Edit tour

Windows Analysis Report
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT0wN2RkNTQyZS1hZGNiLTQyZTgtODFiYS0zZDdjYjNmYTEyNTYmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l

Overview

General Information

Sample URL:	https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT0wN2RkNTQyZS1hZGNiLTQyZTgtODFiYS0zZDdjYjNmYTEyNTYmcz0wMDAwM
Analysis ID:	1501916
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2220,i,16230979761057172952,5645982782825242545,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0wN2RkNTQyZS1hZGNiLTQyZTgtODFiYS0zZDdjYjNmYTEyNTYmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DGdToELmZ3YbyI-gKi85PXqLwJ-r7GrFRuOOxkZq3hzAV6NnFBftcuFvQP4xWUST1xzYpCzSG4sx-Mhrs0RcPAIMm1wVmXoRXYl7NUB0sulWpz-Vw1T3K8SB3CnlQdNrdHXQSzbm4plzBIUrbrWN-pACdijsKN_u04ZoF07uz0cA55kBMxzXKF5gcGQtsp3Pc&response_mode=form_post&nonce=638606323714428193.OGRkNWI0NzQtYzkxOC00MGZhLTg4MmItYjhjODIzM2E5ODc4YWMyM2QwZDQtNmU5YS00M2FhLTk2YjctMTJmYTdhYTJiZTY1&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=176ed3cd-1654-4edd-a2fd-4ba7fcbcc236&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DGdToELmZ3YbyI-gKi85PXqLwJ-r7GrFRuOOxkZq3hzAV6NnFBftcuFvQP4xWUST1xzYpCzSG4sx-Mhrs0RcPAIMm1wVmXoRXYl7NUB0sulWpz-Vw1T3K8SB3CnlQdNrdHXQSzbm4plzBIUrbrWN-pACdijsKN_u04ZoF07uz0cA55kBMxzXKF5gcGQtsp3Pc&response_mode=form_post&nonce=638606323714428193.OGRkNWI0NzQtYzkxOC00MGZhLTg4MmItYjhjODIzM2E5ODc4YWMyM2QwZDQtNmU5YS00M2FhLTk2YjctMTJmYTdhYTJiZTY1&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=176ed3cd-1654-4edd-a2fd-4ba7fcbcc236&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DGdToELmZ3YbyI-gKi85PXqLwJ-r7GrFRuOOxkZq3hzAV6NnFBftcuFvQP4xWUST1xzYpCzSG4sx-Mhrs0RcPAIMm1wVmXoRXYl7NUB0sulWpz-Vw1T3K8SB3CnlQdNrdHXQSzbm4plzBIUrbrWN-pACdijsKN_u04ZoF07uz0cA55kBMxzXKF5gcGQtsp3Pc&response_mode=form_post&nonce=638606323714428193.OGRkNWI0NzQtYzkxOC00MGZhLTg4MmItYjhjODIzM2E5ODc4YWMyM2QwZDQtNmU5YS00M2FhLTk2YjctMTJmYTdhYTJiZTY1&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=176ed3cd-1654-4edd-a2fd-4ba7fcbcc236&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0

HTTP Parser: Base64 decoded: 8dd5b474-c918-40fa-882b-b8c8233a9878ac23d0d4-6e9a-43aa-96b7-12fa7aa2be65

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DGdToELmZ3YbyI-gKi85PXqLwJ-r7GrFRuOOxkZq3hzAV6NnFBftcuFvQP4xWUST1xzYpCzSG4sx-Mhrs0RcPAIMm1wVmXoRXYl7NUB0sulWpz-Vw1T3K8SB3CnlQdNrdHXQSzbm4plzBIUrbrWN-pACdijsKN_u04ZoF07uz0cA55kBMxzXKF5gcGQtsp3Pc&response_mode=form_post&nonce=638606323714428193.OGRkNWI0NzQtYzkxOC00MGZhLTg4MmItYjhjODIzM2E5ODc4YWMyM2QwZDQtNmU5YS00M2FhLTk2YjctMTJmYTdhYTJiZTY1&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=176ed3cd-1654-4edd-a2fd-4ba7fcbcc236&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DGdToELmZ3YbyI-gKi85PXqLwJ-r7GrFRuOOxkZq3hzAV6NnFBftcuFvQP4xWUST1xzYpCzSG4sx-Mhrs0RcPAIMm1wVmXoRXYl7NUB0sulWpz-Vw1T3K8SB3CnlQdNrdHXQSzbm4plzBIUrbrWN-pACdijsKN_u04ZoF07uz0cA55kBMxzXKF5gcGQtsp3Pc&response_mode=form_post&nonce=638606323714428193.OGRkNWI0NzQtYzkxOC00MGZhLTg4MmItYjhjODIzM2E5ODc4YWMyM2QwZDQtNmU5YS00M2FhLTk2YjctMTJmYTdhYTJiZTY1&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=176ed3cd-1654-4edd-a2fd-4ba7fcbcc236&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DGdToELmZ3YbyI-gKi85PXqLwJ-r7GrFRuOOxkZq3hzAV6NnFBftcuFvQP4xWUST1xzYpCzSG4sx-Mhrs0RcPAIMm1wVmXoRXYl7NUB0sulWpz-Vw1T3K8SB3CnlQdNrdHXQSzbm4plzBIUrbrWN-pACdijsKN_u04ZoF07uz0cA55kBMxzXKF5gcGQtsp3Pc&response_mode=form_post&nonce=638606323714428193.OGRkNWI0NzQtYzkxOC00MGZhLTg4MmItYjhjODIzM2E5ODc4YWMyM2QwZDQtNmU5YS00M2FhLTk2YjctMTJmYTdhYTJiZTY1&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=176ed3cd-1654-4edd-a2fd-4ba7fcbcc236&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: No favicon
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d3FED2D1BB2A9063D%26opidt%3d1725035589%26uaid%3d176ed3cd16544edda2fd4ba7fcbcc236%26contextid%3dF73B7E951EFA85C4%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=176ed3cd16544edda2fd4ba7fcbcc236&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d3FED2D1BB2A9063D%26opidt%3d1725035589%26uaid%3d176ed3cd16544edda2fd4ba7fcbcc236%26contextid%3dF73B7E951EFA85C4%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=176ed3cd16544edda2fd4ba7fcbcc236&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d3FED2D1BB2A9063D%26opidt%3d1725035589%26uaid%3d176ed3cd16544edda2fd4ba7fcbcc236%26contextid%3dF73B7E951EFA85C4%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=176ed3cd16544edda2fd4ba7fcbcc236&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d3FED2D1BB2A9063D%26opidt%3d1725035589%26uaid%3d176ed3cd16544edda2fd4ba7fcbcc236%26contextid%3dF73B7E951EFA85C4%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=176ed3cd16544edda2fd4ba7fcbcc236&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DGdToELmZ3YbyI-gKi85PXqLwJ-r7GrFRuOOxkZq3hzAV6NnFBftcuFvQP4xWUST1xzYpCzSG4sx-Mhrs0RcPAIMm1wVmXoRXYl7NUB0sulWpz-Vw1T3K8SB3CnlQdNrdHXQSzbm4plzBIUrbrWN-pACdijsKN_u04ZoF07uz0cA55kBMxzXKF5gcGQtsp3Pc&response_mode=form_post&nonce=638606323714428193.OGRkNWI0NzQtYzkxOC00MGZhLTg4MmItYjhjODIzM2E5ODc4YWMyM2QwZDQtNmU5YS00M2FhLTk2YjctMTJmYTdhYTJiZTY1&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=176ed3cd-1654-4edd-a2fd-4ba7fcbcc236&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DGdToELmZ3YbyI-gKi85PXqLwJ-r7GrFRuOOxkZq3hzAV6NnFBftcuFvQP4xWUST1xzYpCzSG4sx-Mhrs0RcPAIMm1wVmXoRXYl7NUB0sulWpz-Vw1T3K8SB3CnlQdNrdHXQSzbm4plzBIUrbrWN-pACdijsKN_u04ZoF07uz0cA55kBMxzXKF5gcGQtsp3Pc&response_mode=form_post&nonce=638606323714428193.OGRkNWI0NzQtYzkxOC00MGZhLTg4MmItYjhjODIzM2E5ODc4YWMyM2QwZDQtNmU5YS00M2FhLTk2YjctMTJmYTdhYTJiZTY1&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=176ed3cd-1654-4edd-a2fd-4ba7fcbcc236&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DGdToELmZ3YbyI-gKi85PXqLwJ-r7GrFRuOOxkZq3hzAV6NnFBftcuFvQP4xWUST1xzYpCzSG4sx-Mhrs0RcPAIMm1wVmXoRXYl7NUB0sulWpz-Vw1T3K8SB3CnlQdNrdHXQSzbm4plzBIUrbrWN-pACdijsKN_u04ZoF07uz0cA55kBMxzXKF5gcGQtsp3Pc&response_mode=form_post&nonce=638606323714428193.OGRkNWI0NzQtYzkxOC00MGZhLTg4MmItYjhjODIzM2E5ODc4YWMyM2QwZDQtNmU5YS00M2FhLTk2YjctMTJmYTdhYTJiZTY1&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=176ed3cd-1654-4edd-a2fd-4ba7fcbcc236&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DGdToELmZ3YbyI-gKi85PXqLwJ-r7GrFRuOOxkZq3hzAV6NnFBftcuFvQP4xWUST1xzYpCzSG4sx-Mhrs0RcPAIMm1wVmXoRXYl7NUB0sulWpz-Vw1T3K8SB3CnlQdNrdHXQSzbm4plzBIUrbrWN-pACdijsKN_u04ZoF07uz0cA55kBMxzXKF5gcGQtsp3Pc&response_mode=form_post&nonce=638606323714428193.OGRkNWI0NzQtYzkxOC00MGZhLTg4MmItYjhjODIzM2E5ODc4YWMyM2QwZDQtNmU5YS00M2FhLTk2YjctMTJmYTdhYTJiZTY1&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=176ed3cd-1654-4edd-a2fd-4ba7fcbcc236&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DGdToELmZ3YbyI-gKi85PXqLwJ-r7GrFRuOOxkZq3hzAV6NnFBftcuFvQP4xWUST1xzYpCzSG4sx-Mhrs0RcPAIMm1wVmXoRXYl7NUB0sulWpz-Vw1T3K8SB3CnlQdNrdHXQSzbm4plzBIUrbrWN-pACdijsKN_u04ZoF07uz0cA55kBMxzXKF5gcGQtsp3Pc&response_mode=form_post&nonce=638606323714428193.OGRkNWI0NzQtYzkxOC00MGZhLTg4MmItYjhjODIzM2E5ODc4YWMyM2QwZDQtNmU5YS00M2FhLTk2YjctMTJmYTdhYTJiZTY1&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=176ed3cd-1654-4edd-a2fd-4ba7fcbcc236&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DGdToELmZ3YbyI-gKi85PXqLwJ-r7GrFRuOOxkZq3hzAV6NnFBftcuFvQP4xWUST1xzYpCzSG4sx-Mhrs0RcPAIMm1wVmXoRXYl7NUB0sulWpz-Vw1T3K8SB3CnlQdNrdHXQSzbm4plzBIUrbrWN-pACdijsKN_u04ZoF07uz0cA55kBMxzXKF5gcGQtsp3Pc&response_mode=form_post&nonce=638606323714428193.OGRkNWI0NzQtYzkxOC00MGZhLTg4MmItYjhjODIzM2E5ODc4YWMyM2QwZDQtNmU5YS00M2FhLTk2YjctMTJmYTdhYTJiZTY1&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=176ed3cd-1654-4edd-a2fd-4ba7fcbcc236&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: nam.safelink.emails.azure.net to https://admin.microsoft.com/adminportal/home?#/subscriptions

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.205.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.205.0
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0wN2RkNTQyZS1hZGNiLTQyZTgtODFiYS0zZDdjYjNmYTEyNTYmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l HTTP/1.1Host: nam.safelink.emails.azure.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=8e918b00-66ed-11ef-8007-db71fc4d53af HTTP/1.1Host: stk.hsprotect.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://msft.hsprotect.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://msft.hsprotect.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=8e918b00-66ed-11ef-8007-db71fc4d53af HTTP/1.1Host: stk.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: nam.safelink.emails.azure.net
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: signup.live.com
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: fpt.live.com
Source: global traffic	DNS traffic detected: DNS query: msft.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: client.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: stk.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: collector-pxzc5j78di.hsprotect.net

Source: unknown

HTTP traffic detected: POST /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveContent-Length: 612sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: */*Origin: https://msft.hsprotect.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://msft.hsprotect.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_112.2.dr, chromecache_103.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_93.2.dr, chromecache_79.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_93.2.dr, chromecache_79.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_109.2.dr	String found in binary or memory: https://client.hsprotect.net/PXzC5j78di/main.min.js
Source: chromecache_94.2.dr	String found in binary or memory: https://fpt.live.com/
Source: chromecache_83.2.dr, chromecache_93.2.dr, chromecache_89.2.dr, chromecache_112.2.dr, chromecache_79.2.dr, chromecache_103.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_75.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_75.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@21/67@36/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2220,i,16230979761057172952,5645982782825242545,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0wN2RkNTQyZS1hZGNiLTQyZTgtODFiYS0zZDdjYjNmYTEyNTYmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2220,i,16230979761057172952,5645982782825242545,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0wN2RkNTQyZS1hZGNiLTQyZTgtODFiYS0zZDdjYjNmYTEyNTYmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://login.microsoftonline.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	URL Reputation	safe
http://knockoutjs.com/	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	0%	URL Reputation	safe
http://feross.org	0%	URL Reputation	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe
https://collector-pxzc5j78di.hsprotect.net/api/v2/msft	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	0%	Avira URL Cloud	safe
https://login.windows-ppe.net	0%	Avira URL Cloud	safe
https://github.com/douglascrockford/JSON-js	0%	Avira URL Cloud	safe
https://stk.hsprotect.net/ns?c=8e918b00-66ed-11ef-8007-db71fc4d53af	0%	Avira URL Cloud	safe
https://client.hsprotect.net/PXzC5j78di/main.min.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	0%	Avira URL Cloud	safe
https://fpt.live.com/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	unknown
inbound-weighted.protechts.net	35.190.10.96	true	false	unknown
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	unknown
stk.hsprotect.net	34.107.199.61	true	false	unknown
s-part-0045.t-0009.t-msedge.net	13.107.246.73	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
nam.safelink.emails.azure.net	unknown	unknown	false	unknown
signup.live.com	unknown	unknown	false	unknown
client.hsprotect.net	unknown	unknown	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
msft.hsprotect.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
collector-pxzc5j78di.hsprotect.net	unknown	unknown	false	unknown
logincdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
fpt.live.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	false	Avira URL Cloud: safe	unknown
https://stk.hsprotect.net/ns?c=8e918b00-66ed-11ef-8007-db71fc4d53af	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js	false	Avira URL Cloud: safe	unknown
https://collector-pxzc5j78di.hsprotect.net/api/v2/msft	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://login.microsoftonline.com	chromecache_75.2.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_93.2.dr, chromecache_79.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	false	URL Reputation: safe	unknown
http://knockoutjs.com/	chromecache_93.2.dr, chromecache_79.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	false	URL Reputation: safe	unknown
https://client.hsprotect.net/PXzC5j78di/main.min.js	chromecache_109.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_83.2.dr, chromecache_93.2.dr, chromecache_89.2.dr, chromecache_112.2.dr, chromecache_79.2.dr, chromecache_103.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
https://login.windows-ppe.net	chromecache_75.2.dr	false	Avira URL Cloud: safe	unknown
https://fpt.live.com/	chromecache_94.2.dr	false	Avira URL Cloud: safe	unknown
http://feross.org	chromecache_112.2.dr, chromecache_103.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
35.190.10.96	inbound-weighted.protechts.net	United States	15169	GOOGLEUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
34.107.199.61	stk.hsprotect.net	United States	15169	GOOGLEUS	false
13.107.246.73	s-part-0045.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1501916
Start date and time:	2024-08-30 18:31:54 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT0wN2RkNTQyZS1hZGNiLTQyZTgtODFiYS0zZDdjYjNmYTEyNTYmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@21/67@36/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZJNaNNwGIeTduvWMrcyZe440IOIafPVtCsM7PeyLknTpmvTS1mTdEmT_JMladfl5kHwODx42MDDLsJOYxdFPIgHD0NhIAgOBG_KDiJe3EHBll08-jv8eOF9Li_vE5lKxqgYHkPvBrEYlr6NXoVCxo2g3S6GSMp4-ifOfCT6_gO4KSx8Zg__lJ_9fvWG2ofDbUMbKDHJMo_gW6rn2W46Ht-UTQ3ETE1yLNfqeuNt3NgEsga2XsDwGQx_g-H9wKQCkHrtKOBSRIpCKQInkhhJ4ilsmYhxparONmiU9XlP9PUhl0NRptRS14UtkjFpT-ypPS5P-wxeSHB5iRQbzC6D8zutPO-xZj0h1kY8XhzxOi72JI8R1kxRkFVRWNNagoidB-a4TN9T8XFZjuYrPwPhruWYbdtyvf3gV5izFUDLOQsARfJiY0wBniZtepoFKo5lK46nKe5KSRaswrrZIsTOLo1slbVUotLcXt9ZQ5xkySlW-xw31FvbhOpnNigWFLNdT-oXB3yFHDbqNQEb-qKd82sl0h0ijOq4aFWqZGjGxHY2zKZVbYpGkq1nUbdvNGwf2djBBKKcqmWJHDB4mXXk1SZf8zsmaRt-lq47HafBInYmJ2s9t8y2-yjZsoposu-jUiaR0LPM0G-Wi4ktqcR7rk1UpJNgaPQd0wKnwdnRUUCTl2zH6mqGcjYBX0wsTE9FQ4uBJejODTSYnp6ORKFFaAm6nIAPJ0c-3N948PHg3Sf24OlFF7x9DJ1OxnViWe1kaQqPg0EfHQzztp4yOE6tYF6Wr647qe1tHiUcvgbclWQa2wvBe6HQaShM59tsQSCT-I8Q_GgKehn-H5uOZ-DzmeuRSF9rG5a0aSju_JVVr69Bl7MPfx08f3J48n31Yu6e7oAiWagwheaaviqvJiWKzO8y9YGFEUIv3hlUxDirN1lOWK6vHEehL1HoLw2&estsfed=1&uaid=176ed3cd16544edda2fd4ba7fcbcc236&signup=1&lw=1&fl=easi2&fci=00000006-0000-0ff1-ce00-000000000000&mkt=en-US

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.35, 74.125.206.84, 142.250.186.142, 34.104.35.123, 13.107.6.156, 40.126.31.67, 20.190.159.23, 40.126.31.69, 40.126.31.73, 20.190.159.2, 40.126.31.71, 20.190.159.4, 20.190.159.73, 2.16.238.152, 2.16.238.149, 40.126.32.74, 20.190.160.14, 20.190.160.17, 40.126.32.136, 40.126.32.76, 20.190.160.22, 40.126.32.68, 40.126.32.72, 216.58.206.42, 172.217.16.202, 142.250.184.234, 142.250.186.106, 142.250.184.202, 142.250.185.106, 172.217.23.106, 142.250.185.74, 142.250.186.138, 216.58.212.138, 142.250.185.202, 142.250.186.170, 172.217.18.106, 142.250.185.170, 216.58.206.74, 142.250.185.138, 20.114.59.183, 2.16.100.168, 88.221.110.91, 192.229.221.95, 13.85.23.206, 40.126.32.138, 40.126.32.140, 40.126.32.133, 13.107.42.22, 20.72.243.62, 2.23.209.55, 2.23.209.54, 20.166.126.56, 52.167.30.171, 20.42.73.27, 142.250.186.163, 40.127.169.103
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0wN2RkNTQyZS1hZGNiLTQyZTgtODFiYS0zZDdjYjNmYTEyNTYmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l

Input	Output
URL: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DGdToELmZ3YbyI-gKi85PXqLwJ-r7GrFRuOOxkZq3hzAV6NnFBf Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "prominent_button_name":"Next", "text_input_field_labels":["Email, phone, or Skype", "No account? Create one!"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d3FED2D1BB2A9063D%26opidt%3d1725035589%26uaid%3d176ed3cd16544edda2fd4ba7fcbcc236%2 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "prominent_button_name":"Next", "text_input_field_labels":["someone@example.com", "Get a new email address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d3FED2D1BB2A9063D%26opidt%3d1725035589%26uaid%3d176ed3cd16544edda2fd4ba7fcbcc236%2 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "prominent_button_name":"Next", "text_input_field_labels":["Create account", "Get a new email address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DGdToELmZ3YbyI-gKi85PXqLwJ-r7GrFRuOOxkZq3hzAV6NnFBf Model: jbxai	{ "phishing_score":0, "brand_name":"Microsoft", "reasons":"The domain name is consistent with the identified brand, and the webpage design and elements are consistent with Microsoft's sign-in page layout. The presence of 'No account? Create one!' and 'Can't access your account?' links suggests that the webpage is designed to cater to both existing and new users, which is a common feature for many Microsoft services."}

URL: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d3FED2D1BB2A9063D%26opidt%3d1725035589%26uaid%3d176ed3cd16544edda2fd4ba7fcbcc236%2 Model: jbxai	{ "phishing_score":1, "brand_name":"Microsoft", "reasons":"The domain signup.live.com matches the legitimate domain associated with the identified brand, and the design, logo, and content are consistent with an official Microsoft service. The minimalistic design and presence of the Microsoft logo indicate that it is an official Microsoft service. The domain'signup.live.com' is a subdomain of the.com top level domain, which is a common practice for services like this."}

URL: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d3FED2D1BB2A9063D%26opidt%3d1725035589%26uaid%3d176ed3cd16544edda2fd4ba7fcbcc236%2 Model: jbxai	{ "phishing_score":1, "brand_name":"Microsoft", "reasons":"The domain'signup.live.com' matches the legitimate Microsoft service for creating accounts, and the presence of the Microsoft logo, minimalistic design, and typical sign-up page elements all point to a legitimate service."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:fCu:au
MD5:	AAAB7A355103063D9EEB4824A3A6B374
SHA1:	E51555F02C32321F3E48F07A0FA5AF46DF835BFC
SHA-256:	79BA862622D6FA84AC7E4F98EB95043A255FC2C81711E9400A8AA4D4B1608471
SHA-512:	D1A0C9C4F628459F5CA904405B2A66A69425A50E8DCE1BAA43161D784EB219BD3E1FD9447BCBACC314652EDA08CF0B02C863C87F3AC1534AE0F62A414C191F1B
Malicious:	false
Reputation:	low
Preview:	dfp:OK

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	244
Entropy (8bit):	3.974596367059183
Encrypted:	false
SSDEEP:	6:+Tc0wVEDQX3IaBQxmGS5cq2xikxcFBcA+Hke1n:+lwCDQn9mxmGwYxE8ke1n
MD5:	9AA944A957E251529CCAC696D6608E4F
SHA1:	AB49ABC5AFF324B9134F0B33E833446158923866
SHA-256:	2F276D600D41568347F52FC97D64113E0A755D08A0E2CC1BB0080A397D389EF3
SHA-512:	9E2712F884BFFCB5621306F8A5D4E91EF40B0ABDC15542367B265BC925A1A10692D7548D52889BFBC05032A9B2CFA80F69FB1C92B6803E3339808656531B8188
Malicious:	false
Reputation:	low
URL:	https://stk.hsprotect.net/ns?c=8e918b00-66ed-11ef-8007-db71fc4d53af
Preview:	8219f3ec7614641647a378b10754e96b5f87727b7dba2abe531c678e0536c169d64b606d404c3f36f58c6185a9bd49ba714d3e315a2ea2c52ceb658be95f4870e01c033e909088a7e99ca9a9d9bd0d7c385debbf6a8ef0624cc23400b765879c8a9e014134d62ccf4d98a66642fe70ccd5c7820d64bfdd811b46

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.317614623419193
Encrypted:	false
SSDEEP:	3072:ew5iAZBaQxn7oW/gFDfmtGOOJcPSRTQLeUDdHm7mCId9hvuZTh910rOzPypRan4:ZiAhxp/mTmbraQJmvZxL4
MD5:	033A93064FBF6C5BEA2377A5D08D554D
SHA1:	75524ED095D9ACDD42EA8D67D38A5B0793081D70
SHA-256:	1EC87632EE58734951AA02813EF07AD377126A39A16F063C181519B98FFFFC07
SHA-512:	FD93A5DDF2CCE4AA956DF94E10F3791787E157BA8D6CFF8151163F719868105045F431901D496215E5959989A30969AC696C218B29B0AE343F2BF9E7F7D51078
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(532).concat([f

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90678
Category:	dropped
Size (bytes):	32811
Entropy (8bit):	7.993115726308211
Encrypted:	true
SSDEEP:	768:Tu4jwkrxI2adXpo9SSwpmUPieDFpfy2Ky4lS4ru4r0r:300CfRpFpmAieDFpfBbWbru4r0r
MD5:	BCD68C8A4F1BB13B272E02FDA0EB5460
SHA1:	57C81EE13D027556D54744C9246226E1E85C211C
SHA-256:	25D5832DE46E5170761BA826342655D7C5550451332E4086EC366E79D359BD51
SHA-512:	0D70D7476653949F79CC67897F9F36E6B2F503E5C308C59D0C349B841BC2A27CD6408ACB272568CCA6B593AF5060F93FADD217D1677DE0E897608BA3BBFB0493
Malicious:	false
Reputation:	low
Preview:	...........kW.H.?..\|.[g.[...$..Q..B&....e.a.....F.H2.`..S..Z.H..>..5..Z....U.U..~m.^.Yk..d..V.L..2.4i.2..\.V..q..%....G..?..Q..=.u..'..&.G...?y........N.h.z....h...Q...\N'.ky:.F.......2..2)...$..9...j-.G.Ag6..........mos.G..<...~".(....2.Eg.Kq.l6.M.....L....L..,i.....".0.L..DK.\|.d.....;..>QS....r/e...O.gq.Ps./..4...ZA...c.O...[...f......"..4..{......,.b.@.6d2.i..{....&..>.......Q......Q.4.W.....!.'...~...J~.QrF.=;.W2#<i...z..N..$...,N..z.P.....3...'..".h.yG+......>.^.....k.Y:.Y...N..............B...S......5r.E#.........O.t...I..~...3.4%.G.....I........(M/b..*.....SB.3Y......I. .,E.?..i.s.s...$?..f....?.$WLS".M.....{.=.P.~~y.1..uZ2..=!.U.`.s.....n.c...x......O.3B...q...r........).D.z..?.H.HCo...$..<..{./.a.ei..73)F...+"..Q&.JbJ..M..n.$.w.\|.:1Y.....OJ...&..t.:..<M.kk^....NL8..i6,w....,.....y...0...#j;.C..6.%$..o}.A.q-..0.O..g..U..[]j.:.'a...C...2.x..50.\|..}gBlg..i4=<..S...eA.P.S....L.&.Z.f]k.YA@.J......._.!I.k-.L.....XP....{.....i.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	244
Entropy (8bit):	3.9320586838573988
Encrypted:	false
SSDEEP:	6:sQcy9mKBXJlowBEd/r7MUEdh6WLP56l5DGRDm9W:sKbhJ6wB0j7zS0WLPaDMDv
MD5:	F955BC05661F6D436E9D0F787A1E8B47
SHA1:	B39F244C51B4B87726CBE4FE98CF04F0076728CD
SHA-256:	2D4EDDC91424E8059B6E1C0A2197C23FB973B42F7222246D07C850E6804CBB43
SHA-512:	ED2BACBEE67CF66B3FDE1A2E6B11D877ABC58E3E310C3FD72A4D322A7DA0CC228C4F8EF3C2BE0E1E62E4CCA75A5F13EEB15872A6478FEC202041B624378DF670
Malicious:	false
Reputation:	low
Preview:	679fc068d0cb9da86c3ae92c82192f2ee2af849b18c3947afa3d6d275a132253e92bfdde076d29a87adaeff949bd8bda172f13aedfcd8261a0d6656f74994a25dd2d7f149899aa335f3ecc06ef94d59f9bfdddb14dd90f2a7d4e9e4fee58ea95ff3c5c64d5dc515df7ca5c3b0e2987fc5f3431434c816eba3081

