 6d 65 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 65 2e 64 69 73 70 Data Ascii: authenticatedState\|\|2===e.authenticatedState,isWindowsSso:e.isWindowsSso\|\|!1,isMeControlSession:!0,isGitHubFed:e.isGitHubFed\|\|!1}}))},parseBssoSessions:function(e){return o.map(e,(function(e){return{ssoUniqueId:e.ssoUniqueId,name:e.name,displayName:e.disp
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 29 7b 76 61 72 20 61 3d 69 2e 73 46 65 64 51 53 3b 6e 3d 3d 3d 6d 2e 4e 6f 74 68 69 6e 67 43 68 65 63 6b 65 64 26 26 28 61 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 22 3f 22 2b 61 2c 22 77 63 74 78 22 2c 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 2b 66 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 22 3f 22 2b 61 29 29 2e 73 75 62 73 74 72 28 31 29 29 3b 65 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 63 62 63 78 74 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 2e 65 78 74 72 61 63 74 28 22 63 62 63 78 74 22 29 29 29 29 2c 65 3d 66 2e 61 70 70 65 6e 64 Data Ascii: )return function(e,n,t,i){var a=i.sFedQS;n===m.NothingChecked&&(a=f.appendOrReplace("?"+a,"wctx","LoginOptions%3D3%26"+f.extract("wctx","?"+a)).substr(1));e=f.appendOrReplace(e,"cbcxt",encodeURIComponent(decodeURIComponent(f.extract("cbcxt")))),e=f.append

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49754	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:49 UTC	656	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:49 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2284975 Cache-Control: public, max-age=31536000 Content-MD5: Rm+S3xFatg5Am1LOmufX9g== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 17:05:49 GMT Etag: 0x8DCB32DEE62CF26 Last-Modified: Fri, 02 Aug 2024 20:01:43 GMT Server: ECAcc (lhc/78A1) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 613e53e1-f01e-00f5-7a6d-e55e06000000 x-ms-version: 2009-09-19 Content-Length: 56391 Connection: close
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-08-29 17:05:49 UTC	2	IN	Data Raw: 6e 67 Data Ascii: ng
2024-08-29 17:05:49 UTC	16383	IN	Data Raw: 20 6f 75 72 20 3c 73 74 72 6f 6e 67 3e 6e 65 77 20 73 69 67 6e 2d 69 6e 20 65 78 70 65 72 69 65 6e 63 65 3c 2f 73 74 72 6f 6e 67 3e 22 2c 65 2e 57 46 5f 53 54 52 5f 53 69 67 6e 55 70 4c 69 6e 6b 5f 54 65 78 74 3d 27 4e 6f 20 61 63 63 6f 75 6e 74 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 73 69 67 6e 75 70 22 3e 43 72 65 61 74 65 20 6f 6e 65 21 3c 2f 61 3e 27 2c 65 2e 43 54 5f 48 52 44 5f 53 54 52 5f 53 70 6c 69 74 74 65 72 5f 52 65 6e 61 6d 65 3d 27 54 69 72 65 64 20 6f 66 20 73 65 65 69 6e 67 20 74 68 69 73 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 69 44 69 73 61 6d 62 69 67 52 65 6e 61 6d 65 4c 69 6e 6b 22 3e 52 65 6e 61 6d 65 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 2e 3c 2f Data Ascii: our <strong>new sign-in experience</strong>",e.WF_STR_SignUpLink_Text='No account? <a href="#" id="signup">Create one!</a>',e.CT_HRD_STR_Splitter_Rename='Tired of seeing this? <a href="#" id="iDisambigRenameLink">Rename your personal Microsoft account.</
2024-08-29 17:05:49 UTC	7240	IN	Data Raw: 65 49 6e 63 6f 72 72 65 63 74 22 2c 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 3a 22 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 22 2c 4f 61 74 68 43 6f 64 65 4f 6c 64 3a 22 4f 61 74 68 43 6f 64 65 4f 6c 64 22 2c 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 3a 22 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 22 2c 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 3a 22 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 22 2c 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 65 61 63 68 65 64 3a 22 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 65 Data Ascii: eIncorrect",OathCodeDuplicate:"OathCodeDuplicate",OathCodeOld:"OathCodeOld",ProofDataNotFound:"ProofDataNotFound",OathCodeCorrectButDeviceNotAllowed:"OathCodeCorrectButDeviceNotAllowed",OathCodeFailedMaxAllowedRetryReached:"OathCodeFailedMaxAllowedRetryRe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49759	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:50 UTC	431	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:50 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2284976 Cache-Control: public, max-age=31536000 Content-MD5: Rm+S3xFatg5Am1LOmufX9g== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 17:05:50 GMT Etag: 0x8DCB32DEE62CF26 Last-Modified: Fri, 02 Aug 2024 20:01:43 GMT Server: ECAcc (lhc/78A1) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 613e53e1-f01e-00f5-7a6d-e55e06000000 x-ms-version: 2009-09-19 Content-Length: 56391 Connection: close
2024-08-29 17:05:50 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-08-29 17:05:50 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-08-29 17:05:50 UTC	16383	IN	Data Raw: 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 2e Data Ascii: escription_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time.
2024-08-29 17:05:50 UTC	16383	IN	Data Raw: 67 20 6f 75 72 20 3c 73 74 72 6f 6e 67 3e 6e 65 77 20 73 69 67 6e 2d 69 6e 20 65 78 70 65 72 69 65 6e 63 65 3c 2f 73 74 72 6f 6e 67 3e 22 2c 65 2e 57 46 5f 53 54 52 5f 53 69 67 6e 55 70 4c 69 6e 6b 5f 54 65 78 74 3d 27 4e 6f 20 61 63 63 6f 75 6e 74 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 73 69 67 6e 75 70 22 3e 43 72 65 61 74 65 20 6f 6e 65 21 3c 2f 61 3e 27 2c 65 2e 43 54 5f 48 52 44 5f 53 54 52 5f 53 70 6c 69 74 74 65 72 5f 52 65 6e 61 6d 65 3d 27 54 69 72 65 64 20 6f 66 20 73 65 65 69 6e 67 20 74 68 69 73 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 69 44 69 73 61 6d 62 69 67 52 65 6e 61 6d 65 4c 69 6e 6b 22 3e 52 65 6e 61 6d 65 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 2e 3c Data Ascii: g our <strong>new sign-in experience</strong>",e.WF_STR_SignUpLink_Text='No account? <a href="#" id="signup">Create one!</a>',e.CT_HRD_STR_Splitter_Rename='Tired of seeing this? <a href="#" id="iDisambigRenameLink">Rename your personal Microsoft account.<
2024-08-29 17:05:51 UTC	7241	IN	Data Raw: 64 65 49 6e 63 6f 72 72 65 63 74 22 2c 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 3a 22 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 22 2c 4f 61 74 68 43 6f 64 65 4f 6c 64 3a 22 4f 61 74 68 43 6f 64 65 4f 6c 64 22 2c 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 3a 22 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 22 2c 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 3a 22 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 22 2c 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 65 61 63 68 65 64 3a 22 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 Data Ascii: deIncorrect",OathCodeDuplicate:"OathCodeDuplicate",OathCodeOld:"OathCodeOld",ProofDataNotFound:"ProofDataNotFound",OathCodeCorrectButDeviceNotAllowed:"OathCodeCorrectButDeviceNotAllowed",OathCodeFailedMaxAllowedRetryReached:"OathCodeFailedMaxAllowedRetryR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49760	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:50 UTC	412	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:51 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1864275 Cache-Control: public, max-age=31536000 Content-MD5: uaBUkDWJZJ75uKxjc6vkvw== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 17:05:51 GMT Etag: 0x8DCB563CA8588E7 Last-Modified: Mon, 05 Aug 2024 15:32:18 GMT Server: ECAcc (lhc/7971) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9a732ed0-201e-0054-8041-e9ce30000000 x-ms-version: 2009-09-19 Content-Length: 449540 Connection: close
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 17:05:51 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 Data Ascii: ING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthorize
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 61 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 74 61 72 67 65 74 3f 65 2e 74 61 72 67 65 74 3a 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3f 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3a 6e 75 6c 6c 3a 6e 75 6c 6c 7d 7d 2c 44 3d 6e 2e 51 75 65 72 79 53 74 72 69 6e 67 3d 7b 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2c 74 3d 6e 75 6c 6c 2c 69 3d 6e 75 6c 6c 3b 69 66 28 65 29 7b 76 61 72 20 61 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 2c 6f 3d 65 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 2d 31 21 3d 3d 6f 26 26 28 2d 31 3d 3d 3d 61 7c 7c 6f 3c 61 29 3f 28 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6f 29 2c 69 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 6f Data Ascii: arget:function(e){return e?e.target?e.target:e.srcElement?e.srcElement:null:null}},D=n.QueryString={parse:function(e){var n=e,t=null,i=null;if(e){var a=e.indexOf("?"),o=e.indexOf("#");-1!==o&&(-1===a\|\|o<a)?(n=e.substring(0,o),i=d.doubleSplit(e.substring(o
