Edit tour

Windows Analysis Report
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT01OWM4ZTNjMy03YjVmLTQxNTgtOWVjYS0yZWJkZDNiYzZkZDEmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l

Overview

General Information

Sample URL:	https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT01OWM4ZTNjMy03YjVmLTQxNTgtOWVjYS0yZWJkZDNiYzZkZDEmcz0wMDAwM
Analysis ID:	1501392
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1700 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=1988,i,17100991338385188231,16201762972204157628,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT01OWM4ZTNjMy03YjVmLTQxNTgtOWVjYS0yZWJkZDNiYzZkZDEmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DRmXnM9c-7sCzD76JZetXQuJbYrdMyOzD--MwrVIFszgGi4bEPFL_VM8ehwY42PbRGU4OyAqgUv6Wln_Bg4vCmNT-1xwhKF2R2rnNVa-8cmDAzT4YkUIy7XVTCF2QhN6KnZV0_LQO_h6W8P1HDtSgo3-LkX6NKQA5sTd98sAObTV64JNkx8f785hrGtz-Y0Am&response_mode=form_post&nonce=638605551999502916.MDRkZTkyYjktODU5OC00OTNiLWE2ZDktYmRiNDYxZmJjYmNlMzUzY2M0OTctZDIyNS00NWRiLTk5N2ItMzk2YzViYmNjOWZm&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=6d3bf4d6-c3d7-45de-9238-f8e90bfb3dbe&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DRmXnM9c-7sCzD76JZetXQuJbYrdMyOzD--MwrVIFszgGi4bEPFL_VM8ehwY42PbRGU4OyAqgUv6Wln_Bg4vCmNT-1xwhKF2R2rnNVa-8cmDAzT4YkUIy7XVTCF2QhN6KnZV0_LQO_h6W8P1HDtSgo3-LkX6NKQA5sTd98sAObTV64JNkx8f785hrGtz-Y0Am&response_mode=form_post&nonce=638605551999502916.MDRkZTkyYjktODU5OC00OTNiLWE2ZDktYmRiNDYxZmJjYmNlMzUzY2M0OTctZDIyNS00NWRiLTk5N2ItMzk2YzViYmNjOWZm&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=6d3bf4d6-c3d7-45de-9238-f8e90bfb3dbe&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DRmXnM9c-7sCzD76JZetXQuJbYrdMyOzD--MwrVIFszgGi4bEPFL_VM8ehwY42PbRGU4OyAqgUv6Wln_Bg4vCmNT-1xwhKF2R2rnNVa-8cmDAzT4YkUIy7XVTCF2QhN6KnZV0_LQO_h6W8P1HDtSgo3-LkX6NKQA5sTd98sAObTV64JNkx8f785hrGtz-Y0Am&response_mode=form_post&nonce=638605551999502916.MDRkZTkyYjktODU5OC00OTNiLWE2ZDktYmRiNDYxZmJjYmNlMzUzY2M0OTctZDIyNS00NWRiLTk5N2ItMzk2YzViYmNjOWZm&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=6d3bf4d6-c3d7-45de-9238-f8e90bfb3dbe&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0

HTTP Parser: Base64 decoded: 04de92b9-8598-493b-a6d9-bdb461fbcbce353cc497-d225-45db-997b-396c5bbcc9ff

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DRmXnM9c-7sCzD76JZetXQuJbYrdMyOzD--MwrVIFszgGi4bEPFL_VM8ehwY42PbRGU4OyAqgUv6Wln_Bg4vCmNT-1xwhKF2R2rnNVa-8cmDAzT4YkUIy7XVTCF2QhN6KnZV0_LQO_h6W8P1HDtSgo3-LkX6NKQA5sTd98sAObTV64JNkx8f785hrGtz-Y0Am&response_mode=form_post&nonce=638605551999502916.MDRkZTkyYjktODU5OC00OTNiLWE2ZDktYmRiNDYxZmJjYmNlMzUzY2M0OTctZDIyNS00NWRiLTk5N2ItMzk2YzViYmNjOWZm&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=6d3bf4d6-c3d7-45de-9238-f8e90bfb3dbe&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DRmXnM9c-7sCzD76JZetXQuJbYrdMyOzD--MwrVIFszgGi4bEPFL_VM8ehwY42PbRGU4OyAqgUv6Wln_Bg4vCmNT-1xwhKF2R2rnNVa-8cmDAzT4YkUIy7XVTCF2QhN6KnZV0_LQO_h6W8P1HDtSgo3-LkX6NKQA5sTd98sAObTV64JNkx8f785hrGtz-Y0Am&response_mode=form_post&nonce=638605551999502916.MDRkZTkyYjktODU5OC00OTNiLWE2ZDktYmRiNDYxZmJjYmNlMzUzY2M0OTctZDIyNS00NWRiLTk5N2ItMzk2YzViYmNjOWZm&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=6d3bf4d6-c3d7-45de-9238-f8e90bfb3dbe&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DRmXnM9c-7sCzD76JZetXQuJbYrdMyOzD--MwrVIFszgGi4bEPFL_VM8ehwY42PbRGU4OyAqgUv6Wln_Bg4vCmNT-1xwhKF2R2rnNVa-8cmDAzT4YkUIy7XVTCF2QhN6KnZV0_LQO_h6W8P1HDtSgo3-LkX6NKQA5sTd98sAObTV64JNkx8f785hrGtz-Y0Am&response_mode=form_post&nonce=638605551999502916.MDRkZTkyYjktODU5OC00OTNiLWE2ZDktYmRiNDYxZmJjYmNlMzUzY2M0OTctZDIyNS00NWRiLTk5N2ItMzk2YzViYmNjOWZm&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=6d3bf4d6-c3d7-45de-9238-f8e90bfb3dbe&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: No favicon
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d47192B24BF4B2C89%26opidt%3d1724958418%26uaid%3d6d3bf4d6c3d745de9238f8e90bfb3dbe%26contextid%3dEF328B64715126DC%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=6d3bf4d6c3d745de9238f8e90bfb3dbe&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d47192B24BF4B2C89%26opidt%3d1724958418%26uaid%3d6d3bf4d6c3d745de9238f8e90bfb3dbe%26contextid%3dEF328B64715126DC%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=6d3bf4d6c3d745de9238f8e90bfb3dbe&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d47192B24BF4B2C89%26opidt%3d1724958418%26uaid%3d6d3bf4d6c3d745de9238f8e90bfb3dbe%26contextid%3dEF328B64715126DC%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=6d3bf4d6c3d745de9238f8e90bfb3dbe&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d47192B24BF4B2C89%26opidt%3d1724958418%26uaid%3d6d3bf4d6c3d745de9238f8e90bfb3dbe%26contextid%3dEF328B64715126DC%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=6d3bf4d6c3d745de9238f8e90bfb3dbe&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DRmXnM9c-7sCzD76JZetXQuJbYrdMyOzD--MwrVIFszgGi4bEPFL_VM8ehwY42PbRGU4OyAqgUv6Wln_Bg4vCmNT-1xwhKF2R2rnNVa-8cmDAzT4YkUIy7XVTCF2QhN6KnZV0_LQO_h6W8P1HDtSgo3-LkX6NKQA5sTd98sAObTV64JNkx8f785hrGtz-Y0Am&response_mode=form_post&nonce=638605551999502916.MDRkZTkyYjktODU5OC00OTNiLWE2ZDktYmRiNDYxZmJjYmNlMzUzY2M0OTctZDIyNS00NWRiLTk5N2ItMzk2YzViYmNjOWZm&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=6d3bf4d6-c3d7-45de-9238-f8e90bfb3dbe&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DRmXnM9c-7sCzD76JZetXQuJbYrdMyOzD--MwrVIFszgGi4bEPFL_VM8ehwY42PbRGU4OyAqgUv6Wln_Bg4vCmNT-1xwhKF2R2rnNVa-8cmDAzT4YkUIy7XVTCF2QhN6KnZV0_LQO_h6W8P1HDtSgo3-LkX6NKQA5sTd98sAObTV64JNkx8f785hrGtz-Y0Am&response_mode=form_post&nonce=638605551999502916.MDRkZTkyYjktODU5OC00OTNiLWE2ZDktYmRiNDYxZmJjYmNlMzUzY2M0OTctZDIyNS00NWRiLTk5N2ItMzk2YzViYmNjOWZm&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=6d3bf4d6-c3d7-45de-9238-f8e90bfb3dbe&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DRmXnM9c-7sCzD76JZetXQuJbYrdMyOzD--MwrVIFszgGi4bEPFL_VM8ehwY42PbRGU4OyAqgUv6Wln_Bg4vCmNT-1xwhKF2R2rnNVa-8cmDAzT4YkUIy7XVTCF2QhN6KnZV0_LQO_h6W8P1HDtSgo3-LkX6NKQA5sTd98sAObTV64JNkx8f785hrGtz-Y0Am&response_mode=form_post&nonce=638605551999502916.MDRkZTkyYjktODU5OC00OTNiLWE2ZDktYmRiNDYxZmJjYmNlMzUzY2M0OTctZDIyNS00NWRiLTk5N2ItMzk2YzViYmNjOWZm&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=6d3bf4d6-c3d7-45de-9238-f8e90bfb3dbe&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DRmXnM9c-7sCzD76JZetXQuJbYrdMyOzD--MwrVIFszgGi4bEPFL_VM8ehwY42PbRGU4OyAqgUv6Wln_Bg4vCmNT-1xwhKF2R2rnNVa-8cmDAzT4YkUIy7XVTCF2QhN6KnZV0_LQO_h6W8P1HDtSgo3-LkX6NKQA5sTd98sAObTV64JNkx8f785hrGtz-Y0Am&response_mode=form_post&nonce=638605551999502916.MDRkZTkyYjktODU5OC00OTNiLWE2ZDktYmRiNDYxZmJjYmNlMzUzY2M0OTctZDIyNS00NWRiLTk5N2ItMzk2YzViYmNjOWZm&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=6d3bf4d6-c3d7-45de-9238-f8e90bfb3dbe&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DRmXnM9c-7sCzD76JZetXQuJbYrdMyOzD--MwrVIFszgGi4bEPFL_VM8ehwY42PbRGU4OyAqgUv6Wln_Bg4vCmNT-1xwhKF2R2rnNVa-8cmDAzT4YkUIy7XVTCF2QhN6KnZV0_LQO_h6W8P1HDtSgo3-LkX6NKQA5sTd98sAObTV64JNkx8f785hrGtz-Y0Am&response_mode=form_post&nonce=638605551999502916.MDRkZTkyYjktODU5OC00OTNiLWE2ZDktYmRiNDYxZmJjYmNlMzUzY2M0OTctZDIyNS00NWRiLTk5N2ItMzk2YzViYmNjOWZm&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=6d3bf4d6-c3d7-45de-9238-f8e90bfb3dbe&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DRmXnM9c-7sCzD76JZetXQuJbYrdMyOzD--MwrVIFszgGi4bEPFL_VM8ehwY42PbRGU4OyAqgUv6Wln_Bg4vCmNT-1xwhKF2R2rnNVa-8cmDAzT4YkUIy7XVTCF2QhN6KnZV0_LQO_h6W8P1HDtSgo3-LkX6NKQA5sTd98sAObTV64JNkx8f785hrGtz-Y0Am&response_mode=form_post&nonce=638605551999502916.MDRkZTkyYjktODU5OC00OTNiLWE2ZDktYmRiNDYxZmJjYmNlMzUzY2M0OTctZDIyNS00NWRiLTk5N2ItMzk2YzViYmNjOWZm&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=6d3bf4d6-c3d7-45de-9238-f8e90bfb3dbe&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: nam.safelink.emails.azure.net to https://admin.microsoft.com/adminportal/home?#/subscriptions

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT01OWM4ZTNjMy03YjVmLTQxNTgtOWVjYS0yZWJkZDNiYzZkZDEmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l HTTP/1.1Host: nam.safelink.emails.azure.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=e08423a0-6639-11ef-b978-41df4618b98d HTTP/1.1Host: stk.hsprotect.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://msft.hsprotect.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://msft.hsprotect.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=e08423a0-6639-11ef-b978-41df4618b98d HTTP/1.1Host: stk.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: nam.safelink.emails.azure.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: signup.live.com
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: fpt.live.com
Source: global traffic	DNS traffic detected: DNS query: msft.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: client.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: stk.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: collector-pxzc5j78di.hsprotect.net

Source: unknown

HTTP traffic detected: POST /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveContent-Length: 612sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: */*Origin: https://msft.hsprotect.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://msft.hsprotect.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_109.2.dr, chromecache_101.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_98.2.dr, chromecache_107.2.dr, chromecache_92.2.dr, chromecache_77.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_98.2.dr, chromecache_107.2.dr, chromecache_92.2.dr, chromecache_77.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_106.2.dr	String found in binary or memory: https://client.hsprotect.net/PXzC5j78di/main.min.js
Source: chromecache_78.2.dr	String found in binary or memory: https://fpt.live.com/
Source: chromecache_109.2.dr, chromecache_98.2.dr, chromecache_82.2.dr, chromecache_87.2.dr, chromecache_101.2.dr, chromecache_107.2.dr, chromecache_92.2.dr, chromecache_77.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_72.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_72.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@21/67@36/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=1988,i,17100991338385188231,16201762972204157628,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT01OWM4ZTNjMy03YjVmLTQxNTgtOWVjYS0yZWJkZDNiYzZkZDEmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=1988,i,17100991338385188231,16201762972204157628,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT01OWM4ZTNjMy03YjVmLTQxNTgtOWVjYS0yZWJkZDNiYzZkZDEmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://login.microsoftonline.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	URL Reputation	safe
http://knockoutjs.com/	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	0%	URL Reputation	safe
http://feross.org	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js	0%	Avira URL Cloud	safe
https://collector-pxzc5j78di.hsprotect.net/api/v2/msft	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	0%	Avira URL Cloud	safe
https://client.hsprotect.net/PXzC5j78di/main.min.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe
https://stk.hsprotect.net/ns?c=e08423a0-6639-11ef-b978-41df4618b98d	0%	Avira URL Cloud	safe
https://login.windows-ppe.net	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js	0%	Avira URL Cloud	safe
https://github.com/douglascrockford/JSON-js	0%	Avira URL Cloud	safe
https://fpt.live.com/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	unknown
inbound-weighted.protechts.net	35.190.10.96	true	false	unknown
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	172.217.23.100	true	false	unknown
stk.hsprotect.net	34.107.199.61	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0029.t-0009.t-msedge.net	13.107.246.57	true	false	unknown
nam.safelink.emails.azure.net	unknown	unknown	false	unknown
signup.live.com	unknown	unknown	false	unknown
client.hsprotect.net	unknown	unknown	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
msft.hsprotect.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
collector-pxzc5j78di.hsprotect.net	unknown	unknown	false	unknown
logincdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
fpt.live.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	false	Avira URL Cloud: safe	unknown
https://stk.hsprotect.net/ns?c=e08423a0-6639-11ef-b978-41df4618b98d	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js	false	Avira URL Cloud: safe	unknown
https://collector-pxzc5j78di.hsprotect.net/api/v2/msft	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://login.microsoftonline.com	chromecache_72.2.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_98.2.dr, chromecache_107.2.dr, chromecache_92.2.dr, chromecache_77.2.dr	false	URL Reputation: safe	unknown
http://knockoutjs.com/	chromecache_98.2.dr, chromecache_107.2.dr, chromecache_92.2.dr, chromecache_77.2.dr	false	URL Reputation: safe	unknown
https://client.hsprotect.net/PXzC5j78di/main.min.js	chromecache_106.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_109.2.dr, chromecache_98.2.dr, chromecache_82.2.dr, chromecache_87.2.dr, chromecache_101.2.dr, chromecache_107.2.dr, chromecache_92.2.dr, chromecache_77.2.dr	false	Avira URL Cloud: safe	unknown
https://login.windows-ppe.net	chromecache_72.2.dr	false	Avira URL Cloud: safe	unknown
https://fpt.live.com/	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
http://feross.org	chromecache_109.2.dr, chromecache_101.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
35.190.10.96	inbound-weighted.protechts.net	United States	15169	GOOGLEUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
34.107.199.61	stk.hsprotect.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.23.100	www.google.com	United States	15169	GOOGLEUS	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1501392
Start date and time:	2024-08-29 21:05:44 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT01OWM4ZTNjMy03YjVmLTQxNTgtOWVjYS0yZWJkZDNiYzZkZDEmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@21/67@36/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZJBbNJgGIZb2NiG05FpzI5L9GDUQtvRUlh2YBQ2GG2hFFi5ECgt_SltWfszRm_eTLwsxnjYyXgyOy2LB-PBGL3Ny06azMR4U3cwanZY9CJkF4--hzdf8j2XL98TnIqF6TAZxm_7iTCRuIlfhMbGjeGaRmCKOp7-iTMfDL0_WzY_vP2Ufsicf7v0Z-XVHjpT74JtNazY5j56Q4ew5yYikUbLBFbYBIpju7YGx9tIt2G1gNV-gaLHKPoVRfd8k6qFlUv7PpdeYmicoigiHo9TOBkn6DDHikZNMoZyx4ACW6aEFI4LEg_y1TRZYw0omyLgWXmnZuY6ssl3Oa_sySQ3YhRYY7NDvoTjfFUEecmgeDILOc8gZa8CRmxHqNbME9-ckOxDnRyX7QBP_eWb0WzHrPdsF-75v6BCT7WyrZRtWaoCw2NMtSBQGhDYVsGxe6oDgequiOamxcUVLOamPDZG52oq3Cz2c03ZaXFDwWMxjBs4lWzG9dprINpMFzL5eoVjVH0gR8lCU1wrR4Vhcqtd3qarXau-2o5up0xewoidgb6RIUXSsfhKA2MUk016UlQ2ytlhbLMipTJkUefpDatWwev5olDX6SpTINZZWGrbS1je2KT5jWKScqVWnHGTQlOq0NEcb-wwWoyhdGcNepiMJ81Df2D0HdO2jvxXRkdZoLXYc2wNdNXjCfR04vr0VCiw4FtEbl3D_Ynp6WAIWUAWkfMJ9OnkyIfSk7S4XB1k7p09_vnsOUSOJiP6kGhnVz1J0nJMT0jFKaqzapGpaosEnYjR6JMqvr61zZpbd7IrRILYDaC7gcBRYCbL1vm0FI2RPwLo_Snk5cz_2HQwi57MXg0G-6DetZVGV3XnL6x6fRk5v_Lo95t3Hx8cfl8_nburO2rVaXNivLJqas21gdhPN9x2XoloRHOrHJW9DU6i095Sk1VWDkLI5xDyFw2&estsfed=1&uaid=6d3bf4d6c3d745de9238f8e90bfb3dbe&signup=1&lw=1&fl=easi2&fci=00000006-0000-0ff1-ce00-000000000000&mkt=en-US

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.185.206, 74.125.206.84, 34.104.35.123, 13.107.6.156, 20.190.160.20, 20.190.160.17, 20.190.160.22, 40.126.32.138, 20.190.160.14, 40.126.32.140, 40.126.32.72, 40.126.32.136, 2.19.126.199, 2.19.126.200, 20.190.159.0, 20.190.159.23, 20.190.159.68, 40.126.31.73, 40.126.31.67, 20.190.159.4, 20.190.159.73, 40.126.31.69, 142.250.74.202, 142.250.185.234, 142.250.186.74, 142.250.181.234, 142.250.186.42, 172.217.18.106, 172.217.16.138, 142.250.186.170, 142.250.186.106, 142.250.186.138, 142.250.185.106, 142.250.185.138, 142.250.185.202, 142.250.185.74, 142.250.185.170, 142.250.184.234, 40.127.169.103, 2.19.126.163, 2.19.126.137, 192.229.221.95, 52.165.164.15, 40.126.32.74, 40.126.32.68, 40.126.32.134, 13.107.42.22, 216.58.212.138, 172.217.18.10, 216.58.212.170, 23.38.98.69, 23.38.98.95, 52.167.30.171, 20.3.187.198, 2.22.242.43, 2.22.242.169, 13.89.179.8, 20.42.73.30, 216.58.206.67
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT01OWM4ZTNjMy03YjVmLTQxNTgtOWVjYS0yZWJkZDNiYzZkZDEmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l

Input	Output
URL: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DRmXnM9c-7sCzD76JZetXQuJbYrdMyOzD--MwrVIFszgGi4bEPF Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "prominent_button_name":"Next", "text_input_field_labels":["Email, phone, or Skype", "No account? Create one! Can't access your account?"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d47192B24BF4B2C89%26opidt%3d1724958418%26uaid%3d6d3bf4d6c3d745de9238f8e90bfb3dbe%2 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "prominent_button_name":"Next", "text_input_field_labels":["Create account", "Get a new email address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d47192B24BF4B2C89%26opidt%3d1724958418%26uaid%3d6d3bf4d6c3d745de9238f8e90bfb3dbe%2 Model: jbxai	{ "phishing_score":1, "brand_name":"Microsoft", "reasons":"The domain'signup.live.com' matches the legitimate domain associated with the identified brand, Microsoft. The presence of the Microsoft logo, minimalistic design, and standard use of a.com top level domain indicate a high likelihood of legitimacy."}

URL: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DRmXnM9c-7sCzD76JZetXQuJbYrdMyOzD--MwrVIFszgGi4bEPF Model: jbxai	{ "phishing_score":0, "brand_name":"Microsoft", "reasons":"The domain 'login.microsoftonline.com' matches the legitimate domain associated with Microsoft's online services, and the design is clean and professional, with a white background and blue and black text. The presence of the 'Sign-in options' link and the 'Can't access your account?' message suggests that the page is genuine and prepared to handle potential issues users may encounter during the sign-in process."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.317614623419193
Encrypted:	false
SSDEEP:	3072:ew5iAZBaQxn7oW/gFDfmtGOOJcPSRTQLeUDdHm7mCId9hvuZTh910rOzPypRan4:ZiAhxp/mTmbraQJmvZxL4
MD5:	033A93064FBF6C5BEA2377A5D08D554D
SHA1:	75524ED095D9ACDD42EA8D67D38A5B0793081D70
SHA-256:	1EC87632EE58734951AA02813EF07AD377126A39A16F063C181519B98FFFFC07
SHA-512:	FD93A5DDF2CCE4AA956DF94E10F3791787E157BA8D6CFF8151163F719868105045F431901D496215E5959989A30969AC696C218B29B0AE343F2BF9E7F7D51078
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(532).concat([f

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90678
Category:	dropped
Size (bytes):	32811
Entropy (8bit):	7.993115726308211
Encrypted:	true
SSDEEP:	768:Tu4jwkrxI2adXpo9SSwpmUPieDFpfy2Ky4lS4ru4r0r:300CfRpFpmAieDFpfBbWbru4r0r
MD5:	BCD68C8A4F1BB13B272E02FDA0EB5460
SHA1:	57C81EE13D027556D54744C9246226E1E85C211C
SHA-256:	25D5832DE46E5170761BA826342655D7C5550451332E4086EC366E79D359BD51
SHA-512:	0D70D7476653949F79CC67897F9F36E6B2F503E5C308C59D0C349B841BC2A27CD6408ACB272568CCA6B593AF5060F93FADD217D1677DE0E897608BA3BBFB0493
Malicious:	false
Reputation:	low
Preview:	...........kW.H.?..\|.[g.[...$..Q..B&....e.a.....F.H2.`..S..Z.H..>..5..Z....U.U..~m.^.Yk..d..V.L..2.4i.2..\.V..q..%....G..?..Q..=.u..'..&.G...?y........N.h.z....h...Q...\N'.ky:.F.......2..2)...$..9...j-.G.Ag6..........mos.G..<...~".(....2.Eg.Kq.l6.M.....L....L..,i.....".0.L..DK.\|.d.....;..>QS....r/e...O.gq.Ps./..4...ZA...c.O...[...f......"..4..{......,.b.@.6d2.i..{....&..>.......Q......Q.4.W.....!.'...~...J~.QrF.=;.W2#<i...z..N..$...,N..z.P.....3...'..".h.yG+......>.^.....k.Y:.Y...N..............B...S......5r.E#.........O.t...I..~...3.4%.G.....I........(M/b..*.....SB.3Y......I. .,E.?..i.s.s...$?..f....?.$WLS".M.....{.=.P.~~y.1..uZ2..=!.U.`.s.....n.c...x......O.3B...q...r........).D.z..?.H.HCo...$..<..{./.a.ei..73)F...+"..Q&.JbJ..M..n.$.w.\|.:1Y.....OJ...&..t.:..<M.kk^....NL8..i6,w....,.....y...0...#j;.C..6.%$..o}.A.q-..0.O..g..U..[]j.:.'a...C...2.x..50.\|..}gBlg..i4=<..S...eA.P.S....L.&.Z.f]k.YA@.J......._.!I.k-.L.....XP....{.....i.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (918)
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	5.4604704891374
Encrypted:	false
SSDEEP:	24:hY/LLuvW9BokgrY7cMdhwCBie46Tz1QqIJIzcq9X5wXR5viRX4j:bCo5Y73hwCd4olUItp5wrNj
MD5:	5DC258F6742F6D22A4CD80F50926ED70
SHA1:	2925F965C31990E0F883E2E885A3D57056168DCC
SHA-256:	3B8D3C93FD78C24F4C175C8515E4A5DF79AEE536AF4CED58BA078EA591569EAC
SHA-512:	BB63B3078587A823CCBB2314EFF3CCC16B20A01AC717CE37289DA8B5118E5053F867CE62256CC1C9466A7E2CBF60C854F4DEA68A060D67CC51BAAB17179E140C
Malicious:	false
Reputation:	low
URL:	https://msft.hsprotect.net/index.html
Preview:	<!DOCTYPE html>.<html lang='en'>.<head>. <meta charset='UTF-8'>. <meta name='viewport' content='width=device-width, initial-scale=1.0'>. <title>Human Sensor Script Iframe</title>.</head>.<body>.<script>. var a=["_pxvid","_px3","_pxde"];function b(a){var b=new RegExp("(^\| )"+a+"=([^;]+)"),c=document.cookie.match(b);return c?c[2]:null}function c(a,b,c){window.parent.postMessage({type:"cookie",name:a,value:b,expires:c\|\|new Date(Date.now()+31536e6).toUTCString()},"")}function d(a){var b=/^([^=]+)=([^;])/,c=/expires=([^;]+)/,d=a.match(b),e=d?d[1]:null,f=d?d[2]:null,g=a.match(c),h=g?g[1]:null;return{cookieName:e,cookieValue:f,expires:h}}function e(b){var e=d(b);-1!==a.indexOf(e.cookieName)&&c(e.cookieName,e.cookieValue,e.expires)}function f(){try{var a=Object.getOwnPropertyDescriptor(Document.prototype,"cookie")\|\|Object.getOwnPropertyDescriptor(Object.getPrototypeOf(document),"cookie"),b=a.get.bind(document),c=a.set.bind(document);Object.defineProperty(document,"cookie",{get:fu

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	449540
Entropy (8bit):	5.448887818381794
Encrypted:	false
SSDEEP:	6144:U7lu66UglOK2d/VkpJYBsLLhkSB29OWtUJGcEHKE0H3NX44n:U7tjVkpq+LlkBUJEQ
MD5:	D8FF67E1334DAD67202B05BA32DEAD18
SHA1:	7AAA398BA53310D793E4BB28E6D5F118EF342254
SHA-256:	4DC06BDE66FF69C3CD7A67B5745C329571334A98ED7AF7C356241CFED32FA6D2
SHA-512:	67A56439845499BD65D1EDED96298FC6C3EEE99022861EC16AFD9E5D2BC7F94239CA0DD08C54A0C65B057625E59BE6362CBF74D7A97FCBEFE0F9AC88B2FE713E
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113401
Entropy (8bit):	5.284985933216009
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmchSeC1Jzc6VUW3:xkNhp6VU0
MD5:	41955034BB6BC6963DF5A8ECA72C5B81
SHA1:	D4B9E8C46100BDDACE8DFA08BDFF1F6F3D3B0A81
SHA-256:	1F8CEB44FE7CFCF7E71DBD5122210335CA3821D697A851D2900B95AF7D92D69D
SHA-512:	A52DF8961AC9964DE5202A52B4C38242368DC8898593BF3E8B3AFD3FC77C2C12FE72F27BB410DD4F7498643B69EEEFCCA1A566371E211F874C0BE22CF7E2A4E8
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.317614623419193
Encrypted:	false
SSDEEP:	3072:ew5iAZBaQxn7oW/gFDfmtGOOJcPSRTQLeUDdHm7mCId9hvuZTh910rOzPypRan4:ZiAhxp/mTmbraQJmvZxL4
MD5:	033A93064FBF6C5BEA2377A5D08D554D
SHA1:	75524ED095D9ACDD42EA8D67D38A5B0793081D70
SHA-256:	1EC87632EE58734951AA02813EF07AD377126A39A16F063C181519B98FFFFC07
SHA-512:	FD93A5DDF2CCE4AA956DF94E10F3791787E157BA8D6CFF8151163F719868105045F431901D496215E5959989A30969AC696C218B29B0AE343F2BF9E7F7D51078
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(532).concat([f