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (918)
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	5.4604704891374
Encrypted:	false
SSDEEP:	24:hY/LLuvW9BokgrY7cMdhwCBie46Tz1QqIJIzcq9X5wXR5viRX4j:bCo5Y73hwCd4olUItp5wrNj
MD5:	5DC258F6742F6D22A4CD80F50926ED70
SHA1:	2925F965C31990E0F883E2E885A3D57056168DCC
SHA-256:	3B8D3C93FD78C24F4C175C8515E4A5DF79AEE536AF4CED58BA078EA591569EAC
SHA-512:	BB63B3078587A823CCBB2314EFF3CCC16B20A01AC717CE37289DA8B5118E5053F867CE62256CC1C9466A7E2CBF60C854F4DEA68A060D67CC51BAAB17179E140C
Malicious:	false
Reputation:	low
URL:	https://msft.hsprotect.net/index.html
Preview:	<!DOCTYPE html>.<html lang='en'>.<head>. <meta charset='UTF-8'>. <meta name='viewport' content='width=device-width, initial-scale=1.0'>. <title>Human Sensor Script Iframe</title>.</head>.<body>.<script>. var a=["_pxvid","_px3","_pxde"];function b(a){var b=new RegExp("(^\| )"+a+"=([^;]+)"),c=document.cookie.match(b);return c?c[2]:null}function c(a,b,c){window.parent.postMessage({type:"cookie",name:a,value:b,expires:c\|\|new Date(Date.now()+31536e6).toUTCString()},"")}function d(a){var b=/^([^=]+)=([^;])/,c=/expires=([^;]+)/,d=a.match(b),e=d?d[1]:null,f=d?d[2]:null,g=a.match(c),h=g?g[1]:null;return{cookieName:e,cookieValue:f,expires:h}}function e(b){var e=d(b);-1!==a.indexOf(e.cookieName)&&c(e.cookieName,e.cookieValue,e.expires)}function f(){try{var a=Object.getOwnPropertyDescriptor(Document.prototype,"cookie")\|\|Object.getOwnPropertyDescriptor(Object.getPrototypeOf(document),"cookie"),b=a.get.bind(document),c=a.set.bind(document);Object.defineProperty(document,"cookie",{get:fu

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	449540
Entropy (8bit):	5.448887818381794
Encrypted:	false
SSDEEP:	6144:U7lu66UglOK2d/VkpJYBsLLhkSB29OWtUJGcEHKE0H3NX44n:U7tjVkpq+LlkBUJEQ
MD5:	D8FF67E1334DAD67202B05BA32DEAD18
SHA1:	7AAA398BA53310D793E4BB28E6D5F118EF342254
SHA-256:	4DC06BDE66FF69C3CD7A67B5745C329571334A98ED7AF7C356241CFED32FA6D2
SHA-512:	67A56439845499BD65D1EDED96298FC6C3EEE99022861EC16AFD9E5D2BC7F94239CA0DD08C54A0C65B057625E59BE6362CBF74D7A97FCBEFE0F9AC88B2FE713E
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113401
Entropy (8bit):	5.284985933216009
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmchSeC1Jzc6VUW3:xkNhp6VU0
MD5:	41955034BB6BC6963DF5A8ECA72C5B81
SHA1:	D4B9E8C46100BDDACE8DFA08BDFF1F6F3D3B0A81
SHA-256:	1F8CEB44FE7CFCF7E71DBD5122210335CA3821D697A851D2900B95AF7D92D69D
SHA-512:	A52DF8961AC9964DE5202A52B4C38242368DC8898593BF3E8B3AFD3FC77C2C12FE72F27BB410DD4F7498643B69EEEFCCA1A566371E211F874C0BE22CF7E2A4E8
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.317614623419193
Encrypted:	false
SSDEEP:	3072:ew5iAZBaQxn7oW/gFDfmtGOOJcPSRTQLeUDdHm7mCId9hvuZTh910rOzPypRan4:ZiAhxp/mTmbraQJmvZxL4
MD5:	033A93064FBF6C5BEA2377A5D08D554D
SHA1:	75524ED095D9ACDD42EA8D67D38A5B0793081D70
SHA-256:	1EC87632EE58734951AA02813EF07AD377126A39A16F063C181519B98FFFFC07
SHA-512:	FD93A5DDF2CCE4AA956DF94E10F3791787E157BA8D6CFF8151163F719868105045F431901D496215E5959989A30969AC696C218B29B0AE343F2BF9E7F7D51078
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(532).concat([f

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90678
Category:	downloaded
Size (bytes):	32811
Entropy (8bit):	7.993115726308211
Encrypted:	true
SSDEEP:	768:Tu4jwkrxI2adXpo9SSwpmUPieDFpfy2Ky4lS4ru4r0r:300CfRpFpmAieDFpfBbWbru4r0r
MD5:	BCD68C8A4F1BB13B272E02FDA0EB5460
SHA1:	57C81EE13D027556D54744C9246226E1E85C211C
SHA-256:	25D5832DE46E5170761BA826342655D7C5550451332E4086EC366E79D359BD51
SHA-512:	0D70D7476653949F79CC67897F9F36E6B2F503E5C308C59D0C349B841BC2A27CD6408ACB272568CCA6B593AF5060F93FADD217D1677DE0E897608BA3BBFB0493
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js
Preview:	...........kW.H.?..\|.[g.[...$..Q..B&....e.a.....F.H2.`..S..Z.H..>..5..Z....U.U..~m.^.Yk..d..V.L..2.4i.2..\.V..q..%....G..?..Q..=.u..'..&.G...?y........N.h.z....h...Q...\N'.ky:.F.......2..2)...$..9...j-.G.Ag6..........mos.G..<...~".(....2.Eg.Kq.l6.M.....L....L..,i.....".0.L..DK.\|.d.....;..>QS....r/e...O.gq.Ps./..4...ZA...c.O...[...f......"..4..{......,.b.@.6d2.i..{....&..>.......Q......Q.4.W.....!.'...~...J~.QrF.=;.W2#<i...z..N..$...,N..z.P.....3...'..".h.yG+......>.^.....k.Y:.Y...N..............B...S......5r.E#.........O.t...I..~...3.4%.G.....I........(M/b..*.....SB.3Y......I. .,E.?..i.s.s...$?..f....?.$WLS".M.....{.=.P.~~y.1..uZ2..=!.U.`.s.....n.c...x......O.3B...q...r........).D.z..?.H.HCo...$..<..{./.a.ei..73)F...+"..Q&.JbJ..M..n.$.w.\|.:1Y.....OJ...&..t.:..<M.kk^....NL8..i6,w....,.....y...0...#j;.C..6.%$..o}.A.q-..0.O..g..U..[]j.:.'a...C...2.x..50.\|..}gBlg..i4=<..S...eA.P.S....L.&.Z.f]k.YA@.J......._.!I.k-.L.....XP....{.....i.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32057)
Category:	dropped
Size (bytes):	56391
Entropy (8bit):	5.37635913975141
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3Z1ym+d/ixLgT1wtuQixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJJ1ym+d/ihgT1wtuQiJig/Ml
MD5:	B59C16ABA59DB0BC490C85B30C0B60E8
SHA1:	7B708EC7EDC902283A755FC0BF4E767A2A28473E
SHA-256:	D65E2644BEA71489D43203AA2ABCBA471C847BF2A176963BE8DB62BF1A70F7A5
SHA-512:	F7E252E5B6046AFB46658F542233D7E1602C2638089B6BF4E1490643770A28D3DF1FFCB587699B82FD8E821495D69780E160EA8B7065519EEA8B34C98F4817AA
Malicious:	false
Reputation:	low
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/images/favicon.ico?v=2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65402)
Category:	downloaded
Size (bytes):	154554
Entropy (8bit):	5.66473931205699
Encrypted:	false
SSDEEP:	3072:BSkKnDPidmLb0jtnklcVdem4gKJ3svMBvtoGhhT+jfxzVLxpGU:BS9DPiULb0+lcdtEFtoGzKTxzVVj
MD5:	57AC9C551618BB448D0886AEC11A4DAC
SHA1:	292F8E122C7EE4CB38B5E58EC7EF9BDE5F7BD86E
SHA-256:	AA07C6925D39E7350092AAFE9C6FC0C1F47DC22AAA9526053220B8D8601E152F
SHA-512:	130219DECF3D7BB074CC5BCD026C1961895B939EFC99C1E0762106310296D4BF1DDD1FD92C7C09D68FCA7CE3AD9969B3A03C6AF00424474767525937C8A419CA
Malicious:	false
Reputation:	low
URL:	https://client.hsprotect.net/PXzC5j78di/main.min.js
Preview:	// @license Copyright (C) 2014-2024 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed..try{window._pxAppId="PXzC5j78di",function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function n(t,n){if(t){if("string"==typeof t)return e(t,n);var r=Object.prototype.toString.call(t).slice(8,-1);return"Object"===r&&t.constructor&&(r=t.constructor.name),"Map"===r\|\|"Set"===r?Array.from(t):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?e(t,n):void 0}}function r(t){return function(t){if(Array.isArray(t))return e(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46090)
Category:	downloaded
Size (bytes):	141866
Entropy (8bit):	5.429983887489752
Encrypted:	false
SSDEEP:	1536:PyeDOMSQ6fTPRUbx3XCg/MJA5N4ii5WLeV5guLDY2Js0VgtWiTJmxyCXP3onrGGW:wMc1g/Mq5p1Mv+UyJbBw+Icwf
MD5:	2509D4C564AFC2C77D16BA6CA509B39F
SHA1:	201F1D80F8EEA9F5E8A7A7224CFF18674344F886
SHA-256:	D468D9F009E53FE1C47B9D6FDEFA3FF1A8C239973F11A6F892848E341EA17CCD
SHA-512:	C928C36D58BB0B2740E9BE3F3CA3F49624253F8DAD93BA7524E55F24CCCAF630E35FCA8C596CBCE50A0C1214C4986034FD3E26D98F759949C179C54009D5D93E
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113769
Entropy (8bit):	5.4928592467688535
Encrypted:	false
SSDEEP:	1536:pd8gIRPY0+r5qnWisyOFa8nvUHCC4LgvbrGYXts1N5VFUnqGj:kgDTMnWsTkpLgv2Qe1bXA
MD5:	21FB66A712FCAB3BF6667404C78631D6
SHA1:	6011F3E397AEB5B807EB6BE1A08ABFD302E9D253
SHA-256:	BAB311BF22661B153353A159F0EC931DBCB79F950FA37DAF9D0FF180CBF45DEB
SHA-512:	CD310A2C00DB5E273091F45308227CC6CA5131767823C356013AAD5EB515E75048317C4E5A793955CFBC93CE015BAFB89463066ABF0E31870AF93076E98F2586
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1372:function(e,t,

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.873235826376328
Encrypted:	false
SSDEEP:	3:YA8rQaC:YAoQaC
MD5:	5FC018D9E6C56911BBC8DC5DDCD0C768
SHA1:	70979F57A85D527ED8ABCBF02CFF44640C58BDE6
SHA-256:	2E6D78A4AE644F3B60AFD3C33E66539FF6C5F6A8ED6ABC40A3AF06AC020EC020
SHA-512:	1E3B86274B3590E28366F2D2DE86A1844058E213BD225AAA05D992CA70523F65D2BD543F9F762A805A2C4D5961AA34F5A19EBE70E135939C9CD3C63F6B5F5524
Malicious:	false
Reputation:	low
Preview:	{"error":"Method Not Allowed"}.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32057)
Category:	downloaded
Size (bytes):	56391
Entropy (8bit):	5.37635913975141
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3Z1ym+d/ixLgT1wtuQixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJJ1ym+d/ihgT1wtuQiJig/Ml
MD5:	B59C16ABA59DB0BC490C85B30C0B60E8
SHA1:	7B708EC7EDC902283A755FC0BF4E767A2A28473E
SHA-256:	D65E2644BEA71489D43203AA2ABCBA471C847BF2A176963BE8DB62BF1A70F7A5
SHA-512:	F7E252E5B6046AFB46658F542233D7E1602C2638089B6BF4E1490643770A28D3DF1FFCB587699B82FD8E821495D69780E160EA8B7065519EEA8B34C98F4817AA
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 901881
Category:	downloaded
Size (bytes):	231091
Entropy (8bit):	7.998390937544825
Encrypted:	true
SSDEEP:	6144:Z4w6J4OiKySVPhKwGX9rZUKsSqNNZPRNSBX:awkViKySV5KXX9mBS0NZZYX
MD5:	05A20B73D23C52A09386F3222045E62D
SHA1:	0991D7FD9A84F82DD39FBE065C0070D3196F497C
SHA-256:	BAB90DCF5FE87AB6DDEED7339CC36967BA7188CE3E01CCF7C65D9369056C41A4
SHA-512:	F93017FD9AC4A684D5BBC5BD44992D9687DDA5011050B9F7AA1718EA99F91E5BB7031854461E48316D10D095347E5953F376949EFCC57348980D792AD745BFCE
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js
Preview:	...........iw.8.(.....n....dg...M....l.'.N.}}h...H...8.....+E9.g.g.{&...A.K..T.j..........r#.Fy1K.4.6.S.@V)..:...QrV..S...,./....::hW_......6G.l.....yRlHQ.L.".i\|..nw.ndJ....+..j.."..](..<..L..p?...zw9.e.....\{..C9J...M...9-....U2..cY=...."=....a...."/.3.../iF.9d..T.%.:S.Ne6.&.h.W...t....../f2.J~H.K.,..n......z6O....n..4.Z..ll...^..Z..F.N.r.CV?.....=.......r...rt........:...:..8!$(..g..A.Z.Lb%....B.....t>VZ.y....Y>-...SY..t^..:%..Yz=.c.o..'...</.26 ..!{x....bt6nm.......,.x.da/...7.x.........&......$N.......=X.........~.PL.No.(i3....'..Y..ONz..f......[[.%f[[3JL........x.d.,.U..U..:....:0.......),..Kq.o..}oI....N..W..t~+...Y..j....h..,....m.T.J.e..RB..._..b.u.ql.7u.Nz_.-2..li.......`.`O+..1h.2..S.+..F.:...l.M...t.6..B.".;u...T.g.t....@..[-.Q........b..P..<...TLm.2...K%.e6p:....]S.`Q..S.....m.#Ur..w#x....CUl.V.M.N.i.....Tv.....8k,2M.^."..ec..i>..Z...a..a.8...{_\4.,d9.33k...y...,U..vU..u..]N.# ~..bk+[L...$oUl..^y..f.;..).<R...a..?..g.?

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:fCu:au
MD5:	AAAB7A355103063D9EEB4824A3A6B374
SHA1:	E51555F02C32321F3E48F07A0FA5AF46DF835BFC
SHA-256:	79BA862622D6FA84AC7E4F98EB95043A255FC2C81711E9400A8AA4D4B1608471
SHA-512:	D1A0C9C4F628459F5CA904405B2A66A69425A50E8DCE1BAA43161D784EB219BD3E1FD9447BCBACC314652EDA08CF0B02C863C87F3AC1534AE0F62A414C191F1B
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/Images/Clear.PNG?ctx=jscb1.0&session_id=176ed3cd16544edda2fd4ba7fcbcc236&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=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&eci=eyJ1dmRyIjoiR29vZ2xlIEluYy4gKEdvb2dsZSkiLCJ1cmRyIjoiQU5HTEUgKEdvb2dsZSwgVnVsa2FuIDEuMy4wIChTd2lmdFNoYWRlciBEZXZpY2UgKFN1Ynplcm8pICgweDAwMDBDMERFKSksIFN3aWZ0U2hhZGVyIGRyaXZlcikiLCJ2ZHIiOiJXZWJLaXQiLCJyZHIiOiJXZWJLaXQgV2ViR0wiLCJpZHVoIjoiMTViNmNhNDcyNjliZTQyODc1Njg1MDY5MzdlOTkxN2MifQ==&PageId=SU&u1=&u3=10.0.0&u4=x86&u5=64&u2=(Google%20Chrome%2C117.0.5938.132)%2C(Not%3BA%3DBrand%2C8.0.0.0)%2C(Chromium%2C117.0.5938.132)
Preview:	dfp:OK

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.646439344671015
Encrypted:	false
SSDEEP:	3:xRhVnCm:xrQm
MD5:	F79FFC1767406D43B996B050CEC09ED2
SHA1:	EA4F919251BCDE6EE3CB2E45C0356E1FA3B86661
SHA-256:	1E62D5B3EFE0ECE892FF79BD65457FF2DC48A840444AFD53DEEDF2F2869BD685
SHA-512:	1B4C7C09D52BB2D26F505C148FD92B987AD680E675E7496EB8E92279F750587EBCE45DECD718CBBDFB91A4CEAADCA14AD918C4F8AA7971D199593C82C31BB92F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnAwrJpDUzjsBIFDdbBmF8=?alt=proto
Preview:	Cg0KCw3WwZhfGgQIZBgC

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	dropped
Size (bytes):	113769
Entropy (8bit):	5.4928592467688535
Encrypted:	false
SSDEEP:	1536:pd8gIRPY0+r5qnWisyOFa8nvUHCC4LgvbrGYXts1N5VFUnqGj:kgDTMnWsTkpLgv2Qe1bXA
MD5:	21FB66A712FCAB3BF6667404C78631D6
SHA1:	6011F3E397AEB5B807EB6BE1A08ABFD302E9D253
SHA-256:	BAB311BF22661B153353A159F0EC931DBCB79F950FA37DAF9D0FF180CBF45DEB
SHA-512:	CD310A2C00DB5E273091F45308227CC6CA5131767823C356013AAD5EB515E75048317C4E5A793955CFBC93CE015BAFB89463066ABF0E31870AF93076E98F2586
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1372:function(e,t,

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2633), with CRLF line terminators
Category:	downloaded
Size (bytes):	2754
Entropy (8bit):	5.656764024161002
Encrypted:	false
SSDEEP:	48:t1XXw+kOhX/BxVgnK/Q6GiuGq9juwbae13NhcKBLd4KIFNQT0SKr0uvgZlAKxufd:H9W3iuV96wDrHBZ4K6QTWou0l9Cn/
MD5:	4AC5534BE757FE00AEA3FBB26567219E
SHA1:	FCA6AF338CAE9AA53C2C0DB17DD6018812A3ACE9
SHA-256:	C2C749250D965D76D6D1D81C087F65D74F471E274AADDBA9953E0917F0B75023
SHA-512:	0EEF819A074D400E9880E00C001800135D05A52EDEF13A02F44F117B6E4CCF07794ED6324E36F506FAAB53E9D0ED0C57ED5A059E67AA2E441DE98D99DF90A7D6
Malicious:	false
Reputation:	low
URL:	https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=176ed3cd16544edda2fd4ba7fcbcc236&id=6048c669-4574-b178-a111-bbac1fe5bea0&w=8DCC91171DB57F4&tkt=taBcrIH61PuCVH7eNCyH0I1otfYAPn9VOPY9aMX8tO3hZbwiNv8p7SQaSDUkkQSWBm2y2FNbZnOrlLlDpMurDuLdb2ZSP6J%252bpWAfqqNRls6Vdtmx%252bKaZLTYe1%252fdnFl8Gaey5NV0F%252f%252fF5eRljA3hB9cxtYiM3ae7hr60gcjc1x6cxYw4l0i3yBnFu5T4uP48fj7tpJ5YjhqW5P8Hy78zZgH40X3FtaKslJeqZcw9FH%252fHtpj1ZlCplxxod6C9WRlZSJhbyW314bMDGxS%252b%252ffqqnKRJQ8ZZgjkXdYAbqR5nSqyIo9Vg3TmlPyxMNYzZ65nZf&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>..</head>..<script>function BaseStamp() { this.GetStorageQsInfo = function () { if (window.localStorage) { var n = window.localStorage.getItem(lsKey); var lsupd = "False"; if (lsupd === "true" && n) { var xhr = new XMLHttpRequest(), method = "GET", url = target + "updatels.html?ofid=" + n + "&session_id=" + sid + "&CustomerId=" + cid; xhr.open(method, url, true); xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE && xhr.status === 200) { var update = xhr.responseText; if (update && update.toLowerCase() === "true") { window.localStorage.setItem(lsKey, id); } } }; xhr.send(); } if (n && n != null && n != "" \|\| (window.localStorage.setItem(lsKey, id), n = id), id != n) return "session_id=" + sid + "&CustomerId=" + cid + "&fid=" + id + "&ofid=" + n + "&w=" + ticks + "&auth=" + encodeURIComponent(authKey) } return "" }; this.newXMLHttp = function () { var n = null; return

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65402)
Category:	dropped
Size (bytes):	154554
Entropy (8bit):	5.66473931205699
Encrypted:	false
SSDEEP:	3072:BSkKnDPidmLb0jtnklcVdem4gKJ3svMBvtoGhhT+jfxzVLxpGU:BS9DPiULb0+lcdtEFtoGzKTxzVVj
MD5:	57AC9C551618BB448D0886AEC11A4DAC
SHA1:	292F8E122C7EE4CB38B5E58EC7EF9BDE5F7BD86E
SHA-256:	AA07C6925D39E7350092AAFE9C6FC0C1F47DC22AAA9526053220B8D8601E152F
SHA-512:	130219DECF3D7BB074CC5BCD026C1961895B939EFC99C1E0762106310296D4BF1DDD1FD92C7C09D68FCA7CE3AD9969B3A03C6AF00424474767525937C8A419CA
Malicious:	false
Reputation:	low
Preview:	// @license Copyright (C) 2014-2024 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed..try{window._pxAppId="PXzC5j78di",function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function n(t,n){if(t){if("string"==typeof t)return e(t,n);var r=Object.prototype.toString.call(t).slice(8,-1);return"Object"===r&&t.constructor&&(r=t.constructor.name),"Map"===r\|\|"Set"===r?Array.from(t):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?e(t,n):void 0}}function r(t){return function(t){if(Array.isArray(t))return e(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46090)
Category:	dropped
Size (bytes):	141866
Entropy (8bit):	5.429983887489752
Encrypted:	false
SSDEEP:	1536:PyeDOMSQ6fTPRUbx3XCg/MJA5N4ii5WLeV5guLDY2Js0VgtWiTJmxyCXP3onrGGW:wMc1g/Mq5p1Mv+UyJbBw+Icwf
MD5:	2509D4C564AFC2C77D16BA6CA509B39F
SHA1:	201F1D80F8EEA9F5E8A7A7224CFF18674344F886
SHA-256:	D468D9F009E53FE1C47B9D6FDEFA3FF1A8C239973F11A6F892848E341EA17CCD
SHA-512:	C928C36D58BB0B2740E9BE3F3CA3F49624253F8DAD93BA7524E55F24CCCAF630E35FCA8C596CBCE50A0C1214C4986034FD3E26D98F759949C179C54009D5D93E
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23178), with CRLF line terminators
Category:	downloaded
Size (bytes):	23642
Entropy (8bit):	5.764361819548405
Encrypted:	false
SSDEEP:	384:HqXQbHIEsQdsQvZxyF1Aw8B7Nv0edjuDNaFTLLb2M/zvyMEZWpn:KXiH9yF1IBBdq5yF/2dE
MD5:	CDE6B6665DA94B30CB27846D7F98960C
SHA1:	3F5BAC1B78CA3DA21A1B34502228EF5645ADA94E
SHA-256:	3736E423F162E08CEADF5B06CDBBCAA9B3720F6870B1220E2B83B157959489A5
SHA-512:	2F4568F847B6FCDB509F714EE844CE59FCDB5EC5991BE7A040ABD105E3F37D544EE9944BF814FA09E5B45E7760D4861DE5AEDB5135127803D0221B92E5532883
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/?session_id=176ed3cd16544edda2fd4ba7fcbcc236&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>var localTarget='https://fpt.live.com/',target='https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&',txnId='176ed3cd16544edda2fd4ba7fcbcc236',ticks='8DCC91171DB57F4',rid='6048c669-4574-b178-a111-bbac1fe5bea0',authKey='taBcrIH61PuCVH7eNCyH0I1otfYAPn9VOPY9aMX8tO3hZbwiNv8p7SQaSDUkkQSWBm2y2FNbZnOrlLlDpMurDuLdb2ZSP6J%252bpWAfqqNRls6Vdtmx%252bKaZLTYe1%252fdnFl8Gaey5NV0F%252f%252fF5eRljA3hB9cxtYiM3ae7hr60gcjc1x6cxYw4l0i3yBnFu5T4uP48fj7tpJ5YjhqW5P8Hy78zZgH40X3FtaKslJeqZcw9FH%252fHtpj1ZlCplxxod6C9WRlZSJhbyW314bMDGxS%252b%252ffqqnKRJQ8ZZgjkXdYAbqR5nSqyIo9Vg3TmlPyxMNYzZ65nZf',cid='33e01921-4d64-4f8c-a055-5bdaffd5e33d',assessment='',waitresponse=true,bbwait=false,commonquery='&PageId=SU',lsInfo=true,splitFonts=false,noFonts=false,UCH=true,PTO=100,rticks=1725035594159,ipv6Url='',txnKey='session_id',ridKey='id',lskey='MUID';(function(){function w(){var i=0,n;return t&&t.length&&(i=t.length),n

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 901881
Category:	dropped
Size (bytes):	231091
Entropy (8bit):	7.998390937544825
Encrypted:	true
SSDEEP:	6144:Z4w6J4OiKySVPhKwGX9rZUKsSqNNZPRNSBX:awkViKySV5KXX9mBS0NZZYX
MD5:	05A20B73D23C52A09386F3222045E62D
SHA1:	0991D7FD9A84F82DD39FBE065C0070D3196F497C
SHA-256:	BAB90DCF5FE87AB6DDEED7339CC36967BA7188CE3E01CCF7C65D9369056C41A4
SHA-512:	F93017FD9AC4A684D5BBC5BD44992D9687DDA5011050B9F7AA1718EA99F91E5BB7031854461E48316D10D095347E5953F376949EFCC57348980D792AD745BFCE
Malicious:	false
Reputation:	low
Preview:	...........iw.8.(.....n....dg...M....l.'.N.}}h...H...8.....+E9.g.g.{&...A.K..T.j..........r#.Fy1K.4.6.S.@V)..:...QrV..S...,./....::hW_......6G.l.....yRlHQ.L.".i\|..nw.ndJ....+..j.."..](..<..L..p?...zw9.e.....\{..C9J...M...9-....U2..cY=...."=....a...."/.3.../iF.9d..T.%.:S.Ne6.&.h.W...t....../f2.J~H.K.,..n......z6O....n..4.Z..ll...^..Z..F.N.r.CV?.....=.......r...rt........:...:..8!$(..g..A.Z.Lb%....B.....t>VZ.y....Y>-...SY..t^..:%..Yz=.c.o..'...</.26 ..!{x....bt6nm.......,.x.da/...7.x.........&......$N.......=X.........~.PL.No.(i3....'..Y..ONz..f......[[.%f[[3JL........x.d.,.U..U..:....:0.......),..Kq.o..}oI....N..W..t~+...Y..j....h..,....m.T.J.e..RB..._..b.u.ql.7u.Nz_.-2..li.......`.`O+..1h.2..S.+..F.:...l.M...t.6..B.".;u...T.g.t....@..[-.Q........b..P..<...TLm.2...K%.e6p:....]S.`Q..S.....m.#Ur..w#x....CUl.V.M.N.i.....Tv.....8k,2M.^."..ec..i>..Z...a..a.8...{_\4.,d9.33k...y...,U..vU..u..]N.# ~..bk+[L...$oUl..^y..f.;..).<R...a..?..g.?