2024-08-29 17:05:51 UTC	2	IN	Data Raw: 6c 74 Data Ascii: lt
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 50 61 73 73 77 6f 72 64 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 69 64 69 6e 67 4d 6f 64 65 3d 69 2e 48 69 64 69 6e 67 4d 6f 64 65 2e 48 69 64 65 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 45 76 65 6e 74 54 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 72 65 74 75 72 6e 7b 65 76 65 6e 74 49 64 3a 65 2c 65 76 65 6e 74 4c 65 76 65 6c 3a 74 7c 7c 69 2e 45 76 65 Data Ascii: TextBoxPropertyLogOption(e,n)},s.getPasswordTextBoxPropertyLogOption=function(e,n){return(n=n\|\|{}).hidingMode=i.HidingMode.Hide,s.getDefaultTextBoxPropertyLogOption(e,n)},s.getDefaultEventTracingOptions=function(e,n,t){return{eventId:e,eventLevel:t\|\|i.Eve
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 68 69 73 5b 75 2e 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 5d 3d 62 29 2c 76 26 26 28 74 68 69 73 5b 75 2e 43 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 5d 3d 76 29 7d 2c 6e 2e 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 2c 61 2c 63 2c 64 3d 74 68 69 73 2c 6c 3d 70 2e 4e 6f 6e 65 2c 75 3d 22 22 2c 66 3d 22 22 2c 67 3d 22 22 2c 6d 3d 65 2e 64 61 74 61 2c 62 3d 65 2e 6f 6e 53 65 6e 64 2c 76 3d 65 2e 6f 6e 53 65 6e 64 46 61 69 6c 2c 68 3d 65 2e 6f 6e 46 6c 6f 77 45 78 70 69 72 65 64 2c 5f 3d 65 2e 74 69 6d 65 6f 75 74 7c 7c 33 65 34 2c 43 3d 65 2e 73 69 74 65 49 64 2c 53 3d 65 2e 63 6c 69 65 6e 74 49 64 2c 78 3d 65 2e 66 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 77 3d 65 2e 6e 6f 50 61 42 75 62 62 6c 65 Data Ascii: his[u.ProofConfirmation]=b),v&&(this[u.CanaryFlowToken]=v)},n.Request=function(e){var n,t,a,c,d=this,l=p.None,u="",f="",g="",m=e.data,b=e.onSend,v=e.onSendFail,h=e.onFlowExpired,_=e.timeout\|\|3e4,C=e.siteId,S=e.clientId,x=e.forwardedClientId,w=e.noPaBubble
2024-08-29 17:05:51 UTC	2	IN	Data Raw: 6d 73 Data Ascii: ms
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 7c 7c 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 61 63 65 62 6f 6f 6b 50 61 72 61 6d 73 29 29 29 72 65 74 75 72 6e 20 69 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 6d 2e 52 65 6d 6f 74 65 4e 47 43 3a 63 61 73 65 20 6d 2e 46 65 64 65 72 61 74 69 6f 6e 3a 63 61 73 65 20 6d 2e 41 63 63 65 73 73 50 61 73 73 3a 63 61 73 65 20 6d 2e 4e 6f 50 72 65 66 65 72 72 65 64 43 72 65 64 65 6e 74 69 61 6c 3a 6f 26 26 6f 2e 53 61 6d 6c 52 65 71 75 65 73 74 26 26 6f 2e 52 65 6c 61 79 53 74 61 74 65 3f 28 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 2c 69 2e 69 64 70 52 65 64 69 72 65 63 74 50 6f 73 74 50 61 72 61 6d 73 3d 7b 53 41 4d 4c 52 65 71 75 65 73 74 Data Ascii: \|\|n.Credentials.FacebookParams)))return i;switch(a){case m.RemoteNGC:case m.Federation:case m.AccessPass:case m.NoPreferredCredential:o&&o.SamlRequest&&o.RelayState?(i.idpRedirectUrl=n.Credentials.FederationRedirectUrl,i.idpRedirectPostParams={SAMLRequest
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 28 29 2c 6e 2e 6f 6e 52 65 64 69 72 65 63 74 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 52 65 67 69 73 74 65 72 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 55 6e 72 65 67 69 73 74 65 72 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 68 6f 77 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 55 70 64 61 74 65 46 6c 6f 77 54 6f 6b 65 6e 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 63 72 65 64 65 6e 74 69 61 6c 43 6f 75 6e 74 3d 30 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 54 79 70 65 3d 6e 75 6c 6c 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 53 68 6f 77 6e 4f 6e 6c 79 4f 6e 50 69 63 6b 65 72 3d Data Ascii: (),n.onRedirect=o.create(),n.onRegisterDialog=o.create(),n.onUnregisterDialog=o.create(),n.onShowDialog=o.create(),n.onSetPendingRequest=o.create(),n.onUpdateFlowToken=o.create(),n.credentialCount=0,n.selectedCredType=null,n.selectedCredShownOnlyOnPicker=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49761	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:50 UTC	651	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:51 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13692429 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Thu, 29 Aug 2024 17:05:51 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-29 17:05:51 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49762	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:50 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:51 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5950601 Cache-Control: public, max-age=31536000 Content-MD5: /tr7rG0APA0Nym9G/DMFwg== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 17:05:51 GMT Etag: 0x8DC90CF0C1378C3 Last-Modified: Thu, 20 Jun 2024 02:16:51 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 281a1f59-901e-00f2-0416-c4a977000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 17:05:51 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e Data Ascii: =Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(536);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var n
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 31 7d 29 2c 65 7d 28 72 28 36 38 31 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c 65 Data Ascii: 1}),e}(r(681));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rule
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 Data Ascii: "!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 67 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d Data Ascii: g;function N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-
2024-08-29 17:05:51 UTC	4	IN	Data Raw: 76 61 72 20 Data Ascii: var
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 70 Data Ascii: r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(t,"p
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 74 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b 22 64 65 66 61 Data Ascii: turn new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s["defa
2024-08-29 17:05:51 UTC	16383	IN	Data Raw: 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 6f 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 29 66 6f 72 28 3b 65 2d 2d 3b 29 74 3d 69 28 74 2c 75 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f 74 6f 74 79 Data Ascii: rts=function(t,e){if(a&&"string"==typeof t&&!o.prepareStackTrace)for(;e--;)t=i(t,u,"");return t}},function(t,e,r){"use strict";var n=r(536);t.exports=!n((function(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.prototy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49763	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:52 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:52 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13692430 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Thu, 29 Aug 2024 17:05:52 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-08-29 17:05:52 UTC	15682	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-29 17:05:52 UTC	1492	IN	Data Raw: 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""33

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49764	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:52 UTC	664	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:53 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13692236 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 17:05:53 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-08-29 17:05:53 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49765	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:52 UTC	665	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:53 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13692276 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 17:05:53 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-08-29 17:05:53 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49766	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:52 UTC	665	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:53 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13606258 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 17:05:53 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-08-29 17:05:53 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49768	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:53 UTC	626	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:53 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5950602 Cache-Control: public, max-age=31536000 Content-MD5: FXzSZAYOwKp2jFj6XjvNRQ== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 17:05:53 GMT Etag: 0x8DC90CF0D8CB039 Last-Modified: Thu, 20 Jun 2024 02:16:53 GMT Server: ECAcc (lhc/7968) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 736bdcfa-101e-003a-3f16-c47522000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-08-29 17:05:53 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 17:05:53 UTC	16383	IN	Data Raw: 75 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 Data Ascii: u200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u2