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90678
Category:	downloaded
Size (bytes):	32811
Entropy (8bit):	7.993115726308211
Encrypted:	true
SSDEEP:	768:Tu4jwkrxI2adXpo9SSwpmUPieDFpfy2Ky4lS4ru4r0r:300CfRpFpmAieDFpfBbWbru4r0r
MD5:	BCD68C8A4F1BB13B272E02FDA0EB5460
SHA1:	57C81EE13D027556D54744C9246226E1E85C211C
SHA-256:	25D5832DE46E5170761BA826342655D7C5550451332E4086EC366E79D359BD51
SHA-512:	0D70D7476653949F79CC67897F9F36E6B2F503E5C308C59D0C349B841BC2A27CD6408ACB272568CCA6B593AF5060F93FADD217D1677DE0E897608BA3BBFB0493
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js
Preview:	...........kW.H.?..\|.[g.[...$..Q..B&....e.a.....F.H2.`..S..Z.H..>..5..Z....U.U..~m.^.Yk..d..V.L..2.4i.2..\.V..q..%....G..?..Q..=.u..'..&.G...?y........N.h.z....h...Q...\N'.ky:.F.......2..2)...$..9...j-.G.Ag6..........mos.G..<...~".(....2.Eg.Kq.l6.M.....L....L..,i.....".0.L..DK.\|.d.....;..>QS....r/e...O.gq.Ps./..4...ZA...c.O...[...f......"..4..{......,.b.@.6d2.i..{....&..>.......Q......Q.4.W.....!.'...~...J~.QrF.=;.W2#<i...z..N..$...,N..z.P.....3...'..".h.yG+......>.^.....k.Y:.Y...N..............B...S......5r.E#.........O.t...I..~...3.4%.G.....I........(M/b..*.....SB.3Y......I. .,E.?..i.s.s...$?..f....?.$WLS".M.....{.=.P.~~y.1..uZ2..=!.U.`.s.....n.c...x......O.3B...q...r........).D.z..?.H.HCo...$..<..{./.a.ei..73)F...+"..Q&.JbJ..M..n.$.w.\|.:1Y.....OJ...&..t.:..<M.kk^....NL8..i6,w....,.....y...0...#j;.C..6.%$..o}.A.q-..0.O..g..U..[]j.:.'a...C...2.x..50.\|..}gBlg..i4=<..S...eA.P.S....L.&.Z.f]k.YA@.J......._.!I.k-.L.....XP....{.....i.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32057)
Category:	dropped
Size (bytes):	56391
Entropy (8bit):	5.37635913975141
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3Z1ym+d/ixLgT1wtuQixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJJ1ym+d/ihgT1wtuQiJig/Ml
MD5:	B59C16ABA59DB0BC490C85B30C0B60E8
SHA1:	7B708EC7EDC902283A755FC0BF4E767A2A28473E
SHA-256:	D65E2644BEA71489D43203AA2ABCBA471C847BF2A176963BE8DB62BF1A70F7A5
SHA-512:	F7E252E5B6046AFB46658F542233D7E1602C2638089B6BF4E1490643770A28D3DF1FFCB587699B82FD8E821495D69780E160EA8B7065519EEA8B34C98F4817AA
Malicious:	false
Reputation:	low
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/images/favicon.ico?v=2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2626), with CRLF line terminators
Category:	downloaded
Size (bytes):	2747
Entropy (8bit):	5.651744162984865
Encrypted:	false
SSDEEP:	48:t1XXw+kOhX/BxVgnK/Q6GiuGq9juwbae13NhcKBLd4mUpQT0SKr07nVEXibIIQou:H9W3iuV96wDrHBZ4mUpQTWo7nVmikn/
MD5:	FD87FEC95674EAEE53EAB0E907129267
SHA1:	FEA70B995FD351ADDE006C7A2F04EB390A6EE75A
SHA-256:	34689301A78250759A3EBBCDCD81CA05C09279EEF3C3CACDC7B451B3AEF1FF02
SHA-512:	67A44CA5BB84B0B5E261CDE9ECB30A34A7691526C6F9F9D9D5405C66D66ACEC6BCB25F85B74C77EC4BCCB670528096FE4EEF141330C9A06D62DFC4165627A360
Malicious:	false
Reputation:	low
URL:	https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=6d3bf4d6c3d745de9238f8e90bfb3dbe&id=6ab3c089-8659-b9fd-22db-a501fe3ac398&w=8DCC85DC43D7949&tkt=taBcrIH61PuCVH7eNCyH0HyAAKgSb15ZEqidLg30r8OBnHOjMRhkZuUFps1xkOT0sDDvQ6KPpmqaSDphUssZcwEm6%252byfoI1qKnEgVBiLIH0tA9KLO3Jyr7mDl4KPClbgvlLzaZXRawrxPbEjrJYD81pb0Uipc1Q446SCm2cNEjMseoP%252feo1BzyHtq%252bHhD2ngNt0eMiIyD%252fEQxoYbvbX0FQRmikAOOjf79AIDAqVP3w9dFNSwabkjmTdn379R3AyrGixlHov1wI842%252bxl3PyqKRODIgL0WnhwHBXTaSaXmX7XpGKlCoubQ03v1S3fXS7P&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>..</head>..<script>function BaseStamp() { this.GetStorageQsInfo = function () { if (window.localStorage) { var n = window.localStorage.getItem(lsKey); var lsupd = "False"; if (lsupd === "true" && n) { var xhr = new XMLHttpRequest(), method = "GET", url = target + "updatels.html?ofid=" + n + "&session_id=" + sid + "&CustomerId=" + cid; xhr.open(method, url, true); xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE && xhr.status === 200) { var update = xhr.responseText; if (update && update.toLowerCase() === "true") { window.localStorage.setItem(lsKey, id); } } }; xhr.send(); } if (n && n != null && n != "" \|\| (window.localStorage.setItem(lsKey, id), n = id), id != n) return "session_id=" + sid + "&CustomerId=" + cid + "&fid=" + id + "&ofid=" + n + "&w=" + ticks + "&auth=" + encodeURIComponent(authKey) } return "" }; this.newXMLHttp = function () { var n = null; return

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65402)
Category:	downloaded
Size (bytes):	154986
Entropy (8bit):	5.674702956197154
Encrypted:	false
SSDEEP:	3072:B6gnyg9kH5P5+bgjFw8QaUFoFUuVoBRbnwsQ/hgD/NlIpVhTZNHw9rdbu8D52R2:BLB9kHakjMoFU4QlkHlNQ9rdx3
MD5:	F373238F5314C4ED24BF7475CF06B48C
SHA1:	AF2CBE20F07A2E17E3523C99DCD8802B2E006537
SHA-256:	BF349C94E0B7B5C8C5BE1FDE09F0AE92D2E9C4DEF6C5AC034C19D85DC0971211
SHA-512:	404C0F0380C4059CA4F94700DD7AC3B5C5B3FBCBCD2FE66F3D3B31F876EBFC0C30CF4C992E3D98C05911310A8A4ACF4E283CF775A594A4C445E2023397D0E4E0
Malicious:	false
Reputation:	low
URL:	https://client.hsprotect.net/PXzC5j78di/main.min.js
Preview:	// @license Copyright (C) 2014-2024 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed..try{window._pxAppId="PXzC5j78di",function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function n(t,n){if(t){if("string"==typeof t)return e(t,n);var r=Object.prototype.toString.call(t).slice(8,-1);return"Object"===r&&t.constructor&&(r=t.constructor.name),"Map"===r\|\|"Set"===r?Array.from(t):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?e(t,n):void 0}}function r(t){return function(t){if(Array.isArray(t))return e(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46090)
Category:	downloaded
Size (bytes):	141866
Entropy (8bit):	5.429983887489752
Encrypted:	false
SSDEEP:	1536:PyeDOMSQ6fTPRUbx3XCg/MJA5N4ii5WLeV5guLDY2Js0VgtWiTJmxyCXP3onrGGW:wMc1g/Mq5p1Mv+UyJbBw+Icwf
MD5:	2509D4C564AFC2C77D16BA6CA509B39F
SHA1:	201F1D80F8EEA9F5E8A7A7224CFF18674344F886
SHA-256:	D468D9F009E53FE1C47B9D6FDEFA3FF1A8C239973F11A6F892848E341EA17CCD
SHA-512:	C928C36D58BB0B2740E9BE3F3CA3F49624253F8DAD93BA7524E55F24CCCAF630E35FCA8C596CBCE50A0C1214C4986034FD3E26D98F759949C179C54009D5D93E
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23166), with CRLF line terminators
Category:	downloaded
Size (bytes):	23630
Entropy (8bit):	5.762980085245746
Encrypted:	false
SSDEEP:	384:H8cpbHIEsQdsQvZxyF1Aw8B7Nv0edjuDNaFTLLb2M/zvyMEZWpn:ccFH9yF1IBBdq5yF/2dE
MD5:	8137A6B21816DA28EBD363631E75F291
SHA1:	985909D7A36FAB67AD0F97CE203628B6A2FF4F30
SHA-256:	8E7825796BA998DBC8A355A5AF97BBED6C72076C4C9B3C22B9DA5B48E0E31559
SHA-512:	59607A9A57F71B6229B5B8D6B048138B9E15999514183059D9067EE11C8958D7F4F1E538E52A50F1AD4A82591F155AE7C4B3EDCF428867F28077A396C6E6465B
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/?session_id=6d3bf4d6c3d745de9238f8e90bfb3dbe&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>var localTarget='https://fpt.live.com/',target='https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&',txnId='6d3bf4d6c3d745de9238f8e90bfb3dbe',ticks='8DCC85DC43D7949',rid='6ab3c089-8659-b9fd-22db-a501fe3ac398',authKey='taBcrIH61PuCVH7eNCyH0HyAAKgSb15ZEqidLg30r8OBnHOjMRhkZuUFps1xkOT0sDDvQ6KPpmqaSDphUssZcwEm6%252byfoI1qKnEgVBiLIH0tA9KLO3Jyr7mDl4KPClbgvlLzaZXRawrxPbEjrJYD81pb0Uipc1Q446SCm2cNEjMseoP%252feo1BzyHtq%252bHhD2ngNt0eMiIyD%252fEQxoYbvbX0FQRmikAOOjf79AIDAqVP3w9dFNSwabkjmTdn379R3AyrGixlHov1wI842%252bxl3PyqKRODIgL0WnhwHBXTaSaXmX7XpGKlCoubQ03v1S3fXS7P',cid='33e01921-4d64-4f8c-a055-5bdaffd5e33d',assessment='',waitresponse=true,bbwait=false,commonquery='&PageId=SU',lsInfo=true,splitFonts=false,noFonts=false,UCH=true,PTO=100,rticks=1724958422964,ipv6Url='',txnKey='session_id',ridKey='id',lskey='MUID';(function(){function w(){var i=0,n;return t&&t.length&&(i=t.length),n="",window.A

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113769
Entropy (8bit):	5.4928592467688535
Encrypted:	false
SSDEEP:	1536:pd8gIRPY0+r5qnWisyOFa8nvUHCC4LgvbrGYXts1N5VFUnqGj:kgDTMnWsTkpLgv2Qe1bXA
MD5:	21FB66A712FCAB3BF6667404C78631D6
SHA1:	6011F3E397AEB5B807EB6BE1A08ABFD302E9D253
SHA-256:	BAB311BF22661B153353A159F0EC931DBCB79F950FA37DAF9D0FF180CBF45DEB
SHA-512:	CD310A2C00DB5E273091F45308227CC6CA5131767823C356013AAD5EB515E75048317C4E5A793955CFBC93CE015BAFB89463066ABF0E31870AF93076E98F2586
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1372:function(e,t,

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.873235826376328
Encrypted:	false
SSDEEP:	3:YA8rQaC:YAoQaC
MD5:	5FC018D9E6C56911BBC8DC5DDCD0C768
SHA1:	70979F57A85D527ED8ABCBF02CFF44640C58BDE6
SHA-256:	2E6D78A4AE644F3B60AFD3C33E66539FF6C5F6A8ED6ABC40A3AF06AC020EC020
SHA-512:	1E3B86274B3590E28366F2D2DE86A1844058E213BD225AAA05D992CA70523F65D2BD543F9F762A805A2C4D5961AA34F5A19EBE70E135939C9CD3C63F6B5F5524
Malicious:	false
Reputation:	low
Preview:	{"error":"Method Not Allowed"}.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32057)
Category:	downloaded
Size (bytes):	56391
Entropy (8bit):	5.37635913975141
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3Z1ym+d/ixLgT1wtuQixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJJ1ym+d/ihgT1wtuQiJig/Ml
MD5:	B59C16ABA59DB0BC490C85B30C0B60E8
SHA1:	7B708EC7EDC902283A755FC0BF4E767A2A28473E
SHA-256:	D65E2644BEA71489D43203AA2ABCBA471C847BF2A176963BE8DB62BF1A70F7A5
SHA-512:	F7E252E5B6046AFB46658F542233D7E1602C2638089B6BF4E1490643770A28D3DF1FFCB587699B82FD8E821495D69780E160EA8B7065519EEA8B34C98F4817AA
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 901881
Category:	downloaded
Size (bytes):	231091
Entropy (8bit):	7.998390937544825
Encrypted:	true
SSDEEP:	6144:Z4w6J4OiKySVPhKwGX9rZUKsSqNNZPRNSBX:awkViKySV5KXX9mBS0NZZYX
MD5:	05A20B73D23C52A09386F3222045E62D
SHA1:	0991D7FD9A84F82DD39FBE065C0070D3196F497C
SHA-256:	BAB90DCF5FE87AB6DDEED7339CC36967BA7188CE3E01CCF7C65D9369056C41A4
SHA-512:	F93017FD9AC4A684D5BBC5BD44992D9687DDA5011050B9F7AA1718EA99F91E5BB7031854461E48316D10D095347E5953F376949EFCC57348980D792AD745BFCE
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js
Preview:	...........iw.8.(.....n....dg...M....l.'.N.}}h...H...8.....+E9.g.g.{&...A.K..T.j..........r#.Fy1K.4.6.S.@V)..:...QrV..S...,./....::hW_......6G.l.....yRlHQ.L.".i\|..nw.ndJ....+..j.."..](..<..L..p?...zw9.e.....\{..C9J...M...9-....U2..cY=...."=....a...."/.3.../iF.9d..T.%.:S.Ne6.&.h.W...t....../f2.J~H.K.,..n......z6O....n..4.Z..ll...^..Z..F.N.r.CV?.....=.......r...rt........:...:..8!$(..g..A.Z.Lb%....B.....t>VZ.y....Y>-...SY..t^..:%..Yz=.c.o..'...</.26 ..!{x....bt6nm.......,.x.da/...7.x.........&......$N.......=X.........~.PL.No.(i3....'..Y..ONz..f......[[.%f[[3JL........x.d.,.U..U..:....:0.......),..Kq.o..}oI....N..W..t~+...Y..j....h..,....m.T.J.e..RB..._..b.u.ql.7u.Nz_.-2..li.......`.`O+..1h.2..S.+..F.:...l.M...t.6..B.".;u...T.g.t....@..[-.Q........b..P..<...TLm.2...K%.e6p:....]S.`Q..S.....m.#Ur..w#x....CUl.V.M.N.i.....Tv.....8k,2M.^."..ec..i>..Z...a..a.8...{_\4.,d9.33k...y...,U..vU..u..]N.# ~..bk+[L...$oUl..^y..f.;..).<R...a..?..g.?

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.646439344671015
Encrypted:	false
SSDEEP:	3:xRhVnCm:xrQm
MD5:	F79FFC1767406D43B996B050CEC09ED2
SHA1:	EA4F919251BCDE6EE3CB2E45C0356E1FA3B86661
SHA-256:	1E62D5B3EFE0ECE892FF79BD65457FF2DC48A840444AFD53DEEDF2F2869BD685
SHA-512:	1B4C7C09D52BB2D26F505C148FD92B987AD680E675E7496EB8E92279F750587EBCE45DECD718CBBDFB91A4CEAADCA14AD918C4F8AA7971D199593C82C31BB92F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnAwrJpDUzjsBIFDdbBmF8=?alt=proto
Preview:	Cg0KCw3WwZhfGgQIZBgC

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	dropped
Size (bytes):	113769
Entropy (8bit):	5.4928592467688535
Encrypted:	false
SSDEEP:	1536:pd8gIRPY0+r5qnWisyOFa8nvUHCC4LgvbrGYXts1N5VFUnqGj:kgDTMnWsTkpLgv2Qe1bXA
MD5:	21FB66A712FCAB3BF6667404C78631D6
SHA1:	6011F3E397AEB5B807EB6BE1A08ABFD302E9D253
SHA-256:	BAB311BF22661B153353A159F0EC931DBCB79F950FA37DAF9D0FF180CBF45DEB
SHA-512:	CD310A2C00DB5E273091F45308227CC6CA5131767823C356013AAD5EB515E75048317C4E5A793955CFBC93CE015BAFB89463066ABF0E31870AF93076E98F2586
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1372:function(e,t,

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:fCu:au
MD5:	AAAB7A355103063D9EEB4824A3A6B374
SHA1:	E51555F02C32321F3E48F07A0FA5AF46DF835BFC
SHA-256:	79BA862622D6FA84AC7E4F98EB95043A255FC2C81711E9400A8AA4D4B1608471
SHA-512:	D1A0C9C4F628459F5CA904405B2A66A69425A50E8DCE1BAA43161D784EB219BD3E1FD9447BCBACC314652EDA08CF0B02C863C87F3AC1534AE0F62A414C191F1B
Malicious:	false
Reputation:	low
Preview:	dfp:OK

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65402)
Category:	dropped
Size (bytes):	154986
Entropy (8bit):	5.674702956197154
Encrypted:	false
SSDEEP:	3072:B6gnyg9kH5P5+bgjFw8QaUFoFUuVoBRbnwsQ/hgD/NlIpVhTZNHw9rdbu8D52R2:BLB9kHakjMoFU4QlkHlNQ9rdx3
MD5:	F373238F5314C4ED24BF7475CF06B48C
SHA1:	AF2CBE20F07A2E17E3523C99DCD8802B2E006537
SHA-256:	BF349C94E0B7B5C8C5BE1FDE09F0AE92D2E9C4DEF6C5AC034C19D85DC0971211
SHA-512:	404C0F0380C4059CA4F94700DD7AC3B5C5B3FBCBCD2FE66F3D3B31F876EBFC0C30CF4C992E3D98C05911310A8A4ACF4E283CF775A594A4C445E2023397D0E4E0
Malicious:	false
Reputation:	low
Preview:	// @license Copyright (C) 2014-2024 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed..try{window._pxAppId="PXzC5j78di",function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function n(t,n){if(t){if("string"==typeof t)return e(t,n);var r=Object.prototype.toString.call(t).slice(8,-1);return"Object"===r&&t.constructor&&(r=t.constructor.name),"Map"===r\|\|"Set"===r?Array.from(t):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?e(t,n):void 0}}function r(t){return function(t){if(Array.isArray(t))return e(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:fCu:au
MD5:	AAAB7A355103063D9EEB4824A3A6B374
SHA1:	E51555F02C32321F3E48F07A0FA5AF46DF835BFC
SHA-256:	79BA862622D6FA84AC7E4F98EB95043A255FC2C81711E9400A8AA4D4B1608471
SHA-512:	D1A0C9C4F628459F5CA904405B2A66A69425A50E8DCE1BAA43161D784EB219BD3E1FD9447BCBACC314652EDA08CF0B02C863C87F3AC1534AE0F62A414C191F1B
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/Images/Clear.PNG?ctx=jscb1.0&session_id=6d3bf4d6c3d745de9238f8e90bfb3dbe&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=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&eci=eyJ1dmRyIjoiR29vZ2xlIEluYy4gKEdvb2dsZSkiLCJ1cmRyIjoiQU5HTEUgKEdvb2dsZSwgVnVsa2FuIDEuMy4wIChTd2lmdFNoYWRlciBEZXZpY2UgKFN1Ynplcm8pICgweDAwMDBDMERFKSksIFN3aWZ0U2hhZGVyIGRyaXZlcikiLCJ2ZHIiOiJXZWJLaXQiLCJyZHIiOiJXZWJLaXQgV2ViR0wiLCJpZHVoIjoiMTViNmNhNDcyNjliZTQyODc1Njg1MDY5MzdlOTkxN2MifQ==&PageId=SU&u1=&u3=10.0.0&u4=x86&u5=64&u2=(Google%20Chrome%2C117.0.5938.132)%2C(Not%3BA%3DBrand%2C8.0.0.0)%2C(Chromium%2C117.0.5938.132)
Preview:	dfp:OK

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46090)
Category:	dropped
Size (bytes):	141866
Entropy (8bit):	5.429983887489752
Encrypted:	false
SSDEEP:	1536:PyeDOMSQ6fTPRUbx3XCg/MJA5N4ii5WLeV5guLDY2Js0VgtWiTJmxyCXP3onrGGW:wMc1g/Mq5p1Mv+UyJbBw+Icwf
MD5:	2509D4C564AFC2C77D16BA6CA509B39F
SHA1:	201F1D80F8EEA9F5E8A7A7224CFF18674344F886
SHA-256:	D468D9F009E53FE1C47B9D6FDEFA3FF1A8C239973F11A6F892848E341EA17CCD
SHA-512:	C928C36D58BB0B2740E9BE3F3CA3F49624253F8DAD93BA7524E55F24CCCAF630E35FCA8C596CBCE50A0C1214C4986034FD3E26D98F759949C179C54009D5D93E
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	244
Entropy (8bit):	3.9350489233706796
Encrypted:	false
SSDEEP:	6:ARfYTvlFHf94DB8EfDKUTRCZHAgAb0eUEX1jjbxCiUAjNQDn:ARQTbHV4DqEuUTRmAn0edRbx7Uz
MD5:	C814A3141B74B72B9430B9F648343761
SHA1:	B7752DF692BB4F0E55CD8C4CF3793258079DC16E
SHA-256:	72214A7739DBBD60B2990BFFA13542DC5A0965EC35884B875D334F6A7FDF9571
SHA-512:	833F6F96967DB47945D77E1895AF55EAD8DD2E326B8F8DD01B3C6AC11BA46BB586D8C029D8673E47CAF9C2F3B207F850087BC1DA989E68D97392C518AEC9AAE6
Malicious:	false
Reputation:	low
URL:	https://stk.hsprotect.net/ns?c=e08423a0-6639-11ef-b978-41df4618b98d
Preview:	502dff616d6f46d121537ab06f67e72ed64b4b6a3d05251ab7632d0a57bff85987b333179fac0976521effeda1be114f57502d8b274fec986d16df8818eb4b10789be4c259e95a813fdf052cd9618a246d8b35e8df2f0273f77bc751e45d3213e71e7db56aaad9461b53965d2597b3438a3a85deb774ffb2515a

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 901881
Category:	dropped
Size (bytes):	231091
Entropy (8bit):	7.998390937544825
Encrypted:	true
SSDEEP:	6144:Z4w6J4OiKySVPhKwGX9rZUKsSqNNZPRNSBX:awkViKySV5KXX9mBS0NZZYX
MD5:	05A20B73D23C52A09386F3222045E62D
SHA1:	0991D7FD9A84F82DD39FBE065C0070D3196F497C
SHA-256:	BAB90DCF5FE87AB6DDEED7339CC36967BA7188CE3E01CCF7C65D9369056C41A4
SHA-512:	F93017FD9AC4A684D5BBC5BD44992D9687DDA5011050B9F7AA1718EA99F91E5BB7031854461E48316D10D095347E5953F376949EFCC57348980D792AD745BFCE
Malicious:	false
Reputation:	low
Preview:	...........iw.8.(.....n....dg...M....l.'.N.}}h...H...8.....+E9.g.g.{&...A.K..T.j..........r#.Fy1K.4.6.S.@V)..:...QrV..S...,./....::hW_......6G.l.....yRlHQ.L.".i\|..nw.ndJ....+..j.."..](..<..L..p?...zw9.e.....\{..C9J...M...9-....U2..cY=...."=....a...."/.3.../iF.9d..T.%.:S.Ne6.&.h.W...t....../f2.J~H.K.,..n......z6O....n..4.Z..ll...^..Z..F.N.r.CV?.....=.......r...rt........:...:..8!$(..g..A.Z.Lb%....B.....t>VZ.y....Y>-...SY..t^..:%..Yz=.c.o..'...</.26 ..!{x....bt6nm.......,.x.da/...7.x.........&......$N.......=X.........~.PL.No.(i3....'..Y..ONz..f......[[.%f[[3JL........x.d.,.U..U..:....:0.......),..Kq.o..}oI....N..W..t~+...Y..j....h..,....m.T.J.e..RB..._..b.u.ql.7u.Nz_.-2..li.......`.`O+..1h.2..S.+..F.:...l.M...t.6..B.".;u...T.g.t....@..[-.Q........b..P..<...TLm.2...K%.e6p:....]S.`Q..S.....m.#Ur..w#x....CUl.V.M.N.i.....Tv.....8k,2M.^."..ec..i>..Z...a..a.8...{_\4.,d9.33k...y...,U..vU..u..]N.# ~..bk+[L...$oUl..^y..f.;..).<R...a..?..g.?

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	449540
Entropy (8bit):	5.448887818381794
Encrypted:	false
SSDEEP:	6144:U7lu66UglOK2d/VkpJYBsLLhkSB29OWtUJGcEHKE0H3NX44n:U7tjVkpq+LlkBUJEQ
MD5:	D8FF67E1334DAD67202B05BA32DEAD18
SHA1:	7AAA398BA53310D793E4BB28E6D5F118EF342254
SHA-256:	4DC06BDE66FF69C3CD7A67B5745C329571334A98ED7AF7C356241CFED32FA6D2
SHA-512:	67A56439845499BD65D1EDED96298FC6C3EEE99022861EC16AFD9E5D2BC7F94239CA0DD08C54A0C65B057625E59BE6362CBF74D7A97FCBEFE0F9AC88B2FE713E
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	244
Entropy (8bit):	3.9658707323594027
Encrypted:	false
SSDEEP:	6:J5KGBqN7y14YpUlzrTtlgjWnXDXdkdRGu44cVY2x4HVmy:J5KGIQ4N1rTgjyzGRGu/cVYUy
MD5:	3195775262D2C3F80127B50A34BB6C2D
SHA1:	62459174BCC947E642E74E81969EA668E402A9FC
SHA-256:	16B254876AD602A28A675A4103551E2A190A75E41738F985834DF763E7F58D76
SHA-512:	104ED7AD538B1DCFF669BD3F61D513AE081E762DF365A0817201FB3802440CDE4A33111908EAB5113E3E1E3A5156873B9F93AA7333D3A11AAD14374970380E9C
Malicious:	false
Reputation:	low
Preview:	ac48f11f3682c31ccda5b1fdd1529cb32a854f2e8b2b5f31d46a4271018c07161ae5016decdadc514de468d770f931b3ea6ea4de86ff83cc1cb2dfbeea1af39394012df80f001349790833c30dcb1d146508a42360da258b1c719945572c8db2c9ae09e1e962bf66da478bd6fa685291a7bae9c03d15c4ab1b7d