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	449540
Entropy (8bit):	5.448887818381794
Encrypted:	false
SSDEEP:	6144:U7lu66UglOK2d/VkpJYBsLLhkSB29OWtUJGcEHKE0H3NX44n:U7tjVkpq+LlkBUJEQ
MD5:	D8FF67E1334DAD67202B05BA32DEAD18
SHA1:	7AAA398BA53310D793E4BB28E6D5F118EF342254
SHA-256:	4DC06BDE66FF69C3CD7A67B5745C329571334A98ED7AF7C356241CFED32FA6D2
SHA-512:	67A56439845499BD65D1EDED96298FC6C3EEE99022861EC16AFD9E5D2BC7F94239CA0DD08C54A0C65B057625E59BE6362CBF74D7A97FCBEFE0F9AC88B2FE713E
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 30, 2024 18:32:38.008868933 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 30, 2024 18:32:47.618597031 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 30, 2024 18:32:48.698868036 CEST	49736	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:48.698921919 CEST	443	49736	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:48.699012041 CEST	49736	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:48.699656010 CEST	49737	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:48.699700117 CEST	443	49737	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:48.699791908 CEST	49737	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:48.699922085 CEST	49736	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:48.699935913 CEST	443	49736	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:48.700057983 CEST	49737	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:48.700073004 CEST	443	49737	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:49.343131065 CEST	443	49736	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:49.343539953 CEST	49736	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:49.343574047 CEST	443	49736	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:49.344824076 CEST	443	49736	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:49.344937086 CEST	49736	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:49.346049070 CEST	49736	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:49.346232891 CEST	443	49736	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:49.346280098 CEST	49736	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:49.346399069 CEST	443	49737	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:49.346599102 CEST	49737	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:49.346626997 CEST	443	49737	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:49.347489119 CEST	443	49737	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:49.347554922 CEST	49737	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:49.347831964 CEST	49737	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:49.347887039 CEST	443	49737	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:49.388515949 CEST	443	49736	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:49.400788069 CEST	49737	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:49.400815964 CEST	443	49737	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:49.446783066 CEST	49737	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:49.556507111 CEST	443	49736	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:49.556577921 CEST	49736	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:49.829076052 CEST	443	49736	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:49.829576015 CEST	443	49736	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:49.829637051 CEST	49736	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:49.829746008 CEST	49736	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:49.829768896 CEST	443	49736	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:49.829777956 CEST	49736	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:49.829814911 CEST	49736	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:52.021747112 CEST	49744	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:32:52.021771908 CEST	443	49744	142.250.186.132	192.168.2.4
Aug 30, 2024 18:32:52.021830082 CEST	49744	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:32:52.022044897 CEST	49744	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:32:52.022059917 CEST	443	49744	142.250.186.132	192.168.2.4
Aug 30, 2024 18:32:52.685120106 CEST	443	49744	142.250.186.132	192.168.2.4
Aug 30, 2024 18:32:52.730308056 CEST	49744	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:32:52.934473038 CEST	49744	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:32:52.934492111 CEST	443	49744	142.250.186.132	192.168.2.4
Aug 30, 2024 18:32:52.935383081 CEST	443	49744	142.250.186.132	192.168.2.4
Aug 30, 2024 18:32:52.935461044 CEST	49744	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:32:52.986627102 CEST	49744	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:32:52.986782074 CEST	443	49744	142.250.186.132	192.168.2.4
Aug 30, 2024 18:32:53.039804935 CEST	49744	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:32:53.039817095 CEST	443	49744	142.250.186.132	192.168.2.4
Aug 30, 2024 18:32:53.086417913 CEST	49744	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:32:53.423183918 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:53.423232079 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:53.423296928 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:53.423505068 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:53.423517942 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:53.449788094 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:53.449811935 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:53.449872971 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:53.451719046 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:53.451730967 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:54.072218895 CEST	443	49737	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:54.072319031 CEST	443	49737	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:54.072381020 CEST	49737	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:54.092667103 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:54.092739105 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:54.098577023 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:54.098589897 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:54.098793030 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:54.149544001 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:54.228030920 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.262728930 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.262758970 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.263675928 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.263741970 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.272067070 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.272130966 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.272365093 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.272373915 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.319613934 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.372828960 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:54.416507006 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:54.495245934 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.538208008 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.538216114 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.538240910 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.538254023 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.538264036 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.538279057 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.538302898 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.538319111 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.538325071 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.538348913 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.558799982 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:54.559111118 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:54.559170008 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:54.561378002 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:54.561398029 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:54.561410904 CEST	49746	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:54.561415911 CEST	443	49746	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:54.584269047 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.584278107 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.584291935 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.584309101 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.584342003 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.584357977 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.584392071 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.586668968 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.586709976 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.586718082 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.586728096 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.586741924 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.586749077 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.586791992 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.586811066 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.637912035 CEST	49750	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:54.637938976 CEST	443	49750	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:54.638190985 CEST	49750	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:54.638634920 CEST	49750	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:54.638647079 CEST	443	49750	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:54.672352076 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.672377110 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.672429085 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.672447920 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.672461987 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.672492981 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.672497034 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.672506094 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.672559977 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.672569036 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.672580957 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.710469961 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.710489035 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.710568905 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.710582972 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.757529974 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.757947922 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.757962942 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.758025885 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.758034945 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.758070946 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.758436918 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.758480072 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.758521080 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.758528948 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.758546114 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.758562088 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.758594036 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.767456055 CEST	49745	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.767484903 CEST	443	49745	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.798593998 CEST	49737	443	192.168.2.4	13.107.246.73
Aug 30, 2024 18:32:54.798621893 CEST	443	49737	13.107.246.73	192.168.2.4
Aug 30, 2024 18:32:54.868997097 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.869038105 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:54.869106054 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.873569012 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:54.873584032 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:55.290857077 CEST	443	49750	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:55.291038990 CEST	49750	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:55.383968115 CEST	49750	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:55.383984089 CEST	443	49750	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:55.384268999 CEST	443	49750	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:55.393625021 CEST	49750	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:55.436506987 CEST	443	49750	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:55.582720041 CEST	443	49750	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:55.582788944 CEST	443	49750	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:55.582847118 CEST	49750	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:55.583715916 CEST	49750	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:55.583733082 CEST	443	49750	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:55.583760023 CEST	49750	443	192.168.2.4	184.28.90.27
Aug 30, 2024 18:32:55.583769083 CEST	443	49750	184.28.90.27	192.168.2.4
Aug 30, 2024 18:32:55.668418884 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:55.668869972 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:55.668894053 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:55.669859886 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:55.669948101 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:55.670253038 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:55.670314074 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:55.670844078 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:55.670851946 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:55.715518951 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:55.930751085 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:55.959830999 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:55.959875107 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:55.959953070 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:55.961055994 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:55.961075068 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:55.977622032 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:55.977632046 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:55.977643967 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:55.977686882 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:55.977700949 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:55.977708101 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:55.977727890 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:55.977750063 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.017817020 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.017824888 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.017863989 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.017913103 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.017925024 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.017972946 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.019979000 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.019994974 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.020057917 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.020066023 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.072204113 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.103409052 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.103418112 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.103454113 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.103465080 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.103507042 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.103519917 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.103574038 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.105000973 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.105007887 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.105032921 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.105076075 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.105082989 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.105103970 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.105123997 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.106161118 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.106180906 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.106230021 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.106235981 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.106271982 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.106283903 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.107220888 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.107238054 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.107297897 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.107309103 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.107911110 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.189574003 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.189589977 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.189666033 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.189678907 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.190409899 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.190449953 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.190470934 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.190479994 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.190512896 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.235259056 CEST	49757	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.235294104 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.235443115 CEST	49757	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.235675097 CEST	49757	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.235686064 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.236207008 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.236213923 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.236257076 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.236454010 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.236463070 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.236850023 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.238193035 CEST	49752	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.238203049 CEST	443	49752	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.774965048 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.777851105 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.777869940 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.778225899 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.778712988 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.778775930 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:56.778989077 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:56.824496031 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.030639887 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.030916929 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.030941010 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.031800032 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.031876087 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.035052061 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.035108089 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.035233021 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.035242081 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.044389963 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.065637112 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.065920115 CEST	49757	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.065927029 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.066246986 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.067764997 CEST	49757	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.067831993 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.067950964 CEST	49757	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.083766937 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.083782911 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.083832026 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.083848000 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.083900928 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.088470936 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.108500957 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.133923054 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.133939028 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.134033918 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.134051085 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.135778904 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.135799885 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.135848045 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.135858059 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.181879997 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.221446037 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.221470118 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.221501112 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.221554041 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.221565962 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.221646070 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.222879887 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.222898006 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.222939968 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.222949028 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.222995996 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.223826885 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.223851919 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.223892927 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.223901987 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.223948002 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.225348949 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.225385904 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.225409985 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.225418091 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.225440025 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.225461006 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.225650072 CEST	49756	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.225668907 CEST	443	49756	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.294979095 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.334749937 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.335969925 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.341630936 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.341639996 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.341680050 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.341692924 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.341716051 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.341722012 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.341737032 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.341845989 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.382791996 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.382803917 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.382843971 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.382867098 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.382874012 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.382888079 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.382920027 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.383898020 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.383922100 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.383964062 CEST	49757	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.383971930 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.384020090 CEST	49757	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.384563923 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.384586096 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.384622097 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.384629965 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.384655952 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.428422928 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.428441048 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.428513050 CEST	49757	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.428522110 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.431000948 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.431025982 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.431054115 CEST	49757	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.431061029 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.431119919 CEST	49757	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.433949947 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.468410015 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.468417883 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.468466043 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.468487024 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.468491077 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.468513966 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.468533993 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.468544006 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.470181942 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.470196962 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.470244884 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.470262051 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.470307112 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.471868992 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.471883059 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.471929073 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.471944094 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.472223043 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.515059948 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.515075922 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.515153885 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.515194893 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.515235901 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.519968033 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.520034075 CEST	49757	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.520039082 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.520061970 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.520066977 CEST	49757	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.520096064 CEST	49757	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.521311045 CEST	49757	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.521327972 CEST	443	49757	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.554461956 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.554485083 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.554523945 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.554537058 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.554562092 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.554580927 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.555356026 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.555370092 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.555452108 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.555460930 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.555701971 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.556277990 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.556292057 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.556365967 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.556374073 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.556514978 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.557274103 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.557287931 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.557354927 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.557363033 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.557456017 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.558161974 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.558176041 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.558244944 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.558252096 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.558336020 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.559087992 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.559108019 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.559179068 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.559185982 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.559268951 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.560051918 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.560065985 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.560128927 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.560136080 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.560193062 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.561877966 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.604546070 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.604557037 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.604700089 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.605232954 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.605243921 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.640116930 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.640131950 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.640223980 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.640242100 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.640810966 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.640829086 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.640858889 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.640866041 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.640882969 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.640916109 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.640921116 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.641319990 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.641334057 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.641369104 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.641376019 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.641386986 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.641733885 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.641752005 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.641782045 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.641791105 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.641803980 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.645107985 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.645126104 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.645184994 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.645198107 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.645560980 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.645579100 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.645625114 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.645632029 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.645648956 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.646107912 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.646120071 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.646176100 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.646186113 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.646198034 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.687047958 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.687067032 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.687177896 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.687192917 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.716276884 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.728344917 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.728367090 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.728441954 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.728455067 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.729008913 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.729027033 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.729077101 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.729084969 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.729115963 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.729548931 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.729562044 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.729615927 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.729624033 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.730264902 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.730282068 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.730333090 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.730340958 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.730952024 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.730966091 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.731015921 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.731024027 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.731158018 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.731225967 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.731226921 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.731323957 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.740537882 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.890934944 CEST	49758	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.890979052 CEST	443	49758	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.914613008 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.914627075 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.914690971 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.915096045 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.915107012 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.934057951 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.934078932 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.934180975 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.934437990 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.934449911 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.961138964 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.961149931 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:57.961394072 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.962205887 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:57.962218046 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:58.427886963 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:58.428155899 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:58.428168058 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:58.428450108 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:58.428792953 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:58.428844929 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:58.428939104 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:58.476496935 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.628238916 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.631201029 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.631227970 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.631510019 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.631516933 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.631614923 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.631625891 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.631793976 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.632314920 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.632363081 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.632451057 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.632498980 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.632555962 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.632802010 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.632849932 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.632921934 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.632927895 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.634510994 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.634526968 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.634598017 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.634605885 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.634649992 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.636795998 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.636810064 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.636868000 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.636874914 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.640769005 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.640789032 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.640820980 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.640825987 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.640863895 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.641474962 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.641525030 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.641529083 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.641565084 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.641714096 CEST	49761	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.641717911 CEST	443	49761	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.672497034 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.679069996 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.679131031 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.811688900 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.811973095 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.811981916 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.812844038 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.812901020 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.813210964 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.813261986 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.813370943 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.813376904 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.866597891 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.905519009 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.906833887 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.906841993 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.906851053 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.906874895 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.906912088 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.906927109 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.906955957 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.907167912 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.910486937 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.946963072 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.947006941 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.947079897 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.947079897 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.951618910 CEST	49763	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.951630116 CEST	443	49763	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.953723907 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.953738928 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.953823090 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.954122066 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:32:59.954133034 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:32:59.960354090 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.003216982 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.003226042 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.003257036 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.003268957 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.003279924 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.003303051 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.003310919 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.003343105 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.003478050 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.003882885 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.003890991 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.003938913 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.003973007 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.003981113 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.003992081 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.004024029 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.005697012 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.005711079 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.005897045 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.005902052 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.006083965 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.075161934 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.095324039 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.095341921 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.095899105 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.095906019 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.096411943 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.096431017 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.096498966 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.096498966 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.096504927 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.097544909 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.097558022 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.098911047 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.098920107 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.101999998 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.116594076 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.122040033 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.122047901 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.122081995 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.122096062 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.122108936 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.122124910 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.122133970 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.122165918 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.122165918 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.122910976 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.135869026 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.135889053 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.136121035 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.136131048 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.136312962 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.163350105 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.163358927 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.163388968 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.163400888 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.163485050 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.163485050 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.163494110 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.166776896 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.166805983 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.166815042 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.166826963 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.166853905 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.166862011 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.166893005 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.167898893 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.188226938 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.188246965 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.188890934 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.188937902 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.188941002 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.188961029 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.188975096 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.188983917 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.189594984 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.189610004 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.190329075 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.190346956 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.190361023 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.190367937 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.190377951 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.191461086 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.191474915 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.191498995 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.191504955 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.191565990 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.191565990 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.192301989 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.192317009 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.194844961 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.194850922 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.194909096 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.228230953 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.228249073 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.228310108 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.228322983 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.228349924 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.228456020 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.249423981 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.249439955 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.249933958 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.249941111 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.250236988 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.250799894 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.250822067 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.251069069 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.251075029 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.251471043 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.251888990 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.251904964 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.252037048 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.252042055 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.252103090 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.255904913 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.280998945 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.281017065 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.281300068 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.281335115 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.281351089 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.281358957 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.281371117 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.281877995 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.281891108 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.281920910 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.281930923 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.281958103 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.282689095 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.282707930 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.286765099 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.286780119 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.286813021 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.286823034 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.286887884 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.286889076 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.287131071 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.287144899 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.287595987 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.287632942 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.287632942 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.287648916 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.287663937 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.287894011 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.308959961 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.308979988 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.309051991 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.309063911 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.311995983 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.335565090 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.335582018 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.335640907 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.335647106 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.335668087 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.335896969 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.336574078 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.336594105 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.337371111 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.337407112 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.337416887 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.337456942 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.338399887 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.338413954 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.338433027 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.338438988 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.338466883 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.339364052 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.339381933 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.339437962 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.339437962 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.339445114 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.340372086 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.340393066 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.340462923 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.340462923 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.340471029 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.343624115 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.372190952 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.372211933 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.372297049 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.372307062 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.372437000 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.372618914 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.372636080 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.372769117 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.372775078 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.372859955 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.373181105 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.373209953 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.373238087 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.373243093 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.373270988 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.373629093 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.373647928 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.373661041 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.373666048 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.373677015 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.373928070 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.374198914 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.374214888 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.374831915 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.374866009 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.374871016 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.374886990 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.374898911 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.374906063 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.374937057 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.374984026 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.375006914 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.380254984 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.382916927 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.395517111 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.395525932 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.395555019 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.395565987 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.395586014 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.395596027 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.395622969 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.395749092 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.422251940 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.422262907 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.422301054 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.422336102 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.422348022 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.422372103 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.422506094 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.422523975 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.422538996 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.422544003 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.422569990 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.422673941 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.423285961 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.423316956 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.423346996 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.423351049 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.423398018 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.423398018 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.423759937 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.423773050 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.423921108 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.423927069 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.423993111 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.424194098 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.424211025 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.424273014 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.424273014 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.424279928 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.427228928 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.427244902 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.427342892 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.427342892 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.427350998 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.427733898 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.427747011 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.427814007 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.427814007 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.427819967 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.427937984 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.465517044 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.465591908 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.465946913 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.508605003 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.508622885 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.508728981 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.508728981 CEST	49762	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.508743048 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.508758068 CEST	443	49762	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.508990049 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.512891054 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.512906075 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.512989044 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.512995958 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.513345957 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.513362885 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.513397932 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.513432026 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.513432026 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.513437986 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.513472080 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.513479948 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.513508081 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.513523102 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.514916897 CEST	49764	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.514921904 CEST	443	49764	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.649138927 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.649178982 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.649341106 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.651309967 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.651323080 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.654742002 CEST	49767	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.654764891 CEST	443	49767	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.654912949 CEST	49767	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.690704107 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.690713882 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.690829039 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.731940985 CEST	49767	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.731955051 CEST	443	49767	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.733938932 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.733949900 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.788254976 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.791021109 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.791029930 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.791369915 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.797333956 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.797405958 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.797708988 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.844506025 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.871927023 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.871948957 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:00.872028112 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.872623920 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:00.872636080 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.002012014 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.002049923 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.002106905 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.002677917 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.002687931 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.058192015 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.105902910 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.107908010 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.107918978 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.107942104 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.107949972 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.107980013 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.107980967 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.108000994 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.108058929 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.108067036 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.108079910 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.108130932 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.130800962 CEST	49765	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.130810976 CEST	443	49765	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.465827942 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.467762947 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.467775106 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.468075991 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.468759060 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.468816996 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.468998909 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.516508102 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.534025908 CEST	443	49767	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.534292936 CEST	49767	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.534306049 CEST	443	49767	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.534593105 CEST	443	49767	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.534986973 CEST	49767	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.535038948 CEST	443	49767	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.535247087 CEST	49767	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.576503038 CEST	443	49767	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.577097893 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.577315092 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.577322006 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.578465939 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.578524113 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.578933954 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.578993082 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.579128027 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.579133987 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.619967937 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.710474968 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.710845947 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.710855961 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.711182117 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.711895943 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.711960077 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.712306023 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.733884096 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.733926058 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.733968973 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.733979940 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.733989954 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.734025955 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.734867096 CEST	49766	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.734879971 CEST	443	49766	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.752506018 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.797857046 CEST	443	49767	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.797960043 CEST	443	49767	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.798012018 CEST	49767	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.798017979 CEST	443	49767	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.798052073 CEST	49767	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.798274040 CEST	443	49767	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.798306942 CEST	443	49767	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.798343897 CEST	49767	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.824496984 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.824824095 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.824831963 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.825695992 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.825750113 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.826880932 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.826931000 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.827800035 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.827805996 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.848021984 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.848120928 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.848156929 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.848170996 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.848176956 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.848211050 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.863543987 CEST	49767	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.863553047 CEST	443	49767	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.873656988 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.921926975 CEST	49768	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.921932936 CEST	443	49768	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.984406948 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.989820004 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.989845991 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:01.989933014 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.996560097 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:01.996572971 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.005748987 CEST	49776	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.005749941 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.005769014 CEST	443	49776	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.005769968 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.005968094 CEST	49776	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.005973101 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.006294012 CEST	49776	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.006294966 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.006304026 CEST	443	49776	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.006305933 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.027868032 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.027888060 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.027940989 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.027951956 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.027976990 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.028029919 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.078385115 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.078407049 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.078493118 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.078510046 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.078557968 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.079924107 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.079940081 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.080039024 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.080045938 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.080137968 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.091270924 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.134927988 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.138951063 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.138959885 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.138992071 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.139000893 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.139015913 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.139055014 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.139065027 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.139089108 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.143912077 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.169784069 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.169806004 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.169900894 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.169908047 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.169965029 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.171211004 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.171233892 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.171331882 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.171331882 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.171339989 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.171430111 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.172384024 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.172399998 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.172483921 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.172489882 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.172600031 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.173459053 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.173475981 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.173554897 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.173561096 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.173609972 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.182980061 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.182990074 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.183015108 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.183077097 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.183085918 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.183109045 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.183217049 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.184309959 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.184328079 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.184417963 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.184423923 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.184477091 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.262187004 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.262202978 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.262279034 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.262285948 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.262381077 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.262825012 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.262840986 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.263129950 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.263137102 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.263222933 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.263453007 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.263468027 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.263540030 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.263540030 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.263546944 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.263638020 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.264492035 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.264507055 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.264589071 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.264595032 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.264684916 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.266900063 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.266913891 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.267005920 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.267013073 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.267103910 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.267210007 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.267225027 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.267256975 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.267263889 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.267293930 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.267342091 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.268285036 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.268304110 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.268340111 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.268346071 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.268363953 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.268444061 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.275213003 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.275233030 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.275310040 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.275310040 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.275316954 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.276493073 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.276511908 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.276587963 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.276587963 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.276592970 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.277566910 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.277582884 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.277643919 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.277643919 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.277651072 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.277750969 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.278669119 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.278701067 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.278734922 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.278772116 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.278937101 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.291918993 CEST	49772	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.291933060 CEST	443	49772	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.334171057 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.334239960 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.334418058 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.334806919 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.334817886 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.354438066 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.354456902 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.354568958 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.354578972 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.354708910 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.355001926 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.355017900 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.355097055 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.355103016 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.355200052 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.355546951 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.355565071 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.355634928 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.355634928 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.355643034 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.355855942 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.355979919 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.355994940 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.356071949 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.356071949 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.356079102 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.356137991 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.356668949 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.356684923 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.356769085 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.356776953 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.356873989 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.357352972 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.357369900 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.357414007 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.357439995 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.357439995 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.357449055 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.357481003 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.357507944 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.362828970 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.397645950 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.397664070 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.397733927 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.397738934 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.445076942 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.446938038 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.446954012 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.447026968 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.447026968 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.447033882 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.447185040 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.447550058 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.447568893 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.447618961 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.447624922 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.447653055 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.447805882 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.447839022 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.447881937 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.447906971 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.447912931 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.447938919 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.447952032 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.447977066 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.450022936 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.585433006 CEST	443	49744	142.250.186.132	192.168.2.4