2024-08-29 17:05:53 UTC	16383	IN	Data Raw: 32 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 Data Ascii: 290f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdc
2024-08-29 17:05:53 UTC	16383	IN	Data Raw: 73 74 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 33 29 2c 74 2e 43 63 3d 72 28 38 38 34 29 2c 74 2e 43 66 3d 72 28 31 33 38 30 29 2c 74 2e 50 3d 72 28 37 38 33 29 2c 74 2e 5a 3d 72 28 38 38 35 29 7d 2c 31 33 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d Data Ascii: strict";t.Any=r(883),t.Cc=r(884),t.Cf=r(1380),t.P=r(783),t.Z=r(885)},1380:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-
2024-08-29 17:05:53 UTC	4	IN	Data Raw: 65 4d 61 72 Data Ascii: eMar
2024-08-29 17:05:53 UTC	16383	IN	Data Raw: 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 6b 75 70 Data Ascii: ks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.markup
2024-08-29 17:05:53 UTC	16383	IN	Data Raw: 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 2c 2d Data Ascii: r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a",-
2024-08-29 17:05:53 UTC	15467	IN	Data Raw: 6c 61 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 69 Data Ascii: lance_pairs","emphasis","text_collapse"]}}}},1427:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49770	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:53 UTC	435	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:54 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5950604 Cache-Control: public, max-age=31536000 Content-MD5: /tr7rG0APA0Nym9G/DMFwg== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 17:05:54 GMT Etag: 0x8DC90CF0C1378C3 Last-Modified: Thu, 20 Jun 2024 02:16:51 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 281a1f59-901e-00f2-0416-c4a977000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-08-29 17:05:54 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 17:05:54 UTC	16383	IN	Data Raw: 69 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 Data Ascii: i=Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(536);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var
2024-08-29 17:05:54 UTC	16383	IN	Data Raw: 21 31 7d 29 2c 65 7d 28 72 28 36 38 31 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c Data Ascii: !1}),e}(r(681));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rul
2024-08-29 17:05:54 UTC	16383	IN	Data Raw: 64 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 Data Ascii: d"!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binar
2024-08-29 17:05:54 UTC	4	IN	Data Raw: 2f 67 3b 66 Data Ascii: /g;f
2024-08-29 17:05:54 UTC	16383	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d 3d 33 29 Data Ascii: unction N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-=3)
2024-08-29 17:05:54 UTC	16383	IN	Data Raw: 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 Data Ascii: r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(t,"
2024-08-29 17:05:54 UTC	16383	IN	Data Raw: 65 74 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b 22 64 65 66 Data Ascii: eturn new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s["def
2024-08-29 17:05:54 UTC	16383	IN	Data Raw: 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 6f 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 29 66 6f 72 28 3b 65 2d 2d 3b 29 74 3d 69 28 74 2c 75 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f 74 6f 74 Data Ascii: orts=function(t,e){if(a&&"string"==typeof t&&!o.prepareStackTrace)for(;e--;)t=i(t,u,"");return t}},function(t,e,r){"use strict";var n=r(536);t.exports=!n((function(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.protot
2024-08-29 17:05:54 UTC	16383	IN	Data Raw: 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 65 2e 70 6c 75 67 69 6e 7c 7c 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 26 26 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 26 26 28 65 2e 70 6c 75 67 69 6e 3d 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 29 3b 76 61 72 20 72 3d 6e 65 77 20 73 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 70 75 73 68 28 72 29 2c 72 7d 7d 2c 7b 6b 65 79 3a 22 77 61 72 6e 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 Data Ascii: guments[1]!==undefined?arguments[1]:{};e.plugin\|\|this.lastPlugin&&this.lastPlugin.postcssPlugin&&(e.plugin=this.lastPlugin.postcssPlugin);var r=new s(t,e);return this.messages.push(r),r}},{key:"warnings",value:function(){return this.messages.filter((funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49771	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:54 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:54 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13606259 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 17:05:54 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-08-29 17:05:54 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49773	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:54 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:54 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13692237 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 17:05:54 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-08-29 17:05:54 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49772	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:54 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:54 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13692277 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 17:05:54 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-08-29 17:05:54 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49775	152.199.21.175	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:05:54 UTC	441	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:05:54 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5950603 Cache-Control: public, max-age=31536000 Content-MD5: FXzSZAYOwKp2jFj6XjvNRQ== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 17:05:54 GMT Etag: 0x8DC90CF0D8CB039 Last-Modified: Thu, 20 Jun 2024 02:16:53 GMT Server: ECAcc (lhc/7968) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 736bdcfa-101e-003a-3f16-c47522000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-08-29 17:05:54 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 17:05:55 UTC	16383	IN	Data Raw: 75 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 Data Ascii: u200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u2
2024-08-29 17:05:55 UTC	16383	IN	Data Raw: 32 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 Data Ascii: 290f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdc
2024-08-29 17:05:55 UTC	3	IN	Data Raw: 73 74 72 Data Ascii: str
2024-08-29 17:05:55 UTC	16383	IN	Data Raw: 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 33 29 2c 74 2e 43 63 3d 72 28 38 38 34 29 2c 74 2e 43 66 3d 72 28 31 33 38 30 29 2c 74 2e 50 3d 72 28 37 38 33 29 2c 74 2e 5a 3d 72 28 38 38 35 29 7d 2c 31 33 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c 75 44 Data Ascii: ict";t.Any=r(883),t.Cc=r(884),t.Cf=r(1380),t.P=r(783),t.Z=r(885)},1380:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\uD
2024-08-29 17:05:55 UTC	16383	IN	Data Raw: 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 6b 75 Data Ascii: rks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.marku
2024-08-29 17:05:55 UTC	16383	IN	Data Raw: 6e 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 2c Data Ascii: n r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a",