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 29, 2024 21:06:26.535471916 CEST	49678	443	192.168.2.4	104.46.162.224
Aug 29, 2024 21:06:27.129188061 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 29, 2024 21:06:36.620270967 CEST	49735	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:36.620297909 CEST	443	49735	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:36.620371103 CEST	49735	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:36.620671988 CEST	49736	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:36.620678902 CEST	443	49736	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:36.620733023 CEST	49736	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:36.620919943 CEST	49735	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:36.620930910 CEST	443	49735	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:36.621093035 CEST	49736	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:36.621100903 CEST	443	49736	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:36.738404989 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 29, 2024 21:06:37.274974108 CEST	443	49736	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:37.275286913 CEST	49736	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:37.275299072 CEST	443	49736	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:37.276150942 CEST	443	49736	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:37.276227951 CEST	49736	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:37.281119108 CEST	49736	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:37.281177044 CEST	443	49736	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:37.281418085 CEST	49736	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:37.281424999 CEST	443	49736	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:37.290750027 CEST	443	49735	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:37.290977955 CEST	49735	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:37.290985107 CEST	443	49735	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:37.292067051 CEST	443	49735	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:37.292145014 CEST	49735	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:37.292388916 CEST	49735	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:37.292450905 CEST	443	49735	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:37.321301937 CEST	49736	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:37.333003044 CEST	49735	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:37.333009958 CEST	443	49735	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:37.378184080 CEST	49735	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:37.797637939 CEST	443	49736	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:37.798407078 CEST	443	49736	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:37.798454046 CEST	49736	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:37.804683924 CEST	49736	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:37.804697990 CEST	443	49736	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:37.804706097 CEST	49736	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:37.804742098 CEST	49736	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:39.281063080 CEST	49742	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:06:39.281073093 CEST	443	49742	172.217.23.100	192.168.2.4
Aug 29, 2024 21:06:39.281233072 CEST	49742	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:06:39.282035112 CEST	49742	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:06:39.282046080 CEST	443	49742	172.217.23.100	192.168.2.4
Aug 29, 2024 21:06:39.569845915 CEST	49743	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:39.569874048 CEST	443	49743	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:39.569942951 CEST	49743	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:39.573978901 CEST	49743	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:39.573991060 CEST	443	49743	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:39.926830053 CEST	443	49742	172.217.23.100	192.168.2.4
Aug 29, 2024 21:06:39.950036049 CEST	49742	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:06:39.950043917 CEST	443	49742	172.217.23.100	192.168.2.4
Aug 29, 2024 21:06:39.951095104 CEST	443	49742	172.217.23.100	192.168.2.4
Aug 29, 2024 21:06:39.951153994 CEST	49742	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:06:39.958309889 CEST	49742	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:06:39.958381891 CEST	443	49742	172.217.23.100	192.168.2.4
Aug 29, 2024 21:06:40.002588034 CEST	49742	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:06:40.002595901 CEST	443	49742	172.217.23.100	192.168.2.4
Aug 29, 2024 21:06:40.053924084 CEST	49742	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:06:40.230644941 CEST	443	49743	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:40.230705023 CEST	49743	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:40.234298944 CEST	49743	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:40.234306097 CEST	443	49743	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:40.234532118 CEST	443	49743	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:40.283723116 CEST	49743	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:40.328497887 CEST	443	49743	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:40.507940054 CEST	443	49743	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:40.507977009 CEST	443	49743	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:40.508032084 CEST	49743	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:40.508150101 CEST	49743	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:40.508157969 CEST	443	49743	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:40.508186102 CEST	49743	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:40.508191109 CEST	443	49743	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:40.544311047 CEST	49745	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:40.544329882 CEST	443	49745	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:40.544403076 CEST	49745	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:40.544672966 CEST	49745	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:40.544682980 CEST	443	49745	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:41.183028936 CEST	443	49745	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:41.183099985 CEST	49745	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:41.186116934 CEST	49745	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:41.186122894 CEST	443	49745	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:41.186322927 CEST	443	49745	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:41.187947989 CEST	49745	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:41.228503942 CEST	443	49745	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:41.464263916 CEST	443	49745	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:41.464309931 CEST	443	49745	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:41.464395046 CEST	49745	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:41.465945959 CEST	49745	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:06:41.465956926 CEST	443	49745	184.28.90.27	192.168.2.4
Aug 29, 2024 21:06:41.616548061 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:41.616589069 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:41.616697073 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:41.617691994 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:41.617707968 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.000065088 CEST	443	49735	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:42.000144005 CEST	443	49735	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:42.000190973 CEST	49735	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:42.474046946 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.474320889 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:42.474347115 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.475197077 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.475260019 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:42.708983898 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:42.709060907 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.709244013 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:42.709261894 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.753160000 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:42.890734911 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.893115044 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.893121958 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.893131018 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.893157005 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.893192053 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:42.893213034 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.893243074 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:42.893264055 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:42.981055021 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.981071949 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.981137037 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:42.981151104 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.981188059 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:42.983033895 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.983047009 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.983105898 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:42.983114004 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:42.983144999 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.072316885 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.072333097 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.072417021 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.072429895 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.072467089 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.073566914 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.073581934 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.073638916 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.073646069 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.073681116 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.074474096 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.074489117 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.074532032 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.074538946 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.074585915 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.074932098 CEST	49735	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:06:43.074951887 CEST	443	49735	13.107.246.42	192.168.2.4
Aug 29, 2024 21:06:43.075532913 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.075547934 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.075602055 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.075608969 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.075640917 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.078402996 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.128478050 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.163827896 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.163849115 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.163911104 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.163921118 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.163959026 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.164041996 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.164077997 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.164096117 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.164103985 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.164113998 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.164151907 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.232450962 CEST	49746	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.232474089 CEST	443	49746	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.846136093 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.846174955 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.846259117 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.857372046 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.857418060 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.857547998 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.872648001 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.872667074 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:43.872833014 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:43.872852087 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:44.690306902 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:44.691059113 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:44.691071033 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:44.691926956 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:44.691987991 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:44.692284107 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:44.692338943 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:44.692435980 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:44.692442894 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:44.709074974 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:44.709311008 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:44.709327936 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:44.710199118 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:44.710249901 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:44.710553885 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:44.710606098 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:44.760384083 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:44.760395050 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:44.775670052 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:44.806924105 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:44.960248947 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:44.984200001 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:44.984236002 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:44.984430075 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:44.985111952 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:44.985124111 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.035401106 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.047996044 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.048031092 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.048086882 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.048435926 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.048459053 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.048557997 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.048708916 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.048726082 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.048783064 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.048791885 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.048816919 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.048830032 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.048840046 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.048846960 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.048857927 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.048867941 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.048896074 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.048957109 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.048969030 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.050698996 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.050708055 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.050730944 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.050741911 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.050754070 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.050760984 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.050777912 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.050826073 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.053039074 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.053051949 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.053108931 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.053117037 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.053499937 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.137778044 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.137792110 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.137833118 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.137845039 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.137861967 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.137881994 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.139112949 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.139128923 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.139164925 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.139206886 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.139213085 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.139255047 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.140810966 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.140825033 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.140866995 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.140873909 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.141050100 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.141834974 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.141850948 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.141891003 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.141900063 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.141935110 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.226428986 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.226444960 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.226505995 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.226516962 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.226567984 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.227067947 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.227098942 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.227119923 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.227127075 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.227135897 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.227160931 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.227186918 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.227416992 CEST	49749	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.227431059 CEST	443	49749	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.805902958 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.806310892 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.806324959 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.806655884 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.807729006 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.807792902 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.807934999 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.848503113 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.860985041 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.873768091 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.873780966 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.874646902 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.874809027 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.875086069 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.875086069 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.875099897 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.875140905 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.880330086 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.880966902 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.880985975 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.881268978 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.881650925 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.881706953 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.881918907 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.926043034 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.926055908 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.926057100 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:45.926068068 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:45.972608089 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.115269899 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.120174885 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.120198965 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.120738983 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.120754957 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.124679089 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.154050112 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.158927917 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.158936024 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.158967972 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.158977032 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.158982038 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.159092903 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.159092903 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.159111023 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.159126997 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.159281969 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.159394979 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.164182901 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.164191008 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.164201021 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.164299011 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.164321899 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.164464951 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.203808069 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.203830957 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.204710960 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.204724073 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.207912922 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.207942963 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.207964897 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.208024025 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.208024025 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.208030939 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.210503101 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.241797924 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.241807938 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.241832018 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.241839886 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.241852999 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.241862059 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.241885900 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.243417978 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.243427038 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.243438959 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.243455887 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.243458033 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.243484974 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.243544102 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.244697094 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.246001005 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.248892069 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.248908043 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.250379086 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.250418901 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.250437975 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.250452042 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.250487089 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.250487089 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.252716064 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.291764021 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.291783094 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.291820049 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.291829109 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.291857004 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.292670965 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.292923927 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.292937994 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.293015957 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.293015957 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.293028116 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.294012070 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.294703960 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.294718981 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.294786930 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.294795990 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.294931889 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.328150988 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.328157902 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.328192949 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.328208923 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.328249931 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.328267097 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.328296900 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.328694105 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.329201937 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.329209089 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.329236984 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.329267025 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.329322100 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.329329014 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.329365015 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.329535007 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.329792023 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.329804897 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.329992056 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.330001116 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.330058098 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.330828905 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.330842972 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.330928087 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.330928087 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.330941916 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.331274986 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.334146023 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.334186077 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.334217072 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.334224939 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.334238052 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.334280014 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.334378958 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.334583998 CEST	49754	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.334600925 CEST	443	49754	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.336971045 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.337016106 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.337047100 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.337166071 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.340464115 CEST	49755	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.340475082 CEST	443	49755	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.344674110 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.392503023 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.415483952 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.415499926 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.415592909 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.415592909 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.415606022 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.415838957 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.416218996 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.416233063 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.416404963 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.416415930 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.416485071 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.416874886 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.416888952 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.417009115 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.417016029 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.417591095 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.417608976 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.417704105 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.417714119 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.417821884 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.419101954 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.419118881 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.419239044 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.419246912 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.419504881 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.419735909 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.419749022 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.419827938 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.419833899 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.420625925 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.420643091 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.420728922 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.420737028 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.420847893 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.502516031 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.502527952 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.502715111 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.502729893 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.502801895 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.503376007 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.503390074 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.503540039 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.503550053 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.503671885 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.504348040 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.504364014 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.504666090 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.504677057 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.505191088 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.505208015 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.505398035 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.505405903 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.505525112 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.512309074 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.512325048 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.512451887 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.512464046 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.512672901 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.513190031 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.513210058 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.513524055 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.513535023 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.513756037 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.513772011 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.513796091 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.513803959 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.513816118 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.513874054 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.539287090 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.540468931 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.540477037 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.540515900 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.540529013 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.540537119 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.540549040 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.540574074 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.540585995 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.540596962 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.540596962 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.540679932 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.589273930 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.589312077 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.589325905 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.589407921 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.589421034 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.589782000 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.589824915 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.589838028 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.590111017 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.590118885 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.590291023 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.590722084 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.590739012 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.590814114 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.590814114 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.590822935 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.590991020 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.591355085 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.591370106 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.591461897 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.591461897 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.591470003 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.591541052 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.592173100 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.592186928 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.592478037 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.592492104 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.592654943 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.592993975 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.593008041 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.593137026 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.593144894 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.593271017 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.593673944 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.593719006 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.593754053 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.593789101 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.594039917 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.594058037 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.600312948 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.600337029 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.600397110 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.600730896 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.600745916 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.629270077 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.629278898 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.629307985 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.629317999 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.629349947 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.629364014 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.629395008 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.629405022 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.631730080 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.631736994 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.631759882 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.631819963 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.631829023 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.631867886 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.641993999 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.642014980 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.642119884 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.642468929 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.642479897 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.676659107 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.676682949 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.676758051 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.676964998 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.676978111 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.721210957 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.721280098 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.721292019 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.721303940 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:46.721329927 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.721366882 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.722161055 CEST	49748	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:46.722173929 CEST	443	49748	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.422574997 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.422820091 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.422833920 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.423110962 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.423429966 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.423482895 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.423576117 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.456286907 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.456479073 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.456492901 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.457520008 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.457571983 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.457986116 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.458040953 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.458223104 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.458229065 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.468504906 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.502875090 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.524214983 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.524437904 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.524455070 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.525475979 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.525526047 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.525841951 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.525902033 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.525959015 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.572500944 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.575550079 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.575561047 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.628025055 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.691251993 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.724837065 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.737073898 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.737092972 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.737292051 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.737314939 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.737417936 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.766621113 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.766628981 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.766659021 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.766686916 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.766695976 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.766727924 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.766814947 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.767132044 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.767174959 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.767204046 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.767448902 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.767452955 CEST	443	49760	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.767530918 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.767530918 CEST	49760	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.772797108 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.772820950 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.773029089 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.773251057 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.773262978 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.783751011 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.783766985 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.783931017 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.783946037 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.786442995 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.786461115 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.786550045 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.786557913 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.800649881 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.805532932 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.805541039 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.805566072 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.805577040 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.805586100 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.805593967 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.805604935 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.805633068 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.805854082 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.832695961 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.877945900 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.877962112 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.878057003 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.878066063 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.878173113 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.879210949 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.879226923 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.879326105 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.879332066 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.879462004 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.880800962 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.880817890 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.881014109 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.881021023 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.881164074 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.882541895 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.882556915 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.882654905 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.882668972 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.882739067 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.894120932 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.894129038 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.894156933 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.894167900 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.894188881 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.894202948 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.894228935 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.895145893 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.895728111 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.895745993 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.895826101 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.895826101 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.895833015 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.895875931 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.968475103 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.968497992 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.968580961 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.968580961 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.968591928 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.968676090 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.969485998 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.969499111 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.969588041 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.969588041 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.969595909 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.969785929 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.970302105 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.970319033 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.970411062 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.970411062 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.970417976 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.970561981 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.987494946 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.987517118 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.987735987 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.987751961 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.987809896 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.988025904 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.988040924 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.988110065 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.988110065 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.988120079 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.988851070 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.989073038 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.989090919 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.989177942 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.989185095 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.989209890 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.989541054 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.990082026 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.990099907 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.990166903 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.990166903 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:47.990174055 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:47.990243912 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.009315968 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.009332895 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.009517908 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.009538889 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.009670019 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.059214115 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.059231997 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.059331894 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.059331894 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.059341908 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.059514999 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.059909105 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.059931993 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.060013056 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.060013056 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.060020924 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.060096025 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.060623884 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.060642958 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.060908079 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.060921907 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.061208010 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.061553001 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.061569929 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.061677933 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.061691999 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.061821938 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.062335014 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.062350035 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.062448025 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.062453985 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.062611103 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.063316107 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.063330889 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.063417912 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.063417912 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.063426018 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.063565969 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.064182043 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.064198971 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.064274073 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.064274073 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.064280987 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.064399958 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.079173088 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.079191923 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.079268932 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.079268932 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.079283953 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.079926968 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.079948902 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.080038071 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.080044031 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.080152988 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.080496073 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.080512047 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.080579996 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.080579996 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.080586910 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.080893993 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.081634045 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.081649065 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.081746101 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.081752062 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.081852913 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.082454920 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.082469940 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.082556009 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.082564116 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.082664967 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.100400925 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.100414038 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.100497961 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.100498915 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.100506067 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.100629091 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.150459051 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.150480032 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.150671959 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.150690079 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.150738955 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.151169062 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.151184082 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.151253939 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.151259899 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.151324987 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.152350903 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.152375937 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.152412891 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.152420998 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.152455091 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.152502060 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.153335094 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.153353930 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.153564930 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.153578997 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.153815031 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.158319950 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.158334970 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.158467054 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.158473969 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.158607960 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.158834934 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.158854008 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.158919096 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.158919096 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.158926010 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.159007072 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.159420013 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.159432888 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.159538031 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.159544945 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.159768105 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.176042080 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.176064014 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.176142931 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.176143885 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.176157951 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.176291943 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.176681995 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.176704884 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.176778078 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.176778078 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.176784992 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.178329945 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.178352118 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.178549051 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.178555965 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.178678989 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.180701017 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.180717945 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.180799007 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.180804968 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.180811882 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.180833101 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.180865049 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.180871964 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.180898905 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.181121111 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.182893991 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.182909966 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.183056116 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.183063030 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.183190107 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.185935974 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.185955048 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.186019897 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.186027050 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.186863899 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.201426029 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.201441050 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.201523066 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.201523066 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.201531887 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.201651096 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.241210938 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.241266012 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.241272926 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.241386890 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.242007017 CEST	49759	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.242029905 CEST	443	49759	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.271194935 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.271213055 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.271557093 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.271574974 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.271872044 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.272100925 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.272119045 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.272191048 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.272191048 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.272197962 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.272264957 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.272556067 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.272581100 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.272618055 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.272624969 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.272665024 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.272717953 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.273536921 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.273551941 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.273766994 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.273773909 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.273992062 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.274650097 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.274667978 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.274734020 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.274734020 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.274739981 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.274754047 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.274781942 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.274810076 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.274810076 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.274815083 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.274833918 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.274838924 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.274858952 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.274967909 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.275296926 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.283647060 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.283658028 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.372684002 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.372709036 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.372807980 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.373550892 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.373553991 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.373560905 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.373588085 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.373653889 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.392995119 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.393002987 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.393140078 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.393399954 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.393421888 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.396682024 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.396693945 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.527683973 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.527710915 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.530863047 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.536693096 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.536705017 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.623039961 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.666217089 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.666234016 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.666687012 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.672322035 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.672398090 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.675334930 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.716500998 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.853986979 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.854000092 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.854070902 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.854259014 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.854269028 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.899715900 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.942275047 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.943397045 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.943406105 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.943432093 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.943440914 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.943459034 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.943460941 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.943475008 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.943536997 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:48.943538904 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.943558931 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.943581104 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.943887949 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:48.943898916 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.201112986 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.201340914 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.201351881 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.201628923 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.201991081 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.202040911 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.202115059 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.212532997 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.212712049 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.212718964 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.213718891 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.213773966 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.214083910 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.214142084 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.214189053 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.241035938 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.241274118 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.241288900 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.241596937 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.241961002 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.242017984 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.242099047 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.244504929 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.252388954 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.256506920 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.267613888 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.267621040 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.288501978 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.313260078 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.355628967 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.355859041 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.355873108 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.356154919 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.356770039 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.356813908 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.356930017 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.400501013 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.467498064 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.467575073 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.467612982 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.467648983 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.468399048 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.468405962 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.472596884 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.472625971 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.472727060 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.473547935 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.473563910 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.488336086 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.489054918 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.489108086 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.489115000 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.489126921 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.489154100 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.489182949 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.490144968 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.490149975 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.497890949 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.497900963 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.498069048 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.498284101 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.498294115 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.511847019 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.511924982 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.511962891 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.511970043 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.512007952 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.512562990 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.512571096 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.516204119 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.516213894 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.516272068 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.516460896 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.516472101 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.627998114 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.629836082 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.629853010 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.629911900 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.629928112 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.629976034 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.679940939 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.680169106 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.680177927 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.681042910 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.681097984 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.681453943 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.681504965 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.681612015 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.681617022 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.720890999 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.720907927 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.720983982 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.720994949 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.721035957 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.723656893 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.723671913 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.723732948 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.723737955 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.723779917 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.736893892 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.819039106 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.819053888 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.819104910 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.819117069 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.819150925 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.819161892 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.820151091 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.820166111 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.820224047 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.820230007 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.820281029 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.821729898 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.821744919 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.821794987 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.821799040 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.821830034 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.822820902 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.822834015 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.822886944 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.822890997 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.822937012 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.824167013 CEST	443	49742	172.217.23.100	192.168.2.4
Aug 29, 2024 21:06:49.824229002 CEST	443	49742	172.217.23.100	192.168.2.4