Aug 30, 2024 18:33:02.585498095 CEST	443	49744	142.250.186.132	192.168.2.4
Aug 30, 2024 18:33:02.585760117 CEST	49744	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:33:02.801212072 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.809048891 CEST	443	49776	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.848618984 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:02.851264954 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.851267099 CEST	49776	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:02.903918028 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.046979904 CEST	49771	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.046999931 CEST	443	49771	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.047956944 CEST	49776	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.047975063 CEST	443	49776	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.048239946 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.048253059 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.048501015 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.048511028 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.048727036 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.048866034 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.049382925 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.049452066 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.049529076 CEST	443	49776	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.049577951 CEST	49776	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.050034046 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.050095081 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.050688982 CEST	49776	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.050738096 CEST	443	49776	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.050815105 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.051131010 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.051212072 CEST	49776	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.051217079 CEST	443	49776	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.096498966 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.096507072 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.102889061 CEST	49776	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.127696037 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.127912045 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.127924919 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.128948927 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.129010916 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.129441977 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.129487038 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.129647970 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.129652977 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.181030989 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.232038975 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.232100010 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.232144117 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.232156038 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.232170105 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.232215881 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.232920885 CEST	443	49776	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.232964993 CEST	443	49776	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.233007908 CEST	49776	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.233019114 CEST	443	49776	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.233031034 CEST	443	49776	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.233074903 CEST	49776	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.233474970 CEST	49774	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.233489037 CEST	443	49774	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.235373020 CEST	49776	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.235384941 CEST	443	49776	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.238909006 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.238945961 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.238986969 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.238991976 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.239034891 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.239386082 CEST	49775	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.239398003 CEST	443	49775	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.391419888 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.392651081 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.392659903 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.392693996 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.392709017 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.392716885 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.392718077 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.392730951 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.392755032 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.392781973 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.478945017 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.478961945 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.479020119 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.479026079 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.479054928 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.479079962 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.517683029 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.517703056 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.517786026 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.517791986 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.517829895 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.524931908 CEST	49744	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:33:03.524943113 CEST	443	49744	142.250.186.132	192.168.2.4
Aug 30, 2024 18:33:03.564604998 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.564621925 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.564659119 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.564666033 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.564683914 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.564698935 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.565200090 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.565213919 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.565257072 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.565262079 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.565280914 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.565299988 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.565303087 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.567683935 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.567703962 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.567737103 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.567742109 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.567765951 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.568475962 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.568496943 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.568526983 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.568535089 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.568553925 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.568572998 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.568620920 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:03.568654060 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.569498062 CEST	49777	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:03.569505930 CEST	443	49777	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:11.233217955 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:11.233248949 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:11.233319044 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:11.235833883 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:11.235846043 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:11.237509966 CEST	49787	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:11.237530947 CEST	443	49787	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:11.237606049 CEST	49787	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:11.238001108 CEST	49787	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:11.238014936 CEST	443	49787	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:11.910303116 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:11.958303928 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.071300983 CEST	443	49787	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:12.115396976 CEST	49787	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:12.179939985 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.179980040 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.180255890 CEST	49787	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:12.180279016 CEST	443	49787	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:12.181638956 CEST	443	49787	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:12.181726933 CEST	49787	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:12.181787968 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.181842089 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.186991930 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.187098026 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.187541962 CEST	49787	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:12.187616110 CEST	443	49787	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:12.187822104 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.187830925 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.227844000 CEST	49787	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:12.227844954 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.227854013 CEST	443	49787	152.199.21.175	192.168.2.4
Aug 30, 2024 18:33:12.273247957 CEST	49787	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:12.290029049 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.290054083 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.290060043 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.290088892 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.290106058 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.290112019 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.290138006 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.290167093 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.290198088 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.290220022 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.375926971 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.375951052 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.376005888 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.376043081 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.376070023 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.376087904 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.378175974 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.378195047 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.378253937 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.378263950 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.378324032 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.462013006 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.462033033 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.462090015 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.462105989 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.462138891 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.462157011 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.462574959 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.462593079 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.462634087 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.462641001 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.462671041 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.462687016 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.463665009 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.463681936 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.463757992 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.463767052 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.463812113 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.465375900 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.465392113 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.465464115 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.465472937 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.465521097 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.549278021 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.549297094 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.549382925 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.549396992 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.549458027 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.549637079 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.549653053 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.549710989 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.549721956 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.549757957 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.550513029 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.550528049 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.550570011 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.550575972 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.550612926 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.550631046 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.551078081 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.551094055 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.551139116 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.551150084 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.551187992 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.551774025 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.551789045 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.551851988 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.551860094 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.551904917 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.552695036 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.552710056 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.552774906 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.552782059 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.552820921 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.553517103 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.553534031 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.553570032 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.553575993 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.553606033 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.553626060 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.553678989 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.553719997 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.553726912 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.553766012 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:12.553888083 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.564368963 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.619210005 CEST	49786	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:12.619235992 CEST	443	49786	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.137684107 CEST	49788	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:13.137728930 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.137865067 CEST	49788	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:13.138111115 CEST	49788	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:13.138118029 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.392390013 CEST	49791	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:13.392422915 CEST	443	49791	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.392499924 CEST	49791	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:13.392725945 CEST	49792	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:13.392762899 CEST	443	49792	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.392813921 CEST	49792	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:13.409487009 CEST	49791	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:13.409513950 CEST	443	49791	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.410012007 CEST	49792	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:13.410031080 CEST	443	49792	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.420337915 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:13.420352936 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:13.420401096 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:13.421005011 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:13.421013117 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:13.802618027 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.803466082 CEST	49788	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:13.803487062 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.803828955 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.807617903 CEST	49788	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:13.807677984 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.832523108 CEST	49788	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:13.876499891 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.941296101 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.941313028 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.941328049 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.941382885 CEST	49788	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:13.941392899 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:13.941442966 CEST	49788	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.029092073 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.029109955 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.029180050 CEST	49788	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.029196978 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.029247046 CEST	49788	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.029251099 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.029273033 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.029315948 CEST	49788	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.030791998 CEST	49788	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.030803919 CEST	443	49788	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.043081999 CEST	443	49791	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.047349930 CEST	49791	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.047360897 CEST	443	49791	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.048422098 CEST	443	49791	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.048506021 CEST	49791	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.055159092 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.064795017 CEST	49791	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.064878941 CEST	443	49791	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.065866947 CEST	49791	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.065877914 CEST	443	49791	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.067234039 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.067250013 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.068723917 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.068821907 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.070099115 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.070173025 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.070396900 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.070405960 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.082318068 CEST	443	49792	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.083169937 CEST	49792	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.083178043 CEST	443	49792	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.084135056 CEST	443	49792	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.084199905 CEST	49792	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.084693909 CEST	49792	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.084748030 CEST	443	49792	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.084978104 CEST	49792	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.084984064 CEST	443	49792	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.116708040 CEST	49797	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.116744041 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.116837025 CEST	49797	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.117681026 CEST	49797	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.117695093 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.117854118 CEST	49791	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.117880106 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.133578062 CEST	49792	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.161240101 CEST	443	49791	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.161323071 CEST	443	49791	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.161376953 CEST	443	49791	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.161386967 CEST	49791	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.161453962 CEST	49791	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.165463924 CEST	49791	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.165477037 CEST	443	49791	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.172578096 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.172605038 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.172610998 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.172657013 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.172668934 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.172678947 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.172683954 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.172694921 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.172777891 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.216350079 CEST	443	49792	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.216475964 CEST	443	49792	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.216532946 CEST	49792	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.219198942 CEST	49792	443	192.168.2.4	13.107.246.63
Aug 30, 2024 18:33:14.219224930 CEST	443	49792	13.107.246.63	192.168.2.4
Aug 30, 2024 18:33:14.254601002 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.254623890 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.254667997 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.254678011 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.254710913 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.254739046 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.256781101 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.256795883 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.256910086 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.256917000 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.256984949 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.340470076 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.340497971 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.340547085 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.340557098 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.340634108 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.341198921 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.341217995 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.341294050 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.341300011 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.341346025 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.341924906 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.341939926 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.342009068 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.342015028 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.342050076 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.342608929 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.342624903 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.342675924 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.342681885 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.342727900 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.427638054 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.427659988 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.427747965 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.427758932 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.427798033 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.428330898 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.428345919 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.428390980 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.428395987 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.428436041 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.428874969 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.428889990 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.428940058 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.428945065 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.428978920 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.429162025 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.429174900 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.429224968 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.429229975 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.429270983 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.429783106 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.429799080 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.429847002 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.429852009 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.429884911 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.430516005 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.430529118 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.430572987 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.430577993 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.430615902 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.430927992 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.430942059 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.430990934 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.430995941 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.431030035 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.431128979 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.431171894 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.431178093 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.431215048 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.434041977 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.493905067 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.501461983 CEST	49795	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.501480103 CEST	443	49795	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.787477970 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.787828922 CEST	49797	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.787847042 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.788155079 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.788656950 CEST	49797	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.788717031 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.788913012 CEST	49797	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.836493015 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.913868904 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.913893938 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.913908958 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.913978100 CEST	49797	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:14.913994074 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:14.914033890 CEST	49797	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.000734091 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.000756025 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.000787973 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.000818968 CEST	49797	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.000829935 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.000853062 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.000878096 CEST	49797	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.000895977 CEST	49797	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.123689890 CEST	49797	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.123716116 CEST	443	49797	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.130660057 CEST	49799	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.130702972 CEST	443	49799	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.130775928 CEST	49799	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.130939960 CEST	49799	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.130953074 CEST	443	49799	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.132407904 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.132416010 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.132477045 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.132654905 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.132668018 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.863781929 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.874398947 CEST	443	49799	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.906872988 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.920875072 CEST	49799	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.924927950 CEST	49799	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.924943924 CEST	443	49799	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.925359011 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.925365925 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.925898075 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.926127911 CEST	443	49799	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.926875114 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.926948071 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.928173065 CEST	49799	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.928303957 CEST	443	49799	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.932317972 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.932496071 CEST	49799	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:15.972512007 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:15.980506897 CEST	443	49799	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:16.027240992 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:16.027587891 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:16.027631044 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:16.027637005 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:16.027684927 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:16.034106970 CEST	443	49799	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:16.034183979 CEST	443	49799	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:16.034234047 CEST	49799	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:16.306168079 CEST	49799	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:16.306199074 CEST	443	49799	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:16.306610107 CEST	49800	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:16.306618929 CEST	443	49800	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:16.472508907 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:16.472534895 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:16.472682953 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:16.472970009 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:16.472985029 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:16.475800037 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:16.475851059 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:16.475914001 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:16.476169109 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:16.476191044 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:16.972668886 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:17.180504084 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:17.183996916 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:17.252017021 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:17.353384972 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:17.353404045 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:17.353688955 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:17.353710890 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:17.354815006 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:17.354849100 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:17.354862928 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:17.354896069 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:17.354952097 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:17.419903040 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:17.420121908 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:17.425041914 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:17.425173998 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:17.425909042 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:17.425928116 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:17.426381111 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:17.426393032 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:17.495683908 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:17.495693922 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:17.529982090 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:17.530040979 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:17.530107021 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:17.552557945 CEST	49802	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:17.552572966 CEST	443	49802	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:17.562165022 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:17.562283039 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:17.562335968 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:17.575303078 CEST	49803	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:17.575329065 CEST	443	49803	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:17.706701994 CEST	49805	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:17.706736088 CEST	443	49805	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:17.706820965 CEST	49805	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:17.707338095 CEST	49805	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:17.707353115 CEST	443	49805	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:17.707807064 CEST	49806	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:17.707880974 CEST	443	49806	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:17.707931042 CEST	49806	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:17.708220005 CEST	49806	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:17.708236933 CEST	443	49806	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.181130886 CEST	443	49806	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.181507111 CEST	49806	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.181529999 CEST	443	49806	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.183754921 CEST	443	49806	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.183803082 CEST	49806	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.184216976 CEST	49806	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.184343100 CEST	443	49806	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.184429884 CEST	49806	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.184436083 CEST	443	49806	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.279640913 CEST	443	49805	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:18.279906988 CEST	49805	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:18.279930115 CEST	443	49805	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:18.280829906 CEST	443	49805	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:18.280884981 CEST	49805	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:18.281342983 CEST	49805	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:18.281394005 CEST	443	49805	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:18.281497955 CEST	49805	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:18.294014931 CEST	443	49806	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.294059992 CEST	49806	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.296329975 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.296361923 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.296421051 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.296777010 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.296786070 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.297815084 CEST	49806	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.297830105 CEST	443	49806	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.328495026 CEST	443	49805	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:18.381375074 CEST	443	49805	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:18.381443024 CEST	49805	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:18.382844925 CEST	49805	443	192.168.2.4	34.107.199.61
Aug 30, 2024 18:33:18.382862091 CEST	443	49805	34.107.199.61	192.168.2.4
Aug 30, 2024 18:33:18.702193975 CEST	49810	443	192.168.2.4	13.107.246.42
Aug 30, 2024 18:33:18.702214956 CEST	443	49810	13.107.246.42	192.168.2.4
Aug 30, 2024 18:33:18.702291012 CEST	49810	443	192.168.2.4	13.107.246.42
Aug 30, 2024 18:33:18.702498913 CEST	49810	443	192.168.2.4	13.107.246.42
Aug 30, 2024 18:33:18.702512026 CEST	443	49810	13.107.246.42	192.168.2.4
Aug 30, 2024 18:33:18.751581907 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.751874924 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.751888990 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.752264023 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.752595901 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.752665043 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.752777100 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.752800941 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.752847910 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.907286882 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.907432079 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.907773972 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.908178091 CEST	49809	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.908195972 CEST	443	49809	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.915043116 CEST	49813	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.915083885 CEST	443	49813	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:18.915318966 CEST	49813	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.915545940 CEST	49813	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:18.915556908 CEST	443	49813	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:19.336477041 CEST	443	49810	13.107.246.42	192.168.2.4
Aug 30, 2024 18:33:19.336853027 CEST	49810	443	192.168.2.4	13.107.246.42
Aug 30, 2024 18:33:19.336879969 CEST	443	49810	13.107.246.42	192.168.2.4
Aug 30, 2024 18:33:19.338116884 CEST	443	49810	13.107.246.42	192.168.2.4
Aug 30, 2024 18:33:19.338231087 CEST	49810	443	192.168.2.4	13.107.246.42
Aug 30, 2024 18:33:19.339564085 CEST	49810	443	192.168.2.4	13.107.246.42
Aug 30, 2024 18:33:19.339643002 CEST	443	49810	13.107.246.42	192.168.2.4
Aug 30, 2024 18:33:19.339885950 CEST	49810	443	192.168.2.4	13.107.246.42
Aug 30, 2024 18:33:19.372258902 CEST	443	49813	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:19.373378038 CEST	49813	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:19.373404026 CEST	443	49813	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:19.373878956 CEST	443	49813	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:19.374773026 CEST	49813	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:19.374850988 CEST	443	49813	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:19.375288010 CEST	49813	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:19.384502888 CEST	443	49810	13.107.246.42	192.168.2.4
Aug 30, 2024 18:33:19.416501999 CEST	443	49813	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:19.438760042 CEST	443	49810	13.107.246.42	192.168.2.4
Aug 30, 2024 18:33:19.438777924 CEST	443	49810	13.107.246.42	192.168.2.4
Aug 30, 2024 18:33:19.439958096 CEST	49810	443	192.168.2.4	13.107.246.42
Aug 30, 2024 18:33:19.439985037 CEST	443	49810	13.107.246.42	192.168.2.4
Aug 30, 2024 18:33:19.439996958 CEST	443	49810	13.107.246.42	192.168.2.4
Aug 30, 2024 18:33:19.440602064 CEST	49810	443	192.168.2.4	13.107.246.42
Aug 30, 2024 18:33:19.442893982 CEST	49810	443	192.168.2.4	13.107.246.42
Aug 30, 2024 18:33:19.442907095 CEST	443	49810	13.107.246.42	192.168.2.4
Aug 30, 2024 18:33:19.459336042 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:19.459381104 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:19.459450006 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:19.459865093 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:19.459876060 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:19.480705976 CEST	443	49813	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:19.480840921 CEST	443	49813	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:19.480899096 CEST	49813	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:19.481795073 CEST	49813	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:19.481820107 CEST	443	49813	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:20.105756044 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:20.126380920 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:20.126405954 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:20.127460957 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:20.127525091 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:20.169440985 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:20.169563055 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:20.170167923 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:20.170181990 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:20.210971117 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:20.270843983 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:20.270864964 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:20.270874023 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:20.270908117 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:20.270926952 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:20.270932913 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:20.270931959 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:20.270958900 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:20.270983934 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:20.270992994 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:20.271008015 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:20.271032095 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:20.901433945 CEST	49814	443	192.168.2.4	13.107.246.60
Aug 30, 2024 18:33:20.901467085 CEST	443	49814	13.107.246.60	192.168.2.4
Aug 30, 2024 18:33:21.484170914 CEST	80	49724	87.248.205.0	192.168.2.4
Aug 30, 2024 18:33:21.484930992 CEST	49724	80	192.168.2.4	87.248.205.0
Aug 30, 2024 18:33:21.561364889 CEST	49724	80	192.168.2.4	87.248.205.0
Aug 30, 2024 18:33:21.566176891 CEST	80	49724	87.248.205.0	192.168.2.4
Aug 30, 2024 18:33:23.685317993 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:23.685363054 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:23.685426950 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:23.686690092 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:23.686707973 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:24.159517050 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:24.160146952 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:24.160172939 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:24.160557032 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:24.161159039 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:24.161222935 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:24.161585093 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:24.161741018 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:24.161775112 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:24.298300028 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:24.298415899 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:24.298877001 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:24.299032927 CEST	49817	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:24.299052954 CEST	443	49817	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:24.672192097 CEST	49818	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:24.672234058 CEST	443	49818	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:24.672292948 CEST	49818	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:24.673233032 CEST	49818	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:24.673247099 CEST	443	49818	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:25.128101110 CEST	443	49818	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:25.180115938 CEST	49818	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:25.213318110 CEST	49818	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:25.213349104 CEST	443	49818	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:25.213917017 CEST	443	49818	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:25.214236975 CEST	49818	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:25.214306116 CEST	443	49818	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:25.214484930 CEST	49818	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:25.256495953 CEST	443	49818	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:25.317841053 CEST	443	49818	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:25.317919016 CEST	443	49818	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:25.317975998 CEST	49818	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:25.320369959 CEST	49818	443	192.168.2.4	35.190.10.96
Aug 30, 2024 18:33:25.320395947 CEST	443	49818	35.190.10.96	192.168.2.4
Aug 30, 2024 18:33:52.064909935 CEST	49821	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:33:52.064939976 CEST	443	49821	142.250.186.132	192.168.2.4
Aug 30, 2024 18:33:52.065129042 CEST	49821	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:33:52.065409899 CEST	49821	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:33:52.065423012 CEST	443	49821	142.250.186.132	192.168.2.4
Aug 30, 2024 18:33:52.694346905 CEST	443	49821	142.250.186.132	192.168.2.4
Aug 30, 2024 18:33:52.705646038 CEST	49821	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:33:52.705663919 CEST	443	49821	142.250.186.132	192.168.2.4
Aug 30, 2024 18:33:52.705996037 CEST	443	49821	142.250.186.132	192.168.2.4
Aug 30, 2024 18:33:52.706773996 CEST	49821	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:33:52.706832886 CEST	443	49821	142.250.186.132	192.168.2.4
Aug 30, 2024 18:33:52.757359982 CEST	49821	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:33:55.790167093 CEST	49723	80	192.168.2.4	2.19.126.137
Aug 30, 2024 18:33:55.795253992 CEST	80	49723	2.19.126.137	192.168.2.4
Aug 30, 2024 18:33:55.795315027 CEST	49723	80	192.168.2.4	2.19.126.137
Aug 30, 2024 18:33:57.242289066 CEST	49787	443	192.168.2.4	152.199.21.175
Aug 30, 2024 18:33:57.242305994 CEST	443	49787	152.199.21.175	192.168.2.4
Aug 30, 2024 18:34:02.600867987 CEST	443	49821	142.250.186.132	192.168.2.4
Aug 30, 2024 18:34:02.600931883 CEST	443	49821	142.250.186.132	192.168.2.4
Aug 30, 2024 18:34:02.601035118 CEST	49821	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:34:04.057301998 CEST	49821	443	192.168.2.4	142.250.186.132
Aug 30, 2024 18:34:04.057326078 CEST	443	49821	142.250.186.132	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 30, 2024 18:32:47.184385061 CEST	53	55076	1.1.1.1	192.168.2.4
Aug 30, 2024 18:32:47.456619978 CEST	53	64762	1.1.1.1	192.168.2.4
Aug 30, 2024 18:32:48.437119007 CEST	53	62689	1.1.1.1	192.168.2.4
Aug 30, 2024 18:32:48.637959003 CEST	51188	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:32:48.638098001 CEST	63770	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:32:51.520925999 CEST	49212	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:32:51.521351099 CEST	64984	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:32:51.999195099 CEST	63651	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:32:51.999435902 CEST	49353	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:32:52.006298065 CEST	53	49353	1.1.1.1	192.168.2.4
Aug 30, 2024 18:32:52.006371021 CEST	53	63651	1.1.1.1	192.168.2.4
Aug 30, 2024 18:32:53.412153006 CEST	49672	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:32:53.412638903 CEST	58548	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:32:53.422355890 CEST	53	49672	1.1.1.1	192.168.2.4
Aug 30, 2024 18:32:53.422810078 CEST	53	58548	1.1.1.1	192.168.2.4
Aug 30, 2024 18:32:54.799468040 CEST	53352	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:32:54.799870968 CEST	59725	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:32:54.808002949 CEST	53	59725	1.1.1.1	192.168.2.4
Aug 30, 2024 18:32:54.808316946 CEST	53	53352	1.1.1.1	192.168.2.4
Aug 30, 2024 18:32:55.944905996 CEST	49280	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:32:55.945144892 CEST	63796	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:00.742830038 CEST	53	52469	1.1.1.1	192.168.2.4
Aug 30, 2024 18:33:05.642179966 CEST	53	62677	1.1.1.1	192.168.2.4
Aug 30, 2024 18:33:07.389647961 CEST	138	138	192.168.2.4	192.168.2.255
Aug 30, 2024 18:33:09.252156019 CEST	56953	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:09.252527952 CEST	64666	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:11.226778984 CEST	58709	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:11.227253914 CEST	58027	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:11.234647989 CEST	53	58709	1.1.1.1	192.168.2.4
Aug 30, 2024 18:33:11.234967947 CEST	53	58027	1.1.1.1	192.168.2.4
Aug 30, 2024 18:33:13.181519032 CEST	65285	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:13.182949066 CEST	55195	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:13.391601086 CEST	49493	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:13.391870975 CEST	61352	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:13.415786982 CEST	53	64459	1.1.1.1	192.168.2.4
Aug 30, 2024 18:33:13.987127066 CEST	57085	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:13.987457037 CEST	53346	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:15.124665022 CEST	63391	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:15.124861002 CEST	61567	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:16.462444067 CEST	56268	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:16.462626934 CEST	65317	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:16.466677904 CEST	63539	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:16.466869116 CEST	53154	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:16.471260071 CEST	53	56268	1.1.1.1	192.168.2.4
Aug 30, 2024 18:33:16.471649885 CEST	53	65317	1.1.1.1	192.168.2.4
Aug 30, 2024 18:33:16.474517107 CEST	53	53154	1.1.1.1	192.168.2.4
Aug 30, 2024 18:33:16.475338936 CEST	53	63539	1.1.1.1	192.168.2.4
Aug 30, 2024 18:33:16.497364998 CEST	64332	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:16.497518063 CEST	59814	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:17.698008060 CEST	58498	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:17.698497057 CEST	50529	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:17.699047089 CEST	58278	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:17.699286938 CEST	59006	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:17.705982924 CEST	53	58498	1.1.1.1	192.168.2.4
Aug 30, 2024 18:33:17.706090927 CEST	53	58278	1.1.1.1	192.168.2.4
Aug 30, 2024 18:33:17.706211090 CEST	53	50529	1.1.1.1	192.168.2.4
Aug 30, 2024 18:33:17.706657887 CEST	53	59006	1.1.1.1	192.168.2.4
Aug 30, 2024 18:33:18.861548901 CEST	51713	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:18.861690044 CEST	51382	53	192.168.2.4	1.1.1.1
Aug 30, 2024 18:33:25.016788960 CEST	53	60822	1.1.1.1	192.168.2.4
Aug 30, 2024 18:33:47.069792986 CEST	53	63222	1.1.1.1	192.168.2.4
Aug 30, 2024 18:33:47.890819073 CEST	53	58444	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 30, 2024 18:33:13.432425022 CEST	192.168.2.4	1.1.1.1	c2de	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 30, 2024 18:32:48.637959003 CEST	192.168.2.4	1.1.1.1	0x8b5e	Standard query (0)	nam.safelink.emails.azure.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:32:48.638098001 CEST	192.168.2.4	1.1.1.1	0x144e	Standard query (0)	nam.safelink.emails.azure.net	65	IN (0x0001)	false
Aug 30, 2024 18:32:51.520925999 CEST	192.168.2.4	1.1.1.1	0xb239	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:32:51.521351099 CEST	192.168.2.4	1.1.1.1	0xac8d	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Aug 30, 2024 18:32:51.999195099 CEST	192.168.2.4	1.1.1.1	0x312	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:32:51.999435902 CEST	192.168.2.4	1.1.1.1	0xecab	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 30, 2024 18:32:53.412153006 CEST	192.168.2.4	1.1.1.1	0x640a	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:32:53.412638903 CEST	192.168.2.4	1.1.1.1	0x72e4	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 30, 2024 18:32:54.799468040 CEST	192.168.2.4	1.1.1.1	0x4a0e	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:32:54.799870968 CEST	192.168.2.4	1.1.1.1	0xafc9	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 30, 2024 18:32:55.944905996 CEST	192.168.2.4	1.1.1.1	0xb5ca	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:32:55.945144892 CEST	192.168.2.4	1.1.1.1	0x3caf	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Aug 30, 2024 18:33:09.252156019 CEST	192.168.2.4	1.1.1.1	0xc592	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:09.252527952 CEST	192.168.2.4	1.1.1.1	0x8f89	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Aug 30, 2024 18:33:11.226778984 CEST	192.168.2.4	1.1.1.1	0x41aa	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:11.227253914 CEST	192.168.2.4	1.1.1.1	0x3a02	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Aug 30, 2024 18:33:13.181519032 CEST	192.168.2.4	1.1.1.1	0x5333	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:13.182949066 CEST	192.168.2.4	1.1.1.1	0x39b8	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Aug 30, 2024 18:33:13.391601086 CEST	192.168.2.4	1.1.1.1	0x4302	Standard query (0)	msft.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:13.391870975 CEST	192.168.2.4	1.1.1.1	0x7c1	Standard query (0)	msft.hsprotect.net	65	IN (0x0001)	false
Aug 30, 2024 18:33:13.987127066 CEST	192.168.2.4	1.1.1.1	0xe191	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:13.987457037 CEST	192.168.2.4	1.1.1.1	0x5fd3	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Aug 30, 2024 18:33:15.124665022 CEST	192.168.2.4	1.1.1.1	0x3eaf	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:15.124861002 CEST	192.168.2.4	1.1.1.1	0x761d	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Aug 30, 2024 18:33:16.462444067 CEST	192.168.2.4	1.1.1.1	0x3a4f	Standard query (0)	stk.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:16.462626934 CEST	192.168.2.4	1.1.1.1	0xdb59	Standard query (0)	stk.hsprotect.net	65	IN (0x0001)	false
Aug 30, 2024 18:33:16.466677904 CEST	192.168.2.4	1.1.1.1	0xa5a1	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:16.466869116 CEST	192.168.2.4	1.1.1.1	0x83e6	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Aug 30, 2024 18:33:16.497364998 CEST	192.168.2.4	1.1.1.1	0x9ece	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:16.497518063 CEST	192.168.2.4	1.1.1.1	0xc72f	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Aug 30, 2024 18:33:17.698008060 CEST	192.168.2.4	1.1.1.1	0x60a3	Standard query (0)	stk.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:17.698497057 CEST	192.168.2.4	1.1.1.1	0xe08a	Standard query (0)	stk.hsprotect.net	65	IN (0x0001)	false
Aug 30, 2024 18:33:17.699047089 CEST	192.168.2.4	1.1.1.1	0xd1e	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:17.699286938 CEST	192.168.2.4	1.1.1.1	0x6c8a	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Aug 30, 2024 18:33:18.861548901 CEST	192.168.2.4	1.1.1.1	0x6d4d	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:18.861690044 CEST	192.168.2.4	1.1.1.1	0xa702	Standard query (0)	fpt.live.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 30, 2024 18:32:48.683092117 CEST	1.1.1.1	192.168.2.4	0x144e	No error (0)	nam.safelink.emails.azure.net	meo-traf-nam.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:48.683092117 CEST	1.1.1.1	192.168.2.4	0x144e	No error (0)	meo-afd-nam-ggd3beb3e0hnezbu.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:48.693075895 CEST	1.1.1.1	192.168.2.4	0x8b5e	No error (0)	nam.safelink.emails.azure.net	meo-traf-nam.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:48.693075895 CEST	1.1.1.1	192.168.2.4	0x8b5e	No error (0)	meo-afd-nam-ggd3beb3e0hnezbu.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:48.693075895 CEST	1.1.1.1	192.168.2.4	0x8b5e	No error (0)	shed.dual-low.s-part-0045.t-0009.t-msedge.net	s-part-0045.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:48.693075895 CEST	1.1.1.1	192.168.2.4	0x8b5e	No error (0)	s-part-0045.t-0009.t-msedge.net		13.107.246.73	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:32:49.841139078 CEST	1.1.1.1	192.168.2.4	0x6ccb	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:49.852547884 CEST	1.1.1.1	192.168.2.4	0xa8ae	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:51.527563095 CEST	1.1.1.1	192.168.2.4	0xb239	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:51.528659105 CEST	1.1.1.1	192.168.2.4	0xac8d	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:52.006298065 CEST	1.1.1.1	192.168.2.4	0xecab	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 30, 2024 18:32:52.006371021 CEST	1.1.1.1	192.168.2.4	0x312	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:32:53.422355890 CEST	1.1.1.1	192.168.2.4	0x640a	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:53.422355890 CEST	1.1.1.1	192.168.2.4	0x640a	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:53.422355890 CEST	1.1.1.1	192.168.2.4	0x640a	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:32:53.422810078 CEST	1.1.1.1	192.168.2.4	0x72e4	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:53.422810078 CEST	1.1.1.1	192.168.2.4	0x72e4	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:54.808002949 CEST	1.1.1.1	192.168.2.4	0xafc9	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:54.808002949 CEST	1.1.1.1	192.168.2.4	0xafc9	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:54.808316946 CEST	1.1.1.1	192.168.2.4	0x4a0e	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:54.808316946 CEST	1.1.1.1	192.168.2.4	0x4a0e	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:54.808316946 CEST	1.1.1.1	192.168.2.4	0x4a0e	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:32:55.952053070 CEST	1.1.1.1	192.168.2.4	0x3caf	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:55.952295065 CEST	1.1.1.1	192.168.2.4	0xb5ca	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:55.971807957 CEST	1.1.1.1	192.168.2.4	0xac49	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:32:55.971807957 CEST	1.1.1.1	192.168.2.4	0xac49	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:02.394779921 CEST	1.1.1.1	192.168.2.4	0xe274	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:02.394779921 CEST	1.1.1.1	192.168.2.4	0xe274	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:09.259001970 CEST	1.1.1.1	192.168.2.4	0xc592	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:09.271946907 CEST	1.1.1.1	192.168.2.4	0x8f89	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:11.230525017 CEST	1.1.1.1	192.168.2.4	0xc9a0	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:11.230525017 CEST	1.1.1.1	192.168.2.4	0xc9a0	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:11.234647989 CEST	1.1.1.1	192.168.2.4	0x41aa	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:11.234647989 CEST	1.1.1.1	192.168.2.4	0x41aa	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:11.234647989 CEST	1.1.1.1	192.168.2.4	0x41aa	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:11.234967947 CEST	1.1.1.1	192.168.2.4	0x3a02	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:11.234967947 CEST	1.1.1.1	192.168.2.4	0x3a02	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:11.241147041 CEST	1.1.1.1	192.168.2.4	0xfc56	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:11.241147041 CEST	1.1.1.1	192.168.2.4	0xfc56	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:11.244242907 CEST	1.1.1.1	192.168.2.4	0xd49e	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:11.244242907 CEST	1.1.1.1	192.168.2.4	0xd49e	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:11.244832993 CEST	1.1.1.1	192.168.2.4	0x5ea2	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:13.189141035 CEST	1.1.1.1	192.168.2.4	0x5333	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:13.189913988 CEST	1.1.1.1	192.168.2.4	0x39b8	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:13.399307966 CEST	1.1.1.1	192.168.2.4	0x7c1	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:13.400264025 CEST	1.1.1.1	192.168.2.4	0x4302	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:13.412694931 CEST	1.1.1.1	192.168.2.4	0xf292	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:13.412694931 CEST	1.1.1.1	192.168.2.4	0xf292	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:13.994889975 CEST	1.1.1.1	192.168.2.4	0xe191	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:14.021467924 CEST	1.1.1.1	192.168.2.4	0x5fd3	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:15.133338928 CEST	1.1.1.1	192.168.2.4	0x761d	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:15.133433104 CEST	1.1.1.1	192.168.2.4	0x3eaf	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:16.471260071 CEST	1.1.1.1	192.168.2.4	0x3a4f	No error (0)	stk.hsprotect.net		34.107.199.61	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:16.474517107 CEST	1.1.1.1	192.168.2.4	0x83e6	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:16.475338936 CEST	1.1.1.1	192.168.2.4	0xa5a1	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:16.475338936 CEST	1.1.1.1	192.168.2.4	0xa5a1	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:16.504621983 CEST	1.1.1.1	192.168.2.4	0x9ece	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:16.505557060 CEST	1.1.1.1	192.168.2.4	0xc72f	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:17.398266077 CEST	1.1.1.1	192.168.2.4	0x2f92	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:17.398266077 CEST	1.1.1.1	192.168.2.4	0x2f92	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:17.705982924 CEST	1.1.1.1	192.168.2.4	0x60a3	No error (0)	stk.hsprotect.net		34.107.199.61	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:17.706090927 CEST	1.1.1.1	192.168.2.4	0xd1e	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:17.706090927 CEST	1.1.1.1	192.168.2.4	0xd1e	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:17.706657887 CEST	1.1.1.1	192.168.2.4	0x6c8a	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:18.701761007 CEST	1.1.1.1	192.168.2.4	0x40c1	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:18.701761007 CEST	1.1.1.1	192.168.2.4	0x40c1	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:18.869025946 CEST	1.1.1.1	192.168.2.4	0xa702	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:18.869121075 CEST	1.1.1.1	192.168.2.4	0x6d4d	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:19.458822012 CEST	1.1.1.1	192.168.2.4	0xfc9	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:19.458822012 CEST	1.1.1.1	192.168.2.4	0xfc9	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 30, 2024 18:33:40.110593081 CEST	1.1.1.1	192.168.2.4	0x80da	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 18:33:40.110593081 CEST	1.1.1.1	192.168.2.4	0x80da	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