2024-08-29 17:05:55 UTC	15468	IN	Data Raw: 61 6c 61 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 Data Ascii: alance_pairs","emphasis","text_collapse"]}}}},1427:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50623	13.107.246.67	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:06 UTC	603	OUT	GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:06 UTC	820	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:06:06 GMT Content-Type: application/x-javascript Content-Length: 231091 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 20 Aug 2024 23:08:41 GMT ETag: 0x8DCC16D08882164 x-ms-request-id: 49558b19-401e-0034-3748-f9cf33000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T170606Z-16579567576j7nvvu5n0ytgs1c00000002cg0000000089c9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-29 17:06:06 UTC	15564	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 69 77 db 38 d2 28 fc fd fd 15 b6 6e 8e 87 1c c3 8a 64 67 a5 c2 d6 4d 1c bb 93 ee 6c 1d 27 9d 4e bb 7d 7d 68 09 92 d8 91 48 85 a4 ec 38 b6 fe fb ad 05 2b 45 39 e9 99 67 9e 67 ee 7b 26 e7 c4 02 41 10 4b a1 00 54 15 6a b9 fd f7 cd 8d c3 bc d8 98 a6 03 99 95 72 23 cd 46 79 31 4b aa 34 cf 36 e6 53 99 40 56 29 e1 7f 3a ce 16 f3 9d 51 72 56 a4 83 53 99 b5 ff 2c db 2f 9e ef 1f bc 3a 3a 68 57 5f aa 8d bf df fe ff 36 47 8b 6c 80 df 05 e1 d5 79 52 6c 48 51 89 4c 14 22 17 69 7c f5 f0 6e 77 ef 6e 64 4a d0 bb f0 aa b5 c0 ea 2b a8 b2 6a f5 f0 9b 22 ce 82 bd 5d 28 1c 8a 3c be 1a 4c d2 e9 70 3f cf 2a f9 a5 7a 77 39 97 65 b4 d9 11 03 fb 5c 7b a4 d7 43 39 4a 16 d3 ea 4d 91 cf f9 39 2d e7 d3 e4 f2 55 32 a3 e2 63 59 3d ad 95 a0 ac 22 3d 97 Data Ascii: iw8(ndgMl'N}}hH8+E9gg{&AKTjr#Fy1K46S@V):QrVS,/::hW_6GlyRlHQL"i\|nwndJ+j"](<Lp?*zw9e\{C9JM9-U2cY="=
2024-08-29 17:06:07 UTC	16384	IN	Data Raw: 3d 8c f5 04 5b ad c9 ed c2 35 95 d0 b1 da e4 23 ba 57 fa c1 68 e4 5e e1 77 11 50 aa 7c ce 55 3b 72 d9 93 71 b6 94 91 52 0c e1 36 a0 7e a8 ec 88 15 f8 d0 27 81 97 61 a2 3b 61 be 55 66 82 47 65 1d 4a 3d 2f dc f5 34 c9 5c cb a3 cd 60 13 63 5b d3 15 84 e4 c3 8b 72 f6 36 5d ec 21 25 63 b6 16 a9 2c 4a 71 4d 4e b3 61 d4 52 24 65 49 66 40 7d 43 62 96 a8 cb 87 46 bb c8 ac 43 79 8d 84 6f 14 e3 be b5 b5 b9 19 74 ef 6d ad 2d 80 97 90 2e 8f 77 96 05 f6 90 94 2a 1a 81 a8 62 40 46 40 6c 38 34 59 19 0e 5d 00 b5 71 8b 7a 4e 71 e6 15 0e 01 64 11 c1 94 0f 97 d5 ad 43 b9 5b fe c0 21 0e a6 f9 80 ed 12 d0 8f 9e 42 bb 02 f5 84 81 ad 60 cd 20 66 ad a9 f1 40 c6 b5 ef 43 13 23 c1 10 c6 8e c2 fa a5 ab 33 8d 58 aa fd 95 b8 e9 5a d4 55 5d 0b ba 2d 31 2e 4d e8 89 dc 65 b1 52 39 bb 15 Data Ascii: =[5#Wh^wP\|U;rqR6~'a;aUfGeJ=/4\`c[r6]!%c,JqMNaR$eIf@}CbFCyotm-.w*b@F@l84Y]qzNqdC[!B` f@C#3XZU]-1.MeR9
2024-08-29 17:06:07 UTC	16384	IN	Data Raw: 35 34 c4 58 17 f8 d3 de 42 bc ab d2 e8 e2 52 a9 e5 42 17 03 b9 4c 28 dd c6 f3 db 37 1a e7 36 0e e6 18 4f e4 2a 17 01 15 d4 e3 da bb 27 57 89 53 d7 ce 39 25 a9 b3 35 f3 d0 d3 45 e6 63 f4 d8 87 75 6d 29 72 e0 75 a5 71 34 f7 68 16 6e 97 bd de c6 fc 4e da c7 3b 80 5e 27 a4 05 7a 56 33 54 7a 01 93 08 03 90 a3 e6 35 ed 80 41 cc 61 5c b4 16 40 02 0c da ab 41 a2 14 be 0c d9 a5 4e 5b 8a 3f db 28 1b a8 4d b7 8e 49 66 c0 cb bb 42 3e 7f 05 1c 06 7b 3b 96 7f 23 f8 cf 78 b2 27 b9 1b d9 cc 74 56 48 b3 f6 e4 b3 76 b3 30 84 8f 9c 31 2e a9 c6 a0 65 10 bb 4e 65 28 3b fb 89 70 c9 28 23 af 0f 95 63 1c b5 d4 85 31 aa eb 1b 20 92 75 99 03 03 42 5c 0f 50 75 ce 38 87 65 00 53 e2 0a cb 79 e3 e4 c7 61 26 a9 c4 3c 84 56 3e d9 dc 8e 2c c0 f8 6c 3b f3 ba 53 d9 cc aa c0 89 df 57 59 38 Data Ascii: 54XBRBL(76O*'WS9%5Ecum)ruq4hnN;^'zV3Tz5Aa\@AN[?(MIfB>{;#x'tVHv01.eNe(;p(#c1 uB\Pu8eSya&<V>,l;SWY8
2024-08-29 17:06:07 UTC	16384	IN	Data Raw: 78 96 a0 d4 b3 47 b1 86 38 9d 2c 93 b7 34 01 5a 24 99 9e 1e 3a 83 98 db 86 e3 e1 be 26 fd 7e ed 02 ef a3 44 33 4c e6 e3 e6 1e a6 bb 19 79 ed 4d a7 f6 1b d6 5d ed 15 33 f9 e6 6f e9 8c a9 eb 75 5b da 84 75 58 a3 3c 4b e4 23 8b 0e 27 e5 1c d3 18 c0 eb e8 59 2b 47 d0 fb 1b 03 c6 d8 14 96 c5 7c f1 5b 17 63 5f b9 f3 05 ef bc 16 a2 fd 9d 2f 58 e4 69 ef a2 3e 92 95 bb 51 fd be 19 7c 65 0f 53 79 6d a9 42 e8 48 72 7a 74 dd 93 be 47 4a cc a3 df 21 96 14 d4 5f c5 fa e3 20 02 98 ee 88 5e 19 cf 2e 74 a8 cf 2c f8 8c 6e 34 b7 95 28 cb 56 42 87 a2 11 d9 38 58 85 ae 98 2f b3 3e 83 e2 81 f4 cc 65 5d 1c 26 65 15 ea 87 b7 dc 77 43 18 d6 9c a9 89 3f 71 ae 48 66 86 43 ef 46 96 08 2e 5b 04 1a f1 c4 1a d5 a6 2c 69 d9 b3 d3 e2 a5 ee 90 0f 67 64 09 e4 ca d8 dc 48 14 ca ed 40 08 3d Data Ascii: xG8,4Z$:&~D3LyM]3ou[uX<K#'Y+G\|[c_/Xi>Q\|eSymBHrztGJ!_ ^.t,n4(VB8X/>e]&ewC?qHfCF.[,igdH@=
2024-08-29 17:06:07 UTC	16384	IN	Data Raw: 7a 18 44 56 ea 35 27 8e db 5b 59 19 a3 cf ef 47 36 67 de 44 61 44 c9 8c 84 33 8c c1 50 fe 0e b7 46 37 3f 85 9b cb 4f 9e 6c 75 90 18 d3 25 76 3b 9e 87 ac 06 24 e8 bc ca b8 5e 50 7d 48 01 cb ab 44 4e 63 00 06 da 1d ca 8e 0f c6 af b1 1f 4d f8 e0 45 ae 0e 08 e0 32 15 60 80 4c 84 d8 d6 ef 29 b8 84 31 3b d0 40 4b 70 61 65 ef 7a 75 f6 a0 3a d9 53 98 a4 e3 52 dc 39 54 38 85 a3 8c ce c3 0d e6 86 ce b2 ad 62 72 40 4b 34 52 7b 4c 0c 8d 5e b7 8c ee bd 81 fb 55 40 62 2f 57 57 a8 d6 9f 89 ba 75 63 79 a3 a0 20 07 72 78 df 25 17 cf eb e9 a6 ed 9f 08 e0 d3 5d aa e9 99 cf bb 05 4a 06 ef 91 7e 31 18 76 ed 04 24 23 80 be 1a 59 d6 53 dc 44 de 3f 98 73 59 a7 d7 a6 2d 02 58 c2 c4 e0 3a 8e 7d 06 6b a3 9e 7b a3 c0 37 ee 9f 16 b2 33 39 3b a5 c5 1c e1 c7 55 6a 95 ee c0 5f c4 69 52 Data Ascii: zDV5'[YG6gDaD3PF7?Olu%v;$^P}HDNcME2`L)1;@Kpaezu:SR9T8br@K4R{L^U@b/WWucy rx%]J~1v$#YSD?sY-X:}k{739;Uj_iR
2024-08-29 17:06:07 UTC	16384	IN	Data Raw: 24 a8 7a 30 ef 9c cd 94 a6 5c 97 d7 f9 dc f1 3d c0 96 27 df 6d 47 67 bd ee 18 4f ce 73 be 55 b4 fa 56 9a b0 8b c2 3a d0 94 b5 1d 98 a9 38 64 80 b8 ef 08 60 6f 04 0c 6b 34 fd 68 6b fa 1d fe 29 01 66 fe 9e 7f 3c 05 c9 5d df 57 ae 94 71 4b c8 29 43 14 be 1b db 2f dc 66 74 f4 59 39 5e 9e 90 09 d7 21 0a 55 85 25 dd 62 43 be cd 7a cc ee 02 d2 09 a2 ea 3e e6 1d d2 c9 3c 9f 3d 99 1c 66 47 93 e5 54 12 c4 98 de 52 e8 34 db 95 19 98 e1 0b b5 7d 20 49 5c a7 78 c6 94 09 45 db 21 cd da 0e eb 11 6c cc 5c 95 4d 35 3e 67 2c 66 38 7b b4 07 83 22 20 71 86 84 51 8e f2 83 f8 72 47 fe f2 3e 57 03 af 14 f7 23 99 34 c7 dc 33 18 93 05 26 2c dc b7 73 16 21 83 4d 1e bb 1a b9 86 bb eb 1f 72 f6 80 51 a6 5f 33 c4 f1 b4 5e e0 02 68 69 0f 56 1b ab 7c 40 f5 b5 b2 ec 34 19 d4 de 52 ea 1d Data Ascii: $z0\='mGgOsUV:8d`ok4hk)f<]WqK)C/ftY9^!U%bCz><=fGTR4} I\xE!l\M5>g,f8{" qQrG>W#43&,s!MrQ_3^hiV\|@4R
2024-08-29 17:06:07 UTC	16384	IN	Data Raw: a7 35 54 c9 d3 9e 41 b3 f5 73 1d bc 55 26 b2 6f d1 f1 78 2d 7f d3 b9 0f de c8 ce 66 20 fc 31 a5 b7 f6 20 c0 6a 83 49 18 ad 06 b3 2c a1 0f 17 b3 e2 8c 95 5d 6c d3 ca 7b d0 c7 8a 79 af 14 92 39 73 c0 4c 14 65 eb e2 a1 5b e7 2e a2 39 50 99 63 7a b8 6e a8 29 ea 4b 28 48 8d e3 f9 e3 5c 3c dd 2c 81 95 37 d1 a5 7d 63 f8 b7 4c 6e e5 9a 9e 3f 04 95 a9 f1 98 98 cf 6e 6d 1b 40 19 7c e6 5b 5c 0d 14 2b 50 bd bf 57 9a ea 37 f9 37 ae 5f 1d ac f6 50 9a c1 7c 70 69 ba b6 86 59 dd 3b 18 64 57 3d fd 8d b8 e7 b9 05 71 2c ff 0b 51 20 73 f0 df bf 6f 0e fe fa db 70 f0 df 77 e2 e0 bf 5d 32 07 ff fd 8a 38 f8 6f 57 c0 c1 ff e0 db 43 1c c9 af 19 61 cb c3 9b 36 8f 30 e9 70 ce 65 a6 39 71 ee fe 65 87 ee fc 68 1d 16 19 ff 69 3e 9e d9 c9 f0 53 97 b6 ab 17 8e d6 c8 84 eb 59 ad a7 e2 0a Data Ascii: 5TAsU&ox-f 1 jI,]l{y9sLe[.9Pczn)K(H\<,7}cLn?nm@\|[\+PW77_P\|piY;dW=q,Q sopw]28oWCa60pe9qehi>SY
2024-08-29 17:06:07 UTC	16384	IN	Data Raw: 89 81 dd b3 cb 37 b0 47 53 7e e2 2f b3 d0 20 2e b1 88 e0 40 d4 68 20 c5 9b d8 23 be 18 04 c7 8b 83 82 7d 38 d8 81 c1 30 89 3c 41 72 96 f6 f1 9c d0 4f 51 b7 d0 ca 16 65 49 45 2b 10 28 98 02 a1 c2 78 89 91 84 8c 80 2e 56 9c f6 2d d4 9d d2 87 2f a8 fc 15 05 61 19 98 2c 5b 19 b3 50 76 1d 4d b8 91 25 b5 95 a5 68 5c d3 ae e0 86 fb fe fe 4e 5c 5c 37 ae ae 27 ca 45 29 d1 1d 9b 9f d7 8b d3 d4 45 26 59 9d 12 a1 29 83 fb 47 6a e7 f4 0b 81 fd 55 36 27 76 81 0a 84 13 f8 0b d4 49 23 7a 34 30 67 5b 94 a7 a1 3d ba 68 e6 95 b2 10 c8 0a 87 c1 08 ba a1 da 10 85 5d 80 d9 ad c1 1c e6 18 86 f0 d7 98 a8 ef f0 84 11 69 af c2 36 40 33 66 6c 7c 44 1b 1f 61 e3 a3 6b 45 db c0 b9 68 16 d8 db 94 cc db 81 c6 bc 01 6f c2 1b 14 93 0d 78 b6 36 00 96 12 e7 17 01 fa 58 38 e9 00 7a fd 8a 86 Data Ascii: 7GS~/ .@h #}80<ArOQeIE+(x.V-/a,[PvM%h\N\\7'E)E&Y)GjU6'vI#z40g[=h]i6@3fl\|DakEhox6X8z