Aug 29, 2024 21:06:49.824297905 CEST	49742	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:06:49.908348083 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.908366919 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.908427000 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.908437014 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.908483982 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.909250021 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.909265041 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.909320116 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.909326077 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.909369946 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.910224915 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.910238981 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.910290003 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.910295963 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.910336971 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.911010981 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.911024094 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.911067963 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.911072969 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.911098003 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.911119938 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.912061930 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.912075996 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.912137985 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.912142992 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.912190914 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.912904024 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.912918091 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.912971020 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.912976980 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.913026094 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.913788080 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.913803101 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.913862944 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.913868904 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.913903952 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.945266008 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.986912966 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.987512112 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.987519979 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.987555981 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.987570047 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.987571955 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.987590075 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.987601995 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.987621069 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.987649918 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.987649918 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.996767998 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.996783018 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.996841908 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.996850967 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.996891975 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.997529030 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.997545004 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.997596979 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.997602940 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.997651100 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.998035908 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.998049974 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.998111010 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.998116016 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.998162985 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.998930931 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.998944998 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.999006987 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:49.999011993 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:49.999057055 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.004164934 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.004178047 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.004219055 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.004224062 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.004270077 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.004287004 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.004440069 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.004453897 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.004499912 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.004503965 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.004533052 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.004553080 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.005255938 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.005270004 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.005331993 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.005337000 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.005383015 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.037595987 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.037607908 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.037643909 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.037700891 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.037709951 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.037786961 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.040918112 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.040934086 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.040993929 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.040998936 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.041047096 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.101855040 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.101880074 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.101918936 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.101933956 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.101972103 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.101989985 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.102175951 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.102193117 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.102241039 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.102246046 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.102281094 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.102876902 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.102891922 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.102931976 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.102936983 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.102974892 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.102988958 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.103574991 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.103610039 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.103631973 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.103640079 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.103667021 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.103684902 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.103960991 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.103971004 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.134948015 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.134951115 CEST	49742	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:06:50.134962082 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.134967089 CEST	443	49742	172.217.23.100	192.168.2.4
Aug 29, 2024 21:06:50.135030031 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.135039091 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.135088921 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.136454105 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.136466980 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.136523008 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.136528015 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.136560917 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.138171911 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.138185024 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.138250113 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.138254881 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.138391018 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.139574051 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.139614105 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.139626980 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.139647007 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.139683962 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.140105963 CEST	49769	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.140114069 CEST	443	49769	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.160794973 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.160808086 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.160871029 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.161187887 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.161199093 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.308254957 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.308460951 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.308476925 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.308818102 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.309130907 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.309190035 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.309248924 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.331022978 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.331413984 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.331428051 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.331706047 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.332076073 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.332125902 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.332180977 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.352499962 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.359030008 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.359219074 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.359234095 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.360070944 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.360127926 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.360414028 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.360461950 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.360531092 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.360537052 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.376497030 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.377974987 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.409235954 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.573705912 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.573743105 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.573797941 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.573813915 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.573888063 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.573936939 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.582667112 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.582674980 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.599662066 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.599998951 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.600044012 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.600053072 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.600076914 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.601823092 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.601835012 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.648417950 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.648447990 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.648592949 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.648606062 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.650504112 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.651356936 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.711617947 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.711617947 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:50.711635113 CEST	443	49773	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:50.711999893 CEST	49773	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.035504103 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.087080002 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.464673042 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.464694023 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.465893984 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.465977907 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.466555119 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.466629982 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.467430115 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.467436075 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.510706902 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.653492928 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.658560038 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.658566952 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.658592939 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.658612967 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.658615112 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.658623934 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.658641100 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.658657074 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.658662081 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.658674002 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.658687115 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.706331968 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.747139931 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.747148037 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.747180939 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.747190952 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.747195005 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.747204065 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.747245073 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.747899055 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.747905970 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.747930050 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.747951984 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.747960091 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.747987032 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.748003006 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.833878994 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.833900928 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.833937883 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.833949089 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.833973885 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.833996058 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.835324049 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.835340977 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.835391045 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.835397959 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.835427999 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.837553024 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.837568045 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.837622881 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.837630033 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.837667942 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.838665962 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.838706017 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.838718891 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.838725090 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.838742018 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:06:51.838743925 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.838762999 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.838793039 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.844926119 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:06:51.844934940 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 29, 2024 21:07:00.712085962 CEST	49783	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:07:00.712102890 CEST	443	49783	152.199.21.175	192.168.2.4
Aug 29, 2024 21:07:00.712271929 CEST	49783	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:07:00.712851048 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:00.712894917 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:00.713088989 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:00.716069937 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:00.716084003 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:00.716207027 CEST	49783	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:07:00.716217995 CEST	443	49783	152.199.21.175	192.168.2.4
Aug 29, 2024 21:07:01.364723921 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.364974022 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.364988089 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.365961075 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.366020918 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.367082119 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.367131948 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.367316008 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.367320061 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.413245916 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.473711014 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.473728895 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.473736048 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.473769903 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.473797083 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.473798990 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.473815918 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.473836899 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.473860979 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.526864052 CEST	443	49783	152.199.21.175	192.168.2.4
Aug 29, 2024 21:07:01.527131081 CEST	49783	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:07:01.527144909 CEST	443	49783	152.199.21.175	192.168.2.4
Aug 29, 2024 21:07:01.527987003 CEST	443	49783	152.199.21.175	192.168.2.4
Aug 29, 2024 21:07:01.528045893 CEST	49783	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:07:01.529021025 CEST	49783	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:07:01.529068947 CEST	443	49783	152.199.21.175	192.168.2.4
Aug 29, 2024 21:07:01.561121941 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.561141968 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.561176062 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.561182022 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.561216116 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.561235905 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.563550949 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.563565969 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.563616991 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.563621044 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.563662052 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.583127975 CEST	49783	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:07:01.583136082 CEST	443	49783	152.199.21.175	192.168.2.4
Aug 29, 2024 21:07:01.629252911 CEST	49783	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:07:01.649878979 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.649894953 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.650010109 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.650017023 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.650306940 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.650727987 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.650742054 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.650919914 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.650923014 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.650999069 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.652458906 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.652473927 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.652606964 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.652611017 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.652817965 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.653548002 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.653562069 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.653728008 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.653732061 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.653794050 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.742069960 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.742084980 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.742161989 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.742166996 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.742310047 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.743494034 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.743510962 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.743562937 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.743593931 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.743593931 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.743594885 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.743607044 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.743628979 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.743702888 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.745240927 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.745256901 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.745347023 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.745351076 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.747849941 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.747875929 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.747937918 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.747937918 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.747941971 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.749073982 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.749089003 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.749142885 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.749165058 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.749165058 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.749170065 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.749178886 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.749213934 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.749233007 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.749233007 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.749237061 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.749294996 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.752788067 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.753006935 CEST	49784	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.753019094 CEST	443	49784	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.792678118 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:01.792728901 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:01.796773911 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:01.800694942 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:01.800709009 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:01.808701992 CEST	49786	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.808731079 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.812768936 CEST	49786	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.812768936 CEST	49786	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.812796116 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.872726917 CEST	49789	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.872730970 CEST	49788	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.872745037 CEST	443	49789	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.872756958 CEST	443	49788	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.872818947 CEST	49789	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.872833967 CEST	49788	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.873075962 CEST	49788	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.873095989 CEST	443	49788	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:01.873269081 CEST	49789	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:01.873281002 CEST	443	49789	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.522819042 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.527810097 CEST	443	49789	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.535113096 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.535864115 CEST	443	49788	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.572716951 CEST	49789	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.574767113 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.587402105 CEST	49786	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.587402105 CEST	49788	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.623230934 CEST	49788	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.623230934 CEST	49786	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.623240948 CEST	443	49788	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.623254061 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.623509884 CEST	49789	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.623517990 CEST	443	49789	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.623688936 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.623980045 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.623990059 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.624340057 CEST	443	49788	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.624351978 CEST	443	49788	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.624464989 CEST	443	49789	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.624473095 CEST	49788	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.624686003 CEST	49789	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.625078917 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.625089884 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.625134945 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.625158072 CEST	49786	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.625222921 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.625722885 CEST	49788	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.625726938 CEST	49789	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.625792980 CEST	443	49788	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.625793934 CEST	443	49789	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.626425982 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.626487017 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.626810074 CEST	49786	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.626811981 CEST	49789	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.626821041 CEST	443	49789	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.626955986 CEST	49788	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.626969099 CEST	443	49788	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.627028942 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.627034903 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.672498941 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.676292896 CEST	49788	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.676311970 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.676316977 CEST	49789	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.726392031 CEST	443	49789	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.726408958 CEST	443	49789	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.726440907 CEST	443	49789	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.726452112 CEST	49789	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.726483107 CEST	49789	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.727026939 CEST	443	49788	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.727646112 CEST	443	49788	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.727686882 CEST	49788	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.729242086 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.729263067 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.729270935 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.729301929 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.729312897 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.729320049 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.729326963 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.729336023 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.729345083 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.729357958 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.729386091 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.735955000 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.735971928 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.735979080 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.736002922 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.736018896 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.736025095 CEST	49786	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.736027956 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.736044884 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.736068964 CEST	49786	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.736093044 CEST	49786	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.741082907 CEST	49789	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.741095066 CEST	443	49789	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.745551109 CEST	49788	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.745562077 CEST	443	49788	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.814094067 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.814106941 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.814125061 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.814147949 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.814162016 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.814179897 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.814194918 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.816591978 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.816612005 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.816648006 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.816653967 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.816688061 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.816704988 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.828175068 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.828196049 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.828234911 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.828263044 CEST	49786	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.828269958 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.828315020 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.828320026 CEST	49786	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.828355074 CEST	49786	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.903215885 CEST	49786	443	192.168.2.4	13.107.246.42
Aug 29, 2024 21:07:02.903234959 CEST	443	49786	13.107.246.42	192.168.2.4
Aug 29, 2024 21:07:02.921381950 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.921406031 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.921447039 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.921458960 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.921509027 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.922065020 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.922086000 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.922117949 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.922122002 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.922163963 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.923654079 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.923675060 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.923723936 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.923729897 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.923772097 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.924715042 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.924731016 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.924789906 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.924798012 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.924840927 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.987112045 CEST	49793	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.987128973 CEST	443	49793	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.987184048 CEST	49793	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.989633083 CEST	49793	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.989644051 CEST	443	49793	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.991652966 CEST	49794	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.991658926 CEST	443	49794	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.991709948 CEST	49794	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.992054939 CEST	49794	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.992063999 CEST	443	49794	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.994901896 CEST	49795	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.994920969 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:02.994992018 CEST	49795	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.995213985 CEST	49795	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:02.995223045 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.014079094 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.014101982 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.014130116 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.014138937 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.014177084 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.015431881 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.015455008 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.015477896 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.015481949 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.015527010 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.016083002 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.016099930 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.016138077 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.016143084 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.016169071 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.016191959 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.018677950 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.018697023 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.018744946 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.018749952 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.018786907 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.103902102 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.103924036 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.103960991 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.103970051 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.104012012 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.104031086 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.105305910 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.105324030 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.105359077 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.105362892 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.105403900 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.107032061 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.107048035 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.107081890 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.107085943 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.107094049 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.107116938 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.107136011 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.107139111 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.107177019 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.107181072 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.107223988 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.107815981 CEST	49785	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.107827902 CEST	443	49785	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.555315018 CEST	443	49793	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.561697006 CEST	49793	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.561707973 CEST	443	49793	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.562091112 CEST	443	49793	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.562696934 CEST	49793	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.562764883 CEST	443	49793	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.562994957 CEST	49793	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.604499102 CEST	443	49793	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.805424929 CEST	443	49793	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.805449963 CEST	443	49793	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.805510044 CEST	443	49793	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.805538893 CEST	49793	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.805769920 CEST	49793	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.807317972 CEST	49793	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.807327032 CEST	443	49793	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.808700085 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.809653997 CEST	443	49794	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.809684038 CEST	49795	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.809695959 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.810058117 CEST	49794	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.810065031 CEST	443	49794	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.810406923 CEST	443	49794	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.810671091 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.810766935 CEST	49795	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.812485933 CEST	49794	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.812496901 CEST	49795	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.812557936 CEST	443	49794	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.812563896 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.814485073 CEST	49794	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.814635038 CEST	49795	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.814640045 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.856503010 CEST	443	49794	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.864943981 CEST	49795	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.920285940 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.920305014 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.920314074 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.920327902 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.920340061 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.920346975 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.920423031 CEST	49795	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.920423031 CEST	49795	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.920430899 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.920730114 CEST	49795	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.923105001 CEST	443	49794	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.923568010 CEST	443	49794	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:03.923770905 CEST	49794	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.924439907 CEST	49794	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:03.924457073 CEST	443	49794	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:04.013223886 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:04.013240099 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:04.013394117 CEST	49795	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:04.013398886 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:04.013457060 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:04.013478994 CEST	49795	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:04.013783932 CEST	49795	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:04.014213085 CEST	49795	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:04.014219999 CEST	443	49795	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:04.739319086 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:04.739330053 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:04.739386082 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:04.739789009 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:04.739799976 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:04.787058115 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:04.787092924 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:04.787142038 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:04.787575960 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:04.787589073 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:05.286744118 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:05.286931992 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:05.286952019 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:05.287914991 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:05.287974119 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:05.289046049 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:05.289104939 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:05.289269924 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:05.289277077 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:05.314331055 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:05.314517021 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:05.314526081 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:05.315561056 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:05.315638065 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:05.316802979 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:05.316895008 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:05.316983938 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:05.316991091 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:05.329818964 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:05.360572100 CEST	49805	443	192.168.2.4	13.107.246.60
Aug 29, 2024 21:07:05.360610962 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:05.360660076 CEST	49805	443	192.168.2.4	13.107.246.60
Aug 29, 2024 21:07:05.361197948 CEST	49805	443	192.168.2.4	13.107.246.60
Aug 29, 2024 21:07:05.361212969 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:05.362812996 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:05.422154903 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:05.422215939 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:05.422257900 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:05.423866034 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:05.423871040 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:05.433305979 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:05.433355093 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:05.433393002 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:05.433753967 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:05.433768034 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:05.442192078 CEST	49807	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:05.442199945 CEST	443	49807	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:05.442259073 CEST	49807	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:05.443156004 CEST	49807	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:05.443166018 CEST	443	49807	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:05.472776890 CEST	49808	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:05.472799063 CEST	443	49808	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:05.472843885 CEST	49808	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:05.473125935 CEST	49808	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:05.473143101 CEST	443	49808	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.011343002 CEST	443	49808	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.011543036 CEST	49808	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.011554003 CEST	443	49808	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.012404919 CEST	443	49808	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.012453079 CEST	49808	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.012773037 CEST	49808	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.012826920 CEST	443	49808	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.012989044 CEST	49808	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.012995958 CEST	443	49808	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.037965059 CEST	443	49807	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:06.038206100 CEST	49807	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:06.038213015 CEST	443	49807	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:06.039206982 CEST	443	49807	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:06.039283991 CEST	49807	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:06.039657116 CEST	49807	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:06.039716005 CEST	443	49807	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:06.039961100 CEST	49807	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:06.039968014 CEST	443	49807	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:06.054883003 CEST	49808	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.062258005 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:06.062455893 CEST	49805	443	192.168.2.4	13.107.246.60
Aug 29, 2024 21:07:06.062467098 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:06.063504934 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:06.063559055 CEST	49805	443	192.168.2.4	13.107.246.60
Aug 29, 2024 21:07:06.064404011 CEST	49805	443	192.168.2.4	13.107.246.60
Aug 29, 2024 21:07:06.064469099 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:06.064593077 CEST	49805	443	192.168.2.4	13.107.246.60
Aug 29, 2024 21:07:06.064601898 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:06.086126089 CEST	49807	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:06.117376089 CEST	49805	443	192.168.2.4	13.107.246.60
Aug 29, 2024 21:07:06.133233070 CEST	443	49808	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.133697033 CEST	443	49808	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.133742094 CEST	49808	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.133893967 CEST	49808	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.133905888 CEST	443	49808	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.144944906 CEST	443	49807	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:06.144988060 CEST	443	49807	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:06.145061016 CEST	49807	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:06.145628929 CEST	49807	443	192.168.2.4	34.107.199.61
Aug 29, 2024 21:07:06.145641088 CEST	443	49807	34.107.199.61	192.168.2.4
Aug 29, 2024 21:07:06.152892113 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.152910948 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.152966976 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.153306961 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.153316975 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.175389051 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:06.175407887 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:06.175421000 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:06.175435066 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:06.175441027 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:06.175445080 CEST	49805	443	192.168.2.4	13.107.246.60
Aug 29, 2024 21:07:06.175446987 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:06.175473928 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:06.175474882 CEST	49805	443	192.168.2.4	13.107.246.60
Aug 29, 2024 21:07:06.175496101 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:06.175510883 CEST	49805	443	192.168.2.4	13.107.246.60
Aug 29, 2024 21:07:06.175529003 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:06.175537109 CEST	49805	443	192.168.2.4	13.107.246.60
Aug 29, 2024 21:07:06.175565004 CEST	49805	443	192.168.2.4	13.107.246.60
Aug 29, 2024 21:07:06.176254988 CEST	49805	443	192.168.2.4	13.107.246.60
Aug 29, 2024 21:07:06.176260948 CEST	443	49805	13.107.246.60	192.168.2.4
Aug 29, 2024 21:07:06.202583075 CEST	49810	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:06.202613115 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:06.202691078 CEST	49810	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:06.203265905 CEST	49810	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:06.203279018 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:06.660936117 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.661333084 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.661346912 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.661689043 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.662045002 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.662116051 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.662352085 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.662352085 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.662379026 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.841536045 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.841599941 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.842508078 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.842863083 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.842871904 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.846172094 CEST	49812	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.846196890 CEST	443	49812	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.846338034 CEST	49812	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.846457005 CEST	49812	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:06.846467972 CEST	443	49812	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:06.900737047 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:06.901007891 CEST	49810	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:06.901026011 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:06.901884079 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:06.901966095 CEST	49810	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:06.902369022 CEST	49810	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:06.902369022 CEST	49810	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:06.902419090 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:06.956623077 CEST	49810	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:06.956628084 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:07.003513098 CEST	49810	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:07.009468079 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:07.009485960 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:07.009493113 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:07.009507895 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:07.009514093 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:07.009520054 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:07.009546041 CEST	49810	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:07.009557009 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:07.009587049 CEST	49810	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:07.009639025 CEST	49810	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:07.009851933 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:07.009891987 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:07.009919882 CEST	49810	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:07.009996891 CEST	49810	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:07.010478020 CEST	49810	443	192.168.2.4	13.107.246.45
Aug 29, 2024 21:07:07.010488033 CEST	443	49810	13.107.246.45	192.168.2.4
Aug 29, 2024 21:07:07.591077089 CEST	443	49812	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:07.650868893 CEST	49812	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:07.736140013 CEST	49812	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:07.736146927 CEST	443	49812	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:07.736573935 CEST	443	49812	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:07.736936092 CEST	49812	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:07.736996889 CEST	443	49812	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:07.737140894 CEST	49812	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:07.784495115 CEST	443	49812	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:07.849406004 CEST	443	49812	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:07.849595070 CEST	443	49812	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:07.849638939 CEST	49812	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:07.851254940 CEST	49812	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:07.851260900 CEST	443	49812	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:10.907896996 CEST	49816	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:10.907946110 CEST	443	49816	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:10.908149004 CEST	49816	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:10.910132885 CEST	49816	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:10.910151005 CEST	443	49816	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:11.401029110 CEST	443	49816	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:11.417579889 CEST	49816	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:11.417593002 CEST	443	49816	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:11.417979002 CEST	443	49816	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:11.426518917 CEST	49816	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:11.426578999 CEST	443	49816	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:11.426984072 CEST	49816	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:11.427108049 CEST	49816	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:11.427135944 CEST	443	49816	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:11.577110052 CEST	443	49816	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:11.577879906 CEST	443	49816	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:11.577924967 CEST	49816	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:11.578186989 CEST	49816	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:11.578200102 CEST	443	49816	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:11.596837997 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:11.596878052 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:11.596935987 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:11.597899914 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:11.597915888 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:12.088988066 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:12.089342117 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:12.089360952 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:12.089715958 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:12.090044975 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:12.090110064 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:12.090187073 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:12.132491112 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:12.202558041 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:12.203130007 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:12.203186989 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:12.203691006 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:07:12.203706980 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 29, 2024 21:07:39.173866034 CEST	49820	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:07:39.173902988 CEST	443	49820	172.217.23.100	192.168.2.4
Aug 29, 2024 21:07:39.174076080 CEST	49820	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:07:39.174655914 CEST	49820	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:07:39.174669981 CEST	443	49820	172.217.23.100	192.168.2.4
Aug 29, 2024 21:07:39.825853109 CEST	443	49820	172.217.23.100	192.168.2.4
Aug 29, 2024 21:07:39.826122046 CEST	49820	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:07:39.826139927 CEST	443	49820	172.217.23.100	192.168.2.4
Aug 29, 2024 21:07:39.826464891 CEST	443	49820	172.217.23.100	192.168.2.4
Aug 29, 2024 21:07:39.826946020 CEST	49820	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:07:39.826997995 CEST	443	49820	172.217.23.100	192.168.2.4
Aug 29, 2024 21:07:39.876739979 CEST	49820	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:07:45.488013983 CEST	49724	80	192.168.2.4	93.184.221.240
Aug 29, 2024 21:07:45.493305922 CEST	80	49724	93.184.221.240	192.168.2.4
Aug 29, 2024 21:07:45.493477106 CEST	49724	80	192.168.2.4	93.184.221.240
Aug 29, 2024 21:07:46.596700907 CEST	49783	443	192.168.2.4	152.199.21.175
Aug 29, 2024 21:07:46.596720934 CEST	443	49783	152.199.21.175	192.168.2.4
Aug 29, 2024 21:07:49.744875908 CEST	443	49820	172.217.23.100	192.168.2.4
Aug 29, 2024 21:07:49.744940042 CEST	443	49820	172.217.23.100	192.168.2.4
Aug 29, 2024 21:07:49.745057106 CEST	49820	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:07:51.067147970 CEST	49820	443	192.168.2.4	172.217.23.100
Aug 29, 2024 21:07:51.067181110 CEST	443	49820	172.217.23.100	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 29, 2024 21:06:34.672826052 CEST	53	49620	1.1.1.1	192.168.2.4
Aug 29, 2024 21:06:34.682097912 CEST	53	49411	1.1.1.1	192.168.2.4
Aug 29, 2024 21:06:35.816318989 CEST	53	52647	1.1.1.1	192.168.2.4
Aug 29, 2024 21:06:36.570223093 CEST	55267	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:06:36.570547104 CEST	55690	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:06:39.270571947 CEST	57949	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:06:39.271634102 CEST	65462	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:06:39.278203964 CEST	53	57949	1.1.1.1	192.168.2.4
Aug 29, 2024 21:06:39.279859066 CEST	53	65462	1.1.1.1	192.168.2.4
Aug 29, 2024 21:06:40.078994036 CEST	54500	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:06:40.079519033 CEST	64899	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:06:41.601031065 CEST	54930	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:06:41.601711035 CEST	55253	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:06:41.610126019 CEST	53	54930	1.1.1.1	192.168.2.4
Aug 29, 2024 21:06:41.610884905 CEST	53	55253	1.1.1.1	192.168.2.4
Aug 29, 2024 21:06:43.246257067 CEST	51506	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:06:43.246424913 CEST	50357	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:06:43.254230976 CEST	53	51506	1.1.1.1	192.168.2.4
Aug 29, 2024 21:06:43.254729986 CEST	53	50357	1.1.1.1	192.168.2.4
Aug 29, 2024 21:06:44.844435930 CEST	55210	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:06:44.844774961 CEST	60692	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:06:48.482542992 CEST	53	52416	1.1.1.1	192.168.2.4
Aug 29, 2024 21:06:53.432980061 CEST	53	54573	1.1.1.1	192.168.2.4
Aug 29, 2024 21:06:57.058831930 CEST	138	138	192.168.2.4	192.168.2.255
Aug 29, 2024 21:06:58.448687077 CEST	55232	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:06:58.448821068 CEST	58415	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:00.698121071 CEST	64157	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:00.698270082 CEST	60371	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:00.706796885 CEST	53	60371	1.1.1.1	192.168.2.4
Aug 29, 2024 21:07:00.709286928 CEST	53	64157	1.1.1.1	192.168.2.4
Aug 29, 2024 21:07:02.236884117 CEST	51701	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:02.237282038 CEST	57304	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:02.237787008 CEST	64919	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:02.237839937 CEST	59651	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:02.340190887 CEST	53	52679	1.1.1.1	192.168.2.4
Aug 29, 2024 21:07:02.985394001 CEST	53592	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:02.985543013 CEST	60466	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:03.452877998 CEST	63727	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:03.453059912 CEST	50874	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:04.695539951 CEST	51962	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:04.695991039 CEST	54719	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:04.726428986 CEST	49241	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:04.726649046 CEST	60320	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:04.736634016 CEST	53	49241	1.1.1.1	192.168.2.4
Aug 29, 2024 21:07:04.736850977 CEST	53	60320	1.1.1.1	192.168.2.4
Aug 29, 2024 21:07:04.775347948 CEST	61012	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:04.775719881 CEST	52211	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:04.783162117 CEST	53	61012	1.1.1.1	192.168.2.4
Aug 29, 2024 21:07:04.783695936 CEST	53	52211	1.1.1.1	192.168.2.4
Aug 29, 2024 21:07:05.364706993 CEST	62068	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:05.364916086 CEST	62904	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:05.429642916 CEST	63440	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:05.429799080 CEST	56516	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:05.438426971 CEST	53	63440	1.1.1.1	192.168.2.4
Aug 29, 2024 21:07:05.440323114 CEST	53	56516	1.1.1.1	192.168.2.4
Aug 29, 2024 21:07:05.457518101 CEST	57099	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:05.457712889 CEST	52238	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:07:05.470577955 CEST	53	57099	1.1.1.1	192.168.2.4
Aug 29, 2024 21:07:05.470760107 CEST	53	52238	1.1.1.1	192.168.2.4
Aug 29, 2024 21:07:12.323476076 CEST	53	61168	1.1.1.1	192.168.2.4
Aug 29, 2024 21:07:34.358086109 CEST	53	55506	1.1.1.1	192.168.2.4
Aug 29, 2024 21:07:35.545703888 CEST	53	61060	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 29, 2024 21:06:36.621229887 CEST	192.168.2.4	1.1.1.1	c2e8	(Port unreachable)	Destination Unreachable
Aug 29, 2024 21:07:00.740137100 CEST	192.168.2.4	1.1.1.1	c2c0	(Port unreachable)	Destination Unreachable
Aug 29, 2024 21:07:03.026813030 CEST	192.168.2.4	1.1.1.1	c28d	(Port unreachable)	Destination Unreachable
Aug 29, 2024 21:07:05.408703089 CEST	192.168.2.4	1.1.1.1	c2a1	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 29, 2024 21:06:36.570223093 CEST	192.168.2.4	1.1.1.1	0xe6a5	Standard query (0)	nam.safelink.emails.azure.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:06:36.570547104 CEST	192.168.2.4	1.1.1.1	0x333f	Standard query (0)	nam.safelink.emails.azure.net	65	IN (0x0001)	false
Aug 29, 2024 21:06:39.270571947 CEST	192.168.2.4	1.1.1.1	0xc109	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:06:39.271634102 CEST	192.168.2.4	1.1.1.1	0x84e6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 29, 2024 21:06:40.078994036 CEST	192.168.2.4	1.1.1.1	0x9ca6	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:06:40.079519033 CEST	192.168.2.4	1.1.1.1	0x1e50	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Aug 29, 2024 21:06:41.601031065 CEST	192.168.2.4	1.1.1.1	0x3d14	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:06:41.601711035 CEST	192.168.2.4	1.1.1.1	0xcfb2	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 29, 2024 21:06:43.246257067 CEST	192.168.2.4	1.1.1.1	0xc6b6	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:06:43.246424913 CEST	192.168.2.4	1.1.1.1	0xfebc	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 29, 2024 21:06:44.844435930 CEST	192.168.2.4	1.1.1.1	0x6d8	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:06:44.844774961 CEST	192.168.2.4	1.1.1.1	0x59bb	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Aug 29, 2024 21:06:58.448687077 CEST	192.168.2.4	1.1.1.1	0x4adc	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:06:58.448821068 CEST	192.168.2.4	1.1.1.1	0x43cd	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Aug 29, 2024 21:07:00.698121071 CEST	192.168.2.4	1.1.1.1	0xaaa5	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:00.698270082 CEST	192.168.2.4	1.1.1.1	0x48ff	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Aug 29, 2024 21:07:02.236884117 CEST	192.168.2.4	1.1.1.1	0xac3d	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:02.237282038 CEST	192.168.2.4	1.1.1.1	0x2625	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Aug 29, 2024 21:07:02.237787008 CEST	192.168.2.4	1.1.1.1	0x9b79	Standard query (0)	msft.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:02.237839937 CEST	192.168.2.4	1.1.1.1	0x95b3	Standard query (0)	msft.hsprotect.net	65	IN (0x0001)	false
Aug 29, 2024 21:07:02.985394001 CEST	192.168.2.4	1.1.1.1	0xcdb5	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:02.985543013 CEST	192.168.2.4	1.1.1.1	0x426d	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Aug 29, 2024 21:07:03.452877998 CEST	192.168.2.4	1.1.1.1	0xaa54	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:03.453059912 CEST	192.168.2.4	1.1.1.1	0xb063	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Aug 29, 2024 21:07:04.695539951 CEST	192.168.2.4	1.1.1.1	0x892f	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:04.695991039 CEST	192.168.2.4	1.1.1.1	0xfa93	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Aug 29, 2024 21:07:04.726428986 CEST	192.168.2.4	1.1.1.1	0x60b6	Standard query (0)	stk.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:04.726649046 CEST	192.168.2.4	1.1.1.1	0xb199	Standard query (0)	stk.hsprotect.net	65	IN (0x0001)	false
Aug 29, 2024 21:07:04.775347948 CEST	192.168.2.4	1.1.1.1	0x3c10	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:04.775719881 CEST	192.168.2.4	1.1.1.1	0x463b	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Aug 29, 2024 21:07:05.364706993 CEST	192.168.2.4	1.1.1.1	0xe06a	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:05.364916086 CEST	192.168.2.4	1.1.1.1	0xcad1	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Aug 29, 2024 21:07:05.429642916 CEST	192.168.2.4	1.1.1.1	0x7015	Standard query (0)	stk.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:05.429799080 CEST	192.168.2.4	1.1.1.1	0x2f3b	Standard query (0)	stk.hsprotect.net	65	IN (0x0001)	false
Aug 29, 2024 21:07:05.457518101 CEST	192.168.2.4	1.1.1.1	0x3390	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:05.457712889 CEST	192.168.2.4	1.1.1.1	0x34c1	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 29, 2024 21:06:36.608675957 CEST	1.1.1.1	192.168.2.4	0xe6a5	No error (0)	nam.safelink.emails.azure.net	meo-traf-nam.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:36.608675957 CEST	1.1.1.1	192.168.2.4	0xe6a5	No error (0)	meo-afd-nam-ggd3beb3e0hnezbu.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:36.608675957 CEST	1.1.1.1	192.168.2.4	0xe6a5	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:36.608675957 CEST	1.1.1.1	192.168.2.4	0xe6a5	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:06:36.621166945 CEST	1.1.1.1	192.168.2.4	0x333f	No error (0)	nam.safelink.emails.azure.net	meo-traf-nam.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:36.621166945 CEST	1.1.1.1	192.168.2.4	0x333f	No error (0)	meo-afd-nam-ggd3beb3e0hnezbu.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:37.818640947 CEST	1.1.1.1	192.168.2.4	0x7fe7	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:37.819520950 CEST	1.1.1.1	192.168.2.4	0xdd46	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:39.278203964 CEST	1.1.1.1	192.168.2.4	0xc109	No error (0)	www.google.com		172.217.23.100	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:06:39.279859066 CEST	1.1.1.1	192.168.2.4	0x84e6	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 29, 2024 21:06:40.086996078 CEST	1.1.1.1	192.168.2.4	0x9ca6	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:40.088315010 CEST	1.1.1.1	192.168.2.4	0x1e50	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:41.610126019 CEST	1.1.1.1	192.168.2.4	0x3d14	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:41.610126019 CEST	1.1.1.1	192.168.2.4	0x3d14	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:41.610126019 CEST	1.1.1.1	192.168.2.4	0x3d14	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:06:41.610884905 CEST	1.1.1.1	192.168.2.4	0xcfb2	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:41.610884905 CEST	1.1.1.1	192.168.2.4	0xcfb2	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:43.254230976 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:43.254230976 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:43.254230976 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:06:43.254729986 CEST	1.1.1.1	192.168.2.4	0xfebc	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:43.254729986 CEST	1.1.1.1	192.168.2.4	0xfebc	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:44.852734089 CEST	1.1.1.1	192.168.2.4	0x59bb	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:44.852747917 CEST	1.1.1.1	192.168.2.4	0x6d8	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:44.991641045 CEST	1.1.1.1	192.168.2.4	0x93f4	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:44.991641045 CEST	1.1.1.1	192.168.2.4	0x93f4	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:06:50.037285089 CEST	1.1.1.1	192.168.2.4	0xf6b0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:50.037285089 CEST	1.1.1.1	192.168.2.4	0xf6b0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:06:58.455827951 CEST	1.1.1.1	192.168.2.4	0x4adc	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:06:58.465631962 CEST	1.1.1.1	192.168.2.4	0x43cd	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:00.706413031 CEST	1.1.1.1	192.168.2.4	0xaa89	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:00.706413031 CEST	1.1.1.1	192.168.2.4	0xaa89	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:00.706796885 CEST	1.1.1.1	192.168.2.4	0x48ff	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:00.706796885 CEST	1.1.1.1	192.168.2.4	0x48ff	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:00.709286928 CEST	1.1.1.1	192.168.2.4	0xaaa5	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:00.709286928 CEST	1.1.1.1	192.168.2.4	0xaaa5	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:00.709286928 CEST	1.1.1.1	192.168.2.4	0xaaa5	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:00.721810102 CEST	1.1.1.1	192.168.2.4	0x9d61	No error (0)	shed.dual-low.s-part-0029.t-0009.t-msedge.net	s-part-0029.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:00.721810102 CEST	1.1.1.1	192.168.2.4	0x9d61	No error (0)	s-part-0029.t-0009.t-msedge.net		13.107.246.57	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:00.723310947 CEST	1.1.1.1	192.168.2.4	0x3b1b	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:00.723663092 CEST	1.1.1.1	192.168.2.4	0xa03f	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:00.723663092 CEST	1.1.1.1	192.168.2.4	0xa03f	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:01.771106958 CEST	1.1.1.1	192.168.2.4	0xc3a8	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:01.771106958 CEST	1.1.1.1	192.168.2.4	0xc3a8	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:02.341726065 CEST	1.1.1.1	192.168.2.4	0x9b79	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:02.341939926 CEST	1.1.1.1	192.168.2.4	0xac3d	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:02.342309952 CEST	1.1.1.1	192.168.2.4	0x95b3	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:02.364311934 CEST	1.1.1.1	192.168.2.4	0x2625	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:02.993439913 CEST	1.1.1.1	192.168.2.4	0xcdb5	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:03.026758909 CEST	1.1.1.1	192.168.2.4	0x426d	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:03.465028048 CEST	1.1.1.1	192.168.2.4	0xaa54	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:03.465042114 CEST	1.1.1.1	192.168.2.4	0xb063	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:04.655658960 CEST	1.1.1.1	192.168.2.4	0xcb4a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:04.655658960 CEST	1.1.1.1	192.168.2.4	0xcb4a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:04.703879118 CEST	1.1.1.1	192.168.2.4	0xfa93	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:04.705239058 CEST	1.1.1.1	192.168.2.4	0x892f	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:04.736634016 CEST	1.1.1.1	192.168.2.4	0x60b6	No error (0)	stk.hsprotect.net		34.107.199.61	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:04.783162117 CEST	1.1.1.1	192.168.2.4	0x3c10	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:04.783162117 CEST	1.1.1.1	192.168.2.4	0x3c10	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:04.783695936 CEST	1.1.1.1	192.168.2.4	0x463b	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:05.356477976 CEST	1.1.1.1	192.168.2.4	0x2781	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:05.356477976 CEST	1.1.1.1	192.168.2.4	0x2781	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:05.374417067 CEST	1.1.1.1	192.168.2.4	0xe06a	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:05.408646107 CEST	1.1.1.1	192.168.2.4	0xcad1	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:05.438426971 CEST	1.1.1.1	192.168.2.4	0x7015	No error (0)	stk.hsprotect.net		34.107.199.61	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:05.470577955 CEST	1.1.1.1	192.168.2.4	0x3390	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:05.470577955 CEST	1.1.1.1	192.168.2.4	0x3390	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:05.470760107 CEST	1.1.1.1	192.168.2.4	0x34c1	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:06.198775053 CEST	1.1.1.1	192.168.2.4	0xfec	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:06.198775053 CEST	1.1.1.1	192.168.2.4	0xfec	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:27.418178082 CEST	1.1.1.1	192.168.2.4	0x8378	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:27.418178082 CEST	1.1.1.1	192.168.2.4	0x8378	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:07:47.627979994 CEST	1.1.1.1	192.168.2.4	0xbcca	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:07:47.627979994 CEST	1.1.1.1	192.168.2.4	0xbcca	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