nam.safelink.emails.azure.net

https:

aadcdn.msftauth.net

logincdn.msauth.net

collector-pxzc5j78di.hsprotect.net

stk.hsprotect.net

acctcdn.msauth.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	13.107.246.73	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:32:49 UTC	893	OUT	GET /redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0wN2RkNTQyZS1hZGNiLTQyZTgtODFiYS0zZDdjYjNmYTEyNTYmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l HTTP/1.1 Host: nam.safelink.emails.azure.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:32:49 UTC	787	IN	HTTP/1.1 302 Found Date: Fri, 30 Aug 2024 16:32:49 GMT Content-Type: text/html; charset=utf-8 Content-Length: 177 Connection: close Cache-Control: private Location: https://admin.microsoft.com/adminportal/home?#/subscriptions Set-Cookie: ASP.NET_SessionId=b4aqt2iawpbhrxxexhizpn4n; path=/; secure; HttpOnly; SameSite=Lax Strict-Transport-Security: max-age=31536000 Azure-Version: 20240826-0702-420163 Azure-SiteName: meo-api-nam-cu05-usw3 Azure-InstanceId: b6a0c48caf7e3653076d47143e4bb15042836dc33f125d6237c782bae3796122 Azure-RegionName: West US 3 Azure-SlotName: unknown X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Arr-Disable-Session-Affinity: true x-azure-ref: 20240830T163249Z-16579567576xfl5xzh7yws029s00000003p0000000009f62 X-Cache: CONFIG_NOCACHE
2024-08-30 16:32:49 UTC	177	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 64 6d 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 61 64 6d 69 6e 70 6f 72 74 61 6c 2f 68 6f 6d 65 3f 23 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://admin.microsoft.com/adminportal/home?#/subscriptions">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49745	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:32:54 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:32:54 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1941797 Cache-Control: public, max-age=31536000 Content-MD5: bedopN8eDQBhzbUu8GNGxA== Content-Type: application/x-javascript Date: Fri, 30 Aug 2024 16:32:54 GMT Etag: 0x8DCB563C85A43C4 Last-Modified: Mon, 05 Aug 2024 15:32:14 GMT Server: ECAcc (lhc/78A8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb594470-e01e-0006-2151-e9b2d8000000 x-ms-version: 2009-09-19 Content-Length: 141866 Connection: close
2024-08-30 16:32:54 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-30 16:32:54 UTC	1	IN	Data Raw: 22 Data Ascii: "
2024-08-30 16:32:54 UTC	16383	IN	Data Raw: 5d 2c 5b 22 23 32 30 32 30 32 30 22 5d 29 2c 73 3d 65 28 72 2c 5b 22 34 35 2c 35 30 2c 35 34 22 5d 2c 5b 22 23 32 64 33 32 33 36 22 5d 29 2c 75 3d 65 28 72 2c 5b 22 32 35 35 2c 32 35 30 2c 32 33 39 22 5d 2c 5b 22 23 66 66 66 61 65 66 22 5d 29 3b 69 66 28 6f 7c 7c 61 7c 7c 73 29 72 65 74 75 72 6e 22 62 6c 61 63 6b 22 3b 69 66 28 69 7c 7c 75 29 72 65 74 75 72 6e 22 77 68 69 74 65 22 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d Data Ascii: ],["#202020"]),s=e(r,["45,50,54"],["#2d3236"]),u=e(r,["255,250,239"],["#fffaef"]);if(o\|\|a\|\|s)return"black";if(i\|\|u)return"white"}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getCom
2024-08-30 16:32:54 UTC	16383	IN	Data Raw: 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 35 35 37 22 2c 50 50 5f 45 5f 4f 54 54 5f 44 41 54 41 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 33 34 38 46 22 2c 50 50 5f 45 5f 4f 54 54 5f 41 4c 52 45 41 44 59 5f 43 4f 4e 53 55 4d 45 44 3a 22 38 30 30 34 33 34 39 30 22 2c 50 50 5f 45 5f 4f 54 54 5f 49 4e 56 41 4c 49 44 5f 50 55 52 50 4f 53 45 3a 22 38 30 30 34 33 34 39 36 22 2c 50 50 5f 45 5f 50 50 53 41 5f 52 50 54 5f 4e 4f 54 4f 41 44 44 52 45 53 53 3a 22 38 30 30 34 38 31 32 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 45 53 53 5f 42 41 44 44 45 56 49 43 45 4e 41 4d 45 3a 22 38 30 30 34 39 43 32 32 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c Data Ascii: PASSWORD:"80043557",PP_E_OTT_DATA_INVALID:"8004348F",PP_E_OTT_ALREADY_CONSUMED:"80043490",PP_E_OTT_INVALID_PURPOSE:"80043496",PP_E_PPSA_RPT_NOTOADDRESS:"80048120",PP_E_STRONGPROCESS_BADDEVICENAME:"80049C22",PP_E_INLINELOGIN_INVALID_SMS:"800434E1",PP_E_INL
2024-08-30 16:32:54 UTC	16383	IN	Data Raw: 2a 29 3f 24 2f 5d 2c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 74 2e 63 61 6c 6c 28 6e 2c 65 5b 72 5d 2c 72 2c 65 29 7d 2c 41 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 65 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 4c 62 Data Ascii: *)?$/],D:function(e,t,n){for(var r=0,o=e.length;r<o;r++)t.call(n,e[r],r,e)},A:"function"==typeof Array.prototype.indexOf?function(e,t){return Array.prototype.indexOf.call(e,t)}:function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},Lb
2024-08-30 16:32:54 UTC	16383	IN	Data Raw: 6e 2e 71 62 28 74 29 2c 53 2e 61 2e 41 62 28 74 2c 50 29 2c 53 2e 6f 70 74 69 6f 6e 73 2e 64 65 66 65 72 55 70 64 61 74 65 73 26 26 53 2e 54 61 2e 64 65 66 65 72 72 65 64 28 74 2c 21 30 29 2c 74 7d 3b 76 61 72 20 50 3d 7b 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 3a 6e 2c 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 77 5d 7d 2c 78 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 73 70 65 63 74 61 74 65 22 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 29 7d 2c 79 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 Data Ascii: n.qb(t),S.a.Ab(t,P),S.options.deferUpdates&&S.Ta.deferred(t,!0),t};var P={equalityComparer:n,v:function(){return this[w]},xa:function(){this.notifySubscribers(this[w],"spectate"),this.notifySubscribers(this[w])},ya:function(){this.notifySubscribers(this[w
2024-08-30 16:32:54 UTC	16383	IN	Data Raw: 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 61 2e 47 61 28 53 2e 75 2e 47 28 65 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 5b 6e 5d 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6f 28 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 72 29 29 3a 53 2e 61 2e 47 61 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2e 67 65 74 42 69 6e 64 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 2c 65 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 74 29 Data Ascii: n o(e){return S.a.Ga(S.u.G(e),(function(t,n){return function(){return e()[n]}}))}function i(e,t,r){return"function"==typeof e?o(e.bind(null,t,r)):S.a.Ga(e,n)}function c(e,t){return o(this.getBindings.bind(this,e,t))}function d(e,t){var n=S.h.firstChild(t)
2024-08-30 16:32:54 UTC	16383	IN	Data Raw: 26 26 28 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 28 30 2c 74 29 2c 53 2e 75 2e 47 28 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 41 66 74 65 72 52 65 6e 64 65 72 22 29 2c 6e 75 6c 6c 2c 5b 74 5b 30 5d 2c 65 21 3d 3d 44 3f 65 3a 61 5d 29 7d 29 2c 53 2e 61 2e 65 63 28 65 2c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 26 26 28 70 3d 21 6c 26 26 69 5b 30 5d 2e 73 65 6c 65 63 74 65 64 3f 5b 53 2e 77 2e 4d 28 69 5b 30 5d 29 5d 3a 5b 5d 2c 68 3d 21 30 29 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 2c 74 3d 3d 3d 44 3f 28 53 2e 61 2e 42 62 28 72 2c 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 43 61 70 74 69 6f 6e 22 29 Data Ascii: &&(c=function(e,t){i(0,t),S.u.G(n.get("optionsAfterRender"),null,[t[0],e!==D?e:a])}),S.a.ec(e,f,(function(t,r,i){return i.length&&(p=!l&&i[0].selected?[S.w.M(i[0])]:[],h=!0),r=e.ownerDocument.createElement("option"),t===D?(S.a.Bb(r,n.get("optionsCaption")
2024-08-30 16:32:54 UTC	16383	IN	Data Raw: 27 29 3b 22 7d 2c 6c 2e 74 6d 70 6c 2e 74 61 67 2e 6b 6f 5f 77 69 74 68 3d 7b 6f 70 65 6e 3a 22 77 69 74 68 28 24 31 29 20 7b 22 2c 63 6c 6f 73 65 3a 22 7d 20 22 7d 29 7d 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 53 2e 63 61 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 53 2e 24 61 3b 76 61 72 20 65 3d 6e 65 77 20 53 2e 24 61 3b 30 3c 65 2e 48 64 26 26 53 2e 67 63 28 65 29 2c 53 2e 62 28 22 6a 71 75 65 72 79 54 6d 70 6c 54 65 6d 70 6c 61 74 65 45 6e 67 69 6e 65 22 2c 53 2e 24 61 29 7d 28 29 7d 29 29 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f Data Ascii: ');"},l.tmpl.tag.ko_with={open:"with($1) {",close:"} "})},S.$a.prototype=new S.ca,S.$a.prototype.constructor=S.$a;var e=new S.$a;0<e.Hd&&S.gc(e),S.b("jqueryTmplTemplateEngine",S.$a)}()}))}()},function(e,t,n){function r(e){return(r="function"==typeof Symbo
2024-08-30 16:32:54 UTC	10801	IN	Data Raw: 69 6e 67 69 66 79 28 6e 29 7d 72 65 74 75 72 6e 20 74 26 26 28 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 5c 3f 2f 67 2c 22 5c 5c 75 30 30 33 46 22 29 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 65 2e 68 65 61 64 65 72 73 3d 62 28 29 2c 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 61 2c 65 2e 62 72 65 61 6b 43 61 63 68 65 3d 73 2c 65 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 3d 68 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 3b 69 66 28 74 29 7b 76 61 72 20 73 3d 74 2e 65 76 65 6e 74 4f 70 74 69 6f 6e 73 7c 7c 7b 7d 3b 69 66 28 73 2e 65 76 65 6e 74 49 64 3d 74 2e 65 76 65 6e 74 49 64 7c 7c 73 2e 65 76 65 6e 74 49 64 2c 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 68 69 64 69 Data Ascii: ingify(n)}return t&&(t=t.replace(/\?/g,"\\u003F")),t}function S(e){e.headers=b(),e.withCredentials=a,e.breakCache=s,e.responseType=h}function E(e,t,n,r,o,i){var a=null;if(t){var s=t.eventOptions\|\|{};if(s.eventId=t.eventId\|\|s.eventId,s.hasOwnProperty("hidi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49746	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:32:54 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-30 16:32:54 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=61439 Date: Fri, 30 Aug 2024 16:32:54 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49750	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:32:55 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-30 16:32:55 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=61391 Date: Fri, 30 Aug 2024 16:32:55 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-30 16:32:55 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49752	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:32:55 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:32:55 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1941798 Cache-Control: public, max-age=31536000 Content-MD5: bedopN8eDQBhzbUu8GNGxA== Content-Type: application/x-javascript Date: Fri, 30 Aug 2024 16:32:55 GMT Etag: 0x8DCB563C85A43C4 Last-Modified: Mon, 05 Aug 2024 15:32:14 GMT Server: ECAcc (lhc/78A8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb594470-e01e-0006-2151-e9b2d8000000 x-ms-version: 2009-09-19 Content-Length: 141866 Connection: close
2024-08-30 16:32:55 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-30 16:32:55 UTC	1	IN	Data Raw: 22 Data Ascii: "
2024-08-30 16:32:56 UTC	16383	IN	Data Raw: 5d 2c 5b 22 23 32 30 32 30 32 30 22 5d 29 2c 73 3d 65 28 72 2c 5b 22 34 35 2c 35 30 2c 35 34 22 5d 2c 5b 22 23 32 64 33 32 33 36 22 5d 29 2c 75 3d 65 28 72 2c 5b 22 32 35 35 2c 32 35 30 2c 32 33 39 22 5d 2c 5b 22 23 66 66 66 61 65 66 22 5d 29 3b 69 66 28 6f 7c 7c 61 7c 7c 73 29 72 65 74 75 72 6e 22 62 6c 61 63 6b 22 3b 69 66 28 69 7c 7c 75 29 72 65 74 75 72 6e 22 77 68 69 74 65 22 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d Data Ascii: ],["#202020"]),s=e(r,["45,50,54"],["#2d3236"]),u=e(r,["255,250,239"],["#fffaef"]);if(o\|\|a\|\|s)return"black";if(i\|\|u)return"white"}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getCom
2024-08-30 16:32:56 UTC	16383	IN	Data Raw: 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 35 35 37 22 2c 50 50 5f 45 5f 4f 54 54 5f 44 41 54 41 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 33 34 38 46 22 2c 50 50 5f 45 5f 4f 54 54 5f 41 4c 52 45 41 44 59 5f 43 4f 4e 53 55 4d 45 44 3a 22 38 30 30 34 33 34 39 30 22 2c 50 50 5f 45 5f 4f 54 54 5f 49 4e 56 41 4c 49 44 5f 50 55 52 50 4f 53 45 3a 22 38 30 30 34 33 34 39 36 22 2c 50 50 5f 45 5f 50 50 53 41 5f 52 50 54 5f 4e 4f 54 4f 41 44 44 52 45 53 53 3a 22 38 30 30 34 38 31 32 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 45 53 53 5f 42 41 44 44 45 56 49 43 45 4e 41 4d 45 3a 22 38 30 30 34 39 43 32 32 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c Data Ascii: PASSWORD:"80043557",PP_E_OTT_DATA_INVALID:"8004348F",PP_E_OTT_ALREADY_CONSUMED:"80043490",PP_E_OTT_INVALID_PURPOSE:"80043496",PP_E_PPSA_RPT_NOTOADDRESS:"80048120",PP_E_STRONGPROCESS_BADDEVICENAME:"80049C22",PP_E_INLINELOGIN_INVALID_SMS:"800434E1",PP_E_INL
2024-08-30 16:32:56 UTC	16383	IN	Data Raw: 2a 29 3f 24 2f 5d 2c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 74 2e 63 61 6c 6c 28 6e 2c 65 5b 72 5d 2c 72 2c 65 29 7d 2c 41 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 65 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 4c 62 Data Ascii: *)?$/],D:function(e,t,n){for(var r=0,o=e.length;r<o;r++)t.call(n,e[r],r,e)},A:"function"==typeof Array.prototype.indexOf?function(e,t){return Array.prototype.indexOf.call(e,t)}:function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},Lb
2024-08-30 16:32:56 UTC	16383	IN	Data Raw: 6e 2e 71 62 28 74 29 2c 53 2e 61 2e 41 62 28 74 2c 50 29 2c 53 2e 6f 70 74 69 6f 6e 73 2e 64 65 66 65 72 55 70 64 61 74 65 73 26 26 53 2e 54 61 2e 64 65 66 65 72 72 65 64 28 74 2c 21 30 29 2c 74 7d 3b 76 61 72 20 50 3d 7b 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 3a 6e 2c 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 77 5d 7d 2c 78 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 73 70 65 63 74 61 74 65 22 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 29 7d 2c 79 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 Data Ascii: n.qb(t),S.a.Ab(t,P),S.options.deferUpdates&&S.Ta.deferred(t,!0),t};var P={equalityComparer:n,v:function(){return this[w]},xa:function(){this.notifySubscribers(this[w],"spectate"),this.notifySubscribers(this[w])},ya:function(){this.notifySubscribers(this[w
2024-08-30 16:32:56 UTC	16383	IN	Data Raw: 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 61 2e 47 61 28 53 2e 75 2e 47 28 65 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 5b 6e 5d 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6f 28 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 72 29 29 3a 53 2e 61 2e 47 61 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2e 67 65 74 42 69 6e 64 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 2c 65 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 74 29 Data Ascii: n o(e){return S.a.Ga(S.u.G(e),(function(t,n){return function(){return e()[n]}}))}function i(e,t,r){return"function"==typeof e?o(e.bind(null,t,r)):S.a.Ga(e,n)}function c(e,t){return o(this.getBindings.bind(this,e,t))}function d(e,t){var n=S.h.firstChild(t)
2024-08-30 16:32:56 UTC	16383	IN	Data Raw: 26 26 28 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 28 30 2c 74 29 2c 53 2e 75 2e 47 28 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 41 66 74 65 72 52 65 6e 64 65 72 22 29 2c 6e 75 6c 6c 2c 5b 74 5b 30 5d 2c 65 21 3d 3d 44 3f 65 3a 61 5d 29 7d 29 2c 53 2e 61 2e 65 63 28 65 2c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 26 26 28 70 3d 21 6c 26 26 69 5b 30 5d 2e 73 65 6c 65 63 74 65 64 3f 5b 53 2e 77 2e 4d 28 69 5b 30 5d 29 5d 3a 5b 5d 2c 68 3d 21 30 29 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 2c 74 3d 3d 3d 44 3f 28 53 2e 61 2e 42 62 28 72 2c 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 43 61 70 74 69 6f 6e 22 29 Data Ascii: &&(c=function(e,t){i(0,t),S.u.G(n.get("optionsAfterRender"),null,[t[0],e!==D?e:a])}),S.a.ec(e,f,(function(t,r,i){return i.length&&(p=!l&&i[0].selected?[S.w.M(i[0])]:[],h=!0),r=e.ownerDocument.createElement("option"),t===D?(S.a.Bb(r,n.get("optionsCaption")
2024-08-30 16:32:56 UTC	16383	IN	Data Raw: 27 29 3b 22 7d 2c 6c 2e 74 6d 70 6c 2e 74 61 67 2e 6b 6f 5f 77 69 74 68 3d 7b 6f 70 65 6e 3a 22 77 69 74 68 28 24 31 29 20 7b 22 2c 63 6c 6f 73 65 3a 22 7d 20 22 7d 29 7d 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 53 2e 63 61 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 53 2e 24 61 3b 76 61 72 20 65 3d 6e 65 77 20 53 2e 24 61 3b 30 3c 65 2e 48 64 26 26 53 2e 67 63 28 65 29 2c 53 2e 62 28 22 6a 71 75 65 72 79 54 6d 70 6c 54 65 6d 70 6c 61 74 65 45 6e 67 69 6e 65 22 2c 53 2e 24 61 29 7d 28 29 7d 29 29 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f Data Ascii: ');"},l.tmpl.tag.ko_with={open:"with($1) {",close:"} "})},S.$a.prototype=new S.ca,S.$a.prototype.constructor=S.$a;var e=new S.$a;0<e.Hd&&S.gc(e),S.b("jqueryTmplTemplateEngine",S.$a)}()}))}()},function(e,t,n){function r(e){return(r="function"==typeof Symbo
2024-08-30 16:32:56 UTC	10801	IN	Data Raw: 69 6e 67 69 66 79 28 6e 29 7d 72 65 74 75 72 6e 20 74 26 26 28 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 5c 3f 2f 67 2c 22 5c 5c 75 30 30 33 46 22 29 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 65 2e 68 65 61 64 65 72 73 3d 62 28 29 2c 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 61 2c 65 2e 62 72 65 61 6b 43 61 63 68 65 3d 73 2c 65 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 3d 68 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 3b 69 66 28 74 29 7b 76 61 72 20 73 3d 74 2e 65 76 65 6e 74 4f 70 74 69 6f 6e 73 7c 7c 7b 7d 3b 69 66 28 73 2e 65 76 65 6e 74 49 64 3d 74 2e 65 76 65 6e 74 49 64 7c 7c 73 2e 65 76 65 6e 74 49 64 2c 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 68 69 64 69 Data Ascii: ingify(n)}return t&&(t=t.replace(/\?/g,"\\u003F")),t}function S(e){e.headers=b(),e.withCredentials=a,e.breakCache=s,e.responseType=h}function E(e,t,n,r,o,i){var a=null;if(t){var s=t.eventOptions\|\|{};if(s.eventId=t.eventId\|\|s.eventId,s.hasOwnProperty("hidi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49756	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:32:56 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:32:57 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4941847 Cache-Control: public, max-age=31536000 Content-MD5: SJgdPPV+fFjKfj6FHvk1Tg== Content-Type: text/css Date: Fri, 30 Aug 2024 16:32:56 GMT Etag: 0x8DC9BAA0E5931F9 Last-Modified: Wed, 03 Jul 2024 21:49:46 GMT Server: ECAcc (lhc/794C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 6c7d298f-b01e-00dc-1d08-ce9a59000000 x-ms-version: 2009-09-19 Content-Length: 113401 Connection: close
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 73 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a Data Ascii: s-1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 72 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 Data Ascii: rgin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-b
2024-08-30 16:32:57 UTC	3	IN	Data Raw: 66 6c 6f Data Ascii: flo
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 Data Ascii: w-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.table
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c Data Ascii: ,"Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongol
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: ype="reset"].btn-primary:hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{background-c
2024-08-30 16:32:57 UTC	15100	IN	Data Raw: 61 20 4d 61 74 68 22 7d 2e 61 70 70 2d 6e 61 6d 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 Data Ascii: a Math"}.app-name{margin-bottom:20px;margin-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49758	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:32:57 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:32:57 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1948701 Cache-Control: public, max-age=31536000 Content-MD5: uaBUkDWJZJ75uKxjc6vkvw== Content-Type: application/x-javascript Date: Fri, 30 Aug 2024 16:32:57 GMT Etag: 0x8DCB563CA8588E7 Last-Modified: Mon, 05 Aug 2024 15:32:18 GMT Server: ECAcc (lhc/7971) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9a732ed0-201e-0054-8041-e9ce30000000 x-ms-version: 2009-09-19 Content-Length: 449540 Connection: close
2024-08-30 16:32:57 UTC	15652	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 48 45 4e 54 49 43 41 54 45 44 3a 22 38 30 30 34 35 35 33 38 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 4f 54 48 45 52 3a 22 38 30 30 34 35 35 33 39 22 2c 50 50 5f 45 5f 53 51 5f 43 4f 4e 54 41 49 4e 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 34 31 45 22 2c 50 50 5f 45 5f 53 41 5f 43 4f 4e 54 41 49 4e 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 34 31 43 22 2c 50 50 5f 45 5f 53 41 5f 43 4f 4e 54 41 49 4e 45 44 5f 49 4e 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 34 31 44 22 2c 50 50 5f 45 5f 4c 49 42 50 48 4f 4e 45 4e 55 4d 42 45 52 49 4e 54 45 52 4f 50 5f 4e 55 4d 42 45 52 50 41 52 53 45 5f 45 58 43 45 50 54 49 4f 4e 3a 22 38 30 30 34 33 35 31 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 Data Ascii: HENTICATED:"80045538",PP_E_HIP_VALIDATION_ERROR_OTHER:"80045539",PP_E_SQ_CONTAINS_PASSWORD:"8004341E",PP_E_SA_CONTAINS_PASSWORD:"8004341C",PP_E_SA_CONTAINED_IN_PASSWORD:"8004341D",PP_E_LIBPHONENUMBERINTEROP_NUMBERPARSE_EXCEPTION:"80043510",PP_E_STRONGPROC
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 32 22 5d 2c 5b 22 23 32 30 32 30 32 30 22 5d 29 2c 73 3d 65 28 69 2c 5b 22 34 35 2c 35 30 2c 35 34 22 5d 2c 5b 22 23 32 64 33 32 33 36 22 5d 29 2c 63 3d 65 28 69 2c 5b 22 32 35 35 2c 32 35 30 2c 32 33 39 22 5d 2c 5b 22 23 66 66 66 61 65 66 22 5d 29 3b 69 66 28 61 7c 7c 72 7c 7c 73 29 72 65 74 75 72 6e 22 62 6c 61 63 6b 22 3b 69 66 28 6f 7c 7c 63 29 72 65 74 75 72 6e 22 77 68 69 74 65 22 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 Data Ascii: 2"],["#202020"]),s=e(i,["45,50,54"],["#2d3236"]),c=e(i,["255,250,239"],["#fffaef"]);if(a\|\|r\|\|s)return"black";if(o\|\|c)return"white"}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getC
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 3f 28 74 3d 65 2e 75 72 6c 2c 69 3d 65 2e 65 76 65 6e 74 4f 70 74 69 6f 6e 73 2c 6e 3d 65 2e 74 72 61 63 65 50 61 72 61 6d 65 74 65 72 73 3f 6e 3a 6e 75 6c 6c 2c 65 2e 74 72 61 63 65 55 72 6c 26 26 28 6e 3f 6e 2e 75 72 6c 3d 74 3a 6e 3d 74 29 29 3a 6e 3d 6e 75 6c 6c 2c 69 26 26 69 2e 65 76 65 6e 74 49 64 26 26 73 2e 6c 6f 67 45 76 65 6e 74 28 7b 65 76 65 6e 74 54 79 70 65 3a 22 6f 6e 52 65 64 69 72 65 63 74 22 2c 65 76 65 6e 74 49 64 3a 69 2e 65 76 65 6e 74 49 64 2c 65 76 65 6e 74 4c 65 76 65 6c 3a 69 2e 65 76 65 6e 74 4c 65 76 65 6c 2c 65 76 65 6e 74 41 72 67 73 3a 6e 2c 65 76 65 6e 74 4f 70 74 69 6f 6e 73 3a 69 7d 29 2c 74 7d 2c 73 2e 67 65 74 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 Data Ascii: ng"!=typeof e?(t=e.url,i=e.eventOptions,n=e.traceParameters?n:null,e.traceUrl&&(n?n.url=t:n=t)):n=null,i&&i.eventId&&s.logEvent({eventType:"onRedirect",eventId:i.eventId,eventLevel:i.eventLevel,eventArgs:n,eventOptions:i}),t},s.getPropertyLogOption=functi
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 46 2e 54 79 70 65 2e 53 4d 53 3a 74 3d 6e 3f 6c 2e 4d 6f 62 69 6c 65 45 6e 63 72 79 70 74 65 64 3a 6c 2e 4d 6f 62 69 6c 65 3b 62 72 65 61 6b 3b 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 3a 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 41 6c 74 45 6d 61 69 6c 3a 74 3d 6e 3f 6c 2e 45 6d 61 69 6c 41 64 64 72 65 73 73 45 6e 63 72 79 70 74 65 64 3a 6c 2e 45 6d 61 69 6c 41 64 64 72 65 73 73 3b 62 72 65 61 6b 3b 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 56 32 3a 74 3d 6c 2e 53 65 73 73 69 6f 6e 41 70 70 72 6f 76 65 72 7d 72 65 74 75 72 6e 20 74 7d 3b 6e 2e 50 72 6f 6f 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e Data Ascii: F.Type.SMS:t=n?l.MobileEncrypted:l.Mobile;break;case PROOF.Type.Email:case PROOF.Type.AltEmail:t=n?l.EmailAddressEncrypted:l.EmailAddress;break;case PROOF.Type.TOTPAuthenticatorV2:t=l.SessionApprover}return t};n.Proof=function(e){var n=e.username\|\|"",t=e.
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 65 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 6c 6f 67 69 6e 5f 68 69 6e 74 22 2c 74 29 3b 76 61 72 20 69 3d 67 65 3f 67 2e 63 6c 6f 6e 65 28 67 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 69 26 26 28 69 2e 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3d 6e 29 2c 73 6e 28 65 2c 69 2c 21 30 2c 6c 2e 45 76 65 6e 74 49 64 73 2e 52 65 64 69 72 65 63 74 5f 4f 74 68 65 72 49 64 70 52 65 64 69 72 65 63 74 69 6f 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 2c 6e 2c 74 29 7b 74 3d 74 7c 7c 6c 65 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 75 73 65 72 6e 61 6d 65 22 29 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 6c 6f 67 69 6e 5f 68 69 6e 74 22 29 3b 76 61 72 20 69 3d 70 65 3f 67 2e 63 6c 6f 6e 65 28 70 65 29 3a 6e 75 6c 6c 3b 72 65 74 Data Ascii: e=p.appendOrReplace(e,"login_hint",t);var i=ge?g.clone(ge):null;return i&&(i.unsafe_username=n),sn(e,i,!0,l.EventIds.Redirect_OtherIdpRedirection)}function Ze(e,n,t){t=t\|\|le,t=p.remove(t,"username"),t=p.remove(t,"login_hint");var i=pe?g.clone(pe):null;ret
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 43 6c 69 65 6e 74 49 64 2c 6b 3d 74 2e 73 46 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 50 3d 74 2e 73 4e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 2c 54 3d 74 2e 66 53 68 6f 77 53 69 67 6e 49 6e 4f 70 74 69 6f 6e 73 41 73 42 75 74 74 6f 6e 2c 44 3d 74 2e 66 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 2c 45 3d 74 2e 66 55 73 65 43 65 72 74 69 66 69 63 61 74 65 49 6e 74 65 72 73 74 69 74 69 61 6c 56 69 65 77 2c 49 3d 74 2e 66 49 73 50 61 73 73 6b 65 79 53 75 70 70 6f 72 74 45 6e 61 62 6c 65 64 2c 41 3d 74 2e 66 49 73 56 65 72 69 66 69 61 62 6c 65 43 72 65 64 65 6e 74 69 61 6c 73 53 75 70 70 6f 72 74 45 6e 61 62 6c 65 64 2c 52 3d 74 2e 66 55 73 65 57 65 62 76 69 65 77 46 69 64 6f 43 75 73 74 6f 6d 50 72 6f 74 6f 63 6f 6c 2c Data Ascii: ClientId,k=t.sForwardedClientId,P=t.sNoPaBubbleVersion,T=t.fShowSignInOptionsAsButton,D=t.fOfflineAccountVisible,E=t.fUseCertificateInterstitialView,I=t.fIsPasskeySupportEnabled,A=t.fIsVerifiableCredentialsSupportEnabled,R=t.fUseWebviewFidoCustomProtocol,
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 6e 66 69 72 6d 61 74 69 6f 6e 56 69 65 77 49 64 3d 6e 2c 74 68 69 73 2e 70 6f 73 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 41 63 74 69 6f 6e 3d 74 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 6c 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 33 29 2c 61 3d 74 28 37 29 2c 6f 3d 69 2e 41 72 72 61 79 2c 72 3d 7b 6d 65 72 67 65 53 65 73 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 5b 5d 3b 72 65 74 75 72 6e 20 6f 2e 66 6f 72 45 61 63 68 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 6e 5b 74 5d 2e 6e 61 6d 65 3d 3d 3d 65 2e 6e 61 6d 65 26 26 6e 5b 74 5d Data Ascii: nfirmationViewId=n,this.postConfirmationAction=t},e.exports=l},function(e,n,t){var i=t(3),a=t(7),o=i.Array,r={mergeSessions:function(e,n,t){var i=[];return o.forEach(n,(function(n){var a=function(e,n){for(var t=0;t<n.length;t++)if(n[t].name===e.name&&n[t]
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 37 33 29 2c 64 3d 74 28 37 29 2c 6c 3d 74 28 37 34 29 3b 74 28 31 38 29 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 77 69 6e 64 6f 77 2e 53 65 72 76 65 72 44 61 74 61 29 3b 76 61 72 20 75 3d 72 2e 4c 6f 67 69 6e 4d 6f 64 65 2c 70 3d 73 2e 48 65 6c 70 65 72 2c 66 3d 73 2e 51 75 65 72 79 53 74 72 69 6e 67 2c 67 3d 73 2e 43 6f 6f 6b 69 65 73 2c 6d 3d 64 2e 4c 6f 67 69 6e 4f 70 74 69 6f 6e 2c 62 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 65 7d 7d 28 65 2e 75 72 6c 49 50 76 36 45 78 70 65 72 69 6d 65 6e 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 66 55 70 67 72 61 64 65 45 56 43 65 72 74 26 26 6e 75 6c 6c 21 3d 3d 6e 65 77 20 52 65 67 Data Ascii: 73),d=t(7),l=t(74);t(18).getInstance(window.ServerData);var u=r.LoginMode,p=s.Helper,f=s.QueryString,g=s.Cookies,m=d.LoginOption,b=!1;function v(e){!function(e){if(e){(new Image).src=e}}(e.urlIPv6Experiment),function(e){if(e.fUpgradeEVCert&&null!==new Reg
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 6e 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 29 2c 6e 3d 6e 75 6c 6c 2c 65 28 29 7d 2c 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 30 29 7d 2c 7a 62 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 Data Ascii: reateElement("script")?function(e){var n=c.createElement("script");n.onreadystatechange=function(){n.onreadystatechange=null,c.documentElement.removeChild(n),n=null,e()},c.documentElement.appendChild(n)}:function(e){setTimeout(e,0)},zb:function(e){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49757	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:32:57 UTC	656	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:32:57 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2369403 Cache-Control: public, max-age=31536000 Content-MD5: Rm+S3xFatg5Am1LOmufX9g== Content-Type: application/x-javascript Date: Fri, 30 Aug 2024 16:32:57 GMT Etag: 0x8DCB32DEE62CF26 Last-Modified: Fri, 02 Aug 2024 20:01:43 GMT Server: ECAcc (lhc/78A1) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 613e53e1-f01e-00f5-7a6d-e55e06000000 x-ms-version: 2009-09-19 Content-Length: 56391 Connection: close
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-08-30 16:32:57 UTC	16383	IN	Data Raw: 6e 67 20 6f 75 72 20 3c 73 74 72 6f 6e 67 3e 6e 65 77 20 73 69 67 6e 2d 69 6e 20 65 78 70 65 72 69 65 6e 63 65 3c 2f 73 74 72 6f 6e 67 3e 22 2c 65 2e 57 46 5f 53 54 52 5f 53 69 67 6e 55 70 4c 69 6e 6b 5f 54 65 78 74 3d 27 4e 6f 20 61 63 63 6f 75 6e 74 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 73 69 67 6e 75 70 22 3e 43 72 65 61 74 65 20 6f 6e 65 21 3c 2f 61 3e 27 2c 65 2e 43 54 5f 48 52 44 5f 53 54 52 5f 53 70 6c 69 74 74 65 72 5f 52 65 6e 61 6d 65 3d 27 54 69 72 65 64 20 6f 66 20 73 65 65 69 6e 67 20 74 68 69 73 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 69 44 69 73 61 6d 62 69 67 52 65 6e 61 6d 65 4c 69 6e 6b 22 3e 52 65 6e 61 6d 65 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 2e Data Ascii: ng our <strong>new sign-in experience</strong>",e.WF_STR_SignUpLink_Text='No account? <a href="#" id="signup">Create one!</a>',e.CT_HRD_STR_Splitter_Rename='Tired of seeing this? <a href="#" id="iDisambigRenameLink">Rename your personal Microsoft account.
2024-08-30 16:32:57 UTC	7242	IN	Data Raw: 6f 64 65 49 6e 63 6f 72 72 65 63 74 22 2c 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 3a 22 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 22 2c 4f 61 74 68 43 6f 64 65 4f 6c 64 3a 22 4f 61 74 68 43 6f 64 65 4f 6c 64 22 2c 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 3a 22 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 22 2c 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 3a 22 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 22 2c 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 65 61 63 68 65 64 3a 22 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 Data Ascii: odeIncorrect",OathCodeDuplicate:"OathCodeDuplicate",OathCodeOld:"OathCodeOld",ProofDataNotFound:"ProofDataNotFound",OathCodeCorrectButDeviceNotAllowed:"OathCodeCorrectButDeviceNotAllowed",OathCodeFailedMaxAllowedRetryReached:"OathCodeFailedMaxAllowedRetry