2024-08-29 17:06:07 UTC	16384	IN	Data Raw: a1 73 31 16 c2 e9 34 1a ae 62 48 e3 21 2c 9e c5 84 c1 ab 63 02 5c 4e ab de 9b 37 d9 d0 48 31 6a e1 5d 11 bb 90 5b 21 3e 9a bd 8e 6f 01 fb d0 b3 80 31 dd e3 da e5 05 e2 e5 de 6f 92 d4 bb 0f 50 0e 5f ba 49 e0 1d b9 b7 c1 08 f5 8c 60 b0 87 3e 86 5b 90 cd d9 68 ef 39 70 28 64 f9 18 46 1d b6 a6 6e 36 a6 8a 33 f8 48 7d 37 19 8c 61 bc 92 57 a9 7f 81 0a c6 68 ed 3c 75 e0 37 0c 30 05 02 e4 b5 f5 36 60 e9 15 a0 22 57 a0 f7 97 70 81 ad 07 d9 16 50 28 bc 25 7b c6 b0 23 1b a5 f7 56 aa 0d 03 70 19 10 31 a6 a5 28 ad 04 61 30 b1 c8 01 fc 94 bb 80 aa f2 7c 17 42 27 32 ad f9 80 0a 8b 2d 4d 9d 3b f4 98 3f 73 ba f8 67 5a 5e 94 fc f9 ad c6 17 57 b0 be ba f0 83 6e 8c c9 d5 e1 96 85 5e 02 30 04 67 96 c5 11 70 7a 8d 46 fd 3a f5 c3 a1 50 cd ae 42 bf ad 2d 7a 27 cb dc 1f fd 7b 54 Data Ascii: s14bH!,c\N7H1j][!>o1oP_I`>[h9p(dFn63H}7aWh<u706`"WpP(%{#Vp1(a0\|B'2-M;?sgZ^Wn^0gpzF:PB-z'{T
2024-08-29 17:06:07 UTC	16384	IN	Data Raw: d7 87 04 36 f1 09 0a 0e 33 0c 72 12 a4 78 77 4b 5b 20 9a f4 e9 3a 6c be ba f8 88 e1 7b a7 d1 09 3f 14 30 fb 13 f4 7f a4 1d 8e 33 51 42 0d 0d cf 29 8e 0d 96 59 82 19 b9 cf 13 7c ad a5 de 2b b5 e6 30 b6 bb 29 29 90 a8 f9 4b 58 24 4f d7 28 8e 47 a1 bf 7c 28 df 53 fe fb 0d a4 54 67 a3 61 40 4b b3 fe 8a 61 04 d9 cb 59 ff 3d 87 51 ac b3 c9 30 10 dc 42 7e 4e c2 e4 18 ec 14 ae 7b 0d 8f 17 ec 35 50 45 e2 0c 6a c0 ae ce e8 0b af cd a4 0f a4 35 9d bb bc 3e dd 9f 80 0f f1 5e 55 e1 94 ef 91 3c 8b 82 c0 ae d0 6b f9 61 35 50 cf 44 75 11 4c 96 e7 b3 00 da 2f 73 2a 99 d5 6e fd 24 18 be 0f 28 a0 c6 cf 81 a9 18 24 ee 30 bb f0 27 71 86 12 40 f8 ce 68 ab 00 ac 77 85 ef 57 e8 ca bd f1 a9 6d d7 43 a5 34 7c 79 06 aa 09 2a 13 d8 46 ef c7 7c 42 1c 05 26 81 1f 79 a9 8e 15 2b 03 d0 Data Ascii: 63rxwK[ :l{?03QB)Y\|+0))KX$O(G\|(STga@KaY=Q0B~N{5PEj5>^U<ka5PDuL/sn$($0'q@hwWmC4\|yF\|B&y+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50624	13.107.246.42	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:08 UTC	398	OUT	GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:08 UTC	813	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:06:08 GMT Content-Type: application/x-javascript Content-Length: 231091 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 20 Aug 2024 23:08:41 GMT ETag: 0x8DCC16D08882164 x-ms-request-id: 49558b19-401e-0034-3748-f9cf33000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T170608Z-16579567576p25xcxh3nycmsaw00000001ug00000000hhkt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 17:06:08 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 69 77 db 38 d2 28 fc fd fd 15 b6 6e 8e 87 1c c3 8a 64 67 a5 c2 d6 4d 1c bb 93 ee 6c 1d 27 9d 4e bb 7d 7d 68 09 92 d8 91 48 85 a4 ec 38 b6 fe fb ad 05 2b 45 39 e9 99 67 9e 67 ee 7b 26 e7 c4 02 41 10 4b a1 00 54 15 6a b9 fd f7 cd 8d c3 bc d8 98 a6 03 99 95 72 23 cd 46 79 31 4b aa 34 cf 36 e6 53 99 40 56 29 e1 7f 3a ce 16 f3 9d 51 72 56 a4 83 53 99 b5 ff 2c db 2f 9e ef 1f bc 3a 3a 68 57 5f aa 8d bf df fe ff 36 47 8b 6c 80 df 05 e1 d5 79 52 6c 48 51 89 4c 14 22 17 69 7c f5 f0 6e 77 ef 6e 64 4a d0 bb f0 aa b5 c0 ea 2b a8 b2 6a f5 f0 9b 22 ce 82 bd 5d 28 1c 8a 3c be 1a 4c d2 e9 70 3f cf 2a f9 a5 7a 77 39 97 65 b4 d9 11 03 fb 5c 7b a4 d7 43 39 4a 16 d3 ea 4d 91 cf f9 39 2d e7 d3 e4 f2 55 32 a3 e2 63 59 3d ad 95 a0 ac 22 3d 97 Data Ascii: iw8(ndgMl'N}}hH8+E9gg{&AKTjr#Fy1K46S@V):QrVS,/::hW_6GlyRlHQL"i\|nwndJ+j"](<Lp?*zw9e\{C9JM9-U2cY="=
2024-08-29 17:06:08 UTC	16384	IN	Data Raw: ed c2 35 95 d0 b1 da e4 23 ba 57 fa c1 68 e4 5e e1 77 11 50 aa 7c ce 55 3b 72 d9 93 71 b6 94 91 52 0c e1 36 a0 7e a8 ec 88 15 f8 d0 27 81 97 61 a2 3b 61 be 55 66 82 47 65 1d 4a 3d 2f dc f5 34 c9 5c cb a3 cd 60 13 63 5b d3 15 84 e4 c3 8b 72 f6 36 5d ec 21 25 63 b6 16 a9 2c 4a 71 4d 4e b3 61 d4 52 24 65 49 66 40 7d 43 62 96 a8 cb 87 46 bb c8 ac 43 79 8d 84 6f 14 e3 be b5 b5 b9 19 74 ef 6d ad 2d 80 97 90 2e 8f 77 96 05 f6 90 94 2a 1a 81 a8 62 40 46 40 6c 38 34 59 19 0e 5d 00 b5 71 8b 7a 4e 71 e6 15 0e 01 64 11 c1 94 0f 97 d5 ad 43 b9 5b fe c0 21 0e a6 f9 80 ed 12 d0 8f 9e 42 bb 02 f5 84 81 ad 60 cd 20 66 ad a9 f1 40 c6 b5 ef 43 13 23 c1 10 c6 8e c2 fa a5 ab 33 8d 58 aa fd 95 b8 e9 5a d4 55 5d 0b ba 2d 31 2e 4d e8 89 dc 65 b1 52 39 bb 15 28 65 52 0c 26 5e 56 Data Ascii: 5#Wh^wP\|U;rqR6~'a;aUfGeJ=/4\`c[r6]!%c,JqMNaR$eIf@}CbFCyotm-.w*b@F@l84Y]qzNqdC[!B` f@C#3XZU]-1.MeR9(eR&^V
2024-08-29 17:06:08 UTC	16384	IN	Data Raw: de 42 bc ab d2 e8 e2 52 a9 e5 42 17 03 b9 4c 28 dd c6 f3 db 37 1a e7 36 0e e6 18 4f e4 2a 17 01 15 d4 e3 da bb 27 57 89 53 d7 ce 39 25 a9 b3 35 f3 d0 d3 45 e6 63 f4 d8 87 75 6d 29 72 e0 75 a5 71 34 f7 68 16 6e 97 bd de c6 fc 4e da c7 3b 80 5e 27 a4 05 7a 56 33 54 7a 01 93 08 03 90 a3 e6 35 ed 80 41 cc 61 5c b4 16 40 02 0c da ab 41 a2 14 be 0c d9 a5 4e 5b 8a 3f db 28 1b a8 4d b7 8e 49 66 c0 cb bb 42 3e 7f 05 1c 06 7b 3b 96 7f 23 f8 cf 78 b2 27 b9 1b d9 cc 74 56 48 b3 f6 e4 b3 76 b3 30 84 8f 9c 31 2e a9 c6 a0 65 10 bb 4e 65 28 3b fb 89 70 c9 28 23 af 0f 95 63 1c b5 d4 85 31 aa eb 1b 20 92 75 99 03 03 42 5c 0f 50 75 ce 38 87 65 00 53 e2 0a cb 79 e3 e4 c7 61 26 a9 c4 3c 84 56 3e d9 dc 8e 2c c0 f8 6c 3b f3 ba 53 d9 cc aa c0 89 df 57 59 38 f9 b3 40 bd f6 27 5c Data Ascii: BRBL(76O*'WS9%5Ecum)ruq4hnN;^'zV3Tz5Aa\@AN[?(MIfB>{;#x'tVHv01.eNe(;p(#c1 uB\Pu8eSya&<V>,l;SWY8@'\
2024-08-29 17:06:08 UTC	16384	IN	Data Raw: 86 38 9d 2c 93 b7 34 01 5a 24 99 9e 1e 3a 83 98 db 86 e3 e1 be 26 fd 7e ed 02 ef a3 44 33 4c e6 e3 e6 1e a6 bb 19 79 ed 4d a7 f6 1b d6 5d ed 15 33 f9 e6 6f e9 8c a9 eb 75 5b da 84 75 58 a3 3c 4b e4 23 8b 0e 27 e5 1c d3 18 c0 eb e8 59 2b 47 d0 fb 1b 03 c6 d8 14 96 c5 7c f1 5b 17 63 5f b9 f3 05 ef bc 16 a2 fd 9d 2f 58 e4 69 ef a2 3e 92 95 bb 51 fd be 19 7c 65 0f 53 79 6d a9 42 e8 48 72 7a 74 dd 93 be 47 4a cc a3 df 21 96 14 d4 5f c5 fa e3 20 02 98 ee 88 5e 19 cf 2e 74 a8 cf 2c f8 8c 6e 34 b7 95 28 cb 56 42 87 a2 11 d9 38 58 85 ae 98 2f b3 3e 83 e2 81 f4 cc 65 5d 1c 26 65 15 ea 87 b7 dc 77 43 18 d6 9c a9 89 3f 71 ae 48 66 86 43 ef 46 96 08 2e 5b 04 1a f1 c4 1a d5 a6 2c 69 d9 b3 d3 e2 a5 ee 90 0f 67 64 09 e4 ca d8 dc 48 14 ca ed 40 08 3d a7 3c 71 59 7d ee 20 Data Ascii: 8,4Z$:&~D3LyM]3ou[uX<K#'Y+G\|[c_/Xi>Q\|eSymBHrztGJ!_ ^.t,n4(VB8X/>e]&ewC?qHfCF.[,igdH@=<qY}
2024-08-29 17:06:08 UTC	16384	IN	Data Raw: 8e db 5b 59 19 a3 cf ef 47 36 67 de 44 61 44 c9 8c 84 33 8c c1 50 fe 0e b7 46 37 3f 85 9b cb 4f 9e 6c 75 90 18 d3 25 76 3b 9e 87 ac 06 24 e8 bc ca b8 5e 50 7d 48 01 cb ab 44 4e 63 00 06 da 1d ca 8e 0f c6 af b1 1f 4d f8 e0 45 ae 0e 08 e0 32 15 60 80 4c 84 d8 d6 ef 29 b8 84 31 3b d0 40 4b 70 61 65 ef 7a 75 f6 a0 3a d9 53 98 a4 e3 52 dc 39 54 38 85 a3 8c ce c3 0d e6 86 ce b2 ad 62 72 40 4b 34 52 7b 4c 0c 8d 5e b7 8c ee bd 81 fb 55 40 62 2f 57 57 a8 d6 9f 89 ba 75 63 79 a3 a0 20 07 72 78 df 25 17 cf eb e9 a6 ed 9f 08 e0 d3 5d aa e9 99 cf bb 05 4a 06 ef 91 7e 31 18 76 ed 04 24 23 80 be 1a 59 d6 53 dc 44 de 3f 98 73 59 a7 d7 a6 2d 02 58 c2 c4 e0 3a 8e 7d 06 6b a3 9e 7b a3 c0 37 ee 9f 16 b2 33 39 3b a5 c5 1c e1 c7 55 6a 95 ee c0 5f c4 69 52 b3 db d7 a6 69 e2 b2 Data Ascii: [YG6gDaD3PF7?Olu%v;$^P}HDNcME2`L)1;@Kpaezu:SR9T8br@K4R{L^U@b/WWucy rx%]J~1v$#YSD?sY-X:}k{739;Uj_iRi
2024-08-29 17:06:08 UTC	16384	IN	Data Raw: 94 a6 5c 97 d7 f9 dc f1 3d c0 96 27 df 6d 47 67 bd ee 18 4f ce 73 be 55 b4 fa 56 9a b0 8b c2 3a d0 94 b5 1d 98 a9 38 64 80 b8 ef 08 60 6f 04 0c 6b 34 fd 68 6b fa 1d fe 29 01 66 fe 9e 7f 3c 05 c9 5d df 57 ae 94 71 4b c8 29 43 14 be 1b db 2f dc 66 74 f4 59 39 5e 9e 90 09 d7 21 0a 55 85 25 dd 62 43 be cd 7a cc ee 02 d2 09 a2 ea 3e e6 1d d2 c9 3c 9f 3d 99 1c 66 47 93 e5 54 12 c4 98 de 52 e8 34 db 95 19 98 e1 0b b5 7d 20 49 5c a7 78 c6 94 09 45 db 21 cd da 0e eb 11 6c cc 5c 95 4d 35 3e 67 2c 66 38 7b b4 07 83 22 20 71 86 84 51 8e f2 83 f8 72 47 fe f2 3e 57 03 af 14 f7 23 99 34 c7 dc 33 18 93 05 26 2c dc b7 73 16 21 83 4d 1e bb 1a b9 86 bb eb 1f 72 f6 80 51 a6 5f 33 c4 f1 b4 5e e0 02 68 69 0f 56 1b ab 7c 40 f5 b5 b2 ec 34 19 d4 de 52 ea 1d 2c d8 57 86 83 fd 05 Data Ascii: \='mGgOsUV:8d`ok4hk)f<]WqK)C/ftY9^!U%bCz><=fGTR4} I\xE!l\M5>g,f8{" qQrG>W#43&,s!MrQ_3^hiV\|@4R,W
2024-08-29 17:06:08 UTC	16384	IN	Data Raw: b3 f5 73 1d bc 55 26 b2 6f d1 f1 78 2d 7f d3 b9 0f de c8 ce 66 20 fc 31 a5 b7 f6 20 c0 6a 83 49 18 ad 06 b3 2c a1 0f 17 b3 e2 8c 95 5d 6c d3 ca 7b d0 c7 8a 79 af 14 92 39 73 c0 4c 14 65 eb e2 a1 5b e7 2e a2 39 50 99 63 7a b8 6e a8 29 ea 4b 28 48 8d e3 f9 e3 5c 3c dd 2c 81 95 37 d1 a5 7d 63 f8 b7 4c 6e e5 9a 9e 3f 04 95 a9 f1 98 98 cf 6e 6d 1b 40 19 7c e6 5b 5c 0d 14 2b 50 bd bf 57 9a ea 37 f9 37 ae 5f 1d ac f6 50 9a c1 7c 70 69 ba b6 86 59 dd 3b 18 64 57 3d fd 8d b8 e7 b9 05 71 2c ff 0b 51 20 73 f0 df bf 6f 0e fe fa db 70 f0 df 77 e2 e0 bf 5d 32 07 ff fd 8a 38 f8 6f 57 c0 c1 ff e0 db 43 1c c9 af 19 61 cb c3 9b 36 8f 30 e9 70 ce 65 a6 39 71 ee fe 65 87 ee fc 68 1d 16 19 ff 69 3e 9e d9 c9 f0 53 97 b6 ab 17 8e d6 c8 84 eb 59 ad a7 e2 0a 25 b3 d4 9b c8 ce 5d Data Ascii: sU&ox-f 1 jI,]l{y9sLe[.9Pczn)K(H\<,7}cLn?nm@\|[\+PW77_P\|piY;dW=q,Q sopw]28oWCa60pe9qehi>SY%]