nam.safelink.emails.azure.net

fs.microsoft.com

https:

aadcdn.msftauth.net

logincdn.msauth.net

collector-pxzc5j78di.hsprotect.net

stk.hsprotect.net

acctcdn.msauth.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	13.107.246.42	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:37 UTC	893	OUT	GET /redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT01OWM4ZTNjMy03YjVmLTQxNTgtOWVjYS0yZWJkZDNiYzZkZDEmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l HTTP/1.1 Host: nam.safelink.emails.azure.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:37 UTC	787	IN	HTTP/1.1 302 Found Date: Thu, 29 Aug 2024 19:06:37 GMT Content-Type: text/html; charset=utf-8 Content-Length: 177 Connection: close Cache-Control: private Location: https://admin.microsoft.com/adminportal/home?#/subscriptions Set-Cookie: ASP.NET_SessionId=rcv2ro5d42uuldrr0zs4tc2s; path=/; secure; HttpOnly; SameSite=Lax Strict-Transport-Security: max-age=31536000 Azure-Version: 20240821-0843-419737 Azure-SiteName: meo-api-nam-cu05-usw3 Azure-InstanceId: 78440664e1ca4294670e5a5b848f14b15f01fe2effedb618306debf942a62d7b Azure-RegionName: West US 3 Azure-SlotName: unknown X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Arr-Disable-Session-Affinity: true x-azure-ref: 20240829T190637Z-16579567576j7nvvu5n0ytgs1c00000002f000000000e4ay X-Cache: CONFIG_NOCACHE
2024-08-29 19:06:37 UTC	177	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 64 6d 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 61 64 6d 69 6e 70 6f 72 74 61 6c 2f 68 6f 6d 65 3f 23 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://admin.microsoft.com/adminportal/home?#/subscriptions">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:40 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-29 19:06:40 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=138613 Date: Thu, 29 Aug 2024 19:06:40 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49745	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:41 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-29 19:06:41 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=138565 Date: Thu, 29 Aug 2024 19:06:41 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-29 19:06:41 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49746	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:42 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:42 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1864625 Cache-Control: public, max-age=31536000 Content-MD5: bedopN8eDQBhzbUu8GNGxA== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 19:06:42 GMT Etag: 0x8DCB563C85A43C4 Last-Modified: Mon, 05 Aug 2024 15:32:14 GMT Server: ECAcc (lhc/78A8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb594470-e01e-0006-2151-e9b2d8000000 x-ms-version: 2009-09-19 Content-Length: 141866 Connection: close
2024-08-29 19:06:42 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 19:06:42 UTC	1	IN	Data Raw: 22 Data Ascii: "
2024-08-29 19:06:42 UTC	16383	IN	Data Raw: 5d 2c 5b 22 23 32 30 32 30 32 30 22 5d 29 2c 73 3d 65 28 72 2c 5b 22 34 35 2c 35 30 2c 35 34 22 5d 2c 5b 22 23 32 64 33 32 33 36 22 5d 29 2c 75 3d 65 28 72 2c 5b 22 32 35 35 2c 32 35 30 2c 32 33 39 22 5d 2c 5b 22 23 66 66 66 61 65 66 22 5d 29 3b 69 66 28 6f 7c 7c 61 7c 7c 73 29 72 65 74 75 72 6e 22 62 6c 61 63 6b 22 3b 69 66 28 69 7c 7c 75 29 72 65 74 75 72 6e 22 77 68 69 74 65 22 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d Data Ascii: ],["#202020"]),s=e(r,["45,50,54"],["#2d3236"]),u=e(r,["255,250,239"],["#fffaef"]);if(o\|\|a\|\|s)return"black";if(i\|\|u)return"white"}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getCom
2024-08-29 19:06:42 UTC	16383	IN	Data Raw: 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 35 35 37 22 2c 50 50 5f 45 5f 4f 54 54 5f 44 41 54 41 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 33 34 38 46 22 2c 50 50 5f 45 5f 4f 54 54 5f 41 4c 52 45 41 44 59 5f 43 4f 4e 53 55 4d 45 44 3a 22 38 30 30 34 33 34 39 30 22 2c 50 50 5f 45 5f 4f 54 54 5f 49 4e 56 41 4c 49 44 5f 50 55 52 50 4f 53 45 3a 22 38 30 30 34 33 34 39 36 22 2c 50 50 5f 45 5f 50 50 53 41 5f 52 50 54 5f 4e 4f 54 4f 41 44 44 52 45 53 53 3a 22 38 30 30 34 38 31 32 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 45 53 53 5f 42 41 44 44 45 56 49 43 45 4e 41 4d 45 3a 22 38 30 30 34 39 43 32 32 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c Data Ascii: PASSWORD:"80043557",PP_E_OTT_DATA_INVALID:"8004348F",PP_E_OTT_ALREADY_CONSUMED:"80043490",PP_E_OTT_INVALID_PURPOSE:"80043496",PP_E_PPSA_RPT_NOTOADDRESS:"80048120",PP_E_STRONGPROCESS_BADDEVICENAME:"80049C22",PP_E_INLINELOGIN_INVALID_SMS:"800434E1",PP_E_INL
2024-08-29 19:06:43 UTC	16383	IN	Data Raw: 2a 29 3f 24 2f 5d 2c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 74 2e 63 61 6c 6c 28 6e 2c 65 5b 72 5d 2c 72 2c 65 29 7d 2c 41 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 65 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 4c 62 Data Ascii: *)?$/],D:function(e,t,n){for(var r=0,o=e.length;r<o;r++)t.call(n,e[r],r,e)},A:"function"==typeof Array.prototype.indexOf?function(e,t){return Array.prototype.indexOf.call(e,t)}:function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},Lb
2024-08-29 19:06:43 UTC	16383	IN	Data Raw: 6e 2e 71 62 28 74 29 2c 53 2e 61 2e 41 62 28 74 2c 50 29 2c 53 2e 6f 70 74 69 6f 6e 73 2e 64 65 66 65 72 55 70 64 61 74 65 73 26 26 53 2e 54 61 2e 64 65 66 65 72 72 65 64 28 74 2c 21 30 29 2c 74 7d 3b 76 61 72 20 50 3d 7b 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 3a 6e 2c 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 77 5d 7d 2c 78 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 73 70 65 63 74 61 74 65 22 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 29 7d 2c 79 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 Data Ascii: n.qb(t),S.a.Ab(t,P),S.options.deferUpdates&&S.Ta.deferred(t,!0),t};var P={equalityComparer:n,v:function(){return this[w]},xa:function(){this.notifySubscribers(this[w],"spectate"),this.notifySubscribers(this[w])},ya:function(){this.notifySubscribers(this[w
2024-08-29 19:06:43 UTC	16383	IN	Data Raw: 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 61 2e 47 61 28 53 2e 75 2e 47 28 65 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 5b 6e 5d 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6f 28 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 72 29 29 3a 53 2e 61 2e 47 61 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2e 67 65 74 42 69 6e 64 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 2c 65 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 74 29 Data Ascii: n o(e){return S.a.Ga(S.u.G(e),(function(t,n){return function(){return e()[n]}}))}function i(e,t,r){return"function"==typeof e?o(e.bind(null,t,r)):S.a.Ga(e,n)}function c(e,t){return o(this.getBindings.bind(this,e,t))}function d(e,t){var n=S.h.firstChild(t)
2024-08-29 19:06:43 UTC	16383	IN	Data Raw: 26 26 28 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 28 30 2c 74 29 2c 53 2e 75 2e 47 28 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 41 66 74 65 72 52 65 6e 64 65 72 22 29 2c 6e 75 6c 6c 2c 5b 74 5b 30 5d 2c 65 21 3d 3d 44 3f 65 3a 61 5d 29 7d 29 2c 53 2e 61 2e 65 63 28 65 2c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 26 26 28 70 3d 21 6c 26 26 69 5b 30 5d 2e 73 65 6c 65 63 74 65 64 3f 5b 53 2e 77 2e 4d 28 69 5b 30 5d 29 5d 3a 5b 5d 2c 68 3d 21 30 29 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 2c 74 3d 3d 3d 44 3f 28 53 2e 61 2e 42 62 28 72 2c 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 43 61 70 74 69 6f 6e 22 29 Data Ascii: &&(c=function(e,t){i(0,t),S.u.G(n.get("optionsAfterRender"),null,[t[0],e!==D?e:a])}),S.a.ec(e,f,(function(t,r,i){return i.length&&(p=!l&&i[0].selected?[S.w.M(i[0])]:[],h=!0),r=e.ownerDocument.createElement("option"),t===D?(S.a.Bb(r,n.get("optionsCaption")
2024-08-29 19:06:43 UTC	6	IN	Data Raw: 27 29 3b 22 7d 2c Data Ascii: ');"},
2024-08-29 19:06:43 UTC	16383	IN	Data Raw: 6c 2e 74 6d 70 6c 2e 74 61 67 2e 6b 6f 5f 77 69 74 68 3d 7b 6f 70 65 6e 3a 22 77 69 74 68 28 24 31 29 20 7b 22 2c 63 6c 6f 73 65 3a 22 7d 20 22 7d 29 7d 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 53 2e 63 61 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 53 2e 24 61 3b 76 61 72 20 65 3d 6e 65 77 20 53 2e 24 61 3b 30 3c 65 2e 48 64 26 26 53 2e 67 63 28 65 29 2c 53 2e 62 28 22 6a 71 75 65 72 79 54 6d 70 6c 54 65 6d 70 6c 61 74 65 45 6e 67 69 6e 65 22 2c 53 2e 24 61 29 7d 28 29 7d 29 29 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 Data Ascii: l.tmpl.tag.ko_with={open:"with($1) {",close:"} "})},S.$a.prototype=new S.ca,S.$a.prototype.constructor=S.$a;var e=new S.$a;0<e.Hd&&S.gc(e),S.b("jqueryTmplTemplateEngine",S.$a)}()}))}()},function(e,t,n){function r(e){return(r="function"==typeof Symbol&&"sy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49749	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:44 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:44 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1864627 Cache-Control: public, max-age=31536000 Content-MD5: bedopN8eDQBhzbUu8GNGxA== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 19:06:44 GMT Etag: 0x8DCB563C85A43C4 Last-Modified: Mon, 05 Aug 2024 15:32:14 GMT Server: ECAcc (lhc/78A8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb594470-e01e-0006-2151-e9b2d8000000 x-ms-version: 2009-09-19 Content-Length: 141866 Connection: close
2024-08-29 19:06:45 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 19:06:45 UTC	1	IN	Data Raw: 22 Data Ascii: "
2024-08-29 19:06:45 UTC	16383	IN	Data Raw: 5d 2c 5b 22 23 32 30 32 30 32 30 22 5d 29 2c 73 3d 65 28 72 2c 5b 22 34 35 2c 35 30 2c 35 34 22 5d 2c 5b 22 23 32 64 33 32 33 36 22 5d 29 2c 75 3d 65 28 72 2c 5b 22 32 35 35 2c 32 35 30 2c 32 33 39 22 5d 2c 5b 22 23 66 66 66 61 65 66 22 5d 29 3b 69 66 28 6f 7c 7c 61 7c 7c 73 29 72 65 74 75 72 6e 22 62 6c 61 63 6b 22 3b 69 66 28 69 7c 7c 75 29 72 65 74 75 72 6e 22 77 68 69 74 65 22 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d Data Ascii: ],["#202020"]),s=e(r,["45,50,54"],["#2d3236"]),u=e(r,["255,250,239"],["#fffaef"]);if(o\|\|a\|\|s)return"black";if(i\|\|u)return"white"}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getCom
2024-08-29 19:06:45 UTC	16383	IN	Data Raw: 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 35 35 37 22 2c 50 50 5f 45 5f 4f 54 54 5f 44 41 54 41 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 33 34 38 46 22 2c 50 50 5f 45 5f 4f 54 54 5f 41 4c 52 45 41 44 59 5f 43 4f 4e 53 55 4d 45 44 3a 22 38 30 30 34 33 34 39 30 22 2c 50 50 5f 45 5f 4f 54 54 5f 49 4e 56 41 4c 49 44 5f 50 55 52 50 4f 53 45 3a 22 38 30 30 34 33 34 39 36 22 2c 50 50 5f 45 5f 50 50 53 41 5f 52 50 54 5f 4e 4f 54 4f 41 44 44 52 45 53 53 3a 22 38 30 30 34 38 31 32 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 45 53 53 5f 42 41 44 44 45 56 49 43 45 4e 41 4d 45 3a 22 38 30 30 34 39 43 32 32 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c Data Ascii: PASSWORD:"80043557",PP_E_OTT_DATA_INVALID:"8004348F",PP_E_OTT_ALREADY_CONSUMED:"80043490",PP_E_OTT_INVALID_PURPOSE:"80043496",PP_E_PPSA_RPT_NOTOADDRESS:"80048120",PP_E_STRONGPROCESS_BADDEVICENAME:"80049C22",PP_E_INLINELOGIN_INVALID_SMS:"800434E1",PP_E_INL
2024-08-29 19:06:45 UTC	16383	IN	Data Raw: 2a 29 3f 24 2f 5d 2c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 74 2e 63 61 6c 6c 28 6e 2c 65 5b 72 5d 2c 72 2c 65 29 7d 2c 41 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 65 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 4c 62 Data Ascii: *)?$/],D:function(e,t,n){for(var r=0,o=e.length;r<o;r++)t.call(n,e[r],r,e)},A:"function"==typeof Array.prototype.indexOf?function(e,t){return Array.prototype.indexOf.call(e,t)}:function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},Lb
2024-08-29 19:06:45 UTC	16383	IN	Data Raw: 6e 2e 71 62 28 74 29 2c 53 2e 61 2e 41 62 28 74 2c 50 29 2c 53 2e 6f 70 74 69 6f 6e 73 2e 64 65 66 65 72 55 70 64 61 74 65 73 26 26 53 2e 54 61 2e 64 65 66 65 72 72 65 64 28 74 2c 21 30 29 2c 74 7d 3b 76 61 72 20 50 3d 7b 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 3a 6e 2c 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 77 5d 7d 2c 78 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 73 70 65 63 74 61 74 65 22 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 29 7d 2c 79 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 Data Ascii: n.qb(t),S.a.Ab(t,P),S.options.deferUpdates&&S.Ta.deferred(t,!0),t};var P={equalityComparer:n,v:function(){return this[w]},xa:function(){this.notifySubscribers(this[w],"spectate"),this.notifySubscribers(this[w])},ya:function(){this.notifySubscribers(this[w
2024-08-29 19:06:45 UTC	16383	IN	Data Raw: 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 61 2e 47 61 28 53 2e 75 2e 47 28 65 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 5b 6e 5d 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6f 28 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 72 29 29 3a 53 2e 61 2e 47 61 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2e 67 65 74 42 69 6e 64 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 2c 65 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 74 29 Data Ascii: n o(e){return S.a.Ga(S.u.G(e),(function(t,n){return function(){return e()[n]}}))}function i(e,t,r){return"function"==typeof e?o(e.bind(null,t,r)):S.a.Ga(e,n)}function c(e,t){return o(this.getBindings.bind(this,e,t))}function d(e,t){var n=S.h.firstChild(t)
2024-08-29 19:06:45 UTC	16383	IN	Data Raw: 26 26 28 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 28 30 2c 74 29 2c 53 2e 75 2e 47 28 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 41 66 74 65 72 52 65 6e 64 65 72 22 29 2c 6e 75 6c 6c 2c 5b 74 5b 30 5d 2c 65 21 3d 3d 44 3f 65 3a 61 5d 29 7d 29 2c 53 2e 61 2e 65 63 28 65 2c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 26 26 28 70 3d 21 6c 26 26 69 5b 30 5d 2e 73 65 6c 65 63 74 65 64 3f 5b 53 2e 77 2e 4d 28 69 5b 30 5d 29 5d 3a 5b 5d 2c 68 3d 21 30 29 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 2c 74 3d 3d 3d 44 3f 28 53 2e 61 2e 42 62 28 72 2c 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 43 61 70 74 69 6f 6e 22 29 Data Ascii: &&(c=function(e,t){i(0,t),S.u.G(n.get("optionsAfterRender"),null,[t[0],e!==D?e:a])}),S.a.ec(e,f,(function(t,r,i){return i.length&&(p=!l&&i[0].selected?[S.w.M(i[0])]:[],h=!0),r=e.ownerDocument.createElement("option"),t===D?(S.a.Bb(r,n.get("optionsCaption")
2024-08-29 19:06:45 UTC	6	IN	Data Raw: 27 29 3b 22 7d 2c Data Ascii: ');"},
2024-08-29 19:06:45 UTC	16383	IN	Data Raw: 6c 2e 74 6d 70 6c 2e 74 61 67 2e 6b 6f 5f 77 69 74 68 3d 7b 6f 70 65 6e 3a 22 77 69 74 68 28 24 31 29 20 7b 22 2c 63 6c 6f 73 65 3a 22 7d 20 22 7d 29 7d 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 53 2e 63 61 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 53 2e 24 61 3b 76 61 72 20 65 3d 6e 65 77 20 53 2e 24 61 3b 30 3c 65 2e 48 64 26 26 53 2e 67 63 28 65 29 2c 53 2e 62 28 22 6a 71 75 65 72 79 54 6d 70 6c 54 65 6d 70 6c 61 74 65 45 6e 67 69 6e 65 22 2c 53 2e 24 61 29 7d 28 29 7d 29 29 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 Data Ascii: l.tmpl.tag.ko_with={open:"with($1) {",close:"} "})},S.$a.prototype=new S.ca,S.$a.prototype.constructor=S.$a;var e=new S.$a;0<e.Hd&&S.gc(e),S.b("jqueryTmplTemplateEngine",S.$a)}()}))}()},function(e,t,n){function r(e){return(r="function"==typeof Symbol&&"sy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49754	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:45 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:46 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4864676 Cache-Control: public, max-age=31536000 Content-MD5: SJgdPPV+fFjKfj6FHvk1Tg== Content-Type: text/css Date: Thu, 29 Aug 2024 19:06:45 GMT Etag: 0x8DC9BAA0E5931F9 Last-Modified: Wed, 03 Jul 2024 21:49:46 GMT Server: ECAcc (lhc/794C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 6c7d298f-b01e-00dc-1d08-ce9a59000000 x-ms-version: 2009-09-19 Content-Length: 113401 Connection: close
2024-08-29 19:06:46 UTC	15668	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6c 67 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 73 6d 2d 31 33 2c 2e 63 6f 6c 2d 6d 64 2d 31 33 2c 2e 63 6f 6c 2d 6c 67 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 73 6d 2d 31 34 2c 2e 63 6f 6c 2d 6d 64 2d 31 34 2c 2e 63 6f 6c 2d 6c 67 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 73 6d 2d 31 35 2c 2e 63 6f 6c 2d 6d 64 2d 31 35 2c 2e 63 6f 6c 2d 6c 67 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 Data Ascii: 10,.col-md-10,.col-lg-10,.col-xs-11,.col-sm-11,.col-md-11,.col-lg-11,.col-xs-12,.col-sm-12,.col-md-12,.col-lg-12,.col-xs-13,.col-sm-13,.col-md-13,.col-lg-13,.col-xs-14,.col-sm-14,.col-md-14,.col-lg-14,.col-xs-15,.col-sm-15,.col-md-15,.col-lg-15,.col-xs-16
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 31 36 2e 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 39 2e 31 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 37 2e 35 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 31 7b 6d 61 Data Ascii: 16.66667%}.col-xl-offset-5{margin-left:20.83333%}.col-xl-offset-6{margin-left:25%}.col-xl-offset-7{margin-left:29.16667%}.col-xl-offset-8{margin-left:33.33333%}.col-xl-offset-9{margin-left:37.5%}.col-xl-offset-10{margin-left:41.66667%}.col-xl-offset-11{ma
2024-08-29 19:06:46 UTC	718	IN	Data Raw: 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 74 68 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 74 61 62 6c 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 7b 70 61 64 64 69 6e 67 3a 31 36 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 7b 76 65 72 74 69 63 61 6c Data Ascii: {background-color:transparent}th{text-align:left}.table{width:100%;max-width:100%}.table>thead>tr>th,.table>thead>tr>td,.table>tbody>tr>th,.table>tbody>tr>td,.table>tfoot>tr>th,.table>tfoot>tr>td{padding:16px;vertical-align:top}.table>thead>tr>th{vertical
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 Data Ascii: w-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.table
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c Data Ascii: ,"Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongol
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: ype="reset"].btn-primary:hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{background-c
2024-08-29 19:06:46 UTC	15100	IN	Data Raw: 61 20 4d 61 74 68 22 7d 2e 61 70 70 2d 6e 61 6d 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 Data Ascii: a Math"}.app-name{margin-bottom:20px;margin-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49756	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:45 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:46 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1871530 Cache-Control: public, max-age=31536000 Content-MD5: uaBUkDWJZJ75uKxjc6vkvw== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 19:06:46 GMT Etag: 0x8DCB563CA8588E7 Last-Modified: Mon, 05 Aug 2024 15:32:18 GMT Server: ECAcc (lhc/7971) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9a732ed0-201e-0054-8041-e9ce30000000 x-ms-version: 2009-09-19 Content-Length: 449540 Connection: close
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 19:06:46 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 Data Ascii: ING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthorize
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 61 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 74 61 72 67 65 74 3f 65 2e 74 61 72 67 65 74 3a 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3f 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3a 6e 75 6c 6c 3a 6e 75 6c 6c 7d 7d 2c 44 3d 6e 2e 51 75 65 72 79 53 74 72 69 6e 67 3d 7b 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2c 74 3d 6e 75 6c 6c 2c 69 3d 6e 75 6c 6c 3b 69 66 28 65 29 7b 76 61 72 20 61 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 2c 6f 3d 65 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 2d 31 21 3d 3d 6f 26 26 28 2d 31 3d 3d 3d 61 7c 7c 6f 3c 61 29 3f 28 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6f 29 2c 69 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 6f Data Ascii: arget:function(e){return e?e.target?e.target:e.srcElement?e.srcElement:null:null}},D=n.QueryString={parse:function(e){var n=e,t=null,i=null;if(e){var a=e.indexOf("?"),o=e.indexOf("#");-1!==o&&(-1===a\|\|o<a)?(n=e.substring(0,o),i=d.doubleSplit(e.substring(o
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 50 61 73 73 77 6f 72 64 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 69 64 69 6e 67 4d 6f 64 65 3d 69 2e 48 69 64 69 6e 67 4d 6f 64 65 2e 48 69 64 65 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 45 76 65 6e 74 54 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 72 65 74 75 72 6e 7b 65 76 65 6e 74 49 64 3a 65 2c 65 76 65 6e 74 4c 65 76 65 6c 3a 74 7c 7c 69 2e 45 Data Ascii: ltTextBoxPropertyLogOption(e,n)},s.getPasswordTextBoxPropertyLogOption=function(e,n){return(n=n\|\|{}).hidingMode=i.HidingMode.Hide,s.getDefaultTextBoxPropertyLogOption(e,n)},s.getDefaultEventTracingOptions=function(e,n,t){return{eventId:e,eventLevel:t\|\|i.E
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 28 74 68 69 73 5b 75 2e 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 5d 3d 62 29 2c 76 26 26 28 74 68 69 73 5b 75 2e 43 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 5d 3d 76 29 7d 2c 6e 2e 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 2c 61 2c 63 2c 64 3d 74 68 69 73 2c 6c 3d 70 2e 4e 6f 6e 65 2c 75 3d 22 22 2c 66 3d 22 22 2c 67 3d 22 22 2c 6d 3d 65 2e 64 61 74 61 2c 62 3d 65 2e 6f 6e 53 65 6e 64 2c 76 3d 65 2e 6f 6e 53 65 6e 64 46 61 69 6c 2c 68 3d 65 2e 6f 6e 46 6c 6f 77 45 78 70 69 72 65 64 2c 5f 3d 65 2e 74 69 6d 65 6f 75 74 7c 7c 33 65 34 2c 43 3d 65 2e 73 69 74 65 49 64 2c 53 3d 65 2e 63 6c 69 65 6e 74 49 64 2c 78 3d 65 2e 66 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 77 3d 65 2e 6e 6f 50 61 42 75 62 62 Data Ascii: (this[u.ProofConfirmation]=b),v&&(this[u.CanaryFlowToken]=v)},n.Request=function(e){var n,t,a,c,d=this,l=p.None,u="",f="",g="",m=e.data,b=e.onSend,v=e.onSendFail,h=e.onFlowExpired,_=e.timeout\|\|3e4,C=e.siteId,S=e.clientId,x=e.forwardedClientId,w=e.noPaBubb
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 72 61 6d 73 7c 7c 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 61 63 65 62 6f 6f 6b 50 61 72 61 6d 73 29 29 29 72 65 74 75 72 6e 20 69 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 6d 2e 52 65 6d 6f 74 65 4e 47 43 3a 63 61 73 65 20 6d 2e 46 65 64 65 72 61 74 69 6f 6e 3a 63 61 73 65 20 6d 2e 41 63 63 65 73 73 50 61 73 73 3a 63 61 73 65 20 6d 2e 4e 6f 50 72 65 66 65 72 72 65 64 43 72 65 64 65 6e 74 69 61 6c 3a 6f 26 26 6f 2e 53 61 6d 6c 52 65 71 75 65 73 74 26 26 6f 2e 52 65 6c 61 79 53 74 61 74 65 3f 28 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 2c 69 2e 69 64 70 52 65 64 69 72 65 63 74 50 6f 73 74 50 61 72 61 6d 73 3d 7b 53 41 4d 4c 52 65 71 Data Ascii: rams\|\|n.Credentials.FacebookParams)))return i;switch(a){case m.RemoteNGC:case m.Federation:case m.AccessPass:case m.NoPreferredCredential:o&&o.SamlRequest&&o.RelayState?(i.idpRedirectUrl=n.Credentials.FederationRedirectUrl,i.idpRedirectPostParams={SAMLReq
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 65 61 74 65 28 29 2c 6e 2e 6f 6e 52 65 64 69 72 65 63 74 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 52 65 67 69 73 74 65 72 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 55 6e 72 65 67 69 73 74 65 72 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 68 6f 77 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 55 70 64 61 74 65 46 6c 6f 77 54 6f 6b 65 6e 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 63 72 65 64 65 6e 74 69 61 6c 43 6f 75 6e 74 3d 30 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 54 79 70 65 3d 6e 75 6c 6c 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 53 68 6f 77 6e 4f 6e 6c 79 4f 6e 50 69 63 Data Ascii: eate(),n.onRedirect=o.create(),n.onRegisterDialog=o.create(),n.onUnregisterDialog=o.create(),n.onShowDialog=o.create(),n.onSetPendingRequest=o.create(),n.onUpdateFlowToken=o.create(),n.credentialCount=0,n.selectedCredType=null,n.selectedCredShownOnlyOnPic
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 2e 61 75 74 68 65 6e 74 69 63 61 74 65 64 53 74 61 74 65 7c 7c 32 3d 3d 3d 65 2e 61 75 74 68 65 6e 74 69 63 61 74 65 64 53 74 61 74 65 2c 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 7c 7c 21 31 2c 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 3a 21 30 2c 69 73 47 69 74 48 75 62 46 65 64 3a 65 2e 69 73 47 69 74 48 75 62 46 65 64 7c 7c 21 31 7d 7d 29 29 7d 2c 70 61 72 73 65 42 73 73 6f 53 65 73 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 2e 6d 61 70 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 73 73 6f 55 6e 69 71 75 65 49 64 3a 65 2e 73 73 6f 55 6e 69 71 75 65 49 64 2c 6e 61 6d 65 3a 65 2e 6e 61 6d 65 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 65 2e 64 69 73 Data Ascii: .authenticatedState\|\|2===e.authenticatedState,isWindowsSso:e.isWindowsSso\|\|!1,isMeControlSession:!0,isGitHubFed:e.isGitHubFed\|\|!1}}))},parseBssoSessions:function(e){return o.map(e,(function(e){return{ssoUniqueId:e.ssoUniqueId,name:e.name,displayName:e.dis
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 64 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 29 7b 76 61 72 20 61 3d 69 2e 73 46 65 64 51 53 3b 6e 3d 3d 3d 6d 2e 4e 6f 74 68 69 6e 67 43 68 65 63 6b 65 64 26 26 28 61 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 22 3f 22 2b 61 2c 22 77 63 74 78 22 2c 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 2b 66 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 22 3f 22 2b 61 29 29 2e 73 75 62 73 74 72 28 31 29 29 3b 65 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 63 62 63 78 74 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 2e 65 78 74 72 61 63 74 28 22 63 62 63 78 74 22 29 29 29 29 2c 65 3d 66 2e 61 70 70 65 6e Data Ascii: d)return function(e,n,t,i){var a=i.sFedQS;n===m.NothingChecked&&(a=f.appendOrReplace("?"+a,"wctx","LoginOptions%3D3%26"+f.extract("wctx","?"+a)).substr(1));e=f.appendOrReplace(e,"cbcxt",encodeURIComponent(decodeURIComponent(f.extract("cbcxt")))),e=f.appen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49755	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:45 UTC	656	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:46 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2292232 Cache-Control: public, max-age=31536000 Content-MD5: Rm+S3xFatg5Am1LOmufX9g== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 19:06:46 GMT Etag: 0x8DCB32DEE62CF26 Last-Modified: Fri, 02 Aug 2024 20:01:43 GMT Server: ECAcc (lhc/78A1) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 613e53e1-f01e-00f5-7a6d-e55e06000000 x-ms-version: 2009-09-19 Content-Length: 56391 Connection: close
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-08-29 19:06:46 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 2e Data Ascii: escription_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time.
2024-08-29 19:06:46 UTC	1	IN	Data Raw: 67 Data Ascii: g
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 20 6f 75 72 20 3c 73 74 72 6f 6e 67 3e 6e 65 77 20 73 69 67 6e 2d 69 6e 20 65 78 70 65 72 69 65 6e 63 65 3c 2f 73 74 72 6f 6e 67 3e 22 2c 65 2e 57 46 5f 53 54 52 5f 53 69 67 6e 55 70 4c 69 6e 6b 5f 54 65 78 74 3d 27 4e 6f 20 61 63 63 6f 75 6e 74 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 73 69 67 6e 75 70 22 3e 43 72 65 61 74 65 20 6f 6e 65 21 3c 2f 61 3e 27 2c 65 2e 43 54 5f 48 52 44 5f 53 54 52 5f 53 70 6c 69 74 74 65 72 5f 52 65 6e 61 6d 65 3d 27 54 69 72 65 64 20 6f 66 20 73 65 65 69 6e 67 20 74 68 69 73 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 69 44 69 73 61 6d 62 69 67 52 65 6e 61 6d 65 4c 69 6e 6b 22 3e 52 65 6e 61 6d 65 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 2e 3c 2f Data Ascii: our <strong>new sign-in experience</strong>",e.WF_STR_SignUpLink_Text='No account? <a href="#" id="signup">Create one!</a>',e.CT_HRD_STR_Splitter_Rename='Tired of seeing this? <a href="#" id="iDisambigRenameLink">Rename your personal Microsoft account.</
2024-08-29 19:06:46 UTC	7240	IN	Data Raw: 65 49 6e 63 6f 72 72 65 63 74 22 2c 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 3a 22 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 22 2c 4f 61 74 68 43 6f 64 65 4f 6c 64 3a 22 4f 61 74 68 43 6f 64 65 4f 6c 64 22 2c 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 3a 22 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 22 2c 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 3a 22 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 22 2c 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 65 61 63 68 65 64 3a 22 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 65 Data Ascii: eIncorrect",OathCodeDuplicate:"OathCodeDuplicate",OathCodeOld:"OathCodeOld",ProofDataNotFound:"ProofDataNotFound",OathCodeCorrectButDeviceNotAllowed:"OathCodeCorrectButDeviceNotAllowed",OathCodeFailedMaxAllowedRetryReached:"OathCodeFailedMaxAllowedRetryRe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:46 UTC	431	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:46 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2292232 Cache-Control: public, max-age=31536000 Content-MD5: Rm+S3xFatg5Am1LOmufX9g== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 19:06:46 GMT Etag: 0x8DCB32DEE62CF26 Last-Modified: Fri, 02 Aug 2024 20:01:43 GMT Server: ECAcc (lhc/78A1) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 613e53e1-f01e-00f5-7a6d-e55e06000000 x-ms-version: 2009-09-19 Content-Length: 56391 Connection: close
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-08-29 19:06:46 UTC	16383	IN	Data Raw: 6e 67 20 6f 75 72 20 3c 73 74 72 6f 6e 67 3e 6e 65 77 20 73 69 67 6e 2d 69 6e 20 65 78 70 65 72 69 65 6e 63 65 3c 2f 73 74 72 6f 6e 67 3e 22 2c 65 2e 57 46 5f 53 54 52 5f 53 69 67 6e 55 70 4c 69 6e 6b 5f 54 65 78 74 3d 27 4e 6f 20 61 63 63 6f 75 6e 74 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 73 69 67 6e 75 70 22 3e 43 72 65 61 74 65 20 6f 6e 65 21 3c 2f 61 3e 27 2c 65 2e 43 54 5f 48 52 44 5f 53 54 52 5f 53 70 6c 69 74 74 65 72 5f 52 65 6e 61 6d 65 3d 27 54 69 72 65 64 20 6f 66 20 73 65 65 69 6e 67 20 74 68 69 73 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 69 44 69 73 61 6d 62 69 67 52 65 6e 61 6d 65 4c 69 6e 6b 22 3e 52 65 6e 61 6d 65 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 2e Data Ascii: ng our <strong>new sign-in experience</strong>",e.WF_STR_SignUpLink_Text='No account? <a href="#" id="signup">Create one!</a>',e.CT_HRD_STR_Splitter_Rename='Tired of seeing this? <a href="#" id="iDisambigRenameLink">Rename your personal Microsoft account.
2024-08-29 19:06:46 UTC	7242	IN	Data Raw: 6f 64 65 49 6e 63 6f 72 72 65 63 74 22 2c 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 3a 22 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 22 2c 4f 61 74 68 43 6f 64 65 4f 6c 64 3a 22 4f 61 74 68 43 6f 64 65 4f 6c 64 22 2c 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 3a 22 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 22 2c 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 3a 22 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 22 2c 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 65 61 63 68 65 64 3a 22 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 Data Ascii: odeIncorrect",OathCodeDuplicate:"OathCodeDuplicate",OathCodeOld:"OathCodeOld",ProofDataNotFound:"ProofDataNotFound",OathCodeCorrectButDeviceNotAllowed:"OathCodeCorrectButDeviceNotAllowed",OathCodeFailedMaxAllowedRetryReached:"OathCodeFailedMaxAllowedRetry