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49761	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:32:58 UTC	431	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:32:59 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2369404 Cache-Control: public, max-age=31536000 Content-MD5: Rm+S3xFatg5Am1LOmufX9g== Content-Type: application/x-javascript Date: Fri, 30 Aug 2024 16:32:58 GMT Etag: 0x8DCB32DEE62CF26 Last-Modified: Fri, 02 Aug 2024 20:01:43 GMT Server: ECAcc (lhc/78A1) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 613e53e1-f01e-00f5-7a6d-e55e06000000 x-ms-version: 2009-09-19 Content-Length: 56391 Connection: close
2024-08-30 16:32:59 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-08-30 16:32:59 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-08-30 16:32:59 UTC	2	IN	Data Raw: 6e 67 Data Ascii: ng
2024-08-30 16:32:59 UTC	16383	IN	Data Raw: 20 6f 75 72 20 3c 73 74 72 6f 6e 67 3e 6e 65 77 20 73 69 67 6e 2d 69 6e 20 65 78 70 65 72 69 65 6e 63 65 3c 2f 73 74 72 6f 6e 67 3e 22 2c 65 2e 57 46 5f 53 54 52 5f 53 69 67 6e 55 70 4c 69 6e 6b 5f 54 65 78 74 3d 27 4e 6f 20 61 63 63 6f 75 6e 74 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 73 69 67 6e 75 70 22 3e 43 72 65 61 74 65 20 6f 6e 65 21 3c 2f 61 3e 27 2c 65 2e 43 54 5f 48 52 44 5f 53 54 52 5f 53 70 6c 69 74 74 65 72 5f 52 65 6e 61 6d 65 3d 27 54 69 72 65 64 20 6f 66 20 73 65 65 69 6e 67 20 74 68 69 73 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 69 44 69 73 61 6d 62 69 67 52 65 6e 61 6d 65 4c 69 6e 6b 22 3e 52 65 6e 61 6d 65 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 2e 3c 2f Data Ascii: our <strong>new sign-in experience</strong>",e.WF_STR_SignUpLink_Text='No account? <a href="#" id="signup">Create one!</a>',e.CT_HRD_STR_Splitter_Rename='Tired of seeing this? <a href="#" id="iDisambigRenameLink">Rename your personal Microsoft account.</
2024-08-30 16:32:59 UTC	7240	IN	Data Raw: 65 49 6e 63 6f 72 72 65 63 74 22 2c 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 3a 22 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 22 2c 4f 61 74 68 43 6f 64 65 4f 6c 64 3a 22 4f 61 74 68 43 6f 64 65 4f 6c 64 22 2c 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 3a 22 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 22 2c 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 3a 22 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 22 2c 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 65 61 63 68 65 64 3a 22 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 65 Data Ascii: eIncorrect",OathCodeDuplicate:"OathCodeDuplicate",OathCodeOld:"OathCodeOld",ProofDataNotFound:"ProofDataNotFound",OathCodeCorrectButDeviceNotAllowed:"OathCodeCorrectButDeviceNotAllowed",OathCodeFailedMaxAllowedRetryReached:"OathCodeFailedMaxAllowedRetryRe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49762	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:32:59 UTC	412	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:32:59 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1948703 Cache-Control: public, max-age=31536000 Content-MD5: uaBUkDWJZJ75uKxjc6vkvw== Content-Type: application/x-javascript Date: Fri, 30 Aug 2024 16:32:59 GMT Etag: 0x8DCB563CA8588E7 Last-Modified: Mon, 05 Aug 2024 15:32:18 GMT Server: ECAcc (lhc/7971) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9a732ed0-201e-0054-8041-e9ce30000000 x-ms-version: 2009-09-19 Content-Length: 449540 Connection: close
2024-08-30 16:32:59 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-30 16:32:59 UTC	16383	IN	Data Raw: 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: DING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthoriz
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 54 61 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 74 61 72 67 65 74 3f 65 2e 74 61 72 67 65 74 3a 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3f 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3a 6e 75 6c 6c 3a 6e 75 6c 6c 7d 7d 2c 44 3d 6e 2e 51 75 65 72 79 53 74 72 69 6e 67 3d 7b 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2c 74 3d 6e 75 6c 6c 2c 69 3d 6e 75 6c 6c 3b 69 66 28 65 29 7b 76 61 72 20 61 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 2c 6f 3d 65 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 2d 31 21 3d 3d 6f 26 26 28 2d 31 3d 3d 3d 61 7c 7c 6f 3c 61 29 3f 28 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6f 29 2c 69 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 Data Ascii: Target:function(e){return e?e.target?e.target:e.srcElement?e.srcElement:null:null}},D=n.QueryString={parse:function(e){var n=e,t=null,i=null;if(e){var a=e.indexOf("?"),o=e.indexOf("#");-1!==o&&(-1===a\|\|o<a)?(n=e.substring(0,o),i=d.doubleSplit(e.substring(
2024-08-30 16:33:00 UTC	3	IN	Data Raw: 75 6c 74 Data Ascii: ult
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 50 61 73 73 77 6f 72 64 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 69 64 69 6e 67 4d 6f 64 65 3d 69 2e 48 69 64 69 6e 67 4d 6f 64 65 2e 48 69 64 65 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 45 76 65 6e 74 54 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 72 65 74 75 72 6e 7b 65 76 65 6e 74 49 64 3a 65 2c 65 76 65 6e 74 4c 65 76 65 6c 3a 74 7c 7c 69 2e 45 76 65 Data Ascii: TextBoxPropertyLogOption(e,n)},s.getPasswordTextBoxPropertyLogOption=function(e,n){return(n=n\|\|{}).hidingMode=i.HidingMode.Hide,s.getDefaultTextBoxPropertyLogOption(e,n)},s.getDefaultEventTracingOptions=function(e,n,t){return{eventId:e,eventLevel:t\|\|i.Eve
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 68 69 73 5b 75 2e 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 5d 3d 62 29 2c 76 26 26 28 74 68 69 73 5b 75 2e 43 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 5d 3d 76 29 7d 2c 6e 2e 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 2c 61 2c 63 2c 64 3d 74 68 69 73 2c 6c 3d 70 2e 4e 6f 6e 65 2c 75 3d 22 22 2c 66 3d 22 22 2c 67 3d 22 22 2c 6d 3d 65 2e 64 61 74 61 2c 62 3d 65 2e 6f 6e 53 65 6e 64 2c 76 3d 65 2e 6f 6e 53 65 6e 64 46 61 69 6c 2c 68 3d 65 2e 6f 6e 46 6c 6f 77 45 78 70 69 72 65 64 2c 5f 3d 65 2e 74 69 6d 65 6f 75 74 7c 7c 33 65 34 2c 43 3d 65 2e 73 69 74 65 49 64 2c 53 3d 65 2e 63 6c 69 65 6e 74 49 64 2c 78 3d 65 2e 66 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 77 3d 65 2e 6e 6f 50 61 42 75 62 62 6c 65 Data Ascii: his[u.ProofConfirmation]=b),v&&(this[u.CanaryFlowToken]=v)},n.Request=function(e){var n,t,a,c,d=this,l=p.None,u="",f="",g="",m=e.data,b=e.onSend,v=e.onSendFail,h=e.onFlowExpired,_=e.timeout\|\|3e4,C=e.siteId,S=e.clientId,x=e.forwardedClientId,w=e.noPaBubble
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 6d 73 7c 7c 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 61 63 65 62 6f 6f 6b 50 61 72 61 6d 73 29 29 29 72 65 74 75 72 6e 20 69 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 6d 2e 52 65 6d 6f 74 65 4e 47 43 3a 63 61 73 65 20 6d 2e 46 65 64 65 72 61 74 69 6f 6e 3a 63 61 73 65 20 6d 2e 41 63 63 65 73 73 50 61 73 73 3a 63 61 73 65 20 6d 2e 4e 6f 50 72 65 66 65 72 72 65 64 43 72 65 64 65 6e 74 69 61 6c 3a 6f 26 26 6f 2e 53 61 6d 6c 52 65 71 75 65 73 74 26 26 6f 2e 52 65 6c 61 79 53 74 61 74 65 3f 28 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 2c 69 2e 69 64 70 52 65 64 69 72 65 63 74 50 6f 73 74 50 61 72 61 6d 73 3d 7b 53 41 4d 4c 52 65 71 75 65 Data Ascii: ms\|\|n.Credentials.FacebookParams)))return i;switch(a){case m.RemoteNGC:case m.Federation:case m.AccessPass:case m.NoPreferredCredential:o&&o.SamlRequest&&o.RelayState?(i.idpRedirectUrl=n.Credentials.FederationRedirectUrl,i.idpRedirectPostParams={SAMLReque
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 74 65 28 29 2c 6e 2e 6f 6e 52 65 64 69 72 65 63 74 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 52 65 67 69 73 74 65 72 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 55 6e 72 65 67 69 73 74 65 72 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 68 6f 77 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 55 70 64 61 74 65 46 6c 6f 77 54 6f 6b 65 6e 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 63 72 65 64 65 6e 74 69 61 6c 43 6f 75 6e 74 3d 30 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 54 79 70 65 3d 6e 75 6c 6c 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 53 68 6f 77 6e 4f 6e 6c 79 4f 6e 50 69 63 6b 65 Data Ascii: te(),n.onRedirect=o.create(),n.onRegisterDialog=o.create(),n.onUnregisterDialog=o.create(),n.onShowDialog=o.create(),n.onSetPendingRequest=o.create(),n.onUpdateFlowToken=o.create(),n.credentialCount=0,n.selectedCredType=null,n.selectedCredShownOnlyOnPicke
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 75 74 68 65 6e 74 69 63 61 74 65 64 53 74 61 74 65 7c 7c 32 3d 3d 3d 65 2e 61 75 74 68 65 6e 74 69 63 61 74 65 64 53 74 61 74 65 2c 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 7c 7c 21 31 2c 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 3a 21 30 2c 69 73 47 69 74 48 75 62 46 65 64 3a 65 2e 69 73 47 69 74 48 75 62 46 65 64 7c 7c 21 31 7d 7d 29 29 7d 2c 70 61 72 73 65 42 73 73 6f 53 65 73 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 2e 6d 61 70 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 73 73 6f 55 6e 69 71 75 65 49 64 3a 65 2e 73 73 6f 55 6e 69 71 75 65 49 64 2c 6e 61 6d 65 3a 65 2e 6e 61 6d 65 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 65 2e 64 69 73 70 6c Data Ascii: uthenticatedState\|\|2===e.authenticatedState,isWindowsSso:e.isWindowsSso\|\|!1,isMeControlSession:!0,isGitHubFed:e.isGitHubFed\|\|!1}}))},parseBssoSessions:function(e){return o.map(e,(function(e){return{ssoUniqueId:e.ssoUniqueId,name:e.name,displayName:e.displ
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 29 7b 76 61 72 20 61 3d 69 2e 73 46 65 64 51 53 3b 6e 3d 3d 3d 6d 2e 4e 6f 74 68 69 6e 67 43 68 65 63 6b 65 64 26 26 28 61 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 22 3f 22 2b 61 2c 22 77 63 74 78 22 2c 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 2b 66 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 22 3f 22 2b 61 29 29 2e 73 75 62 73 74 72 28 31 29 29 3b 65 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 63 62 63 78 74 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 2e 65 78 74 72 61 63 74 28 22 63 62 63 78 74 22 29 29 29 29 2c 65 3d 66 2e 61 70 70 65 6e 64 4f Data Ascii: return function(e,n,t,i){var a=i.sFedQS;n===m.NothingChecked&&(a=f.appendOrReplace("?"+a,"wctx","LoginOptions%3D3%26"+f.extract("wctx","?"+a)).substr(1));e=f.appendOrReplace(e,"cbcxt",encodeURIComponent(decodeURIComponent(f.extract("cbcxt")))),e=f.appendO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49763	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:32:59 UTC	651	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:32:59 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13776857 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Fri, 30 Aug 2024 16:32:59 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-08-30 16:32:59 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-30 16:32:59 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49764	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:32:59 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:00 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6035029 Cache-Control: public, max-age=31536000 Content-MD5: /tr7rG0APA0Nym9G/DMFwg== Content-Type: application/x-javascript Date: Fri, 30 Aug 2024 16:32:59 GMT Etag: 0x8DC90CF0C1378C3 Last-Modified: Thu, 20 Jun 2024 02:16:51 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 281a1f59-901e-00f2-0416-c4a977000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 69 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 Data Ascii: i=Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(536);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 21 31 7d 29 2c 65 7d 28 72 28 36 38 31 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c Data Ascii: !1}),e}(r(681));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rul
2024-08-30 16:33:00 UTC	3	IN	Data Raw: 64 22 21 Data Ascii: d"!
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 22 3a Data Ascii: =typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary":
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d 3d 33 Data Ascii: function N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-=3
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 72 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c Data Ascii: r r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(t,
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 72 65 74 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b 22 64 65 Data Ascii: return new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s["de
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 6f 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 29 66 6f 72 28 3b 65 2d 2d 3b 29 74 3d 69 28 74 2c 75 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f 74 6f Data Ascii: ports=function(t,e){if(a&&"string"==typeof t&&!o.prepareStackTrace)for(;e--;)t=i(t,u,"");return t}},function(t,e,r){"use strict";var n=r(536);t.exports=!n((function(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.proto
2024-08-30 16:33:00 UTC	16383	IN	Data Raw: 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 65 2e 70 6c 75 67 69 6e 7c 7c 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 26 26 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 26 26 28 65 2e 70 6c 75 67 69 6e 3d 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 29 3b 76 61 72 20 72 3d 6e 65 77 20 73 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 70 75 73 68 28 72 29 2c 72 7d 7d 2c 7b 6b 65 79 3a 22 77 61 72 6e 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 Data Ascii: rguments[1]!==undefined?arguments[1]:{};e.plugin\|\|this.lastPlugin&&this.lastPlugin.postcssPlugin&&(e.plugin=this.lastPlugin.postcssPlugin);var r=new s(t,e);return this.messages.push(r),r}},{key:"warnings",value:function(){return this.messages.filter((func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49765	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:00 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:01 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13776858 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Fri, 30 Aug 2024 16:33:00 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-08-30 16:33:01 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-30 16:33:01 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49766	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:01 UTC	664	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:01 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13776664 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 30 Aug 2024 16:33:01 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-08-30 16:33:01 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49767	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:01 UTC	665	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:01 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13776704 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 30 Aug 2024 16:33:01 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-08-30 16:33:01 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49768	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:01 UTC	665	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:01 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13690686 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Fri, 30 Aug 2024 16:33:01 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-08-30 16:33:01 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49771	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:01 UTC	435	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:01 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6035031 Cache-Control: public, max-age=31536000 Content-MD5: /tr7rG0APA0Nym9G/DMFwg== Content-Type: application/x-javascript Date: Fri, 30 Aug 2024 16:33:01 GMT Etag: 0x8DC90CF0C1378C3 Last-Modified: Thu, 20 Jun 2024 02:16:51 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 281a1f59-901e-00f2-0416-c4a977000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-08-30 16:33:02 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-30 16:33:02 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-08-30 16:33:02 UTC	16383	IN	Data Raw: 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e Data Ascii: =Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(536);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var n
2024-08-30 16:33:02 UTC	16383	IN	Data Raw: 31 7d 29 2c 65 7d 28 72 28 36 38 31 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c 65 Data Ascii: 1}),e}(r(681));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rule
2024-08-30 16:33:02 UTC	16383	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 Data Ascii: "!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary
2024-08-30 16:33:02 UTC	16383	IN	Data Raw: 67 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d Data Ascii: g;function N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-
2024-08-30 16:33:02 UTC	16383	IN	Data Raw: 76 61 72 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 Data Ascii: var r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(
2024-08-30 16:33:02 UTC	16383	IN	Data Raw: 29 7d 72 65 74 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b 22 Data Ascii: )}return new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s["
2024-08-30 16:33:02 UTC	16383	IN	Data Raw: 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 6f 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 29 66 6f 72 28 3b 65 2d 2d 3b 29 74 3d 69 28 74 2c 75 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f Data Ascii: exports=function(t,e){if(a&&"string"==typeof t&&!o.prepareStackTrace)for(;e--;)t=i(t,u,"");return t}},function(t,e,r){"use strict";var n=r(536);t.exports=!n((function(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.pro