2024-08-29 17:06:08 UTC	16384	IN	Data Raw: 47 53 7e e2 2f b3 d0 20 2e b1 88 e0 40 d4 68 20 c5 9b d8 23 be 18 04 c7 8b 83 82 7d 38 d8 81 c1 30 89 3c 41 72 96 f6 f1 9c d0 4f 51 b7 d0 ca 16 65 49 45 2b 10 28 98 02 a1 c2 78 89 91 84 8c 80 2e 56 9c f6 2d d4 9d d2 87 2f a8 fc 15 05 61 19 98 2c 5b 19 b3 50 76 1d 4d b8 91 25 b5 95 a5 68 5c d3 ae e0 86 fb fe fe 4e 5c 5c 37 ae ae 27 ca 45 29 d1 1d 9b 9f d7 8b d3 d4 45 26 59 9d 12 a1 29 83 fb 47 6a e7 f4 0b 81 fd 55 36 27 76 81 0a 84 13 f8 0b d4 49 23 7a 34 30 67 5b 94 a7 a1 3d ba 68 e6 95 b2 10 c8 0a 87 c1 08 ba a1 da 10 85 5d 80 d9 ad c1 1c e6 18 86 f0 d7 98 a8 ef f0 84 11 69 af c2 36 40 33 66 6c 7c 44 1b 1f 61 e3 a3 6b 45 db c0 b9 68 16 d8 db 94 cc db 81 c6 bc 01 6f c2 1b 14 93 0d 78 b6 36 00 96 12 e7 17 01 fa 58 38 e9 00 7a fd 8a 86 f8 c3 ab 18 35 fd e2 Data Ascii: GS~/ .@h #}80<ArOQeIE+(x.V-/a,[PvM%h\N\\7'E)E&Y)GjU6'vI#z40g[=h]i6@3fl\|DakEhox6X8z5
2024-08-29 17:06:08 UTC	16384	IN	Data Raw: 1a ae 62 48 e3 21 2c 9e c5 84 c1 ab 63 02 5c 4e ab de 9b 37 d9 d0 48 31 6a e1 5d 11 bb 90 5b 21 3e 9a bd 8e 6f 01 fb d0 b3 80 31 dd e3 da e5 05 e2 e5 de 6f 92 d4 bb 0f 50 0e 5f ba 49 e0 1d b9 b7 c1 08 f5 8c 60 b0 87 3e 86 5b 90 cd d9 68 ef 39 70 28 64 f9 18 46 1d b6 a6 6e 36 a6 8a 33 f8 48 7d 37 19 8c 61 bc 92 57 a9 7f 81 0a c6 68 ed 3c 75 e0 37 0c 30 05 02 e4 b5 f5 36 60 e9 15 a0 22 57 a0 f7 97 70 81 ad 07 d9 16 50 28 bc 25 7b c6 b0 23 1b a5 f7 56 aa 0d 03 70 19 10 31 a6 a5 28 ad 04 61 30 b1 c8 01 fc 94 bb 80 aa f2 7c 17 42 27 32 ad f9 80 0a 8b 2d 4d 9d 3b f4 98 3f 73 ba f8 67 5a 5e 94 fc f9 ad c6 17 57 b0 be ba f0 83 6e 8c c9 d5 e1 96 85 5e 02 30 04 67 96 c5 11 70 7a 8d 46 fd 3a f5 c3 a1 50 cd ae 42 bf ad 2d 7a 27 cb dc 1f fd 7b 54 31 71 c3 4c fc 1a 64 Data Ascii: bH!,c\N7H1j][!>o1oP_I`>[h9p(dFn63H}7aWh<u706`"WpP(%{#Vp1(a0\|B'2-M;?sgZ^Wn^0gpzF:PB-z'{T1qLd
2024-08-29 17:06:08 UTC	16384	IN	Data Raw: 0e 33 0c 72 12 a4 78 77 4b 5b 20 9a f4 e9 3a 6c be ba f8 88 e1 7b a7 d1 09 3f 14 30 fb 13 f4 7f a4 1d 8e 33 51 42 0d 0d cf 29 8e 0d 96 59 82 19 b9 cf 13 7c ad a5 de 2b b5 e6 30 b6 bb 29 29 90 a8 f9 4b 58 24 4f d7 28 8e 47 a1 bf 7c 28 df 53 fe fb 0d a4 54 67 a3 61 40 4b b3 fe 8a 61 04 d9 cb 59 ff 3d 87 51 ac b3 c9 30 10 dc 42 7e 4e c2 e4 18 ec 14 ae 7b 0d 8f 17 ec 35 50 45 e2 0c 6a c0 ae ce e8 0b af cd a4 0f a4 35 9d bb bc 3e dd 9f 80 0f f1 5e 55 e1 94 ef 91 3c 8b 82 c0 ae d0 6b f9 61 35 50 cf 44 75 11 4c 96 e7 b3 00 da 2f 73 2a 99 d5 6e fd 24 18 be 0f 28 a0 c6 cf 81 a9 18 24 ee 30 bb f0 27 71 86 12 40 f8 ce 68 ab 00 ac 77 85 ef 57 e8 ca bd f1 a9 6d d7 43 a5 34 7c 79 06 aa 09 2a 13 d8 46 ef c7 7c 42 1c 05 26 81 1f 79 a9 8e 15 2b 03 d0 91 2b a7 e0 61 48 91 Data Ascii: 3rxwK[ :l{?03QB)Y\|+0))KX$O(G\|(STga@KaY=Q0B~N{5PEj5>^U<ka5PDuL/sn$($0'q@hwWmC4\|yF\|B&y++aH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	50625	13.107.246.67	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:08 UTC	606	OUT	GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:08 UTC	819	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:06:08 GMT Content-Type: application/x-javascript Content-Length: 32811 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 09 Aug 2024 21:16:16 GMT ETag: 0x8DCB8B881B52A8D x-ms-request-id: 3833c618-e01e-002d-6c01-f84f88000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T170608Z-16579567576vpzq62mgx0my8kw00000002cg000000008h70 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-29 17:06:08 UTC	15565	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 6b 57 db 48 b3 3f fa fe 7c 0a 5b 67 0e 5b 1a 1a c7 86 24 93 d8 51 bc 12 42 26 e4 06 13 c8 65 86 61 b3 84 dd 06 0d 46 f2 48 32 84 60 7f f7 53 bf ea 8b 5a b2 48 f2 ac ff 3e e7 c5 9e 35 c1 ea 8b 5a dd d5 d5 d5 55 d5 55 d5 f7 7e 6d b7 5e a6 59 6b 1a 8f 64 92 cb 56 9c 4c d2 ec 32 2a e2 34 69 cd a6 32 a2 ac 5c ca 56 9a c8 71 be 11 25 d1 f4 a6 88 47 f9 c6 3f f9 c9 a3 51 b7 17 3d 18 75 1f 8f 27 f7 b7 26 e3 47 e3 ad cd ad ce 3f 79 e7 ed ee f6 ce fb 83 9d 4e f1 b5 68 fd 7a ef ff f2 e6 68 a2 c8 e2 51 e1 0d fc 5c 4e 27 9d 6b 79 3a 8b 46 17 db e7 f3 e4 e2 e4 32 8f c7 32 29 e2 e2 e6 24 8f f3 39 a5 a3 f0 a7 6a 2d 16 47 c7 41 67 36 cf cf fd a3 a3 fb bf f5 8e c5 6d 6f 73 f3 b7 47 fd c9 3c 19 a1 ff 7e 22 a4 28 82 db a2 93 f9 32 10 45 67 Data Ascii: kWH?\|[g[$QB&eaFH2`SZH>5ZUU~m^YkdVL2*4i2\Vq%G?Q=u'&G?yNhzhQ\N'ky:F22)$9j-GAg6mosG<~"(2Eg
2024-08-29 17:06:08 UTC	16384	IN	Data Raw: f4 b5 4b 71 c3 bd 9a cf ff a0 97 d4 c3 ff 5f fb 97 38 c7 e0 1a bc c6 7d 7c b5 77 72 dd d3 bd 33 7d 33 7b d2 f0 af f8 08 27 9e c7 f6 a1 8f bf 95 e6 a9 63 ae bb 8a 8d 23 42 03 78 ba d1 1b d2 6f df c9 3d d1 b9 27 9e 3a 29 60 36 23 0d 6b 5c 14 6d 03 e9 6c 3e 25 02 be 37 83 d9 2d 11 cd 83 9b 9c e4 87 dd 64 92 1a 38 f3 86 57 84 26 9c 3e 73 a0 36 2a 0a 4c dd 9c 84 e7 c1 fc b4 cc 41 c0 d2 4a 15 95 a1 ae cf c8 0c f7 e3 f6 aa 7a a9 9a 4c dd 4b d5 cc 2c c2 19 95 27 ad c3 0c ac 02 34 25 6c a8 8d a2 93 aa bb 9b 3b 79 79 35 89 06 0d e5 55 ea b9 33 9a 55 79 2d 12 23 95 ab 71 4a 72 de 15 62 ed a5 b4 e9 a6 10 8e 13 de ea d5 2f 9a 4f 55 8c 92 b8 43 b8 55 e0 0e 4d 8e 1b ab de 76 32 49 62 8c 88 30 da ab e9 9c fb e8 ca b3 7b 75 5a 4d fc 90 b2 ac 4d 7f cc 9d 74 ef e0 4c b4 0d Data Ascii: Kq_8}\|wr3}3{'c#Bxo=':)`6#k\ml>%7-d8W&>s6*LAJzLK,'4%l;yy5U3Uy-#qJrb/OUCUMv2Ib0{uZMMtL
2024-08-29 17:06:08 UTC	862	IN	Data Raw: f8 20 3b b4 3c 7b 00 a1 00 34 b8 17 af d3 b1 2e a6 35 fe 2a df b3 9b e8 24 4d 77 d3 e4 4a 76 f8 a6 d0 09 3d 82 36 07 40 c4 5e 1e 85 09 c2 7b be 29 51 5e f1 01 6b cf 55 6d 0c 88 6d a5 49 af aa 3b 83 02 35 da 35 fd d2 55 df 5c 26 38 98 04 e2 b2 e8 04 50 f6 01 2c a1 5c 6d ea 3b c5 95 df e2 7c 04 b4 35 27 15 5a 6d 39 fb 6e e5 10 56 53 5b 2d ee d0 86 d6 98 e0 b5 63 78 83 0d 68 69 4e b3 b1 99 8d 0d 4b 9c f3 8b 46 42 72 d5 3a 30 f0 75 d0 4c 21 a1 55 5a 9f 9d a1 19 67 cd 3a ad 9c 93 e4 b5 75 83 1c 10 ef 06 47 92 af 7d 0d af 14 7e dd 49 2e d3 83 e4 94 7e c5 30 0e 2d 09 27 d8 35 c7 46 be a6 b5 b0 7d 34 ac 3a 5a 86 e3 24 9e 4c e0 de 0e b2 78 02 84 48 38 c4 a9 cc 32 40 a0 f6 5c e7 45 44 e8 56 5a 7c 35 22 e1 68 23 46 af 6b be 7c 7e c3 b7 ba 6f b1 cf 32 05 52 f6 1b cd Data Ascii: ;<{4.5*$MwJv=6@^{)Q^kUmmI;55U\&8P,\m;\|5'Zm9nVS[-cxhiNKFBr:0uL!UZg:uG}~I.~0-'5F}4:Z$LxH82@\EDVZ\|5"h#Fk\|~o2R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	50627	13.107.246.67	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:08 UTC	633	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:08 UTC	800	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:06:08 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: da7ef925-b01e-001c-2907-fa9136000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T170608Z-16579567576pgh4h94c7qn0kuc000000021g00000000wmh0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 17:06:08 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	50628	13.107.246.67	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:08 UTC	620	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:08 UTC	806	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:06:08 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: ad3701b2-301e-0073-6702-faa468000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T170608Z-16579567576l4p9bs8an1npq1n00000001z000000000besd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-29 17:06:08 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	50633	13.107.246.42	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:09 UTC	398	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:09 UTC	800	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:06:09 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: da7ef925-b01e-001c-2907-fa9136000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T170609Z-16579567576ztstdfgdnkw0mpw00000002c0000000009ypt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 17:06:09 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	50634	13.107.246.42	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:09 UTC	385	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:09 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:06:09 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: ad3701b2-301e-0073-6702-faa468000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T170609Z-16579567576ztstdfgdnkw0mpw000000027g00000000vyra x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 17:06:09 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	50635	13.107.246.42	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:09 UTC	401	OUT	GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:09 UTC	812	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:06:09 GMT Content-Type: application/x-javascript Content-Length: 32811 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 09 Aug 2024 21:16:16 GMT ETag: 0x8DCB8B881B52A8D x-ms-request-id: 3833c618-e01e-002d-6c01-f84f88000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T170609Z-16579567576xfl5xzh7yws029s000000022000000000tn81 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 17:06:09 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 6b 57 db 48 b3 3f fa fe 7c 0a 5b 67 0e 5b 1a 1a c7 86 24 93 d8 51 bc 12 42 26 e4 06 13 c8 65 86 61 b3 84 dd 06 0d 46 f2 48 32 84 60 7f f7 53 bf ea 8b 5a b2 48 f2 ac ff 3e e7 c5 9e 35 c1 ea 8b 5a dd d5 d5 d5 55 d5 55 d5 f7 7e 6d b7 5e a6 59 6b 1a 8f 64 92 cb 56 9c 4c d2 ec 32 2a e2 34 69 cd a6 32 a2 ac 5c ca 56 9a c8 71 be 11 25 d1 f4 a6 88 47 f9 c6 3f f9 c9 a3 51 b7 17 3d 18 75 1f 8f 27 f7 b7 26 e3 47 e3 ad cd ad ce 3f 79 e7 ed ee f6 ce fb 83 9d 4e f1 b5 68 fd 7a ef ff f2 e6 68 a2 c8 e2 51 e1 0d fc 5c 4e 27 9d 6b 79 3a 8b 46 17 db e7 f3 e4 e2 e4 32 8f c7 32 29 e2 e2 e6 24 8f f3 39 a5 a3 f0 a7 6a 2d 16 47 c7 41 67 36 cf cf fd a3 a3 fb bf f5 8e c5 6d 6f 73 f3 b7 47 fd c9 3c 19 a1 ff 7e 22 a4 28 82 db a2 93 f9 32 10 45 67 Data Ascii: kWH?