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49759	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:47 UTC	412	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:47 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1871531 Cache-Control: public, max-age=31536000 Content-MD5: uaBUkDWJZJ75uKxjc6vkvw== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 19:06:47 GMT Etag: 0x8DCB563CA8588E7 Last-Modified: Mon, 05 Aug 2024 15:32:18 GMT Server: ECAcc (lhc/7971) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9a732ed0-201e-0054-8041-e9ce30000000 x-ms-version: 2009-09-19 Content-Length: 449540 Connection: close
2024-08-29 19:06:47 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 19:06:47 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-08-29 19:06:47 UTC	16383	IN	Data Raw: 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 Data Ascii: ING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthorize
2024-08-29 19:06:47 UTC	16383	IN	Data Raw: 61 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 74 61 72 67 65 74 3f 65 2e 74 61 72 67 65 74 3a 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3f 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3a 6e 75 6c 6c 3a 6e 75 6c 6c 7d 7d 2c 44 3d 6e 2e 51 75 65 72 79 53 74 72 69 6e 67 3d 7b 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2c 74 3d 6e 75 6c 6c 2c 69 3d 6e 75 6c 6c 3b 69 66 28 65 29 7b 76 61 72 20 61 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 2c 6f 3d 65 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 2d 31 21 3d 3d 6f 26 26 28 2d 31 3d 3d 3d 61 7c 7c 6f 3c 61 29 3f 28 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6f 29 2c 69 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 6f Data Ascii: arget:function(e){return e?e.target?e.target:e.srcElement?e.srcElement:null:null}},D=n.QueryString={parse:function(e){var n=e,t=null,i=null;if(e){var a=e.indexOf("?"),o=e.indexOf("#");-1!==o&&(-1===a\|\|o<a)?(n=e.substring(0,o),i=d.doubleSplit(e.substring(o
2024-08-29 19:06:47 UTC	16383	IN	Data Raw: 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 50 61 73 73 77 6f 72 64 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 69 64 69 6e 67 4d 6f 64 65 3d 69 2e 48 69 64 69 6e 67 4d 6f 64 65 2e 48 69 64 65 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 45 76 65 6e 74 54 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 72 65 74 75 72 6e 7b 65 76 65 6e 74 49 64 3a 65 2c 65 76 65 6e 74 4c 65 76 65 6c 3a 74 7c 7c 69 2e 45 Data Ascii: ltTextBoxPropertyLogOption(e,n)},s.getPasswordTextBoxPropertyLogOption=function(e,n){return(n=n\|\|{}).hidingMode=i.HidingMode.Hide,s.getDefaultTextBoxPropertyLogOption(e,n)},s.getDefaultEventTracingOptions=function(e,n,t){return{eventId:e,eventLevel:t\|\|i.E
2024-08-29 19:06:47 UTC	16383	IN	Data Raw: 28 74 68 69 73 5b 75 2e 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 5d 3d 62 29 2c 76 26 26 28 74 68 69 73 5b 75 2e 43 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 5d 3d 76 29 7d 2c 6e 2e 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 2c 61 2c 63 2c 64 3d 74 68 69 73 2c 6c 3d 70 2e 4e 6f 6e 65 2c 75 3d 22 22 2c 66 3d 22 22 2c 67 3d 22 22 2c 6d 3d 65 2e 64 61 74 61 2c 62 3d 65 2e 6f 6e 53 65 6e 64 2c 76 3d 65 2e 6f 6e 53 65 6e 64 46 61 69 6c 2c 68 3d 65 2e 6f 6e 46 6c 6f 77 45 78 70 69 72 65 64 2c 5f 3d 65 2e 74 69 6d 65 6f 75 74 7c 7c 33 65 34 2c 43 3d 65 2e 73 69 74 65 49 64 2c 53 3d 65 2e 63 6c 69 65 6e 74 49 64 2c 78 3d 65 2e 66 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 77 3d 65 2e 6e 6f 50 61 42 75 62 62 Data Ascii: (this[u.ProofConfirmation]=b),v&&(this[u.CanaryFlowToken]=v)},n.Request=function(e){var n,t,a,c,d=this,l=p.None,u="",f="",g="",m=e.data,b=e.onSend,v=e.onSendFail,h=e.onFlowExpired,_=e.timeout\|\|3e4,C=e.siteId,S=e.clientId,x=e.forwardedClientId,w=e.noPaBubb
2024-08-29 19:06:47 UTC	16383	IN	Data Raw: 72 61 6d 73 7c 7c 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 61 63 65 62 6f 6f 6b 50 61 72 61 6d 73 29 29 29 72 65 74 75 72 6e 20 69 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 6d 2e 52 65 6d 6f 74 65 4e 47 43 3a 63 61 73 65 20 6d 2e 46 65 64 65 72 61 74 69 6f 6e 3a 63 61 73 65 20 6d 2e 41 63 63 65 73 73 50 61 73 73 3a 63 61 73 65 20 6d 2e 4e 6f 50 72 65 66 65 72 72 65 64 43 72 65 64 65 6e 74 69 61 6c 3a 6f 26 26 6f 2e 53 61 6d 6c 52 65 71 75 65 73 74 26 26 6f 2e 52 65 6c 61 79 53 74 61 74 65 3f 28 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 2c 69 2e 69 64 70 52 65 64 69 72 65 63 74 50 6f 73 74 50 61 72 61 6d 73 3d 7b 53 41 4d 4c 52 65 71 Data Ascii: rams\|\|n.Credentials.FacebookParams)))return i;switch(a){case m.RemoteNGC:case m.Federation:case m.AccessPass:case m.NoPreferredCredential:o&&o.SamlRequest&&o.RelayState?(i.idpRedirectUrl=n.Credentials.FederationRedirectUrl,i.idpRedirectPostParams={SAMLReq
2024-08-29 19:06:47 UTC	16383	IN	Data Raw: 65 61 74 65 28 29 2c 6e 2e 6f 6e 52 65 64 69 72 65 63 74 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 52 65 67 69 73 74 65 72 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 55 6e 72 65 67 69 73 74 65 72 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 68 6f 77 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 55 70 64 61 74 65 46 6c 6f 77 54 6f 6b 65 6e 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 63 72 65 64 65 6e 74 69 61 6c 43 6f 75 6e 74 3d 30 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 54 79 70 65 3d 6e 75 6c 6c 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 53 68 6f 77 6e 4f 6e 6c 79 4f 6e 50 69 63 Data Ascii: eate(),n.onRedirect=o.create(),n.onRegisterDialog=o.create(),n.onUnregisterDialog=o.create(),n.onShowDialog=o.create(),n.onSetPendingRequest=o.create(),n.onUpdateFlowToken=o.create(),n.credentialCount=0,n.selectedCredType=null,n.selectedCredShownOnlyOnPic
2024-08-29 19:06:47 UTC	6	IN	Data Raw: 2e 61 75 74 68 65 Data Ascii: .authe
2024-08-29 19:06:47 UTC	16383	IN	Data Raw: 6e 74 69 63 61 74 65 64 53 74 61 74 65 7c 7c 32 3d 3d 3d 65 2e 61 75 74 68 65 6e 74 69 63 61 74 65 64 53 74 61 74 65 2c 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 7c 7c 21 31 2c 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 3a 21 30 2c 69 73 47 69 74 48 75 62 46 65 64 3a 65 2e 69 73 47 69 74 48 75 62 46 65 64 7c 7c 21 31 7d 7d 29 29 7d 2c 70 61 72 73 65 42 73 73 6f 53 65 73 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 2e 6d 61 70 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 73 73 6f 55 6e 69 71 75 65 49 64 3a 65 2e 73 73 6f 55 6e 69 71 75 65 49 64 2c 6e 61 6d 65 3a 65 2e 6e 61 6d 65 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 65 2e 64 69 73 70 6c 61 79 4e 61 Data Ascii: nticatedState\|\|2===e.authenticatedState,isWindowsSso:e.isWindowsSso\|\|!1,isMeControlSession:!0,isGitHubFed:e.isGitHubFed\|\|!1}}))},parseBssoSessions:function(e){return o.map(e,(function(e){return{ssoUniqueId:e.ssoUniqueId,name:e.name,displayName:e.displayNa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49760	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:47 UTC	651	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:47 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13699685 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Thu, 29 Aug 2024 19:06:47 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-08-29 19:06:47 UTC	15682	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-29 19:06:47 UTC	1492	IN	Data Raw: 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""33

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49761	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:47 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:47 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5957857 Cache-Control: public, max-age=31536000 Content-MD5: /tr7rG0APA0Nym9G/DMFwg== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 19:06:47 GMT Etag: 0x8DC90CF0C1378C3 Last-Modified: Thu, 20 Jun 2024 02:16:51 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 281a1f59-901e-00f2-0416-c4a977000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-08-29 19:06:47 UTC	15652	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 19:06:47 UTC	16383	IN	Data Raw: 73 28 6e 29 2c 6f 28 72 29 3f 28 65 3f 74 28 72 2c 6e 29 3a 72 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 2c 72 29 3a 72 7d 7d 28 29 3a 75 6e 64 65 66 69 6e 65 64 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 36 39 29 2c 6f 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 6e 28 65 2c 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 6e 65 77 20 6f 28 22 49 6e 63 6f 72 72 65 63 74 20 69 6e 76 6f 63 61 74 69 6f 6e 22 29 7d 7d 2c 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 6f 2c 69 3d 72 28 35 33 38 29 2c 73 3d 72 28 35 38 38 29 2c 75 3d 69 2e 70 72 6f 63 65 Data Ascii: s(n),o(r)?(e?t(r,n):r.__proto__=n,r):r}}():undefined)},function(t,e,r){"use strict";var n=r(569),o=TypeError;t.exports=function(t,e){if(n(e,t))return t;throw new o("Incorrect invocation")}},,function(t,e,r){"use strict";var n,o,i=r(538),s=r(588),u=i.proce
2024-08-29 19:06:47 UTC	16383	IN	Data Raw: 29 29 72 65 74 75 72 6e 20 65 28 72 2c 6e 29 7d 29 29 3a 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 69 66 28 22 64 65 63 6c 22 3d 3d 3d 72 2e 74 79 70 65 26 26 72 2e 70 72 6f 70 3d 3d 3d 74 29 72 65 74 75 72 6e 20 65 28 72 2c 6e 29 7d 29 29 3a 28 65 3d 74 2c 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 22 64 65 63 6c 22 3d 3d 3d 74 2e 74 79 70 65 29 72 65 74 75 72 6e 20 65 28 74 2c 72 29 7d 29 29 29 7d 7d 2c 7b 6b 65 79 3a 22 77 61 6c 6b 52 75 6c 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 3f 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 3f 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 69 66 28 Data Ascii: ))return e(r,n)})):this.walk((function(r,n){if("decl"===r.type&&r.prop===t)return e(r,n)})):(e=t,this.walk((function(t,r){if("decl"===t.type)return e(t,r)})))}},{key:"walkRules",value:function(t,e){return e?t instanceof RegExp?this.walk((function(r,n){if(
2024-08-29 19:06:47 UTC	16383	IN	Data Raw: 75 66 66 65 72 22 3d 3d 3d 65 2e 74 79 70 65 26 26 69 28 65 2e 64 61 74 61 29 29 72 65 74 75 72 6e 20 68 28 74 2c 65 2e 64 61 74 61 29 7d 76 61 72 20 6e 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 2c 20 42 75 66 66 65 72 2c 20 41 72 72 61 79 42 75 66 66 65 72 2c 20 41 72 72 61 79 2c 20 6f 72 20 61 72 72 61 79 2d 6c 69 6b 65 20 6f 62 6a 65 63 74 2e 22 29 7d 28 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 22 73 69 7a 65 22 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 27 29 Data Ascii: uffer"===e.type&&i(e.data))return h(t,e.data)}var n;throw new TypeError("First argument must be a string, Buffer, ArrayBuffer, Array, or array-like object.")}(t,e)}function f(t){if("number"!=typeof t)throw new TypeError('"size" argument must be a number')
2024-08-29 19:06:47 UTC	16383	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 28 6e 3d 65 2c 65 3d 30 2c 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 6e 3d 72 2c 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6f 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3b 6f 3c 32 35 36 26 26 28 74 3d 6f 29 7d 69 66 28 6e 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6e 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 65 6e 63 6f 64 69 6e 67 Data Ascii: ototype.fill=function(t,e,r,n){if("string"==typeof t){if("string"==typeof e?(n=e,e=0,r=this.length):"string"==typeof r&&(n=r,r=this.length),1===t.length){var o=t.charCodeAt(0);o<256&&(t=o)}if(n!==undefined&&"string"!=typeof n)throw new TypeError("encoding
2024-08-29 19:06:47 UTC	16383	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 21 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 7d 28 29 7d 28 29 3f 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 65 2c 72 7c 7c 5b 5d 2c 66 28 74 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 3a 65 2e 61 70 70 6c 79 28 74 2c 72 29 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 72 65 74 75 72 6e 28 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 Data Ascii: ction(){try{var t=!Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){})))}catch(t){}return function(){return!!t}()}()?Reflect.construct(e,r\|\|[],f(t).constructor):e.apply(t,r))}function f(t){return(f=Object.setPrototypeOf?Object.getPr
2024-08-29 19:06:47 UTC	16383	IN	Data Raw: 6e 7d 28 28 28 6e 3d 72 28 37 32 36 29 29 26 26 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 6e 3a 7b 22 64 65 66 61 75 6c 74 22 3a 6e 7d 29 5b 22 64 65 66 61 75 6c 74 22 5d 29 3b 65 5b 22 64 65 66 61 75 6c 74 22 5d 3d 6f 2c 74 2e 65 78 70 6f 72 74 73 3d 65 5b 22 64 65 66 61 75 6c 74 22 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 28 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 Data Ascii: n}(((n=r(726))&&n.__esModule?n:{"default":n})["default"]);e["default"]=o,t.exports=e["default"]},function(t,e,r){"use strict";function n(t){return(n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){retur
2024-08-29 19:06:48 UTC	16383	IN	Data Raw: 7a 22 2c 74 2e 65 78 70 6f 72 74 73 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 3d 3d 3d 53 74 72 69 6e 67 28 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 39 29 2c 6f 3d 72 28 38 30 37 29 2c 69 3d 72 28 35 35 35 29 2c 73 3d 72 28 35 34 32 29 2c 75 3d 72 28 35 35 39 29 2c 61 3d 72 28 36 33 31 29 3b 65 2e 66 3d 6e 26 26 21 6f 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 73 28 74 29 3b 66 6f 72 28 76 61 72 20 72 2c 6e 3d 75 28 65 29 2c 6f 3d 61 28 65 29 2c 63 3d 6f 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 63 3e 66 3b 29 69 2e 66 28 74 2c 72 3d 6f 5b 66 2b 2b 5d 2c 6e 5b 72 5d 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c Data Ascii: z",t.exports="[object z]"===String(n)},function(t,e,r){"use strict";var n=r(539),o=r(807),i=r(555),s=r(542),u=r(559),a=r(631);e.f=n&&!o?Object.defineProperties:function(t,e){s(t);for(var r,n=u(e),o=a(e),c=o.length,f=0;c>f;)i.f(t,r=o[f++],n[r]);return t}},
2024-08-29 19:06:48 UTC	16383	IN	Data Raw: 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 28 6e 2e 6b 65 79 29 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 6e 28 74 29 7c 7c 21 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 6f 3d 72 2e 63 61 6c 6c 28 74 2c 65 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 6e 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 Data Ascii: e=!0),Object.defineProperty(t,i(n.key),n)}}function i(t){var e=function(t,e){if("object"!=n(t)\|\|!t)return t;var r=t[Symbol.toPrimitive];if(void 0!==r){var o=r.call(t,e\|\|"default");if("object"!=n(o))return o;throw new TypeError("@@toPrimitive must return a
2024-08-29 19:06:48 UTC	16383	IN	Data Raw: 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6c 2e 77 61 72 6e 69 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 79 6e 63 28 29 2e 77 61 72 6e 69 6e 67 73 28 29 7d 2c 6c 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 73 73 7d 2c 6c 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 73 79 6e 63 28 29 2e 74 68 65 6e 28 74 2c 65 29 7d 2c 6c 5b 22 63 61 74 63 68 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 73 79 6e 63 28 29 5b 22 63 61 74 63 68 22 5d 28 74 29 7d 2c 6c 5b 22 66 69 6e 61 6c 6c 79 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: =t.prototype;return l.warnings=function(){return this.sync().warnings()},l.toString=function(){return this.css},l.then=function(t,e){return this.async().then(t,e)},l["catch"]=function(t){return this.async()["catch"](t)},l["finally"]=function(t){return thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49762	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:48 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:48 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13699686 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Thu, 29 Aug 2024 19:06:48 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-08-29 19:06:48 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-29 19:06:48 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49763	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:49 UTC	664	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:49 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13699492 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 19:06:49 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-08-29 19:06:49 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49765	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:49 UTC	665	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:49 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13699532 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 19:06:49 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-08-29 19:06:49 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49764	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:49 UTC	665	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:49 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13613514 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 19:06:49 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-08-29 19:06:49 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49768	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:49 UTC	435	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:49 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5957859 Cache-Control: public, max-age=31536000 Content-MD5: /tr7rG0APA0Nym9G/DMFwg== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 19:06:49 GMT Etag: 0x8DC90CF0C1378C3 Last-Modified: Thu, 20 Jun 2024 02:16:51 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 281a1f59-901e-00f2-0416-c4a977000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-08-29 19:06:49 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 19:06:49 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-08-29 19:06:49 UTC	16383	IN	Data Raw: 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e Data Ascii: =Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(536);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var n
2024-08-29 19:06:49 UTC	16383	IN	Data Raw: 31 7d 29 2c 65 7d 28 72 28 36 38 31 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c 65 Data Ascii: 1}),e}(r(681));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rule
2024-08-29 19:06:49 UTC	16383	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 Data Ascii: "!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary
2024-08-29 19:06:49 UTC	16383	IN	Data Raw: 67 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d Data Ascii: g;function N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-
2024-08-29 19:06:49 UTC	16383	IN	Data Raw: 76 61 72 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 Data Ascii: var r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(
2024-08-29 19:06:49 UTC	16383	IN	Data Raw: 29 7d 72 65 74 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b 22 Data Ascii: )}return new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s["
2024-08-29 19:06:49 UTC	16383	IN	Data Raw: 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 6f 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 29 66 6f 72 28 3b 65 2d 2d 3b 29 74 3d 69 28 74 2c 75 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f Data Ascii: exports=function(t,e){if(a&&"string"==typeof t&&!o.prepareStackTrace)for(;e--;)t=i(t,u,"");return t}},function(t,e,r){"use strict";var n=r(536);t.exports=!n((function(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.pro
2024-08-29 19:06:49 UTC	16383	IN	Data Raw: 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 65 2e 70 6c 75 67 69 6e 7c 7c 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 26 26 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 26 26 28 65 2e 70 6c 75 67 69 6e 3d 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 29 3b 76 61 72 20 72 3d 6e 65 77 20 73 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 70 75 73 68 28 72 29 2c 72 7d 7d 2c 7b 6b 65 79 3a 22 77 61 72 6e 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 66 69 6c 74 65 72 28 28 66 75 Data Ascii: &arguments[1]!==undefined?arguments[1]:{};e.plugin\|\|this.lastPlugin&&this.lastPlugin.postcssPlugin&&(e.plugin=this.lastPlugin.postcssPlugin);var r=new s(t,e);return this.messages.push(r),r}},{key:"warnings",value:function(){return this.messages.filter((fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49769	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:49 UTC	626	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:49 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5957858 Cache-Control: public, max-age=31536000 Content-MD5: FXzSZAYOwKp2jFj6XjvNRQ== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 19:06:49 GMT Etag: 0x8DC90CF0D8CB039 Last-Modified: Thu, 20 Jun 2024 02:16:53 GMT Server: ECAcc (lhc/7968) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 736bdcfa-101e-003a-3f16-c47522000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-08-29 19:06:49 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 19:06:49 UTC	1	IN	Data Raw: 75 Data Ascii: u
2024-08-29 19:06:50 UTC	16383	IN	Data Raw: 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 30 Data Ascii: 200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u20
2024-08-29 19:06:50 UTC	16383	IN	Data Raw: 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 61 Data Ascii: 90f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdca
2024-08-29 19:06:50 UTC	16383	IN	Data Raw: 74 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 33 29 2c 74 2e 43 63 3d 72 28 38 38 34 29 2c 74 2e 43 66 3d 72 28 31 33 38 30 29 2c 74 2e 50 3d 72 28 37 38 33 29 2c 74 2e 5a 3d 72 28 38 38 35 29 7d 2c 31 33 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c Data Ascii: trict";t.Any=r(883),t.Cc=r(884),t.Cf=r(1380),t.P=r(783),t.Z=r(885)},1380:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\
2024-08-29 19:06:50 UTC	3	IN	Data Raw: 4d 61 72 Data Ascii: Mar
2024-08-29 19:06:50 UTC	16383	IN	Data Raw: 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 6b 75 70 Data Ascii: ks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.markup
2024-08-29 19:06:50 UTC	16383	IN	Data Raw: 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 2c 2d Data Ascii: r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a",-
2024-08-29 19:06:50 UTC	15467	IN	Data Raw: 6c 61 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 69 Data Ascii: lance_pairs","emphasis","text_collapse"]}}}},1427:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49771	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:50 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:50 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13699493 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 19:06:50 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-08-29 19:06:50 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49772	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:50 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:50 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13699533 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 19:06:50 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-08-29 19:06:50 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49773	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:50 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:50 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13613515 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Thu, 29 Aug 2024 19:06:50 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-08-29 19:06:50 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49775	152.199.21.175	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:06:51 UTC	441	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:06:51 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5957860 Cache-Control: public, max-age=31536000 Content-MD5: FXzSZAYOwKp2jFj6XjvNRQ== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 19:06:51 GMT Etag: 0x8DC90CF0D8CB039 Last-Modified: Thu, 20 Jun 2024 02:16:53 GMT Server: ECAcc (lhc/7968) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 736bdcfa-101e-003a-3f16-c47522000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-08-29 19:06:51 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 19:06:51 UTC	16383	IN	Data Raw: 75 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 Data Ascii: u200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u2
2024-08-29 19:06:51 UTC	16383	IN	Data Raw: 32 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 Data Ascii: 290f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdc
2024-08-29 19:06:51 UTC	3	IN	Data Raw: 73 74 72 Data Ascii: str
2024-08-29 19:06:51 UTC	16383	IN	Data Raw: 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 33 29 2c 74 2e 43 63 3d 72 28 38 38 34 29 2c 74 2e 43 66 3d 72 28 31 33 38 30 29 2c 74 2e 50 3d 72 28 37 38 33 29 2c 74 2e 5a 3d 72 28 38 38 35 29 7d 2c 31 33 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c 75 44 Data Ascii: ict";t.Any=r(883),t.Cc=r(884),t.Cf=r(1380),t.P=r(783),t.Z=r(885)},1380:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\uD
2024-08-29 19:06:51 UTC	16383	IN	Data Raw: 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 6b 75 Data Ascii: rks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.marku
2024-08-29 19:06:51 UTC	16383	IN	Data Raw: 6e 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 2c Data Ascii: n r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a",
2024-08-29 19:06:51 UTC	3	IN	Data Raw: 61 6c 61 Data Ascii: ala
2024-08-29 19:06:51 UTC	15465	IN	Data Raw: 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 69 6e 73 Data Ascii: nce_pairs","emphasis","text_collapse"]}}}},1427:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="ins