2024-08-30 16:33:02 UTC	16383	IN	Data Raw: 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 65 2e 70 6c 75 67 69 6e 7c 7c 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 26 26 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 26 26 28 65 2e 70 6c 75 67 69 6e 3d 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 29 3b 76 61 72 20 72 3d 6e 65 77 20 73 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 70 75 73 68 28 72 29 2c 72 7d 7d 2c 7b 6b 65 79 3a 22 77 61 72 6e 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 66 69 6c 74 65 72 28 28 66 75 Data Ascii: &arguments[1]!==undefined?arguments[1]:{};e.plugin\|\|this.lastPlugin&&this.lastPlugin.postcssPlugin&&(e.plugin=this.lastPlugin.postcssPlugin);var r=new s(t,e);return this.messages.push(r),r}},{key:"warnings",value:function(){return this.messages.filter((fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49772	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:01 UTC	626	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:02 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6035030 Cache-Control: public, max-age=31536000 Content-MD5: FXzSZAYOwKp2jFj6XjvNRQ== Content-Type: application/x-javascript Date: Fri, 30 Aug 2024 16:33:01 GMT Etag: 0x8DC90CF0D8CB039 Last-Modified: Thu, 20 Jun 2024 02:16:53 GMT Server: ECAcc (lhc/7968) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 736bdcfa-101e-003a-3f16-c47522000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-08-30 16:33:02 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-30 16:33:02 UTC	1	IN	Data Raw: 75 Data Ascii: u
2024-08-30 16:33:02 UTC	16383	IN	Data Raw: 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 30 Data Ascii: 200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u20
2024-08-30 16:33:02 UTC	16383	IN	Data Raw: 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 61 Data Ascii: 90f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdca
2024-08-30 16:33:02 UTC	16383	IN	Data Raw: 74 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 33 29 2c 74 2e 43 63 3d 72 28 38 38 34 29 2c 74 2e 43 66 3d 72 28 31 33 38 30 29 2c 74 2e 50 3d 72 28 37 38 33 29 2c 74 2e 5a 3d 72 28 38 38 35 29 7d 2c 31 33 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c Data Ascii: trict";t.Any=r(883),t.Cc=r(884),t.Cf=r(1380),t.P=r(783),t.Z=r(885)},1380:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\
2024-08-30 16:33:02 UTC	3	IN	Data Raw: 4d 61 72 Data Ascii: Mar
2024-08-30 16:33:02 UTC	16383	IN	Data Raw: 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 6b 75 70 Data Ascii: ks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.markup
2024-08-30 16:33:02 UTC	16383	IN	Data Raw: 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 2c 2d Data Ascii: r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a",-
2024-08-30 16:33:02 UTC	15467	IN	Data Raw: 6c 61 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 69 Data Ascii: lance_pairs","emphasis","text_collapse"]}}}},1427:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49774	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:03 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:03 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13776666 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 30 Aug 2024 16:33:03 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-08-30 16:33:03 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49775	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:03 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:03 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13776706 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 30 Aug 2024 16:33:03 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-08-30 16:33:03 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49776	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:03 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:03 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13690688 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Fri, 30 Aug 2024 16:33:03 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-08-30 16:33:03 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49777	152.199.21.175	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:03 UTC	441	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:03 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6035032 Cache-Control: public, max-age=31536000 Content-MD5: FXzSZAYOwKp2jFj6XjvNRQ== Content-Type: application/x-javascript Date: Fri, 30 Aug 2024 16:33:03 GMT Etag: 0x8DC90CF0D8CB039 Last-Modified: Thu, 20 Jun 2024 02:16:53 GMT Server: ECAcc (lhc/7968) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 736bdcfa-101e-003a-3f16-c47522000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-08-30 16:33:03 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-30 16:33:03 UTC	16383	IN	Data Raw: 75 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 Data Ascii: u200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u2
2024-08-30 16:33:03 UTC	16383	IN	Data Raw: 32 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 Data Ascii: 290f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdc
2024-08-30 16:33:03 UTC	16383	IN	Data Raw: 73 74 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 33 29 2c 74 2e 43 63 3d 72 28 38 38 34 29 2c 74 2e 43 66 3d 72 28 31 33 38 30 29 2c 74 2e 50 3d 72 28 37 38 33 29 2c 74 2e 5a 3d 72 28 38 38 35 29 7d 2c 31 33 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d Data Ascii: strict";t.Any=r(883),t.Cc=r(884),t.Cf=r(1380),t.P=r(783),t.Z=r(885)},1380:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-
2024-08-30 16:33:03 UTC	16383	IN	Data Raw: 65 4d 61 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 Data Ascii: eMarks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.ma
2024-08-30 16:33:03 UTC	5	IN	Data Raw: 74 75 72 6e 20 Data Ascii: turn
2024-08-30 16:33:03 UTC	16383	IN	Data Raw: 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 2c 2d 31 Data Ascii: r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a",-1
2024-08-30 16:33:03 UTC	15466	IN	Data Raw: 61 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 69 6e Data Ascii: ance_pairs","emphasis","text_collapse"]}}}},1427:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49786	13.107.246.63	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:12 UTC	603	OUT	GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:12 UTC	813	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:33:12 GMT Content-Type: application/x-javascript Content-Length: 231091 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 20 Aug 2024 23:08:41 GMT ETag: 0x8DCC16D08882164 x-ms-request-id: 49558b19-401e-0034-3748-f9cf33000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240830T163312Z-16579567576vpzq62mgx0my8kw00000003ug00000000bmep x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-30 16:33:12 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 69 77 db 38 d2 28 fc fd fd 15 b6 6e 8e 87 1c c3 8a 64 67 a5 c2 d6 4d 1c bb 93 ee 6c 1d 27 9d 4e bb 7d 7d 68 09 92 d8 91 48 85 a4 ec 38 b6 fe fb ad 05 2b 45 39 e9 99 67 9e 67 ee 7b 26 e7 c4 02 41 10 4b a1 00 54 15 6a b9 fd f7 cd 8d c3 bc d8 98 a6 03 99 95 72 23 cd 46 79 31 4b aa 34 cf 36 e6 53 99 40 56 29 e1 7f 3a ce 16 f3 9d 51 72 56 a4 83 53 99 b5 ff 2c db 2f 9e ef 1f bc 3a 3a 68 57 5f aa 8d bf df fe ff 36 47 8b 6c 80 df 05 e1 d5 79 52 6c 48 51 89 4c 14 22 17 69 7c f5 f0 6e 77 ef 6e 64 4a d0 bb f0 aa b5 c0 ea 2b a8 b2 6a f5 f0 9b 22 ce 82 bd 5d 28 1c 8a 3c be 1a 4c d2 e9 70 3f cf 2a f9 a5 7a 77 39 97 65 b4 d9 11 03 fb 5c 7b a4 d7 43 39 4a 16 d3 ea 4d 91 cf f9 39 2d e7 d3 e4 f2 55 32 a3 e2 63 59 3d ad 95 a0 ac 22 3d 97 Data Ascii: iw8(ndgMl'N}}hH8+E9gg{&AKTjr#Fy1K46S@V):QrVS,/::hW_6GlyRlHQL"i\|nwndJ+j"](<Lp?*zw9e\{C9JM9-U2cY="=
2024-08-30 16:33:12 UTC	16384	IN	Data Raw: ed c2 35 95 d0 b1 da e4 23 ba 57 fa c1 68 e4 5e e1 77 11 50 aa 7c ce 55 3b 72 d9 93 71 b6 94 91 52 0c e1 36 a0 7e a8 ec 88 15 f8 d0 27 81 97 61 a2 3b 61 be 55 66 82 47 65 1d 4a 3d 2f dc f5 34 c9 5c cb a3 cd 60 13 63 5b d3 15 84 e4 c3 8b 72 f6 36 5d ec 21 25 63 b6 16 a9 2c 4a 71 4d 4e b3 61 d4 52 24 65 49 66 40 7d 43 62 96 a8 cb 87 46 bb c8 ac 43 79 8d 84 6f 14 e3 be b5 b5 b9 19 74 ef 6d ad 2d 80 97 90 2e 8f 77 96 05 f6 90 94 2a 1a 81 a8 62 40 46 40 6c 38 34 59 19 0e 5d 00 b5 71 8b 7a 4e 71 e6 15 0e 01 64 11 c1 94 0f 97 d5 ad 43 b9 5b fe c0 21 0e a6 f9 80 ed 12 d0 8f 9e 42 bb 02 f5 84 81 ad 60 cd 20 66 ad a9 f1 40 c6 b5 ef 43 13 23 c1 10 c6 8e c2 fa a5 ab 33 8d 58 aa fd 95 b8 e9 5a d4 55 5d 0b ba 2d 31 2e 4d e8 89 dc 65 b1 52 39 bb 15 28 65 52 0c 26 5e 56 Data Ascii: 5#Wh^wP\|U;rqR6~'a;aUfGeJ=/4\`c[r6]!%c,JqMNaR$eIf@}CbFCyotm-.w*b@F@l84Y]qzNqdC[!B` f@C#3XZU]-1.MeR9(eR&^V
2024-08-30 16:33:12 UTC	16384	IN	Data Raw: de 42 bc ab d2 e8 e2 52 a9 e5 42 17 03 b9 4c 28 dd c6 f3 db 37 1a e7 36 0e e6 18 4f e4 2a 17 01 15 d4 e3 da bb 27 57 89 53 d7 ce 39 25 a9 b3 35 f3 d0 d3 45 e6 63 f4 d8 87 75 6d 29 72 e0 75 a5 71 34 f7 68 16 6e 97 bd de c6 fc 4e da c7 3b 80 5e 27 a4 05 7a 56 33 54 7a 01 93 08 03 90 a3 e6 35 ed 80 41 cc 61 5c b4 16 40 02 0c da ab 41 a2 14 be 0c d9 a5 4e 5b 8a 3f db 28 1b a8 4d b7 8e 49 66 c0 cb bb 42 3e 7f 05 1c 06 7b 3b 96 7f 23 f8 cf 78 b2 27 b9 1b d9 cc 74 56 48 b3 f6 e4 b3 76 b3 30 84 8f 9c 31 2e a9 c6 a0 65 10 bb 4e 65 28 3b fb 89 70 c9 28 23 af 0f 95 63 1c b5 d4 85 31 aa eb 1b 20 92 75 99 03 03 42 5c 0f 50 75 ce 38 87 65 00 53 e2 0a cb 79 e3 e4 c7 61 26 a9 c4 3c 84 56 3e d9 dc 8e 2c c0 f8 6c 3b f3 ba 53 d9 cc aa c0 89 df 57 59 38 f9 b3 40 bd f6 27 5c Data Ascii: BRBL(76O*'WS9%5Ecum)ruq4hnN;^'zV3Tz5Aa\@AN[?(MIfB>{;#x'tVHv01.eNe(;p(#c1 uB\Pu8eSya&<V>,l;SWY8@'\
2024-08-30 16:33:12 UTC	16384	IN	Data Raw: 86 38 9d 2c 93 b7 34 01 5a 24 99 9e 1e 3a 83 98 db 86 e3 e1 be 26 fd 7e ed 02 ef a3 44 33 4c e6 e3 e6 1e a6 bb 19 79 ed 4d a7 f6 1b d6 5d ed 15 33 f9 e6 6f e9 8c a9 eb 75 5b da 84 75 58 a3 3c 4b e4 23 8b 0e 27 e5 1c d3 18 c0 eb e8 59 2b 47 d0 fb 1b 03 c6 d8 14 96 c5 7c f1 5b 17 63 5f b9 f3 05 ef bc 16 a2 fd 9d 2f 58 e4 69 ef a2 3e 92 95 bb 51 fd be 19 7c 65 0f 53 79 6d a9 42 e8 48 72 7a 74 dd 93 be 47 4a cc a3 df 21 96 14 d4 5f c5 fa e3 20 02 98 ee 88 5e 19 cf 2e 74 a8 cf 2c f8 8c 6e 34 b7 95 28 cb 56 42 87 a2 11 d9 38 58 85 ae 98 2f b3 3e 83 e2 81 f4 cc 65 5d 1c 26 65 15 ea 87 b7 dc 77 43 18 d6 9c a9 89 3f 71 ae 48 66 86 43 ef 46 96 08 2e 5b 04 1a f1 c4 1a d5 a6 2c 69 d9 b3 d3 e2 a5 ee 90 0f 67 64 09 e4 ca d8 dc 48 14 ca ed 40 08 3d a7 3c 71 59 7d ee 20 Data Ascii: 8,4Z$:&~D3LyM]3ou[uX<K#'Y+G\|[c_/Xi>Q\|eSymBHrztGJ!_ ^.t,n4(VB8X/>e]&ewC?qHfCF.[,igdH@=<qY}
2024-08-30 16:33:12 UTC	16384	IN	Data Raw: 8e db 5b 59 19 a3 cf ef 47 36 67 de 44 61 44 c9 8c 84 33 8c c1 50 fe 0e b7 46 37 3f 85 9b cb 4f 9e 6c 75 90 18 d3 25 76 3b 9e 87 ac 06 24 e8 bc ca b8 5e 50 7d 48 01 cb ab 44 4e 63 00 06 da 1d ca 8e 0f c6 af b1 1f 4d f8 e0 45 ae 0e 08 e0 32 15 60 80 4c 84 d8 d6 ef 29 b8 84 31 3b d0 40 4b 70 61 65 ef 7a 75 f6 a0 3a d9 53 98 a4 e3 52 dc 39 54 38 85 a3 8c ce c3 0d e6 86 ce b2 ad 62 72 40 4b 34 52 7b 4c 0c 8d 5e b7 8c ee bd 81 fb 55 40 62 2f 57 57 a8 d6 9f 89 ba 75 63 79 a3 a0 20 07 72 78 df 25 17 cf eb e9 a6 ed 9f 08 e0 d3 5d aa e9 99 cf bb 05 4a 06 ef 91 7e 31 18 76 ed 04 24 23 80 be 1a 59 d6 53 dc 44 de 3f 98 73 59 a7 d7 a6 2d 02 58 c2 c4 e0 3a 8e 7d 06 6b a3 9e 7b a3 c0 37 ee 9f 16 b2 33 39 3b a5 c5 1c e1 c7 55 6a 95 ee c0 5f c4 69 52 b3 db d7 a6 69 e2 b2 Data Ascii: [YG6gDaD3PF7?Olu%v;$^P}HDNcME2`L)1;@Kpaezu:SR9T8br@K4R{L^U@b/WWucy rx%]J~1v$#YSD?sY-X:}k{739;Uj_iRi
2024-08-30 16:33:12 UTC	16384	IN	Data Raw: 94 a6 5c 97 d7 f9 dc f1 3d c0 96 27 df 6d 47 67 bd ee 18 4f ce 73 be 55 b4 fa 56 9a b0 8b c2 3a d0 94 b5 1d 98 a9 38 64 80 b8 ef 08 60 6f 04 0c 6b 34 fd 68 6b fa 1d fe 29 01 66 fe 9e 7f 3c 05 c9 5d df 57 ae 94 71 4b c8 29 43 14 be 1b db 2f dc 66 74 f4 59 39 5e 9e 90 09 d7 21 0a 55 85 25 dd 62 43 be cd 7a cc ee 02 d2 09 a2 ea 3e e6 1d d2 c9 3c 9f 3d 99 1c 66 47 93 e5 54 12 c4 98 de 52 e8 34 db 95 19 98 e1 0b b5 7d 20 49 5c a7 78 c6 94 09 45 db 21 cd da 0e eb 11 6c cc 5c 95 4d 35 3e 67 2c 66 38 7b b4 07 83 22 20 71 86 84 51 8e f2 83 f8 72 47 fe f2 3e 57 03 af 14 f7 23 99 34 c7 dc 33 18 93 05 26 2c dc b7 73 16 21 83 4d 1e bb 1a b9 86 bb eb 1f 72 f6 80 51 a6 5f 33 c4 f1 b4 5e e0 02 68 69 0f 56 1b ab 7c 40 f5 b5 b2 ec 34 19 d4 de 52 ea 1d 2c d8 57 86 83 fd 05 Data Ascii: \='mGgOsUV:8d`ok4hk)f<]WqK)C/ftY9^!U%bCz><=fGTR4} I\xE!l\M5>g,f8{" qQrG>W#43&,s!MrQ_3^hiV\|@4R,W
2024-08-30 16:33:12 UTC	16384	IN	Data Raw: b3 f5 73 1d bc 55 26 b2 6f d1 f1 78 2d 7f d3 b9 0f de c8 ce 66 20 fc 31 a5 b7 f6 20 c0 6a 83 49 18 ad 06 b3 2c a1 0f 17 b3 e2 8c 95 5d 6c d3 ca 7b d0 c7 8a 79 af 14 92 39 73 c0 4c 14 65 eb e2 a1 5b e7 2e a2 39 50 99 63 7a b8 6e a8 29 ea 4b 28 48 8d e3 f9 e3 5c 3c dd 2c 81 95 37 d1 a5 7d 63 f8 b7 4c 6e e5 9a 9e 3f 04 95 a9 f1 98 98 cf 6e 6d 1b 40 19 7c e6 5b 5c 0d 14 2b 50 bd bf 57 9a ea 37 f9 37 ae 5f 1d ac f6 50 9a c1 7c 70 69 ba b6 86 59 dd 3b 18 64 57 3d fd 8d b8 e7 b9 05 71 2c ff 0b 51 20 73 f0 df bf 6f 0e fe fa db 70 f0 df 77 e2 e0 bf 5d 32 07 ff fd 8a 38 f8 6f 57 c0 c1 ff e0 db 43 1c c9 af 19 61 cb c3 9b 36 8f 30 e9 70 ce 65 a6 39 71 ee fe 65 87 ee fc 68 1d 16 19 ff 69 3e 9e d9 c9 f0 53 97 b6 ab 17 8e d6 c8 84 eb 59 ad a7 e2 0a 25 b3 d4 9b c8 ce 5d Data Ascii: sU&ox-f 1 jI,]l{y9sLe[.9Pczn)K(H\<,7}cLn?nm@\|[\+PW77_P\|piY;dW=q,Q sopw]28oWCa60pe9qehi>SY%]
2024-08-30 16:33:12 UTC	16384	IN	Data Raw: 47 53 7e e2 2f b3 d0 20 2e b1 88 e0 40 d4 68 20 c5 9b d8 23 be 18 04 c7 8b 83 82 7d 38 d8 81 c1 30 89 3c 41 72 96 f6 f1 9c d0 4f 51 b7 d0 ca 16 65 49 45 2b 10 28 98 02 a1 c2 78 89 91 84 8c 80 2e 56 9c f6 2d d4 9d d2 87 2f a8 fc 15 05 61 19 98 2c 5b 19 b3 50 76 1d 4d b8 91 25 b5 95 a5 68 5c d3 ae e0 86 fb fe fe 4e 5c 5c 37 ae ae 27 ca 45 29 d1 1d 9b 9f d7 8b d3 d4 45 26 59 9d 12 a1 29 83 fb 47 6a e7 f4 0b 81 fd 55 36 27 76 81 0a 84 13 f8 0b d4 49 23 7a 34 30 67 5b 94 a7 a1 3d ba 68 e6 95 b2 10 c8 0a 87 c1 08 ba a1 da 10 85 5d 80 d9 ad c1 1c e6 18 86 f0 d7 98 a8 ef f0 84 11 69 af c2 36 40 33 66 6c 7c 44 1b 1f 61 e3 a3 6b 45 db c0 b9 68 16 d8 db 94 cc db 81 c6 bc 01 6f c2 1b 14 93 0d 78 b6 36 00 96 12 e7 17 01 fa 58 38 e9 00 7a fd 8a 86 f8 c3 ab 18 35 fd e2 Data Ascii: GS~/ .@h #}80<ArOQeIE+(x.V-/a,[PvM%h\N\\7'E)E&Y)GjU6'vI#z40g[=h]i6@3fl\|DakEhox6X8z5
2024-08-30 16:33:12 UTC	16384	IN	Data Raw: 1a ae 62 48 e3 21 2c 9e c5 84 c1 ab 63 02 5c 4e ab de 9b 37 d9 d0 48 31 6a e1 5d 11 bb 90 5b 21 3e 9a bd 8e 6f 01 fb d0 b3 80 31 dd e3 da e5 05 e2 e5 de 6f 92 d4 bb 0f 50 0e 5f ba 49 e0 1d b9 b7 c1 08 f5 8c 60 b0 87 3e 86 5b 90 cd d9 68 ef 39 70 28 64 f9 18 46 1d b6 a6 6e 36 a6 8a 33 f8 48 7d 37 19 8c 61 bc 92 57 a9 7f 81 0a c6 68 ed 3c 75 e0 37 0c 30 05 02 e4 b5 f5 36 60 e9 15 a0 22 57 a0 f7 97 70 81 ad 07 d9 16 50 28 bc 25 7b c6 b0 23 1b a5 f7 56 aa 0d 03 70 19 10 31 a6 a5 28 ad 04 61 30 b1 c8 01 fc 94 bb 80 aa f2 7c 17 42 27 32 ad f9 80 0a 8b 2d 4d 9d 3b f4 98 3f 73 ba f8 67 5a 5e 94 fc f9 ad c6 17 57 b0 be ba f0 83 6e 8c c9 d5 e1 96 85 5e 02 30 04 67 96 c5 11 70 7a 8d 46 fd 3a f5 c3 a1 50 cd ae 42 bf ad 2d 7a 27 cb dc 1f fd 7b 54 31 71 c3 4c fc 1a 64 Data Ascii: bH!,c\N7H1j][!>o1oP_I`>[h9p(dFn63H}7aWh<u706`"WpP(%{#Vp1(a0\|B'2-M;?sgZ^Wn^0gpzF:PB-z'{T1qLd
2024-08-30 16:33:12 UTC	16384	IN	Data Raw: 0e 33 0c 72 12 a4 78 77 4b 5b 20 9a f4 e9 3a 6c be ba f8 88 e1 7b a7 d1 09 3f 14 30 fb 13 f4 7f a4 1d 8e 33 51 42 0d 0d cf 29 8e 0d 96 59 82 19 b9 cf 13 7c ad a5 de 2b b5 e6 30 b6 bb 29 29 90 a8 f9 4b 58 24 4f d7 28 8e 47 a1 bf 7c 28 df 53 fe fb 0d a4 54 67 a3 61 40 4b b3 fe 8a 61 04 d9 cb 59 ff 3d 87 51 ac b3 c9 30 10 dc 42 7e 4e c2 e4 18 ec 14 ae 7b 0d 8f 17 ec 35 50 45 e2 0c 6a c0 ae ce e8 0b af cd a4 0f a4 35 9d bb bc 3e dd 9f 80 0f f1 5e 55 e1 94 ef 91 3c 8b 82 c0 ae d0 6b f9 61 35 50 cf 44 75 11 4c 96 e7 b3 00 da 2f 73 2a 99 d5 6e fd 24 18 be 0f 28 a0 c6 cf 81 a9 18 24 ee 30 bb f0 27 71 86 12 40 f8 ce 68 ab 00 ac 77 85 ef 57 e8 ca bd f1 a9 6d d7 43 a5 34 7c 79 06 aa 09 2a 13 d8 46 ef c7 7c 42 1c 05 26 81 1f 79 a9 8e 15 2b 03 d0 91 2b a7 e0 61 48 91 Data Ascii: 3rxwK[ :l{?03QB)Y\|+0))KX$O(G\|(STga@KaY=Q0B~N{5PEj5>^U<ka5PDuL/sn$($0'q@hwWmC4\|yF\|B&y++aH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49788	13.107.246.63	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:13 UTC	606	OUT	GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:13 UTC	812	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:33:13 GMT Content-Type: application/x-javascript Content-Length: 32811 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 09 Aug 2024 21:16:16 GMT ETag: 0x8DCB8B881B52A8D x-ms-request-id: 3833c618-e01e-002d-6c01-f84f88000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240830T163313Z-16579567576kv75wmks9m65qec00000003q000000000tymx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-30 16:33:13 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 6b 57 db 48 b3 3f fa fe 7c 0a 5b 67 0e 5b 1a 1a c7 86 24 93 d8 51 bc 12 42 26 e4 06 13 c8 65 86 61 b3 84 dd 06 0d 46 f2 48 32 84 60 7f f7 53 bf ea 8b 5a b2 48 f2 ac ff 3e e7 c5 9e 35 c1 ea 8b 5a dd d5 d5 d5 55 d5 55 d5 f7 7e 6d b7 5e a6 59 6b 1a 8f 64 92 cb 56 9c 4c d2 ec 32 2a e2 34 69 cd a6 32 a2 ac 5c ca 56 9a c8 71 be 11 25 d1 f4 a6 88 47 f9 c6 3f f9 c9 a3 51 b7 17 3d 18 75 1f 8f 27 f7 b7 26 e3 47 e3 ad cd ad ce 3f 79 e7 ed ee f6 ce fb 83 9d 4e f1 b5 68 fd 7a ef ff f2 e6 68 a2 c8 e2 51 e1 0d fc 5c 4e 27 9d 6b 79 3a 8b 46 17 db e7 f3 e4 e2 e4 32 8f c7 32 29 e2 e2 e6 24 8f f3 39 a5 a3 f0 a7 6a 2d 16 47 c7 41 67 36 cf cf fd a3 a3 fb bf f5 8e c5 6d 6f 73 f3 b7 47 fd c9 3c 19 a1 ff 7e 22 a4 28 82 db a2 93 f9 32 10 45 67 Data Ascii: kWH?\|[g[$QB&eaFH2`SZH>5ZUU~m^YkdVL2*4i2\Vq%G?Q=u'&G?yNhzhQ\N'ky:F22)$9j-GAg6mosG<~"(2Eg
2024-08-30 16:33:14 UTC	16384	IN	Data Raw: cf ff a0 97 d4 c3 ff 5f fb 97 38 c7 e0 1a bc c6 7d 7c b5 77 72 dd d3 bd 33 7d 33 7b d2 f0 af f8 08 27 9e c7 f6 a1 8f bf 95 e6 a9 63 ae bb 8a 8d 23 42 03 78 ba d1 1b d2 6f df c9 3d d1 b9 27 9e 3a 29 60 36 23 0d 6b 5c 14 6d 03 e9 6c 3e 25 02 be 37 83 d9 2d 11 cd 83 9b 9c e4 87 dd 64 92 1a 38 f3 86 57 84 26 9c 3e 73 a0 36 2a 0a 4c dd 9c 84 e7 c1 fc b4 cc 41 c0 d2 4a 15 95 a1 ae cf c8 0c f7 e3 f6 aa 7a a9 9a 4c dd 4b d5 cc 2c c2 19 95 27 ad c3 0c ac 02 34 25 6c a8 8d a2 93 aa bb 9b 3b 79 79 35 89 06 0d e5 55 ea b9 33 9a 55 79 2d 12 23 95 ab 71 4a 72 de 15 62 ed a5 b4 e9 a6 10 8e 13 de ea d5 2f 9a 4f 55 8c 92 b8 43 b8 55 e0 0e 4d 8e 1b ab de 76 32 49 62 8c 88 30 da ab e9 9c fb e8 ca b3 7b 75 5a 4d fc 90 b2 ac 4d 7f cc 9d 74 ef e0 4c b4 0d 5d c7 5c 4f af 4f 71 Data Ascii: _8}\|wr3}3{'c#Bxo=':)`6#k\ml>%7-d8W&>s6*LAJzLK,'4%l;yy5U3Uy-#qJrb/OUCUMv2Ib0{uZMMtL]\OOq