\|[g[$QB&eaFH2`SZH>5ZUU~m^YkdVL2*4i2\Vq%G?Q=u'&G?yNhzhQ\N'ky:F22)$9j-GAg6mosG<~"(2Eg
2024-08-29 17:06:09 UTC	16384	IN	Data Raw: cf ff a0 97 d4 c3 ff 5f fb 97 38 c7 e0 1a bc c6 7d 7c b5 77 72 dd d3 bd 33 7d 33 7b d2 f0 af f8 08 27 9e c7 f6 a1 8f bf 95 e6 a9 63 ae bb 8a 8d 23 42 03 78 ba d1 1b d2 6f df c9 3d d1 b9 27 9e 3a 29 60 36 23 0d 6b 5c 14 6d 03 e9 6c 3e 25 02 be 37 83 d9 2d 11 cd 83 9b 9c e4 87 dd 64 92 1a 38 f3 86 57 84 26 9c 3e 73 a0 36 2a 0a 4c dd 9c 84 e7 c1 fc b4 cc 41 c0 d2 4a 15 95 a1 ae cf c8 0c f7 e3 f6 aa 7a a9 9a 4c dd 4b d5 cc 2c c2 19 95 27 ad c3 0c ac 02 34 25 6c a8 8d a2 93 aa bb 9b 3b 79 79 35 89 06 0d e5 55 ea b9 33 9a 55 79 2d 12 23 95 ab 71 4a 72 de 15 62 ed a5 b4 e9 a6 10 8e 13 de ea d5 2f 9a 4f 55 8c 92 b8 43 b8 55 e0 0e 4d 8e 1b ab de 76 32 49 62 8c 88 30 da ab e9 9c fb e8 ca b3 7b 75 5a 4d fc 90 b2 ac 4d 7f cc 9d 74 ef e0 4c b4 0d 5d c7 5c 4f af 4f 71 Data Ascii: _8}\|wr3}3{'c#Bxo=':)`6#k\ml>%7-d8W&>s6*LAJzLK,'4%l;yy5U3Uy-#qJrb/OUCUMv2Ib0{uZMMtL]\OOq
2024-08-29 17:06:09 UTC	855	IN	Data Raw: a1 00 34 b8 17 af d3 b1 2e a6 35 fe 2a df b3 9b e8 24 4d 77 d3 e4 4a 76 f8 a6 d0 09 3d 82 36 07 40 c4 5e 1e 85 09 c2 7b be 29 51 5e f1 01 6b cf 55 6d 0c 88 6d a5 49 af aa 3b 83 02 35 da 35 fd d2 55 df 5c 26 38 98 04 e2 b2 e8 04 50 f6 01 2c a1 5c 6d ea 3b c5 95 df e2 7c 04 b4 35 27 15 5a 6d 39 fb 6e e5 10 56 53 5b 2d ee d0 86 d6 98 e0 b5 63 78 83 0d 68 69 4e b3 b1 99 8d 0d 4b 9c f3 8b 46 42 72 d5 3a 30 f0 75 d0 4c 21 a1 55 5a 9f 9d a1 19 67 cd 3a ad 9c 93 e4 b5 75 83 1c 10 ef 06 47 92 af 7d 0d af 14 7e dd 49 2e d3 83 e4 94 7e c5 30 0e 2d 09 27 d8 35 c7 46 be a6 b5 b0 7d 34 ac 3a 5a 86 e3 24 9e 4c e0 de 0e b2 78 02 84 48 38 c4 a9 cc 32 40 a0 f6 5c e7 45 44 e8 56 5a 7c 35 22 e1 68 23 46 af 6b be 7c 7e c3 b7 ba 6f b1 cf 32 05 52 f6 1b cd 02 f6 c0 3a 6e 10 f5 Data Ascii: 4.5*$MwJv=6@^{)Q^kUmmI;55U\&8P,\m;\|5'Zm9nVS[-cxhiNKFBr:0uL!UZg:uG}~I.~0-'5F}4:Z$LxH82@\EDVZ\|5"h#Fk\|~o2R:n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	50642	35.190.10.96	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:11 UTC	649	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 612 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:11 UTC	612	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 46 52 56 65 32 4a 67 64 6b 5a 41 63 33 70 2f 44 78 41 65 45 46 59 51 43 45 6b 51 65 47 51 43 5a 32 55 41 66 30 74 30 58 30 55 50 45 41 67 51 57 6b 5a 47 51 6b 45 49 48 52 31 66 51 56 52 47 48 46 70 42 51 6b 42 64 52 6c 64 52 52 68 78 63 56 30 59 64 57 31 78 57 56 30 6f 63 57 6b 5a 66 58 68 41 65 45 48 56 46 56 6b 4e 7a 5a 41 64 42 55 48 5a 6a 44 78 41 49 41 78 34 51 5a 47 4d 43 57 58 46 4b 63 46 56 34 53 48 63 50 45 41 67 51 5a 56 74 63 41 51 41 51 48 68 42 51 57 48 74 55 66 48 46 61 59 58 56 6a 59 77 38 51 43 41 49 65 45 47 56 31 57 6b 4a 51 57 67 5a 33 55 32 52 46 44 78 41 49 41 41 47 51 44 41 52 34 51 5e 64 47 63 44 57 57 45 44 63 31 39 6f 58 48 63 50 45 41 53 67 42 42 41 49 43 48 68 42 39 63 31 70 34 Data Ascii: payload=aUkQRhAIEFRVe2JgdkZAc3p/DxAeEFYQCEkQeGQCZ2UAf0t0X0UPEAgQWkZGQkEIHR1fQVRGHFpBQkBdRldRRhxcV0YdW1xWV0ocWkZfXhAeEHVFVkNzZAdBUHZjDxAIAx4QZGMCWXFKcFV4SHcPEAgQZVtcAQAQHhBQWHtUfHFaYXVjYw8QCAIeEGV1WkJQWgZ3U2RFDxAIAAGQDAR4Q^dGcDWWEDc19oXHcPEASgBBAICHhB9c1p4
2024-08-29 17:06:11 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:06:10 GMT Content-Type: application/json; charset=utf-8 Content-Length: 820 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 17:06:11 UTC	820	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 59 47 42 67 59 47 42 67 63 32 6c 72 62 6a 31 71 61 54 5a 71 49 6a 6b 35 50 54 63 69 50 6a 35 71 61 53 4a 74 61 6a 38 34 49 6d 6b 2b 62 54 6c 70 62 54 6b 35 4f 7a 63 2f 62 58 46 78 63 58 46 67 59 44 34 2b 59 47 42 7a 62 48 70 78 63 58 46 78 50 6d 42 67 59 47 41 2b 63 7a 67 38 50 44 6f 2b 4f 6a 77 35 50 44 73 38 4e 7a 67 38 50 7a 67 36 50 44 67 38 63 58 46 78 63 57 41 2b 50 6a 35 67 59 44 35 67 63 7a 34 34 50 54 73 32 4f 6a 34 2b 4f 44 34 39 50 6a 74 78 63 58 46 78 50 6a 34 2b 59 44 35 67 63 32 78 39 4e 32 35 6a 50 33 38 2b 50 6d 31 2b 62 48 35 36 5a 6d 42 68 5a 32 68 6f 63 58 46 78 63 57 41 2b 50 6a 35 67 59 47 41 2b 63 7a 34 32 4f 6a 70 78 63 58 46 78 59 44 34 2b 59 44 34 2b 59 44 35 7a 61 57 74 75 50 57 Data Ascii: {"do":null,"ob":"YGBgYGBgc2lrbj1qaTZqIjk5PTciPj5qaSJtaj84Imk+bTlpbTk5Ozc/bXFxcXFgYD4+YGBzbHpxcXFxPmBgYGA+czg8PDo+Ojw5PDs8Nzg8Pzg6PDg8cXFxcWA+Pj5gYD5gcz44PTs2Oj4+OD49PjtxcXFxPj4+YD5gc2x9N25jP38+Pm1+bH56ZmBhZ2hocXFxcWA+Pj5gYGA+cz42OjpxcXFxYD4+YD4+YD5zaWtuPW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	50641	34.107.199.61	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:11 UTC	591	OUT	GET /ns?c=fcd3f910-6628-11ef-966a-31fa2073d147 HTTP/1.1 Host: stk.hsprotect.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:11 UTC	153	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:06:10 GMT Content-Type: text/html Content-Length: 244 Access-Control-Allow-Origin: * Connection: close
2024-08-29 17:06:11 UTC	244	IN	Data Raw: 63 39 34 33 62 30 65 34 38 35 31 33 61 62 37 33 30 64 34 62 31 33 38 30 64 32 34 35 66 39 64 61 62 38 66 33 62 62 39 63 63 34 36 32 33 31 30 61 31 31 65 64 30 62 66 65 39 31 34 63 37 31 32 31 36 62 30 65 38 39 66 32 35 63 34 63 37 64 31 65 66 64 37 30 38 66 61 64 33 62 32 39 63 30 66 39 35 33 32 65 39 63 32 63 34 36 61 65 32 30 39 64 62 62 38 37 35 65 32 31 34 65 35 34 34 65 37 65 35 31 36 36 34 30 33 33 65 64 33 61 39 63 34 62 30 61 65 62 32 65 34 33 39 65 34 62 63 65 35 31 65 64 38 65 31 36 64 61 33 33 61 38 63 35 66 30 62 39 35 63 63 39 33 35 31 65 65 65 38 64 61 63 33 37 62 65 61 64 31 32 62 35 63 33 38 38 37 37 30 38 38 39 61 39 34 37 65 38 38 35 63 62 62 62 61 64 38 30 66 65 65 66 36 62 30 63 37 34 62 36 35 31 38 33 Data Ascii: c943b0e48513ab730d4b1380d245f9dab8f3bb9cc462310a11ed0bfe914c71216b0e89f25c4c7d1efd708fad3b29c0f9532e9c2c46ae209dbb875e214e544e7e51664033ed3a9c4b0aeb2e439e4bce51ed8e16da33a8c5f0b95cc9351eee8dac37bead12b5c388770889a947e885cbbbad80feef6b0c74b65183

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	50644	13.107.246.45	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:11 UTC	599	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:11 UTC	764	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:06:11 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Thu, 29 Aug 2024 12:09:58 GMT ETag: 0x8DCC823804011B0 x-ms-request-id: af81d46e-d01e-00e1-7a2b-fa9fc9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T170611Z-16579567576l8zffr7mt4xy2un00000001vg00000000c5v0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-29 17:06:11 UTC	15620	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-29 17:06:11 UTC	1554	IN	Data Raw: 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	50646	35.190.10.96	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:11 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:11 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 29 Aug 2024 17:06:11 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 17:06:11 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	50647	34.107.199.61	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:11 UTC	382	OUT	GET /ns?c=fcd3f910-6628-11ef-966a-31fa2073d147 HTTP/1.1 Host: stk.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:12 UTC	153	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:06:11 GMT Content-Type: text/html Content-Length: 244 Access-Control-Allow-Origin: * Connection: close