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49784	13.107.246.42	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:01 UTC	603	OUT	GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:01 UTC	813	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:07:01 GMT Content-Type: application/x-javascript Content-Length: 231091 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 20 Aug 2024 23:08:41 GMT ETag: 0x8DCC16D08882164 x-ms-request-id: 49558b19-401e-0034-3748-f9cf33000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T190701Z-16579567576rt7gkm43y59pk3800000002700000000091fc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 19:07:01 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 69 77 db 38 d2 28 fc fd fd 15 b6 6e 8e 87 1c c3 8a 64 67 a5 c2 d6 4d 1c bb 93 ee 6c 1d 27 9d 4e bb 7d 7d 68 09 92 d8 91 48 85 a4 ec 38 b6 fe fb ad 05 2b 45 39 e9 99 67 9e 67 ee 7b 26 e7 c4 02 41 10 4b a1 00 54 15 6a b9 fd f7 cd 8d c3 bc d8 98 a6 03 99 95 72 23 cd 46 79 31 4b aa 34 cf 36 e6 53 99 40 56 29 e1 7f 3a ce 16 f3 9d 51 72 56 a4 83 53 99 b5 ff 2c db 2f 9e ef 1f bc 3a 3a 68 57 5f aa 8d bf df fe ff 36 47 8b 6c 80 df 05 e1 d5 79 52 6c 48 51 89 4c 14 22 17 69 7c f5 f0 6e 77 ef 6e 64 4a d0 bb f0 aa b5 c0 ea 2b a8 b2 6a f5 f0 9b 22 ce 82 bd 5d 28 1c 8a 3c be 1a 4c d2 e9 70 3f cf 2a f9 a5 7a 77 39 97 65 b4 d9 11 03 fb 5c 7b a4 d7 43 39 4a 16 d3 ea 4d 91 cf f9 39 2d e7 d3 e4 f2 55 32 a3 e2 63 59 3d ad 95 a0 ac 22 3d 97 Data Ascii: iw8(ndgMl'N}}hH8+E9gg{&AKTjr#Fy1K46S@V):QrVS,/::hW_6GlyRlHQL"i\|nwndJ+j"](<Lp?*zw9e\{C9JM9-U2cY="=
2024-08-29 19:07:01 UTC	16384	IN	Data Raw: ed c2 35 95 d0 b1 da e4 23 ba 57 fa c1 68 e4 5e e1 77 11 50 aa 7c ce 55 3b 72 d9 93 71 b6 94 91 52 0c e1 36 a0 7e a8 ec 88 15 f8 d0 27 81 97 61 a2 3b 61 be 55 66 82 47 65 1d 4a 3d 2f dc f5 34 c9 5c cb a3 cd 60 13 63 5b d3 15 84 e4 c3 8b 72 f6 36 5d ec 21 25 63 b6 16 a9 2c 4a 71 4d 4e b3 61 d4 52 24 65 49 66 40 7d 43 62 96 a8 cb 87 46 bb c8 ac 43 79 8d 84 6f 14 e3 be b5 b5 b9 19 74 ef 6d ad 2d 80 97 90 2e 8f 77 96 05 f6 90 94 2a 1a 81 a8 62 40 46 40 6c 38 34 59 19 0e 5d 00 b5 71 8b 7a 4e 71 e6 15 0e 01 64 11 c1 94 0f 97 d5 ad 43 b9 5b fe c0 21 0e a6 f9 80 ed 12 d0 8f 9e 42 bb 02 f5 84 81 ad 60 cd 20 66 ad a9 f1 40 c6 b5 ef 43 13 23 c1 10 c6 8e c2 fa a5 ab 33 8d 58 aa fd 95 b8 e9 5a d4 55 5d 0b ba 2d 31 2e 4d e8 89 dc 65 b1 52 39 bb 15 28 65 52 0c 26 5e 56 Data Ascii: 5#Wh^wP\|U;rqR6~'a;aUfGeJ=/4\`c[r6]!%c,JqMNaR$eIf@}CbFCyotm-.w*b@F@l84Y]qzNqdC[!B` f@C#3XZU]-1.MeR9(eR&^V
2024-08-29 19:07:01 UTC	16384	IN	Data Raw: de 42 bc ab d2 e8 e2 52 a9 e5 42 17 03 b9 4c 28 dd c6 f3 db 37 1a e7 36 0e e6 18 4f e4 2a 17 01 15 d4 e3 da bb 27 57 89 53 d7 ce 39 25 a9 b3 35 f3 d0 d3 45 e6 63 f4 d8 87 75 6d 29 72 e0 75 a5 71 34 f7 68 16 6e 97 bd de c6 fc 4e da c7 3b 80 5e 27 a4 05 7a 56 33 54 7a 01 93 08 03 90 a3 e6 35 ed 80 41 cc 61 5c b4 16 40 02 0c da ab 41 a2 14 be 0c d9 a5 4e 5b 8a 3f db 28 1b a8 4d b7 8e 49 66 c0 cb bb 42 3e 7f 05 1c 06 7b 3b 96 7f 23 f8 cf 78 b2 27 b9 1b d9 cc 74 56 48 b3 f6 e4 b3 76 b3 30 84 8f 9c 31 2e a9 c6 a0 65 10 bb 4e 65 28 3b fb 89 70 c9 28 23 af 0f 95 63 1c b5 d4 85 31 aa eb 1b 20 92 75 99 03 03 42 5c 0f 50 75 ce 38 87 65 00 53 e2 0a cb 79 e3 e4 c7 61 26 a9 c4 3c 84 56 3e d9 dc 8e 2c c0 f8 6c 3b f3 ba 53 d9 cc aa c0 89 df 57 59 38 f9 b3 40 bd f6 27 5c Data Ascii: BRBL(76O*'WS9%5Ecum)ruq4hnN;^'zV3Tz5Aa\@AN[?(MIfB>{;#x'tVHv01.eNe(;p(#c1 uB\Pu8eSya&<V>,l;SWY8@'\
2024-08-29 19:07:01 UTC	16384	IN	Data Raw: 86 38 9d 2c 93 b7 34 01 5a 24 99 9e 1e 3a 83 98 db 86 e3 e1 be 26 fd 7e ed 02 ef a3 44 33 4c e6 e3 e6 1e a6 bb 19 79 ed 4d a7 f6 1b d6 5d ed 15 33 f9 e6 6f e9 8c a9 eb 75 5b da 84 75 58 a3 3c 4b e4 23 8b 0e 27 e5 1c d3 18 c0 eb e8 59 2b 47 d0 fb 1b 03 c6 d8 14 96 c5 7c f1 5b 17 63 5f b9 f3 05 ef bc 16 a2 fd 9d 2f 58 e4 69 ef a2 3e 92 95 bb 51 fd be 19 7c 65 0f 53 79 6d a9 42 e8 48 72 7a 74 dd 93 be 47 4a cc a3 df 21 96 14 d4 5f c5 fa e3 20 02 98 ee 88 5e 19 cf 2e 74 a8 cf 2c f8 8c 6e 34 b7 95 28 cb 56 42 87 a2 11 d9 38 58 85 ae 98 2f b3 3e 83 e2 81 f4 cc 65 5d 1c 26 65 15 ea 87 b7 dc 77 43 18 d6 9c a9 89 3f 71 ae 48 66 86 43 ef 46 96 08 2e 5b 04 1a f1 c4 1a d5 a6 2c 69 d9 b3 d3 e2 a5 ee 90 0f 67 64 09 e4 ca d8 dc 48 14 ca ed 40 08 3d a7 3c 71 59 7d ee 20 Data Ascii: 8,4Z$:&~D3LyM]3ou[uX<K#'Y+G\|[c_/Xi>Q\|eSymBHrztGJ!_ ^.t,n4(VB8X/>e]&ewC?qHfCF.[,igdH@=<qY}
2024-08-29 19:07:01 UTC	16384	IN	Data Raw: 8e db 5b 59 19 a3 cf ef 47 36 67 de 44 61 44 c9 8c 84 33 8c c1 50 fe 0e b7 46 37 3f 85 9b cb 4f 9e 6c 75 90 18 d3 25 76 3b 9e 87 ac 06 24 e8 bc ca b8 5e 50 7d 48 01 cb ab 44 4e 63 00 06 da 1d ca 8e 0f c6 af b1 1f 4d f8 e0 45 ae 0e 08 e0 32 15 60 80 4c 84 d8 d6 ef 29 b8 84 31 3b d0 40 4b 70 61 65 ef 7a 75 f6 a0 3a d9 53 98 a4 e3 52 dc 39 54 38 85 a3 8c ce c3 0d e6 86 ce b2 ad 62 72 40 4b 34 52 7b 4c 0c 8d 5e b7 8c ee bd 81 fb 55 40 62 2f 57 57 a8 d6 9f 89 ba 75 63 79 a3 a0 20 07 72 78 df 25 17 cf eb e9 a6 ed 9f 08 e0 d3 5d aa e9 99 cf bb 05 4a 06 ef 91 7e 31 18 76 ed 04 24 23 80 be 1a 59 d6 53 dc 44 de 3f 98 73 59 a7 d7 a6 2d 02 58 c2 c4 e0 3a 8e 7d 06 6b a3 9e 7b a3 c0 37 ee 9f 16 b2 33 39 3b a5 c5 1c e1 c7 55 6a 95 ee c0 5f c4 69 52 b3 db d7 a6 69 e2 b2 Data Ascii: [YG6gDaD3PF7?Olu%v;$^P}HDNcME2`L)1;@Kpaezu:SR9T8br@K4R{L^U@b/WWucy rx%]J~1v$#YSD?sY-X:}k{739;Uj_iRi
2024-08-29 19:07:01 UTC	16384	IN	Data Raw: 94 a6 5c 97 d7 f9 dc f1 3d c0 96 27 df 6d 47 67 bd ee 18 4f ce 73 be 55 b4 fa 56 9a b0 8b c2 3a d0 94 b5 1d 98 a9 38 64 80 b8 ef 08 60 6f 04 0c 6b 34 fd 68 6b fa 1d fe 29 01 66 fe 9e 7f 3c 05 c9 5d df 57 ae 94 71 4b c8 29 43 14 be 1b db 2f dc 66 74 f4 59 39 5e 9e 90 09 d7 21 0a 55 85 25 dd 62 43 be cd 7a cc ee 02 d2 09 a2 ea 3e e6 1d d2 c9 3c 9f 3d 99 1c 66 47 93 e5 54 12 c4 98 de 52 e8 34 db 95 19 98 e1 0b b5 7d 20 49 5c a7 78 c6 94 09 45 db 21 cd da 0e eb 11 6c cc 5c 95 4d 35 3e 67 2c 66 38 7b b4 07 83 22 20 71 86 84 51 8e f2 83 f8 72 47 fe f2 3e 57 03 af 14 f7 23 99 34 c7 dc 33 18 93 05 26 2c dc b7 73 16 21 83 4d 1e bb 1a b9 86 bb eb 1f 72 f6 80 51 a6 5f 33 c4 f1 b4 5e e0 02 68 69 0f 56 1b ab 7c 40 f5 b5 b2 ec 34 19 d4 de 52 ea 1d 2c d8 57 86 83 fd 05 Data Ascii: \='mGgOsUV:8d`ok4hk)f<]WqK)C/ftY9^!U%bCz><=fGTR4} I\xE!l\M5>g,f8{" qQrG>W#43&,s!MrQ_3^hiV\|@4R,W
2024-08-29 19:07:01 UTC	16384	IN	Data Raw: b3 f5 73 1d bc 55 26 b2 6f d1 f1 78 2d 7f d3 b9 0f de c8 ce 66 20 fc 31 a5 b7 f6 20 c0 6a 83 49 18 ad 06 b3 2c a1 0f 17 b3 e2 8c 95 5d 6c d3 ca 7b d0 c7 8a 79 af 14 92 39 73 c0 4c 14 65 eb e2 a1 5b e7 2e a2 39 50 99 63 7a b8 6e a8 29 ea 4b 28 48 8d e3 f9 e3 5c 3c dd 2c 81 95 37 d1 a5 7d 63 f8 b7 4c 6e e5 9a 9e 3f 04 95 a9 f1 98 98 cf 6e 6d 1b 40 19 7c e6 5b 5c 0d 14 2b 50 bd bf 57 9a ea 37 f9 37 ae 5f 1d ac f6 50 9a c1 7c 70 69 ba b6 86 59 dd 3b 18 64 57 3d fd 8d b8 e7 b9 05 71 2c ff 0b 51 20 73 f0 df bf 6f 0e fe fa db 70 f0 df 77 e2 e0 bf 5d 32 07 ff fd 8a 38 f8 6f 57 c0 c1 ff e0 db 43 1c c9 af 19 61 cb c3 9b 36 8f 30 e9 70 ce 65 a6 39 71 ee fe 65 87 ee fc 68 1d 16 19 ff 69 3e 9e d9 c9 f0 53 97 b6 ab 17 8e d6 c8 84 eb 59 ad a7 e2 0a 25 b3 d4 9b c8 ce 5d Data Ascii: sU&ox-f 1 jI,]l{y9sLe[.9Pczn)K(H\<,7}cLn?nm@\|[\+PW77_P\|piY;dW=q,Q sopw]28oWCa60pe9qehi>SY%]
2024-08-29 19:07:01 UTC	16384	IN	Data Raw: 47 53 7e e2 2f b3 d0 20 2e b1 88 e0 40 d4 68 20 c5 9b d8 23 be 18 04 c7 8b 83 82 7d 38 d8 81 c1 30 89 3c 41 72 96 f6 f1 9c d0 4f 51 b7 d0 ca 16 65 49 45 2b 10 28 98 02 a1 c2 78 89 91 84 8c 80 2e 56 9c f6 2d d4 9d d2 87 2f a8 fc 15 05 61 19 98 2c 5b 19 b3 50 76 1d 4d b8 91 25 b5 95 a5 68 5c d3 ae e0 86 fb fe fe 4e 5c 5c 37 ae ae 27 ca 45 29 d1 1d 9b 9f d7 8b d3 d4 45 26 59 9d 12 a1 29 83 fb 47 6a e7 f4 0b 81 fd 55 36 27 76 81 0a 84 13 f8 0b d4 49 23 7a 34 30 67 5b 94 a7 a1 3d ba 68 e6 95 b2 10 c8 0a 87 c1 08 ba a1 da 10 85 5d 80 d9 ad c1 1c e6 18 86 f0 d7 98 a8 ef f0 84 11 69 af c2 36 40 33 66 6c 7c 44 1b 1f 61 e3 a3 6b 45 db c0 b9 68 16 d8 db 94 cc db 81 c6 bc 01 6f c2 1b 14 93 0d 78 b6 36 00 96 12 e7 17 01 fa 58 38 e9 00 7a fd 8a 86 f8 c3 ab 18 35 fd e2 Data Ascii: GS~/ .@h #}80<ArOQeIE+(x.V-/a,[PvM%h\N\\7'E)E&Y)GjU6'vI#z40g[=h]i6@3fl\|DakEhox6X8z5
2024-08-29 19:07:01 UTC	16384	IN	Data Raw: 1a ae 62 48 e3 21 2c 9e c5 84 c1 ab 63 02 5c 4e ab de 9b 37 d9 d0 48 31 6a e1 5d 11 bb 90 5b 21 3e 9a bd 8e 6f 01 fb d0 b3 80 31 dd e3 da e5 05 e2 e5 de 6f 92 d4 bb 0f 50 0e 5f ba 49 e0 1d b9 b7 c1 08 f5 8c 60 b0 87 3e 86 5b 90 cd d9 68 ef 39 70 28 64 f9 18 46 1d b6 a6 6e 36 a6 8a 33 f8 48 7d 37 19 8c 61 bc 92 57 a9 7f 81 0a c6 68 ed 3c 75 e0 37 0c 30 05 02 e4 b5 f5 36 60 e9 15 a0 22 57 a0 f7 97 70 81 ad 07 d9 16 50 28 bc 25 7b c6 b0 23 1b a5 f7 56 aa 0d 03 70 19 10 31 a6 a5 28 ad 04 61 30 b1 c8 01 fc 94 bb 80 aa f2 7c 17 42 27 32 ad f9 80 0a 8b 2d 4d 9d 3b f4 98 3f 73 ba f8 67 5a 5e 94 fc f9 ad c6 17 57 b0 be ba f0 83 6e 8c c9 d5 e1 96 85 5e 02 30 04 67 96 c5 11 70 7a 8d 46 fd 3a f5 c3 a1 50 cd ae 42 bf ad 2d 7a 27 cb dc 1f fd 7b 54 31 71 c3 4c fc 1a 64 Data Ascii: bH!,c\N7H1j][!>o1oP_I`>[h9p(dFn63H}7aWh<u706`"WpP(%{#Vp1(a0\|B'2-M;?sgZ^Wn^0gpzF:PB-z'{T1qLd
2024-08-29 19:07:01 UTC	16384	IN	Data Raw: 0e 33 0c 72 12 a4 78 77 4b 5b 20 9a f4 e9 3a 6c be ba f8 88 e1 7b a7 d1 09 3f 14 30 fb 13 f4 7f a4 1d 8e 33 51 42 0d 0d cf 29 8e 0d 96 59 82 19 b9 cf 13 7c ad a5 de 2b b5 e6 30 b6 bb 29 29 90 a8 f9 4b 58 24 4f d7 28 8e 47 a1 bf 7c 28 df 53 fe fb 0d a4 54 67 a3 61 40 4b b3 fe 8a 61 04 d9 cb 59 ff 3d 87 51 ac b3 c9 30 10 dc 42 7e 4e c2 e4 18 ec 14 ae 7b 0d 8f 17 ec 35 50 45 e2 0c 6a c0 ae ce e8 0b af cd a4 0f a4 35 9d bb bc 3e dd 9f 80 0f f1 5e 55 e1 94 ef 91 3c 8b 82 c0 ae d0 6b f9 61 35 50 cf 44 75 11 4c 96 e7 b3 00 da 2f 73 2a 99 d5 6e fd 24 18 be 0f 28 a0 c6 cf 81 a9 18 24 ee 30 bb f0 27 71 86 12 40 f8 ce 68 ab 00 ac 77 85 ef 57 e8 ca bd f1 a9 6d d7 43 a5 34 7c 79 06 aa 09 2a 13 d8 46 ef c7 7c 42 1c 05 26 81 1f 79 a9 8e 15 2b 03 d0 91 2b a7 e0 61 48 91 Data Ascii: 3rxwK[ :l{?03QB)Y\|+0))KX$O(G\|(STga@KaY=Q0B~N{5PEj5>^U<ka5PDuL/sn$($0'q@hwWmC4\|yF\|B&y++aH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49786	13.107.246.42	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:02 UTC	606	OUT	GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:02 UTC	812	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:07:02 GMT Content-Type: application/x-javascript Content-Length: 32811 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 09 Aug 2024 21:16:16 GMT ETag: 0x8DCB8B881B52A8D x-ms-request-id: 3833c618-e01e-002d-6c01-f84f88000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T190702Z-16579567576pgh4h94c7qn0kuc00000002ag000000008xya x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 19:07:02 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 6b 57 db 48 b3 3f fa fe 7c 0a 5b 67 0e 5b 1a 1a c7 86 24 93 d8 51 bc 12 42 26 e4 06 13 c8 65 86 61 b3 84 dd 06 0d 46 f2 48 32 84 60 7f f7 53 bf ea 8b 5a b2 48 f2 ac ff 3e e7 c5 9e 35 c1 ea 8b 5a dd d5 d5 d5 55 d5 55 d5 f7 7e 6d b7 5e a6 59 6b 1a 8f 64 92 cb 56 9c 4c d2 ec 32 2a e2 34 69 cd a6 32 a2 ac 5c ca 56 9a c8 71 be 11 25 d1 f4 a6 88 47 f9 c6 3f f9 c9 a3 51 b7 17 3d 18 75 1f 8f 27 f7 b7 26 e3 47 e3 ad cd ad ce 3f 79 e7 ed ee f6 ce fb 83 9d 4e f1 b5 68 fd 7a ef ff f2 e6 68 a2 c8 e2 51 e1 0d fc 5c 4e 27 9d 6b 79 3a 8b 46 17 db e7 f3 e4 e2 e4 32 8f c7 32 29 e2 e2 e6 24 8f f3 39 a5 a3 f0 a7 6a 2d 16 47 c7 41 67 36 cf cf fd a3 a3 fb bf f5 8e c5 6d 6f 73 f3 b7 47 fd c9 3c 19 a1 ff 7e 22 a4 28 82 db a2 93 f9 32 10 45 67 Data Ascii: kWH?\|[g[$QB&eaFH2`SZH>5ZUU~m^YkdVL2*4i2\Vq%G?Q=u'&G?yNhzhQ\N'ky:F22)$9j-GAg6mosG<~"(2Eg
2024-08-29 19:07:02 UTC	16384	IN	Data Raw: cf ff a0 97 d4 c3 ff 5f fb 97 38 c7 e0 1a bc c6 7d 7c b5 77 72 dd d3 bd 33 7d 33 7b d2 f0 af f8 08 27 9e c7 f6 a1 8f bf 95 e6 a9 63 ae bb 8a 8d 23 42 03 78 ba d1 1b d2 6f df c9 3d d1 b9 27 9e 3a 29 60 36 23 0d 6b 5c 14 6d 03 e9 6c 3e 25 02 be 37 83 d9 2d 11 cd 83 9b 9c e4 87 dd 64 92 1a 38 f3 86 57 84 26 9c 3e 73 a0 36 2a 0a 4c dd 9c 84 e7 c1 fc b4 cc 41 c0 d2 4a 15 95 a1 ae cf c8 0c f7 e3 f6 aa 7a a9 9a 4c dd 4b d5 cc 2c c2 19 95 27 ad c3 0c ac 02 34 25 6c a8 8d a2 93 aa bb 9b 3b 79 79 35 89 06 0d e5 55 ea b9 33 9a 55 79 2d 12 23 95 ab 71 4a 72 de 15 62 ed a5 b4 e9 a6 10 8e 13 de ea d5 2f 9a 4f 55 8c 92 b8 43 b8 55 e0 0e 4d 8e 1b ab de 76 32 49 62 8c 88 30 da ab e9 9c fb e8 ca b3 7b 75 5a 4d fc 90 b2 ac 4d 7f cc 9d 74 ef e0 4c b4 0d 5d c7 5c 4f af 4f 71 Data Ascii: _8}\|wr3}3{'c#Bxo=':)`6#k\ml>%7-d8W&>s6*LAJzLK,'4%l;yy5U3Uy-#qJrb/OUCUMv2Ib0{uZMMtL]\OOq
2024-08-29 19:07:02 UTC	855	IN	Data Raw: a1 00 34 b8 17 af d3 b1 2e a6 35 fe 2a df b3 9b e8 24 4d 77 d3 e4 4a 76 f8 a6 d0 09 3d 82 36 07 40 c4 5e 1e 85 09 c2 7b be 29 51 5e f1 01 6b cf 55 6d 0c 88 6d a5 49 af aa 3b 83 02 35 da 35 fd d2 55 df 5c 26 38 98 04 e2 b2 e8 04 50 f6 01 2c a1 5c 6d ea 3b c5 95 df e2 7c 04 b4 35 27 15 5a 6d 39 fb 6e e5 10 56 53 5b 2d ee d0 86 d6 98 e0 b5 63 78 83 0d 68 69 4e b3 b1 99 8d 0d 4b 9c f3 8b 46 42 72 d5 3a 30 f0 75 d0 4c 21 a1 55 5a 9f 9d a1 19 67 cd 3a ad 9c 93 e4 b5 75 83 1c 10 ef 06 47 92 af 7d 0d af 14 7e dd 49 2e d3 83 e4 94 7e c5 30 0e 2d 09 27 d8 35 c7 46 be a6 b5 b0 7d 34 ac 3a 5a 86 e3 24 9e 4c e0 de 0e b2 78 02 84 48 38 c4 a9 cc 32 40 a0 f6 5c e7 45 44 e8 56 5a 7c 35 22 e1 68 23 46 af 6b be 7c 7e c3 b7 ba 6f b1 cf 32 05 52 f6 1b cd 02 f6 c0 3a 6e 10 f5 Data Ascii: 4.5*$MwJv=6@^{)Q^kUmmI;55U\&8P,\m;\|5'Zm9nVS[-cxhiNKFBr:0uL!UZg:uG}~I.~0-'5F}4:Z$LxH82@\EDVZ\|5"h#Fk\|~o2R:n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49789	13.107.246.42	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:02 UTC	633	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:02 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:07:02 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: da7ef925-b01e-001c-2907-fa9136000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T190702Z-16579567576ztstdfgdnkw0mpw00000002eg00000000ez0s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 19:07:02 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49788	13.107.246.42	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:02 UTC	620	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:02 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:07:02 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: ad3701b2-301e-0073-6702-faa468000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T190702Z-16579567576phhfj0h0z9mnmag000000023g00000000qeqx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 19:07:02 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49785	13.107.246.45	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:02 UTC	398	OUT	GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:02 UTC	813	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:07:02 GMT Content-Type: application/x-javascript Content-Length: 231091 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 20 Aug 2024 23:08:41 GMT ETag: 0x8DCC16D08882164 x-ms-request-id: 49558b19-401e-0034-3748-f9cf33000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T190702Z-16579567576phhfj0h0z9mnmag000000021000000000zcpx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 19:07:02 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 69 77 db 38 d2 28 fc fd fd 15 b6 6e 8e 87 1c c3 8a 64 67 a5 c2 d6 4d 1c bb 93 ee 6c 1d 27 9d 4e bb 7d 7d 68 09 92 d8 91 48 85 a4 ec 38 b6 fe fb ad 05 2b 45 39 e9 99 67 9e 67 ee 7b 26 e7 c4 02 41 10 4b a1 00 54 15 6a b9 fd f7 cd 8d c3 bc d8 98 a6 03 99 95 72 23 cd 46 79 31 4b aa 34 cf 36 e6 53 99 40 56 29 e1 7f 3a ce 16 f3 9d 51 72 56 a4 83 53 99 b5 ff 2c db 2f 9e ef 1f bc 3a 3a 68 57 5f aa 8d bf df fe ff 36 47 8b 6c 80 df 05 e1 d5 79 52 6c 48 51 89 4c 14 22 17 69 7c f5 f0 6e 77 ef 6e 64 4a d0 bb f0 aa b5 c0 ea 2b a8 b2 6a f5 f0 9b 22 ce 82 bd 5d 28 1c 8a 3c be 1a 4c d2 e9 70 3f cf 2a f9 a5 7a 77 39 97 65 b4 d9 11 03 fb 5c 7b a4 d7 43 39 4a 16 d3 ea 4d 91 cf f9 39 2d e7 d3 e4 f2 55 32 a3 e2 63 59 3d ad 95 a0 ac 22 3d 97 Data Ascii: iw8(ndgMl'N}}hH8+E9gg{&AKTjr#Fy1K46S@V):QrVS,/::hW_6GlyRlHQL"i\|nwndJ+j"](<Lp?*zw9e\{C9JM9-U2cY="=
2024-08-29 19:07:02 UTC	16384	IN	Data Raw: ed c2 35 95 d0 b1 da e4 23 ba 57 fa c1 68 e4 5e e1 77 11 50 aa 7c ce 55 3b 72 d9 93 71 b6 94 91 52 0c e1 36 a0 7e a8 ec 88 15 f8 d0 27 81 97 61 a2 3b 61 be 55 66 82 47 65 1d 4a 3d 2f dc f5 34 c9 5c cb a3 cd 60 13 63 5b d3 15 84 e4 c3 8b 72 f6 36 5d ec 21 25 63 b6 16 a9 2c 4a 71 4d 4e b3 61 d4 52 24 65 49 66 40 7d 43 62 96 a8 cb 87 46 bb c8 ac 43 79 8d 84 6f 14 e3 be b5 b5 b9 19 74 ef 6d ad 2d 80 97 90 2e 8f 77 96 05 f6 90 94 2a 1a 81 a8 62 40 46 40 6c 38 34 59 19 0e 5d 00 b5 71 8b 7a 4e 71 e6 15 0e 01 64 11 c1 94 0f 97 d5 ad 43 b9 5b fe c0 21 0e a6 f9 80 ed 12 d0 8f 9e 42 bb 02 f5 84 81 ad 60 cd 20 66 ad a9 f1 40 c6 b5 ef 43 13 23 c1 10 c6 8e c2 fa a5 ab 33 8d 58 aa fd 95 b8 e9 5a d4 55 5d 0b ba 2d 31 2e 4d e8 89 dc 65 b1 52 39 bb 15 28 65 52 0c 26 5e 56 Data Ascii: 5#Wh^wP\|U;rqR6~'a;aUfGeJ=/4\`c[r6]!%c,JqMNaR$eIf@}CbFCyotm-.w*b@F@l84Y]qzNqdC[!B` f@C#3XZU]-1.MeR9(eR&^V
2024-08-29 19:07:02 UTC	16384	IN	Data Raw: de 42 bc ab d2 e8 e2 52 a9 e5 42 17 03 b9 4c 28 dd c6 f3 db 37 1a e7 36 0e e6 18 4f e4 2a 17 01 15 d4 e3 da bb 27 57 89 53 d7 ce 39 25 a9 b3 35 f3 d0 d3 45 e6 63 f4 d8 87 75 6d 29 72 e0 75 a5 71 34 f7 68 16 6e 97 bd de c6 fc 4e da c7 3b 80 5e 27 a4 05 7a 56 33 54 7a 01 93 08 03 90 a3 e6 35 ed 80 41 cc 61 5c b4 16 40 02 0c da ab 41 a2 14 be 0c d9 a5 4e 5b 8a 3f db 28 1b a8 4d b7 8e 49 66 c0 cb bb 42 3e 7f 05 1c 06 7b 3b 96 7f 23 f8 cf 78 b2 27 b9 1b d9 cc 74 56 48 b3 f6 e4 b3 76 b3 30 84 8f 9c 31 2e a9 c6 a0 65 10 bb 4e 65 28 3b fb 89 70 c9 28 23 af 0f 95 63 1c b5 d4 85 31 aa eb 1b 20 92 75 99 03 03 42 5c 0f 50 75 ce 38 87 65 00 53 e2 0a cb 79 e3 e4 c7 61 26 a9 c4 3c 84 56 3e d9 dc 8e 2c c0 f8 6c 3b f3 ba 53 d9 cc aa c0 89 df 57 59 38 f9 b3 40 bd f6 27 5c Data Ascii: BRBL(76O*'WS9%5Ecum)ruq4hnN;^'zV3Tz5Aa\@AN[?(MIfB>{;#x'tVHv01.eNe(;p(#c1 uB\Pu8eSya&<V>,l;SWY8@'\
2024-08-29 19:07:02 UTC	16384	IN	Data Raw: 86 38 9d 2c 93 b7 34 01 5a 24 99 9e 1e 3a 83 98 db 86 e3 e1 be 26 fd 7e ed 02 ef a3 44 33 4c e6 e3 e6 1e a6 bb 19 79 ed 4d a7 f6 1b d6 5d ed 15 33 f9 e6 6f e9 8c a9 eb 75 5b da 84 75 58 a3 3c 4b e4 23 8b 0e 27 e5 1c d3 18 c0 eb e8 59 2b 47 d0 fb 1b 03 c6 d8 14 96 c5 7c f1 5b 17 63 5f b9 f3 05 ef bc 16 a2 fd 9d 2f 58 e4 69 ef a2 3e 92 95 bb 51 fd be 19 7c 65 0f 53 79 6d a9 42 e8 48 72 7a 74 dd 93 be 47 4a cc a3 df 21 96 14 d4 5f c5 fa e3 20 02 98 ee 88 5e 19 cf 2e 74 a8 cf 2c f8 8c 6e 34 b7 95 28 cb 56 42 87 a2 11 d9 38 58 85 ae 98 2f b3 3e 83 e2 81 f4 cc 65 5d 1c 26 65 15 ea 87 b7 dc 77 43 18 d6 9c a9 89 3f 71 ae 48 66 86 43 ef 46 96 08 2e 5b 04 1a f1 c4 1a d5 a6 2c 69 d9 b3 d3 e2 a5 ee 90 0f 67 64 09 e4 ca d8 dc 48 14 ca ed 40 08 3d a7 3c 71 59 7d ee 20 Data Ascii: 8,4Z$:&~D3LyM]3ou[uX<K#'Y+G\|[c_/Xi>Q\|eSymBHrztGJ!_ ^.t,n4(VB8X/>e]&ewC?qHfCF.[,igdH@=<qY}
2024-08-29 19:07:02 UTC	16384	IN	Data Raw: 8e db 5b 59 19 a3 cf ef 47 36 67 de 44 61 44 c9 8c 84 33 8c c1 50 fe 0e b7 46 37 3f 85 9b cb 4f 9e 6c 75 90 18 d3 25 76 3b 9e 87 ac 06 24 e8 bc ca b8 5e 50 7d 48 01 cb ab 44 4e 63 00 06 da 1d ca 8e 0f c6 af b1 1f 4d f8 e0 45 ae 0e 08 e0 32 15 60 80 4c 84 d8 d6 ef 29 b8 84 31 3b d0 40 4b 70 61 65 ef 7a 75 f6 a0 3a d9 53 98 a4 e3 52 dc 39 54 38 85 a3 8c ce c3 0d e6 86 ce b2 ad 62 72 40 4b 34 52 7b 4c 0c 8d 5e b7 8c ee bd 81 fb 55 40 62 2f 57 57 a8 d6 9f 89 ba 75 63 79 a3 a0 20 07 72 78 df 25 17 cf eb e9 a6 ed 9f 08 e0 d3 5d aa e9 99 cf bb 05 4a 06 ef 91 7e 31 18 76 ed 04 24 23 80 be 1a 59 d6 53 dc 44 de 3f 98 73 59 a7 d7 a6 2d 02 58 c2 c4 e0 3a 8e 7d 06 6b a3 9e 7b a3 c0 37 ee 9f 16 b2 33 39 3b a5 c5 1c e1 c7 55 6a 95 ee c0 5f c4 69 52 b3 db d7 a6 69 e2 b2 Data Ascii: [YG6gDaD3PF7?Olu%v;$^P}HDNcME2`L)1;@Kpaezu:SR9T8br@K4R{L^U@b/WWucy rx%]J~1v$#YSD?sY-X:}k{739;Uj_iRi
2024-08-29 19:07:02 UTC	16384	IN	Data Raw: 94 a6 5c 97 d7 f9 dc f1 3d c0 96 27 df 6d 47 67 bd ee 18 4f ce 73 be 55 b4 fa 56 9a b0 8b c2 3a d0 94 b5 1d 98 a9 38 64 80 b8 ef 08 60 6f 04 0c 6b 34 fd 68 6b fa 1d fe 29 01 66 fe 9e 7f 3c 05 c9 5d df 57 ae 94 71 4b c8 29 43 14 be 1b db 2f dc 66 74 f4 59 39 5e 9e 90 09 d7 21 0a 55 85 25 dd 62 43 be cd 7a cc ee 02 d2 09 a2 ea 3e e6 1d d2 c9 3c 9f 3d 99 1c 66 47 93 e5 54 12 c4 98 de 52 e8 34 db 95 19 98 e1 0b b5 7d 20 49 5c a7 78 c6 94 09 45 db 21 cd da 0e eb 11 6c cc 5c 95 4d 35 3e 67 2c 66 38 7b b4 07 83 22 20 71 86 84 51 8e f2 83 f8 72 47 fe f2 3e 57 03 af 14 f7 23 99 34 c7 dc 33 18 93 05 26 2c dc b7 73 16 21 83 4d 1e bb 1a b9 86 bb eb 1f 72 f6 80 51 a6 5f 33 c4 f1 b4 5e e0 02 68 69 0f 56 1b ab 7c 40 f5 b5 b2 ec 34 19 d4 de 52 ea 1d 2c d8 57 86 83 fd 05 Data Ascii: \='mGgOsUV:8d`ok4hk)f<]WqK)C/ftY9^!U%bCz><=fGTR4} I\xE!l\M5>g,f8{" qQrG>W#43&,s!MrQ_3^hiV\|@4R,W
2024-08-29 19:07:02 UTC	16384	IN	Data Raw: b3 f5 73 1d bc 55 26 b2 6f d1 f1 78 2d 7f d3 b9 0f de c8 ce 66 20 fc 31 a5 b7 f6 20 c0 6a 83 49 18 ad 06 b3 2c a1 0f 17 b3 e2 8c 95 5d 6c d3 ca 7b d0 c7 8a 79 af 14 92 39 73 c0 4c 14 65 eb e2 a1 5b e7 2e a2 39 50 99 63 7a b8 6e a8 29 ea 4b 28 48 8d e3 f9 e3 5c 3c dd 2c 81 95 37 d1 a5 7d 63 f8 b7 4c 6e e5 9a 9e 3f 04 95 a9 f1 98 98 cf 6e 6d 1b 40 19 7c e6 5b 5c 0d 14 2b 50 bd bf 57 9a ea 37 f9 37 ae 5f 1d ac f6 50 9a c1 7c 70 69 ba b6 86 59 dd 3b 18 64 57 3d fd 8d b8 e7 b9 05 71 2c ff 0b 51 20 73 f0 df bf 6f 0e fe fa db 70 f0 df 77 e2 e0 bf 5d 32 07 ff fd 8a 38 f8 6f 57 c0 c1 ff e0 db 43 1c c9 af 19 61 cb c3 9b 36 8f 30 e9 70 ce 65 a6 39 71 ee fe 65 87 ee fc 68 1d 16 19 ff 69 3e 9e d9 c9 f0 53 97 b6 ab 17 8e d6 c8 84 eb 59 ad a7 e2 0a 25 b3 d4 9b c8 ce 5d Data Ascii: sU&ox-f 1 jI,]l{y9sLe[.9Pczn)K(H\<,7}cLn?nm@\|[\+PW77_P\|piY;dW=q,Q sopw]28oWCa60pe9qehi>SY%]
2024-08-29 19:07:03 UTC	16384	IN	Data Raw: 47 53 7e e2 2f b3 d0 20 2e b1 88 e0 40 d4 68 20 c5 9b d8 23 be 18 04 c7 8b 83 82 7d 38 d8 81 c1 30 89 3c 41 72 96 f6 f1 9c d0 4f 51 b7 d0 ca 16 65 49 45 2b 10 28 98 02 a1 c2 78 89 91 84 8c 80 2e 56 9c f6 2d d4 9d d2 87 2f a8 fc 15 05 61 19 98 2c 5b 19 b3 50 76 1d 4d b8 91 25 b5 95 a5 68 5c d3 ae e0 86 fb fe fe 4e 5c 5c 37 ae ae 27 ca 45 29 d1 1d 9b 9f d7 8b d3 d4 45 26 59 9d 12 a1 29 83 fb 47 6a e7 f4 0b 81 fd 55 36 27 76 81 0a 84 13 f8 0b d4 49 23 7a 34 30 67 5b 94 a7 a1 3d ba 68 e6 95 b2 10 c8 0a 87 c1 08 ba a1 da 10 85 5d 80 d9 ad c1 1c e6 18 86 f0 d7 98 a8 ef f0 84 11 69 af c2 36 40 33 66 6c 7c 44 1b 1f 61 e3 a3 6b 45 db c0 b9 68 16 d8 db 94 cc db 81 c6 bc 01 6f c2 1b 14 93 0d 78 b6 36 00 96 12 e7 17 01 fa 58 38 e9 00 7a fd 8a 86 f8 c3 ab 18 35 fd e2 Data Ascii: GS~/ .@h #}80<ArOQeIE+(x.V-/a,[PvM%h\N\\7'E)E&Y)GjU6'vI#z40g[=h]i6@3fl\|DakEhox6X8z5
2024-08-29 19:07:03 UTC	16384	IN	Data Raw: 1a ae 62 48 e3 21 2c 9e c5 84 c1 ab 63 02 5c 4e ab de 9b 37 d9 d0 48 31 6a e1 5d 11 bb 90 5b 21 3e 9a bd 8e 6f 01 fb d0 b3 80 31 dd e3 da e5 05 e2 e5 de 6f 92 d4 bb 0f 50 0e 5f ba 49 e0 1d b9 b7 c1 08 f5 8c 60 b0 87 3e 86 5b 90 cd d9 68 ef 39 70 28 64 f9 18 46 1d b6 a6 6e 36 a6 8a 33 f8 48 7d 37 19 8c 61 bc 92 57 a9 7f 81 0a c6 68 ed 3c 75 e0 37 0c 30 05 02 e4 b5 f5 36 60 e9 15 a0 22 57 a0 f7 97 70 81 ad 07 d9 16 50 28 bc 25 7b c6 b0 23 1b a5 f7 56 aa 0d 03 70 19 10 31 a6 a5 28 ad 04 61 30 b1 c8 01 fc 94 bb 80 aa f2 7c 17 42 27 32 ad f9 80 0a 8b 2d 4d 9d 3b f4 98 3f 73 ba f8 67 5a 5e 94 fc f9 ad c6 17 57 b0 be ba f0 83 6e 8c c9 d5 e1 96 85 5e 02 30 04 67 96 c5 11 70 7a 8d 46 fd 3a f5 c3 a1 50 cd ae 42 bf ad 2d 7a 27 cb dc 1f fd 7b 54 31 71 c3 4c fc 1a 64 Data Ascii: bH!,c\N7H1j][!>o1oP_I`>[h9p(dFn63H}7aWh<u706`"WpP(%{#Vp1(a0\|B'2-M;?sgZ^Wn^0gpzF:PB-z'{T1qLd
2024-08-29 19:07:03 UTC	16384	IN	Data Raw: 0e 33 0c 72 12 a4 78 77 4b 5b 20 9a f4 e9 3a 6c be ba f8 88 e1 7b a7 d1 09 3f 14 30 fb 13 f4 7f a4 1d 8e 33 51 42 0d 0d cf 29 8e 0d 96 59 82 19 b9 cf 13 7c ad a5 de 2b b5 e6 30 b6 bb 29 29 90 a8 f9 4b 58 24 4f d7 28 8e 47 a1 bf 7c 28 df 53 fe fb 0d a4 54 67 a3 61 40 4b b3 fe 8a 61 04 d9 cb 59 ff 3d 87 51 ac b3 c9 30 10 dc 42 7e 4e c2 e4 18 ec 14 ae 7b 0d 8f 17 ec 35 50 45 e2 0c 6a c0 ae ce e8 0b af cd a4 0f a4 35 9d bb bc 3e dd 9f 80 0f f1 5e 55 e1 94 ef 91 3c 8b 82 c0 ae d0 6b f9 61 35 50 cf 44 75 11 4c 96 e7 b3 00 da 2f 73 2a 99 d5 6e fd 24 18 be 0f 28 a0 c6 cf 81 a9 18 24 ee 30 bb f0 27 71 86 12 40 f8 ce 68 ab 00 ac 77 85 ef 57 e8 ca bd f1 a9 6d d7 43 a5 34 7c 79 06 aa 09 2a 13 d8 46 ef c7 7c 42 1c 05 26 81 1f 79 a9 8e 15 2b 03 d0 91 2b a7 e0 61 48 91 Data Ascii: 3rxwK[ :l{?03QB)Y\|+0))KX$O(G\|(STga@KaY=Q0B~N{5PEj5>^U<ka5PDuL/sn$($0'q@hwWmC4\|yF\|B&y++aH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49793	13.107.246.45	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:03 UTC	398	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:03 UTC	800	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:07:03 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: da7ef925-b01e-001c-2907-fa9136000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T190703Z-16579567576rt7gkm43y59pk38000000024g00000000ht4k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 19:07:03 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49794	13.107.246.45	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:03 UTC	385	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:03 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:07:03 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: ad3701b2-301e-0073-6702-faa468000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T190703Z-16579567576vpzq62mgx0my8kw00000002k0000000002cdm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 19:07:03 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49795	13.107.246.45	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:03 UTC	401	OUT	GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:03 UTC	812	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:07:03 GMT Content-Type: application/x-javascript Content-Length: 32811 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 09 Aug 2024 21:16:16 GMT ETag: 0x8DCB8B881B52A8D x-ms-request-id: 3833c618-e01e-002d-6c01-f84f88000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T190703Z-16579567576h266g9d6dee9ff800000002h0000000005qfk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 19:07:03 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 6b 57 db 48 b3 3f fa fe 7c 0a 5b 67 0e 5b 1a 1a c7 86 24 93 d8 51 bc 12 42 26 e4 06 13 c8 65 86 61 b3 84 dd 06 0d 46 f2 48 32 84 60 7f f7 53 bf ea 8b 5a b2 48 f2 ac ff 3e e7 c5 9e 35 c1 ea 8b 5a dd d5 d5 d5 55 d5 55 d5 f7 7e 6d b7 5e a6 59 6b 1a 8f 64 92 cb 56 9c 4c d2 ec 32 2a e2 34 69 cd a6 32 a2 ac 5c ca 56 9a c8 71 be 11 25 d1 f4 a6 88 47 f9 c6 3f f9 c9 a3 51 b7 17 3d 18 75 1f 8f 27 f7 b7 26 e3 47 e3 ad cd ad ce 3f 79 e7 ed ee f6 ce fb 83 9d 4e f1 b5 68 fd 7a ef ff f2 e6 68 a2 c8 e2 51 e1 0d fc 5c 4e 27 9d 6b 79 3a 8b 46 17 db e7 f3 e4 e2 e4 32 8f c7 32 29 e2 e2 e6 24 8f f3 39 a5 a3 f0 a7 6a 2d 16 47 c7 41 67 36 cf cf fd a3 a3 fb bf f5 8e c5 6d 6f 73 f3 b7 47 fd c9 3c 19 a1 ff 7e 22 a4 28 82 db a2 93 f9 32 10 45 67 Data Ascii: kWH?\|[g[$QB&eaFH2`SZH>5ZUU~m^YkdVL2*4i2\Vq%G?Q=u'&G?yNhzhQ\N'ky:F22)$9j-GAg6mosG<~"(2Eg
2024-08-29 19:07:04 UTC	16384	IN	Data Raw: cf ff a0 97 d4 c3 ff 5f fb 97 38 c7 e0 1a bc c6 7d 7c b5 77 72 dd d3 bd 33 7d 33 7b d2 f0 af f8 08 27 9e c7 f6 a1 8f bf 95 e6 a9 63 ae bb 8a 8d 23 42 03 78 ba d1 1b d2 6f df c9 3d d1 b9 27 9e 3a 29 60 36 23 0d 6b 5c 14 6d 03 e9 6c 3e 25 02 be 37 83 d9 2d 11 cd 83 9b 9c e4 87 dd 64 92 1a 38 f3 86 57 84 26 9c 3e 73 a0 36 2a 0a 4c dd 9c 84 e7 c1 fc b4 cc 41 c0 d2 4a 15 95 a1 ae cf c8 0c f7 e3 f6 aa 7a a9 9a 4c dd 4b d5 cc 2c c2 19 95 27 ad c3 0c ac 02 34 25 6c a8 8d a2 93 aa bb 9b 3b 79 79 35 89 06 0d e5 55 ea b9 33 9a 55 79 2d 12 23 95 ab 71 4a 72 de 15 62 ed a5 b4 e9 a6 10 8e 13 de ea d5 2f 9a 4f 55 8c 92 b8 43 b8 55 e0 0e 4d 8e 1b ab de 76 32 49 62 8c 88 30 da ab e9 9c fb e8 ca b3 7b 75 5a 4d fc 90 b2 ac 4d 7f cc 9d 74 ef e0 4c b4 0d 5d c7 5c 4f af 4f 71 Data Ascii: _8}\|wr3}3{'c#Bxo=':)`6#k\ml>%7-d8W&>s6*LAJzLK,'4%l;yy5U3Uy-#qJrb/OUCUMv2Ib0{uZMMtL]\OOq
2024-08-29 19:07:04 UTC	855	IN	Data Raw: a1 00 34 b8 17 af d3 b1 2e a6 35 fe 2a df b3 9b e8 24 4d 77 d3 e4 4a 76 f8 a6 d0 09 3d 82 36 07 40 c4 5e 1e 85 09 c2 7b be 29 51 5e f1 01 6b cf 55 6d 0c 88 6d a5 49 af aa 3b 83 02 35 da 35 fd d2 55 df 5c 26 38 98 04 e2 b2 e8 04 50 f6 01 2c a1 5c 6d ea 3b c5 95 df e2 7c 04 b4 35 27 15 5a 6d 39 fb 6e e5 10 56 53 5b 2d ee d0 86 d6 98 e0 b5 63 78 83 0d 68 69 4e b3 b1 99 8d 0d 4b 9c f3 8b 46 42 72 d5 3a 30 f0 75 d0 4c 21 a1 55 5a 9f 9d a1 19 67 cd 3a ad 9c 93 e4 b5 75 83 1c 10 ef 06 47 92 af 7d 0d af 14 7e dd 49 2e d3 83 e4 94 7e c5 30 0e 2d 09 27 d8 35 c7 46 be a6 b5 b0 7d 34 ac 3a 5a 86 e3 24 9e 4c e0 de 0e b2 78 02 84 48 38 c4 a9 cc 32 40 a0 f6 5c e7 45 44 e8 56 5a 7c 35 22 e1 68 23 46 af 6b be 7c 7e c3 b7 ba 6f b1 cf 32 05 52 f6 1b cd 02 f6 c0 3a 6e 10 f5 Data Ascii: 4.5*$MwJv=6@^{)Q^kUmmI;55U\&8P,\m;\|5'Zm9nVS[-cxhiNKFBr:0uL!UZg:uG}~I.~0-'5F}4:Z$LxH82@\EDVZ\|5"h#Fk\|~o2R:n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49803	35.190.10.96	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:05 UTC	649	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 612 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:05 UTC	612	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 46 4e 67 58 6c 64 36 53 30 70 46 5a 45 74 56 44 78 41 65 45 46 59 51 43 45 6b 51 66 56 6c 6f 66 48 4e 36 52 55 4a 68 5a 6c 45 50 45 41 67 51 57 6b 5a 47 51 6b 45 49 48 52 31 66 51 56 52 47 48 46 70 42 51 6b 42 64 52 6c 64 52 52 68 78 63 56 30 59 64 57 31 78 57 56 30 6f 63 57 6b 5a 66 58 68 41 65 45 48 42 30 52 55 68 31 57 58 63 42 66 30 73 4b 44 78 41 49 41 78 34 51 59 48 42 4b 53 47 56 56 64 45 70 57 58 33 4d 50 45 41 67 51 5a 56 74 63 41 51 41 51 48 68 42 78 57 6d 73 4c 5a 33 64 4b 41 47 4a 6c 63 77 38 51 43 41 49 65 45 48 64 30 63 31 78 30 58 6d 73 4b 65 32 46 6a 44 78 41 49 41 41 63 48 43 78 34 51 56 47 31 56 72 66 47 4e 32 43 30 5a 78 61 6c 30 5e 50 45 41 67 42 42 41 49 43 48 68 42 6f 65 6b 56 6d 56 Data Ascii: payload=aUkQRhAIEFNgXld6S0pFZEtVDxAeEFYQCEkQfVlofHN6RUJhZlEPEAgQWkZGQkEIHR1fQVRGHFpBQkBdRldRRhxcV0YdW1xWV0ocWkZfXhAeEHB0RUh1WXcBf0sKDxAIAx4QYHBKSGVVdEpWX3MPEAgQZVtcAQAQHhBxWmsLZ3dKAGJlcw8QCAIeEHd0c1x0XmsKe2FjDxAIAAcHCx4QVG1VrfGN2C0Zxal0^PEAgBBAICHhBoekVmV
2024-08-29 19:07:05 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:07:04 GMT Content-Type: application/json; charset=utf-8 Content-Length: 820 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 19:07:05 UTC	820	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 59 47 42 67 59 47 42 67 63 32 6f 2b 4f 44 70 73 4e 6d 35 73 49 6a 6b 35 50 44 59 69 50 6a 35 71 61 53 49 32 4f 44 74 74 49 6a 5a 70 4f 44 74 73 61 7a 59 33 62 44 30 32 62 48 46 78 63 58 46 67 59 44 34 2b 59 47 42 7a 62 48 70 78 63 58 46 78 50 6d 42 67 59 47 41 2b 63 7a 34 33 50 54 73 36 4f 54 59 34 4f 6a 34 35 4e 6a 6f 35 50 6a 6f 36 4f 7a 30 33 63 58 46 78 63 57 41 2b 50 6a 35 67 59 44 35 67 63 7a 34 34 50 54 73 32 4f 6a 63 37 50 54 6f 38 4f 44 6c 78 63 58 46 78 50 6a 34 2b 59 44 35 67 63 32 78 39 4e 32 78 72 59 6d 6c 71 5a 6a 5a 71 66 48 35 36 59 57 45 36 62 58 6c 6f 63 58 46 78 63 57 41 2b 50 6a 35 67 59 47 41 2b 63 7a 67 2b 4f 7a 70 78 63 58 46 78 59 44 34 2b 59 44 34 2b 59 44 35 7a 61 6a 34 34 4f 6d Data Ascii: {"do":null,"ob":"YGBgYGBgc2o+ODpsNm5sIjk5PDYiPj5qaSI2ODttIjZpODtsazY3bD02bHFxcXFgYD4+YGBzbHpxcXFxPmBgYGA+cz43PTs6OTY4Oj45Njo5Pjo6Oz03cXFxcWA+Pj5gYD5gcz44PTs2Ojc7PTo8ODlxcXFxPj4+YD5gc2x9N2xrYmlqZjZqfH56YWE6bXlocXFxcWA+Pj5gYGA+czg+OzpxcXFxYD4+YD4+YD5zaj44Om