2024-08-29 17:06:12 UTC	244	IN	Data Raw: 36 36 61 65 35 31 36 63 65 65 65 32 61 66 63 36 66 30 36 63 35 38 39 61 33 62 35 64 61 37 30 62 31 66 33 30 63 31 61 62 39 31 33 66 36 64 33 62 62 34 65 33 62 33 39 30 33 35 33 33 61 37 36 66 37 63 62 36 35 31 65 63 39 34 38 32 65 38 66 30 35 66 31 62 62 62 66 66 39 65 63 36 61 39 33 65 65 62 30 61 34 39 61 32 62 65 30 63 61 32 30 39 37 33 30 30 65 34 33 36 35 64 63 39 32 31 33 30 38 61 34 31 35 38 30 35 63 63 64 33 65 39 35 61 33 61 64 36 31 66 35 36 66 66 36 33 36 31 38 39 35 37 35 66 62 36 63 32 31 33 36 31 34 61 66 63 64 61 35 65 30 32 38 35 65 64 35 65 32 62 33 65 38 34 34 33 38 31 33 37 65 65 31 39 31 39 39 31 61 62 34 39 39 63 36 34 38 32 38 32 37 37 33 36 65 33 61 61 39 61 33 62 63 37 30 62 64 63 61 62 34 36 39 66 Data Ascii: 66ae516ceee2afc6f06c589a3b5da70b1f30c1ab913f6d3bb4e3b3903533a76f7cb651ec9482e8f05f1bbbff9ec6a93eeb0a49a2be0ca2097300e4365dc921308a415805ccd3e95a3ad61f56ff636189575fb6c213614afcda5e0285ed5e2b3e84438137ee191991ab499c6482827736e3aa9a3bc70bdcab469f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	50649	35.190.10.96	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:12 UTC	650	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 8795 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:12 UTC	8795	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 46 4e 59 61 31 42 2f 63 55 70 54 64 48 4e 37 44 78 41 65 45 46 59 51 43 45 6b 51 55 58 70 7a 63 46 5a 59 61 31 5a 77 64 32 63 50 45 41 67 44 42 51 41 47 43 77 63 44 41 77 55 44 41 41 4d 47 48 68 42 68 58 6d 67 46 64 33 4e 46 42 46 52 68 58 51 38 51 43 42 41 47 43 31 63 48 41 67 6f 47 56 78 41 65 45 48 4e 6c 64 45 56 34 41 6c 46 2f 55 55 70 52 44 78 41 49 45 41 56 52 42 31 51 4c 42 51 41 47 45 42 34 51 59 6d 46 6e 66 32 73 42 57 6e 31 78 41 31 6b 50 45 41 67 51 42 41 64 57 43 67 41 45 56 77 49 51 48 68 42 57 53 30 5a 31 55 47 5a 34 64 57 46 30 42 67 38 51 43 42 42 54 43 77 41 45 43 31 63 43 41 68 41 65 45 48 46 61 61 77 56 6e 64 30 6f 47 66 47 56 37 44 78 41 49 45 41 63 43 55 77 64 58 55 51 63 48 45 42 34 Data Ascii: payload=aUkQRhAIEFNYa1B/cUpTdHN7DxAeEFYQCEkQUXpzcFZYa1Zwd2cPEAgDBQAGCwcDAwUDAAMGHhBhXmgFd3NFBFRhXQ8QCBAGC1cHAgoGVxAeEHNldEV4AlF/UUpRDxAIEAVRB1QLBQAGEB4QYmFnf2sBWn1xA1kPEAgQBAdWCgAEVwIQHhBWS0Z1UGZ4dWF0Bg8QCBBTCwAEC1cCAhAeEHFaawVnd0oGfGV7DxAIEAcCUwdXUQcHEB4
2024-08-29 17:06:12 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:06:12 GMT Content-Type: application/json; charset=utf-8 Content-Length: 848 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 17:06:12 UTC	848	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 50 6d 41 2b 59 44 35 67 63 31 42 2f 64 7a 78 7a 50 44 77 2f 63 7a 38 35 61 6a 31 70 4f 32 31 72 50 7a 6b 32 61 7a 59 34 4f 6d 74 73 50 54 77 2b 4e 6a 38 39 61 54 64 70 61 6a 74 74 4f 57 6f 35 50 6a 68 72 62 6a 63 37 4f 6d 77 2f 61 6a 6b 2b 61 32 74 75 61 54 63 37 4e 6a 77 35 4e 6a 63 39 62 6d 30 39 4f 7a 74 71 4e 32 73 31 66 55 35 31 66 30 52 61 61 43 41 6b 51 7a 6b 34 53 46 64 75 64 55 78 6a 53 6e 5a 2f 66 30 46 46 53 6c 31 74 52 55 68 62 49 48 6c 33 56 6d 64 63 53 47 78 61 62 55 74 48 56 69 42 49 50 43 52 42 65 6a 6c 45 62 55 52 42 57 57 6b 2b 50 46 35 6c 53 55 77 67 52 6d 4e 32 56 7a 35 4c 56 57 30 34 61 6b 56 32 50 45 6c 37 61 32 70 6f 58 30 70 63 51 6c 34 79 4d 6a 55 2b 50 7a 38 2f 4e 56 31 2b 58 69 Data Ascii: {"do":null,"ob":"PmA+YD5gc1B/dzxzPDw/cz85aj1pO21rPzk2azY4OmtsPTw+Nj89aTdpajttOWo5Pjhrbjc7Omw/ajk+a2tuaTc7Njw5Njc9bm09OztqN2s1fU51f0RaaCAkQzk4SFdudUxjSnZ/f0FFSl1tRUhbIHl3VmdcSGxabUtHViBIPCRBejlEbURBWWk+PF5lSUwgRmN2Vz5LVW04akV2PEl7a2poX0pcQl4yMjU+Pz8/NV1+Xi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	50648	13.107.246.45	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:12 UTC	364	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:12 UTC	757	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:06:12 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Thu, 29 Aug 2024 12:09:58 GMT ETag: 0x8DCC823804011B0 x-ms-request-id: af81d46e-d01e-00e1-7a2b-fa9fc9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T170612Z-16579567576qxwrndb60my3nes0000000280000000001gh7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 17:06:12 UTC	15627	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-29 17:06:12 UTC	1547	IN	Data Raw: 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	50651	35.190.10.96	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:13 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:13 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 29 Aug 2024 17:06:12 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: POST, HEAD, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 17:06:13 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	50653	35.190.10.96	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:16 UTC	650	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 6499 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:16 UTC	6499	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 48 5a 30 59 77 74 33 57 56 30 47 59 6b 74 52 44 78 41 65 45 46 59 51 43 45 6b 51 65 57 52 5a 61 32 6f 41 52 51 4a 30 41 41 6f 50 45 41 67 51 42 6c 4d 43 42 56 46 57 43 77 56 58 43 67 46 51 42 77 51 44 56 41 52 57 56 67 70 52 55 77 45 45 41 67 55 4b 56 67 6f 4b 56 6c 63 51 48 68 42 52 56 51 5a 32 59 58 5a 57 57 33 4e 63 58 51 38 51 43 42 41 47 55 77 49 46 55 56 59 4c 42 56 63 4b 41 56 41 48 42 41 4e 55 42 46 5a 57 43 6c 46 54 41 51 51 43 42 51 70 57 43 67 70 57 56 78 41 65 45 48 74 63 42 32 5a 58 64 57 4e 6e 5a 33 64 56 44 78 41 49 45 46 4d 46 42 67 4a 58 56 31 52 57 56 67 4e 52 43 67 49 43 41 51 73 42 43 31 5a 58 55 41 51 46 56 77 49 4c 42 67 63 43 43 77 42 57 45 42 34 51 5a 33 42 77 57 6d 52 61 5a 41 56 Data Ascii: payload=aUkQRhAIEHZ0Ywt3WV0GYktRDxAeEFYQCEkQeWRZa2oARQJ0AAoPEAgQBlMCBVFWCwVXCgFQBwQDVARWVgpRUwEEAgUKVgoKVlcQHhBRVQZ2YXZWW3NcXQ8QCBAGUwIFUVYLBVcKAVAHBANUBFZWClFTAQQCBQpWCgpWVxAeEHtcB2ZXdWNnZ3dVDxAIEFMFBgJXV1RWVgNRCgICAQsBC1ZXUAQFVwILBgcCCwBWEB4QZ3BwWmRaZAV
2024-08-29 17:06:16 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 17:06:15 GMT Content-Type: application/json; charset=utf-8 Content-Length: 248 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 17:06:16 UTC	248	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 59 47 41 2b 50 6d 42 67 63 32 78 36 63 58 46 78 63 57 41 2b 50 6a 35 67 59 44 34 2b 63 31 42 2f 64 32 74 71 63 7a 77 38 50 33 4d 2b 4e 7a 74 75 62 6a 35 72 62 44 59 35 4f 6a 6c 71 61 6a 6b 36 4f 47 35 70 62 54 34 35 50 7a 64 73 50 44 63 39 62 6d 6f 32 50 32 78 74 4e 7a 38 32 4f 44 34 33 61 54 73 35 61 7a 34 36 62 44 70 74 61 6a 31 75 4f 6a 30 32 62 6a 68 74 50 6a 74 73 4f 54 74 75 4e 57 70 32 52 54 39 75 57 44 35 6a 62 44 78 64 5a 32 31 58 54 6d 5a 41 5a 55 6f 38 51 6d 56 65 4f 6b 46 62 53 6e 64 42 64 56 5a 31 51 58 56 6b 66 45 5a 69 56 57 6c 75 50 55 5a 6d 51 47 56 4f 66 45 5a 69 59 33 68 57 50 6a 5a 2f 56 55 78 47 4f 56 67 2b 50 6a 5a 7a 65 33 31 36 61 6e 4d 38 50 7a 38 3d 22 7d 0a Data Ascii: {"do":null,"ob":"YGA+PmBgc2x6cXFxcWA+Pj5gYD4+c1B/d2tqczw8P3M+Nztubj5rbDY5Ojlqajk6OG5pbT45PzdsPDc9bmo2P2xtNz82OD43aTs5az46bDptaj1uOj02bjhtPjtsOTtuNWp2RT9uWD5jbDxdZ21XTmZAZUo8QmVeOkFbSndBdVZ1QXVkfEZiVWluPUZmQGVOfEZiY3hWPjZ/VUxGOVg+PjZze316anM8Pz8="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	50654	35.190.10.96	443	1804	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 17:06:17 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 17:06:17 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 29 Aug 2024 17:06:16 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 17:06:17 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Target ID:	0
Start time:	13:05:33
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	13:05:37
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2312,i,17080303226475153156,8320770004345637706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	13:05:40
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT1iOTZlMDJlZi1iNjQ3LTQ4ZjAtYWFmZC01YjQ4MDU2YTMxM2Umcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT1iOTZlMDJlZi1iNjQ3LTQ4ZjAtYWFmZC01YjQ4MDU2YTMxM2Umcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Windows Analysis Report
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT1iOTZlMDJlZi1iNjQ3LTQ4ZjAtYWFmZC01YjQ4MDU2YTMxM2Umcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l