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49802	34.107.199.61	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:05 UTC	591	OUT	GET /ns?c=e08423a0-6639-11ef-b978-41df4618b98d HTTP/1.1 Host: stk.hsprotect.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:05 UTC	153	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:07:04 GMT Content-Type: text/html Content-Length: 244 Access-Control-Allow-Origin: * Connection: close
2024-08-29 19:07:05 UTC	244	IN	Data Raw: 35 30 32 64 66 66 36 31 36 64 36 66 34 36 64 31 32 31 35 33 37 61 62 30 36 66 36 37 65 37 32 65 64 36 34 62 34 62 36 61 33 64 30 35 32 35 31 61 62 37 36 33 32 64 30 61 35 37 62 66 66 38 35 39 38 37 62 33 33 33 31 37 39 66 61 63 30 39 37 36 35 32 31 65 66 66 65 64 61 31 62 65 31 31 34 66 35 37 35 30 32 64 38 62 32 37 34 66 65 63 39 38 36 64 31 36 64 66 38 38 31 38 65 62 34 62 31 30 37 38 39 62 65 34 63 32 35 39 65 39 35 61 38 31 33 66 64 66 30 35 32 63 64 39 36 31 38 61 32 34 36 64 38 62 33 35 65 38 64 66 32 66 30 32 37 33 66 37 37 62 63 37 35 31 65 34 35 64 33 32 31 33 65 37 31 65 37 64 62 35 36 61 61 61 64 39 34 36 31 62 35 33 39 36 35 64 32 35 39 37 62 33 34 33 38 61 33 61 38 35 64 65 62 37 37 34 66 66 62 32 35 31 35 61 Data Ascii: 502dff616d6f46d121537ab06f67e72ed64b4b6a3d05251ab7632d0a57bff85987b333179fac0976521effeda1be114f57502d8b274fec986d16df8818eb4b10789be4c259e95a813fdf052cd9618a246d8b35e8df2f0273f77bc751e45d3213e71e7db56aaad9461b53965d2597b3438a3a85deb774ffb2515a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49808	35.190.10.96	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:06 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:06 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 29 Aug 2024 19:07:05 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 19:07:06 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49807	34.107.199.61	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:06 UTC	382	OUT	GET /ns?c=e08423a0-6639-11ef-b978-41df4618b98d HTTP/1.1 Host: stk.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:06 UTC	153	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:07:05 GMT Content-Type: text/html Content-Length: 244 Access-Control-Allow-Origin: * Connection: close
2024-08-29 19:07:06 UTC	244	IN	Data Raw: 61 63 34 38 66 31 31 66 33 36 38 32 63 33 31 63 63 64 61 35 62 31 66 64 64 31 35 32 39 63 62 33 32 61 38 35 34 66 32 65 38 62 32 62 35 66 33 31 64 34 36 61 34 32 37 31 30 31 38 63 30 37 31 36 31 61 65 35 30 31 36 64 65 63 64 61 64 63 35 31 34 64 65 34 36 38 64 37 37 30 66 39 33 31 62 33 65 61 36 65 61 34 64 65 38 36 66 66 38 33 63 63 31 63 62 32 64 66 62 65 65 61 31 61 66 33 39 33 39 34 30 31 32 64 66 38 30 66 30 30 31 33 34 39 37 39 30 38 33 33 63 33 30 64 63 62 31 64 31 34 36 35 30 38 61 34 32 33 36 30 64 61 32 35 38 62 31 63 37 31 39 39 34 35 35 37 32 63 38 64 62 32 63 39 61 65 30 39 65 31 65 39 36 32 62 66 36 36 64 61 34 37 38 62 64 36 66 61 36 38 35 32 39 31 61 37 62 61 65 39 63 30 33 64 31 35 63 34 61 62 31 62 37 64 Data Ascii: ac48f11f3682c31ccda5b1fdd1529cb32a854f2e8b2b5f31d46a4271018c07161ae5016decdadc514de468d770f931b3ea6ea4de86ff83cc1cb2dfbeea1af39394012df80f001349790833c30dcb1d146508a42360da258b1c719945572c8db2c9ae09e1e962bf66da478bd6fa685291a7bae9c03d15c4ab1b7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49805	13.107.246.60	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:06 UTC	599	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:06 UTC	736	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:07:06 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Thu, 29 Aug 2024 04:56:25 GMT ETag: 0x8DCC7E6EF615BFC x-ms-request-id: 7a631870-e01e-0053-41dc-f960b8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T190706Z-16579567576h9nndaeer0cv35w0000000290000000001f38 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 19:07:06 UTC	15648	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-29 19:07:06 UTC	1526	IN	Data Raw: 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 Data Ascii: @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49809	35.190.10.96	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:06 UTC	650	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 8919 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:06 UTC	8919	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 48 31 68 57 58 31 51 41 51 74 30 63 41 4d 43 44 78 41 65 45 46 59 51 43 45 6b 51 63 33 64 7a 41 58 42 5a 61 30 5a 38 64 6d 63 50 45 41 67 44 42 51 41 47 43 77 63 4b 42 67 41 48 41 51 55 45 48 68 42 72 57 41 5a 6b 66 58 46 67 5a 33 52 6a 57 51 38 51 43 46 52 54 58 6b 46 58 48 68 42 33 64 48 4e 63 64 46 35 72 43 6e 68 62 64 77 38 51 43 46 52 54 58 6b 46 58 48 68 42 78 53 46 59 4b 55 57 63 48 56 46 51 43 63 77 38 51 43 46 52 54 58 6b 46 58 48 68 42 72 57 41 5a 6b 66 58 46 57 5a 33 64 6a 58 51 38 51 43 46 52 54 58 6b 46 58 48 68 42 6c 41 6c 46 42 59 32 41 43 51 6e 34 42 51 51 38 51 43 46 52 54 58 6b 46 58 48 68 42 33 52 51 74 5a 63 57 52 6b 57 6d 68 59 56 51 38 51 43 46 52 54 58 6b 46 58 48 68 42 2f 41 41 70 Data Ascii: payload=aUkQRhAIEH1hWX1QAQt0cAMCDxAeEFYQCEkQc3dzAXBZa0Z8dmcPEAgDBQAGCwcKBgAHAQUEHhBrWAZkfXFgZ3RjWQ8QCFRTXkFXHhB3dHNcdF5rCnhbdw8QCFRTXkFXHhBxSFYKUWcHVFQCcw8QCFRTXkFXHhBrWAZkfXFWZ3djXQ8QCFRTXkFXHhBlAlFBY2ACQn4BQQ8QCFRTXkFXHhB3RQtZcWRkWmhYVQ8QCFRTXkFXHhB/AAp
2024-08-29 19:07:06 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:07:05 GMT Content-Type: application/json; charset=utf-8 Content-Length: 848 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 19:07:06 UTC	848	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 50 6d 41 2b 59 44 35 67 63 31 42 2f 64 7a 78 7a 50 44 77 2f 63 7a 38 2f 61 54 6b 38 62 6a 70 71 50 54 34 2b 4e 6d 31 74 50 7a 5a 70 62 54 35 72 4e 6d 74 75 4f 47 77 34 61 6d 78 73 4e 32 74 75 50 54 73 32 4e 32 73 33 4f 54 73 39 62 44 67 33 4f 54 6f 39 4f 6d 6f 35 4f 47 30 39 4f 7a 67 37 4f 7a 73 33 62 57 77 2f 50 47 34 31 64 56 5a 72 53 6c 59 39 62 58 31 72 57 57 68 74 53 44 70 73 52 47 70 73 5a 6b 78 49 56 6c 73 33 58 6c 6c 38 4f 44 39 74 50 58 64 59 5a 55 78 43 5a 6e 68 35 4a 46 70 6d 54 6e 70 4f 61 46 30 37 51 45 52 6b 64 57 31 37 57 6c 73 37 51 45 70 38 4e 30 35 2b 58 47 4a 75 4e 33 74 75 61 7a 70 4a 4a 47 31 66 54 44 6c 2f 56 32 6c 44 5a 57 77 33 56 32 67 79 4d 6a 55 2b 50 7a 38 2f 4e 55 51 67 58 6e Data Ascii: {"do":null,"ob":"PmA+YD5gc1B/dzxzPDw/cz8/aTk8bjpqPT4+Nm1tPzZpbT5rNmtuOGw4amxsN2tuPTs2N2s3OTs9bDg3OTo9Omo5OG09Ozg7Ozs3bWw/PG41dVZrSlY9bX1rWWhtSDpsRGpsZkxIVls3Xll8OD9tPXdYZUxCZnh5JFpmTnpOaF07QERkdW17Wls7QEp8N05+XGJuN3tuazpJJG1fTDl/V2lDZWw3V2gyMjU+Pz8/NUQgXn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49810	13.107.246.45	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:06 UTC	364	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:07 UTC	757	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:07:06 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Thu, 29 Aug 2024 12:09:58 GMT ETag: 0x8DCC823804011B0 x-ms-request-id: af81d46e-d01e-00e1-7a2b-fa9fc9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T190706Z-16579567576fh7f86y3uqsyhx0000000022g00000000vp0u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 19:07:07 UTC	15627	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-29 19:07:07 UTC	1547	IN	Data Raw: 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49812	35.190.10.96	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:07 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:07 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 29 Aug 2024 19:07:07 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 19:07:07 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49816	35.190.10.96	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:11 UTC	650	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 6499 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:11 UTC	6499	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 48 46 30 56 52 31 36 57 51 59 43 66 55 74 42 44 78 41 65 45 46 59 51 43 45 6b 51 56 48 64 6a 66 6e 4e 59 57 55 4a 7a 57 48 73 50 45 41 67 51 42 6c 4d 43 42 56 46 57 43 77 56 58 43 67 46 51 42 77 51 44 56 41 52 57 56 67 70 52 55 77 45 45 41 67 55 4b 56 67 6f 4b 56 6c 63 51 48 68 42 54 65 6c 56 55 56 46 73 43 5a 33 56 33 52 51 38 51 43 42 41 47 55 77 49 46 55 56 59 4c 42 56 63 4b 41 56 41 48 42 41 4e 55 42 46 5a 57 43 6c 46 54 41 51 51 43 42 51 70 57 43 67 70 57 56 78 41 65 45 47 42 6d 41 6b 74 58 52 58 78 71 66 41 4a 42 44 78 41 49 45 46 4d 46 42 67 4a 58 56 31 52 57 56 67 4e 52 43 67 49 43 41 51 73 42 43 31 5a 58 55 41 51 46 56 77 49 4c 42 67 63 43 43 77 42 57 45 42 34 51 59 67 42 2f 65 33 68 71 58 58 74 Data Ascii: payload=aUkQRhAIEHF0VR16WQYCfUtBDxAeEFYQCEkQVHdjfnNYWUJzWHsPEAgQBlMCBVFWCwVXCgFQBwQDVARWVgpRUwEEAgUKVgoKVlcQHhBTelVUVFsCZ3V3RQ8QCBAGUwIFUVYLBVcKAVAHBANUBFZWClFTAQQCBQpWCgpWVxAeEGBmAktXRXxqfAJBDxAIEFMFBgJXV1RWVgNRCgICAQsBC1ZXUAQFVwILBgcCCwBWEB4QYgB/e3hqXXt
2024-08-29 19:07:11 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:07:11 GMT Content-Type: application/json; charset=utf-8 Content-Length: 248 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 19:07:11 UTC	248	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 59 47 41 2b 50 6d 42 67 63 32 78 36 63 58 46 78 63 57 41 2b 50 6a 35 67 59 44 34 2b 63 31 42 2f 64 32 74 71 63 7a 77 38 50 33 4e 74 4e 6a 74 75 4f 57 34 36 50 32 6f 36 50 7a 78 72 62 57 35 72 50 47 74 70 62 6a 59 39 4f 6d 73 33 62 6d 6b 32 4f 6d 6f 33 62 54 78 72 4f 6d 74 71 4f 32 6b 2f 50 7a 73 2f 4e 7a 34 2f 62 44 68 73 50 32 73 37 50 54 68 70 61 32 6b 36 4f 6a 78 75 61 54 74 70 4e 57 70 32 52 54 39 75 57 44 35 6a 62 44 78 64 5a 32 31 58 54 6d 5a 41 5a 55 6f 38 51 6d 56 65 4f 6b 46 62 61 44 39 43 64 55 6f 2b 51 6d 56 65 66 45 5a 69 56 57 6c 75 50 55 5a 6d 51 47 56 4f 66 45 5a 69 59 33 68 57 50 6a 5a 2f 56 55 78 47 4f 56 67 2b 50 6a 5a 7a 65 33 31 36 61 6e 4d 38 50 7a 38 3d 22 7d 0a Data Ascii: {"do":null,"ob":"YGA+PmBgc2x6cXFxcWA+Pj5gYD4+c1B/d2tqczw8P3NtNjtuOW46P2o6PzxrbW5rPGtpbjY9Oms3bmk2Omo3bTxrOmtqO2k/Pzs/Nz4/bDhsP2s7PThpa2k6OjxuaTtpNWp2RT9uWD5jbDxdZ21XTmZAZUo8QmVeOkFbaD9CdUo+QmVefEZiVWluPUZmQGVOfEZiY3hWPjZ/VUxGOVg+PjZze316anM8Pz8="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49817	35.190.10.96	443	1700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:07:12 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:07:12 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 29 Aug 2024 19:07:12 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: POST, HEAD, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 19:07:12 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Target ID:	0
Start time:	15:06:30
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:06:33
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=1988,i,17100991338385188231,16201762972204157628,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:06:35
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT01OWM4ZTNjMy03YjVmLTQxNTgtOWVjYS0yZWJkZDNiYzZkZDEmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT01OWM4ZTNjMy03YjVmLTQxNTgtOWVjYS0yZWJkZDNiYzZkZDEmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Windows Analysis Report
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT01OWM4ZTNjMy03YjVmLTQxNTgtOWVjYS0yZWJkZDNiYzZkZDEmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l