2024-08-30 16:33:14 UTC	855	IN	Data Raw: a1 00 34 b8 17 af d3 b1 2e a6 35 fe 2a df b3 9b e8 24 4d 77 d3 e4 4a 76 f8 a6 d0 09 3d 82 36 07 40 c4 5e 1e 85 09 c2 7b be 29 51 5e f1 01 6b cf 55 6d 0c 88 6d a5 49 af aa 3b 83 02 35 da 35 fd d2 55 df 5c 26 38 98 04 e2 b2 e8 04 50 f6 01 2c a1 5c 6d ea 3b c5 95 df e2 7c 04 b4 35 27 15 5a 6d 39 fb 6e e5 10 56 53 5b 2d ee d0 86 d6 98 e0 b5 63 78 83 0d 68 69 4e b3 b1 99 8d 0d 4b 9c f3 8b 46 42 72 d5 3a 30 f0 75 d0 4c 21 a1 55 5a 9f 9d a1 19 67 cd 3a ad 9c 93 e4 b5 75 83 1c 10 ef 06 47 92 af 7d 0d af 14 7e dd 49 2e d3 83 e4 94 7e c5 30 0e 2d 09 27 d8 35 c7 46 be a6 b5 b0 7d 34 ac 3a 5a 86 e3 24 9e 4c e0 de 0e b2 78 02 84 48 38 c4 a9 cc 32 40 a0 f6 5c e7 45 44 e8 56 5a 7c 35 22 e1 68 23 46 af 6b be 7c 7e c3 b7 ba 6f b1 cf 32 05 52 f6 1b cd 02 f6 c0 3a 6e 10 f5 Data Ascii: 4.5*$MwJv=6@^{)Q^kUmmI;55U\&8P,\m;\|5'Zm9nVS[-cxhiNKFBr:0uL!UZg:uG}~I.~0-'5F}4:Z$LxH82@\EDVZ\|5"h#Fk\|~o2R:n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49791	13.107.246.63	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:14 UTC	633	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:14 UTC	779	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:33:14 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: da7ef925-b01e-001c-2907-fa9136000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240830T163314Z-165795675766wv96mecap1swx400000003pg00000000gxr7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-30 16:33:14 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49795	13.107.246.60	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:14 UTC	398	OUT	GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:14 UTC	813	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:33:14 GMT Content-Type: application/x-javascript Content-Length: 231091 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 20 Aug 2024 23:08:41 GMT ETag: 0x8DCC16D08882164 x-ms-request-id: 49558b19-401e-0034-3748-f9cf33000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240830T163314Z-16579567576pg4fvvmc18u0v4g00000003tg000000002f4z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-30 16:33:14 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 69 77 db 38 d2 28 fc fd fd 15 b6 6e 8e 87 1c c3 8a 64 67 a5 c2 d6 4d 1c bb 93 ee 6c 1d 27 9d 4e bb 7d 7d 68 09 92 d8 91 48 85 a4 ec 38 b6 fe fb ad 05 2b 45 39 e9 99 67 9e 67 ee 7b 26 e7 c4 02 41 10 4b a1 00 54 15 6a b9 fd f7 cd 8d c3 bc d8 98 a6 03 99 95 72 23 cd 46 79 31 4b aa 34 cf 36 e6 53 99 40 56 29 e1 7f 3a ce 16 f3 9d 51 72 56 a4 83 53 99 b5 ff 2c db 2f 9e ef 1f bc 3a 3a 68 57 5f aa 8d bf df fe ff 36 47 8b 6c 80 df 05 e1 d5 79 52 6c 48 51 89 4c 14 22 17 69 7c f5 f0 6e 77 ef 6e 64 4a d0 bb f0 aa b5 c0 ea 2b a8 b2 6a f5 f0 9b 22 ce 82 bd 5d 28 1c 8a 3c be 1a 4c d2 e9 70 3f cf 2a f9 a5 7a 77 39 97 65 b4 d9 11 03 fb 5c 7b a4 d7 43 39 4a 16 d3 ea 4d 91 cf f9 39 2d e7 d3 e4 f2 55 32 a3 e2 63 59 3d ad 95 a0 ac 22 3d 97 Data Ascii: iw8(ndgMl'N}}hH8+E9gg{&AKTjr#Fy1K46S@V):QrVS,/::hW_6GlyRlHQL"i\|nwndJ+j"](<Lp?*zw9e\{C9JM9-U2cY="=
2024-08-30 16:33:14 UTC	16384	IN	Data Raw: ed c2 35 95 d0 b1 da e4 23 ba 57 fa c1 68 e4 5e e1 77 11 50 aa 7c ce 55 3b 72 d9 93 71 b6 94 91 52 0c e1 36 a0 7e a8 ec 88 15 f8 d0 27 81 97 61 a2 3b 61 be 55 66 82 47 65 1d 4a 3d 2f dc f5 34 c9 5c cb a3 cd 60 13 63 5b d3 15 84 e4 c3 8b 72 f6 36 5d ec 21 25 63 b6 16 a9 2c 4a 71 4d 4e b3 61 d4 52 24 65 49 66 40 7d 43 62 96 a8 cb 87 46 bb c8 ac 43 79 8d 84 6f 14 e3 be b5 b5 b9 19 74 ef 6d ad 2d 80 97 90 2e 8f 77 96 05 f6 90 94 2a 1a 81 a8 62 40 46 40 6c 38 34 59 19 0e 5d 00 b5 71 8b 7a 4e 71 e6 15 0e 01 64 11 c1 94 0f 97 d5 ad 43 b9 5b fe c0 21 0e a6 f9 80 ed 12 d0 8f 9e 42 bb 02 f5 84 81 ad 60 cd 20 66 ad a9 f1 40 c6 b5 ef 43 13 23 c1 10 c6 8e c2 fa a5 ab 33 8d 58 aa fd 95 b8 e9 5a d4 55 5d 0b ba 2d 31 2e 4d e8 89 dc 65 b1 52 39 bb 15 28 65 52 0c 26 5e 56 Data Ascii: 5#Wh^wP\|U;rqR6~'a;aUfGeJ=/4\`c[r6]!%c,JqMNaR$eIf@}CbFCyotm-.w*b@F@l84Y]qzNqdC[!B` f@C#3XZU]-1.MeR9(eR&^V
2024-08-30 16:33:14 UTC	16384	IN	Data Raw: de 42 bc ab d2 e8 e2 52 a9 e5 42 17 03 b9 4c 28 dd c6 f3 db 37 1a e7 36 0e e6 18 4f e4 2a 17 01 15 d4 e3 da bb 27 57 89 53 d7 ce 39 25 a9 b3 35 f3 d0 d3 45 e6 63 f4 d8 87 75 6d 29 72 e0 75 a5 71 34 f7 68 16 6e 97 bd de c6 fc 4e da c7 3b 80 5e 27 a4 05 7a 56 33 54 7a 01 93 08 03 90 a3 e6 35 ed 80 41 cc 61 5c b4 16 40 02 0c da ab 41 a2 14 be 0c d9 a5 4e 5b 8a 3f db 28 1b a8 4d b7 8e 49 66 c0 cb bb 42 3e 7f 05 1c 06 7b 3b 96 7f 23 f8 cf 78 b2 27 b9 1b d9 cc 74 56 48 b3 f6 e4 b3 76 b3 30 84 8f 9c 31 2e a9 c6 a0 65 10 bb 4e 65 28 3b fb 89 70 c9 28 23 af 0f 95 63 1c b5 d4 85 31 aa eb 1b 20 92 75 99 03 03 42 5c 0f 50 75 ce 38 87 65 00 53 e2 0a cb 79 e3 e4 c7 61 26 a9 c4 3c 84 56 3e d9 dc 8e 2c c0 f8 6c 3b f3 ba 53 d9 cc aa c0 89 df 57 59 38 f9 b3 40 bd f6 27 5c Data Ascii: BRBL(76O*'WS9%5Ecum)ruq4hnN;^'zV3Tz5Aa\@AN[?(MIfB>{;#x'tVHv01.eNe(;p(#c1 uB\Pu8eSya&<V>,l;SWY8@'\
2024-08-30 16:33:14 UTC	16384	IN	Data Raw: 86 38 9d 2c 93 b7 34 01 5a 24 99 9e 1e 3a 83 98 db 86 e3 e1 be 26 fd 7e ed 02 ef a3 44 33 4c e6 e3 e6 1e a6 bb 19 79 ed 4d a7 f6 1b d6 5d ed 15 33 f9 e6 6f e9 8c a9 eb 75 5b da 84 75 58 a3 3c 4b e4 23 8b 0e 27 e5 1c d3 18 c0 eb e8 59 2b 47 d0 fb 1b 03 c6 d8 14 96 c5 7c f1 5b 17 63 5f b9 f3 05 ef bc 16 a2 fd 9d 2f 58 e4 69 ef a2 3e 92 95 bb 51 fd be 19 7c 65 0f 53 79 6d a9 42 e8 48 72 7a 74 dd 93 be 47 4a cc a3 df 21 96 14 d4 5f c5 fa e3 20 02 98 ee 88 5e 19 cf 2e 74 a8 cf 2c f8 8c 6e 34 b7 95 28 cb 56 42 87 a2 11 d9 38 58 85 ae 98 2f b3 3e 83 e2 81 f4 cc 65 5d 1c 26 65 15 ea 87 b7 dc 77 43 18 d6 9c a9 89 3f 71 ae 48 66 86 43 ef 46 96 08 2e 5b 04 1a f1 c4 1a d5 a6 2c 69 d9 b3 d3 e2 a5 ee 90 0f 67 64 09 e4 ca d8 dc 48 14 ca ed 40 08 3d a7 3c 71 59 7d ee 20 Data Ascii: 8,4Z$:&~D3LyM]3ou[uX<K#'Y+G\|[c_/Xi>Q\|eSymBHrztGJ!_ ^.t,n4(VB8X/>e]&ewC?qHfCF.[,igdH@=<qY}
2024-08-30 16:33:14 UTC	16384	IN	Data Raw: 8e db 5b 59 19 a3 cf ef 47 36 67 de 44 61 44 c9 8c 84 33 8c c1 50 fe 0e b7 46 37 3f 85 9b cb 4f 9e 6c 75 90 18 d3 25 76 3b 9e 87 ac 06 24 e8 bc ca b8 5e 50 7d 48 01 cb ab 44 4e 63 00 06 da 1d ca 8e 0f c6 af b1 1f 4d f8 e0 45 ae 0e 08 e0 32 15 60 80 4c 84 d8 d6 ef 29 b8 84 31 3b d0 40 4b 70 61 65 ef 7a 75 f6 a0 3a d9 53 98 a4 e3 52 dc 39 54 38 85 a3 8c ce c3 0d e6 86 ce b2 ad 62 72 40 4b 34 52 7b 4c 0c 8d 5e b7 8c ee bd 81 fb 55 40 62 2f 57 57 a8 d6 9f 89 ba 75 63 79 a3 a0 20 07 72 78 df 25 17 cf eb e9 a6 ed 9f 08 e0 d3 5d aa e9 99 cf bb 05 4a 06 ef 91 7e 31 18 76 ed 04 24 23 80 be 1a 59 d6 53 dc 44 de 3f 98 73 59 a7 d7 a6 2d 02 58 c2 c4 e0 3a 8e 7d 06 6b a3 9e 7b a3 c0 37 ee 9f 16 b2 33 39 3b a5 c5 1c e1 c7 55 6a 95 ee c0 5f c4 69 52 b3 db d7 a6 69 e2 b2 Data Ascii: [YG6gDaD3PF7?Olu%v;$^P}HDNcME2`L)1;@Kpaezu:SR9T8br@K4R{L^U@b/WWucy rx%]J~1v$#YSD?sY-X:}k{739;Uj_iRi
2024-08-30 16:33:14 UTC	16384	IN	Data Raw: 94 a6 5c 97 d7 f9 dc f1 3d c0 96 27 df 6d 47 67 bd ee 18 4f ce 73 be 55 b4 fa 56 9a b0 8b c2 3a d0 94 b5 1d 98 a9 38 64 80 b8 ef 08 60 6f 04 0c 6b 34 fd 68 6b fa 1d fe 29 01 66 fe 9e 7f 3c 05 c9 5d df 57 ae 94 71 4b c8 29 43 14 be 1b db 2f dc 66 74 f4 59 39 5e 9e 90 09 d7 21 0a 55 85 25 dd 62 43 be cd 7a cc ee 02 d2 09 a2 ea 3e e6 1d d2 c9 3c 9f 3d 99 1c 66 47 93 e5 54 12 c4 98 de 52 e8 34 db 95 19 98 e1 0b b5 7d 20 49 5c a7 78 c6 94 09 45 db 21 cd da 0e eb 11 6c cc 5c 95 4d 35 3e 67 2c 66 38 7b b4 07 83 22 20 71 86 84 51 8e f2 83 f8 72 47 fe f2 3e 57 03 af 14 f7 23 99 34 c7 dc 33 18 93 05 26 2c dc b7 73 16 21 83 4d 1e bb 1a b9 86 bb eb 1f 72 f6 80 51 a6 5f 33 c4 f1 b4 5e e0 02 68 69 0f 56 1b ab 7c 40 f5 b5 b2 ec 34 19 d4 de 52 ea 1d 2c d8 57 86 83 fd 05 Data Ascii: \='mGgOsUV:8d`ok4hk)f<]WqK)C/ftY9^!U%bCz><=fGTR4} I\xE!l\M5>g,f8{" qQrG>W#43&,s!MrQ_3^hiV\|@4R,W
2024-08-30 16:33:14 UTC	16384	IN	Data Raw: b3 f5 73 1d bc 55 26 b2 6f d1 f1 78 2d 7f d3 b9 0f de c8 ce 66 20 fc 31 a5 b7 f6 20 c0 6a 83 49 18 ad 06 b3 2c a1 0f 17 b3 e2 8c 95 5d 6c d3 ca 7b d0 c7 8a 79 af 14 92 39 73 c0 4c 14 65 eb e2 a1 5b e7 2e a2 39 50 99 63 7a b8 6e a8 29 ea 4b 28 48 8d e3 f9 e3 5c 3c dd 2c 81 95 37 d1 a5 7d 63 f8 b7 4c 6e e5 9a 9e 3f 04 95 a9 f1 98 98 cf 6e 6d 1b 40 19 7c e6 5b 5c 0d 14 2b 50 bd bf 57 9a ea 37 f9 37 ae 5f 1d ac f6 50 9a c1 7c 70 69 ba b6 86 59 dd 3b 18 64 57 3d fd 8d b8 e7 b9 05 71 2c ff 0b 51 20 73 f0 df bf 6f 0e fe fa db 70 f0 df 77 e2 e0 bf 5d 32 07 ff fd 8a 38 f8 6f 57 c0 c1 ff e0 db 43 1c c9 af 19 61 cb c3 9b 36 8f 30 e9 70 ce 65 a6 39 71 ee fe 65 87 ee fc 68 1d 16 19 ff 69 3e 9e d9 c9 f0 53 97 b6 ab 17 8e d6 c8 84 eb 59 ad a7 e2 0a 25 b3 d4 9b c8 ce 5d Data Ascii: sU&ox-f 1 jI,]l{y9sLe[.9Pczn)K(H\<,7}cLn?nm@\|[\+PW77_P\|piY;dW=q,Q sopw]28oWCa60pe9qehi>SY%]
2024-08-30 16:33:14 UTC	16384	IN	Data Raw: 47 53 7e e2 2f b3 d0 20 2e b1 88 e0 40 d4 68 20 c5 9b d8 23 be 18 04 c7 8b 83 82 7d 38 d8 81 c1 30 89 3c 41 72 96 f6 f1 9c d0 4f 51 b7 d0 ca 16 65 49 45 2b 10 28 98 02 a1 c2 78 89 91 84 8c 80 2e 56 9c f6 2d d4 9d d2 87 2f a8 fc 15 05 61 19 98 2c 5b 19 b3 50 76 1d 4d b8 91 25 b5 95 a5 68 5c d3 ae e0 86 fb fe fe 4e 5c 5c 37 ae ae 27 ca 45 29 d1 1d 9b 9f d7 8b d3 d4 45 26 59 9d 12 a1 29 83 fb 47 6a e7 f4 0b 81 fd 55 36 27 76 81 0a 84 13 f8 0b d4 49 23 7a 34 30 67 5b 94 a7 a1 3d ba 68 e6 95 b2 10 c8 0a 87 c1 08 ba a1 da 10 85 5d 80 d9 ad c1 1c e6 18 86 f0 d7 98 a8 ef f0 84 11 69 af c2 36 40 33 66 6c 7c 44 1b 1f 61 e3 a3 6b 45 db c0 b9 68 16 d8 db 94 cc db 81 c6 bc 01 6f c2 1b 14 93 0d 78 b6 36 00 96 12 e7 17 01 fa 58 38 e9 00 7a fd 8a 86 f8 c3 ab 18 35 fd e2 Data Ascii: GS~/ .@h #}80<ArOQeIE+(x.V-/a,[PvM%h\N\\7'E)E&Y)GjU6'vI#z40g[=h]i6@3fl\|DakEhox6X8z5
2024-08-30 16:33:14 UTC	16384	IN	Data Raw: 1a ae 62 48 e3 21 2c 9e c5 84 c1 ab 63 02 5c 4e ab de 9b 37 d9 d0 48 31 6a e1 5d 11 bb 90 5b 21 3e 9a bd 8e 6f 01 fb d0 b3 80 31 dd e3 da e5 05 e2 e5 de 6f 92 d4 bb 0f 50 0e 5f ba 49 e0 1d b9 b7 c1 08 f5 8c 60 b0 87 3e 86 5b 90 cd d9 68 ef 39 70 28 64 f9 18 46 1d b6 a6 6e 36 a6 8a 33 f8 48 7d 37 19 8c 61 bc 92 57 a9 7f 81 0a c6 68 ed 3c 75 e0 37 0c 30 05 02 e4 b5 f5 36 60 e9 15 a0 22 57 a0 f7 97 70 81 ad 07 d9 16 50 28 bc 25 7b c6 b0 23 1b a5 f7 56 aa 0d 03 70 19 10 31 a6 a5 28 ad 04 61 30 b1 c8 01 fc 94 bb 80 aa f2 7c 17 42 27 32 ad f9 80 0a 8b 2d 4d 9d 3b f4 98 3f 73 ba f8 67 5a 5e 94 fc f9 ad c6 17 57 b0 be ba f0 83 6e 8c c9 d5 e1 96 85 5e 02 30 04 67 96 c5 11 70 7a 8d 46 fd 3a f5 c3 a1 50 cd ae 42 bf ad 2d 7a 27 cb dc 1f fd 7b 54 31 71 c3 4c fc 1a 64 Data Ascii: bH!,c\N7H1j][!>o1oP_I`>[h9p(dFn63H}7aWh<u706`"WpP(%{#Vp1(a0\|B'2-M;?sgZ^Wn^0gpzF:PB-z'{T1qLd
2024-08-30 16:33:14 UTC	16384	IN	Data Raw: 0e 33 0c 72 12 a4 78 77 4b 5b 20 9a f4 e9 3a 6c be ba f8 88 e1 7b a7 d1 09 3f 14 30 fb 13 f4 7f a4 1d 8e 33 51 42 0d 0d cf 29 8e 0d 96 59 82 19 b9 cf 13 7c ad a5 de 2b b5 e6 30 b6 bb 29 29 90 a8 f9 4b 58 24 4f d7 28 8e 47 a1 bf 7c 28 df 53 fe fb 0d a4 54 67 a3 61 40 4b b3 fe 8a 61 04 d9 cb 59 ff 3d 87 51 ac b3 c9 30 10 dc 42 7e 4e c2 e4 18 ec 14 ae 7b 0d 8f 17 ec 35 50 45 e2 0c 6a c0 ae ce e8 0b af cd a4 0f a4 35 9d bb bc 3e dd 9f 80 0f f1 5e 55 e1 94 ef 91 3c 8b 82 c0 ae d0 6b f9 61 35 50 cf 44 75 11 4c 96 e7 b3 00 da 2f 73 2a 99 d5 6e fd 24 18 be 0f 28 a0 c6 cf 81 a9 18 24 ee 30 bb f0 27 71 86 12 40 f8 ce 68 ab 00 ac 77 85 ef 57 e8 ca bd f1 a9 6d d7 43 a5 34 7c 79 06 aa 09 2a 13 d8 46 ef c7 7c 42 1c 05 26 81 1f 79 a9 8e 15 2b 03 d0 91 2b a7 e0 61 48 91 Data Ascii: 3rxwK[ :l{?03QB)Y\|+0))KX$O(G\|(STga@KaY=Q0B~N{5PEj5>^U<ka5PDuL/sn$($0'q@hwWmC4\|yF\|B&y++aH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49792	13.107.246.63	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:14 UTC	620	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:14 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:33:14 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: ad3701b2-301e-0073-6702-faa468000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240830T163314Z-16579567576p25xcxh3nycmsaw000000038000000000ppds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-30 16:33:14 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49797	13.107.246.60	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:14 UTC	401	OUT	GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:14 UTC	812	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:33:14 GMT Content-Type: application/x-javascript Content-Length: 32811 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 09 Aug 2024 21:16:16 GMT ETag: 0x8DCB8B881B52A8D x-ms-request-id: 3833c618-e01e-002d-6c01-f84f88000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240830T163314Z-16579567576gnfmq2acf56mm7000000003eg00000000n98v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-30 16:33:14 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 6b 57 db 48 b3 3f fa fe 7c 0a 5b 67 0e 5b 1a 1a c7 86 24 93 d8 51 bc 12 42 26 e4 06 13 c8 65 86 61 b3 84 dd 06 0d 46 f2 48 32 84 60 7f f7 53 bf ea 8b 5a b2 48 f2 ac ff 3e e7 c5 9e 35 c1 ea 8b 5a dd d5 d5 d5 55 d5 55 d5 f7 7e 6d b7 5e a6 59 6b 1a 8f 64 92 cb 56 9c 4c d2 ec 32 2a e2 34 69 cd a6 32 a2 ac 5c ca 56 9a c8 71 be 11 25 d1 f4 a6 88 47 f9 c6 3f f9 c9 a3 51 b7 17 3d 18 75 1f 8f 27 f7 b7 26 e3 47 e3 ad cd ad ce 3f 79 e7 ed ee f6 ce fb 83 9d 4e f1 b5 68 fd 7a ef ff f2 e6 68 a2 c8 e2 51 e1 0d fc 5c 4e 27 9d 6b 79 3a 8b 46 17 db e7 f3 e4 e2 e4 32 8f c7 32 29 e2 e2 e6 24 8f f3 39 a5 a3 f0 a7 6a 2d 16 47 c7 41 67 36 cf cf fd a3 a3 fb bf f5 8e c5 6d 6f 73 f3 b7 47 fd c9 3c 19 a1 ff 7e 22 a4 28 82 db a2 93 f9 32 10 45 67 Data Ascii: kWH?\|[g[$QB&eaFH2`SZH>5ZUU~m^YkdVL2*4i2\Vq%G?Q=u'&G?yNhzhQ\N'ky:F22)$9j-GAg6mosG<~"(2Eg
2024-08-30 16:33:14 UTC	16384	IN	Data Raw: cf ff a0 97 d4 c3 ff 5f fb 97 38 c7 e0 1a bc c6 7d 7c b5 77 72 dd d3 bd 33 7d 33 7b d2 f0 af f8 08 27 9e c7 f6 a1 8f bf 95 e6 a9 63 ae bb 8a 8d 23 42 03 78 ba d1 1b d2 6f df c9 3d d1 b9 27 9e 3a 29 60 36 23 0d 6b 5c 14 6d 03 e9 6c 3e 25 02 be 37 83 d9 2d 11 cd 83 9b 9c e4 87 dd 64 92 1a 38 f3 86 57 84 26 9c 3e 73 a0 36 2a 0a 4c dd 9c 84 e7 c1 fc b4 cc 41 c0 d2 4a 15 95 a1 ae cf c8 0c f7 e3 f6 aa 7a a9 9a 4c dd 4b d5 cc 2c c2 19 95 27 ad c3 0c ac 02 34 25 6c a8 8d a2 93 aa bb 9b 3b 79 79 35 89 06 0d e5 55 ea b9 33 9a 55 79 2d 12 23 95 ab 71 4a 72 de 15 62 ed a5 b4 e9 a6 10 8e 13 de ea d5 2f 9a 4f 55 8c 92 b8 43 b8 55 e0 0e 4d 8e 1b ab de 76 32 49 62 8c 88 30 da ab e9 9c fb e8 ca b3 7b 75 5a 4d fc 90 b2 ac 4d 7f cc 9d 74 ef e0 4c b4 0d 5d c7 5c 4f af 4f 71 Data Ascii: _8}\|wr3}3{'c#Bxo=':)`6#k\ml>%7-d8W&>s6*LAJzLK,'4%l;yy5U3Uy-#qJrb/OUCUMv2Ib0{uZMMtL]\OOq
2024-08-30 16:33:14 UTC	855	IN	Data Raw: a1 00 34 b8 17 af d3 b1 2e a6 35 fe 2a df b3 9b e8 24 4d 77 d3 e4 4a 76 f8 a6 d0 09 3d 82 36 07 40 c4 5e 1e 85 09 c2 7b be 29 51 5e f1 01 6b cf 55 6d 0c 88 6d a5 49 af aa 3b 83 02 35 da 35 fd d2 55 df 5c 26 38 98 04 e2 b2 e8 04 50 f6 01 2c a1 5c 6d ea 3b c5 95 df e2 7c 04 b4 35 27 15 5a 6d 39 fb 6e e5 10 56 53 5b 2d ee d0 86 d6 98 e0 b5 63 78 83 0d 68 69 4e b3 b1 99 8d 0d 4b 9c f3 8b 46 42 72 d5 3a 30 f0 75 d0 4c 21 a1 55 5a 9f 9d a1 19 67 cd 3a ad 9c 93 e4 b5 75 83 1c 10 ef 06 47 92 af 7d 0d af 14 7e dd 49 2e d3 83 e4 94 7e c5 30 0e 2d 09 27 d8 35 c7 46 be a6 b5 b0 7d 34 ac 3a 5a 86 e3 24 9e 4c e0 de 0e b2 78 02 84 48 38 c4 a9 cc 32 40 a0 f6 5c e7 45 44 e8 56 5a 7c 35 22 e1 68 23 46 af 6b be 7c 7e c3 b7 ba 6f b1 cf 32 05 52 f6 1b cd 02 f6 c0 3a 6e 10 f5 Data Ascii: 4.5*$MwJv=6@^{)Q^kUmmI;55U\&8P,\m;\|5'Zm9nVS[-cxhiNKFBr:0uL!UZg:uG}~I.~0-'5F}4:Z$LxH82@\EDVZ\|5"h#Fk\|~o2R:n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49800	13.107.246.60	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:15 UTC	398	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:16 UTC	779	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:33:15 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: da7ef925-b01e-001c-2907-fa9136000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240830T163315Z-16579567576txfkctmnqv2e9c4000000039g00000000hg1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-30 16:33:16 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49799	13.107.246.60	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:15 UTC	385	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:16 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:33:15 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: ad3701b2-301e-0073-6702-faa468000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240830T163315Z-16579567576j7nvvu5n0ytgs1c00000003r000000000t1ez x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-30 16:33:16 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49803	35.190.10.96	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:17 UTC	649	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 612 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:17 UTC	612	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 48 42 30 42 6b 70 31 57 58 63 44 66 56 73 43 44 78 41 65 45 46 59 51 43 45 6b 51 59 6d 46 52 65 32 73 42 52 6e 6c 32 58 6d 4d 50 45 41 67 51 57 6b 5a 47 51 6b 45 49 48 52 31 66 51 56 52 47 48 46 70 42 51 6b 42 64 52 6c 64 52 52 68 78 63 56 30 59 64 57 31 78 57 56 30 6f 63 57 6b 5a 66 58 68 41 65 45 48 6c 63 59 46 52 52 64 51 70 57 61 6d 64 6e 44 78 41 49 41 78 34 51 5a 6e 42 6f 42 32 64 56 58 67 64 55 58 31 55 50 45 41 67 51 5a 56 74 63 41 51 41 51 48 68 42 2f 57 55 70 36 63 58 70 6a 52 32 42 6d 56 51 38 51 43 41 49 65 45 46 64 33 58 58 78 32 57 41 5a 5a 63 57 5a 46 44 78 41 49 41 51 45 4c 42 42 34 51 64 47 46 39 56 57 46 42 30 66 33 42 34 5a 47 73 50 45 41 67 5e 42 42 41 49 43 48 68 42 54 41 32 52 58 5a Data Ascii: payload=aUkQRhAIEHB0Bkp1WXcDfVsCDxAeEFYQCEkQYmFRe2sBRnl2XmMPEAgQWkZGQkEIHR1fQVRGHFpBQkBdRldRRhxcV0YdW1xWV0ocWkZfXhAeEHlcYFRRdQpWamdnDxAIAx4QZnBoB2dVXgdUX1UPEAgQZVtcAQAQHhB/WUp6cXpjR2BmVQ8QCAIeEFd3XXx2WAZZcWZFDxAIAQELBB4QdGF9VWFB0f3B4ZGsPEAg^BBAICHhBTA2RXZ
2024-08-30 16:33:17 UTC	400	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:33:16 GMT Content-Type: application/json; charset=utf-8 Content-Length: 820 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-30 16:33:17 UTC	820	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 59 47 42 67 59 47 42 67 63 7a 64 70 62 6a 31 72 50 44 59 38 49 6a 6b 35 61 6d 73 69 50 6a 35 71 61 53 49 32 61 6d 77 33 49 6d 77 37 61 54 34 34 4f 7a 73 37 4f 7a 68 73 50 33 46 78 63 58 46 67 59 44 34 2b 59 47 42 7a 62 48 70 78 63 58 46 78 50 6d 42 67 59 47 41 2b 63 7a 34 2f 4f 7a 59 2b 4f 6a 73 2b 4f 7a 67 33 4f 54 59 34 50 7a 38 35 4e 6a 73 33 63 58 46 78 63 57 41 2b 50 6a 35 67 59 44 35 67 63 7a 34 34 50 54 6f 2f 50 44 6f 36 4e 6a 67 36 50 6a 39 78 63 58 46 78 50 6a 34 2b 59 44 35 67 63 32 78 39 4e 33 6b 33 5a 54 63 35 4f 44 39 38 62 48 35 36 61 44 6c 39 65 6d 4d 2f 63 58 46 78 63 57 41 2b 50 6a 35 67 59 47 41 2b 63 7a 77 36 50 54 6c 78 63 58 46 78 59 44 34 2b 59 44 34 2b 59 44 35 7a 4e 32 6c 75 50 57 Data Ascii: {"do":null,"ob":"YGBgYGBgczdpbj1rPDY8Ijk5amsiPj5qaSI2amw3Imw7aT44Ozs7OzhsP3FxcXFgYD4+YGBzbHpxcXFxPmBgYGA+cz4/OzY+Ojs+Ozg3OTY4Pz85Njs3cXFxcWA+Pj5gYD5gcz44PTo/PDo6Njg6Pj9xcXFxPj4+YD5gc2x9N3k3ZTc5OD98bH56aDl9emM/cXFxcWA+Pj5gYGA+czw6PTlxcXFxYD4+YD4+YD5zN2luPW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49802	34.107.199.61	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:17 UTC	591	OUT	GET /ns?c=8e918b00-66ed-11ef-8007-db71fc4d53af HTTP/1.1 Host: stk.hsprotect.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:17 UTC	153	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:33:17 GMT Content-Type: text/html Content-Length: 244 Access-Control-Allow-Origin: * Connection: close
2024-08-30 16:33:17 UTC	244	IN	Data Raw: 38 32 31 39 66 33 65 63 37 36 31 34 36 34 31 36 34 37 61 33 37 38 62 31 30 37 35 34 65 39 36 62 35 66 38 37 37 32 37 62 37 64 62 61 32 61 62 65 35 33 31 63 36 37 38 65 30 35 33 36 63 31 36 39 64 36 34 62 36 30 36 64 34 30 34 63 33 66 33 36 66 35 38 63 36 31 38 35 61 39 62 64 34 39 62 61 37 31 34 64 33 65 33 31 35 61 32 65 61 32 63 35 32 63 65 62 36 35 38 62 65 39 35 66 34 38 37 30 65 30 31 63 30 33 33 65 39 30 39 30 38 38 61 37 65 39 39 63 61 39 61 39 64 39 62 64 30 64 37 63 33 38 35 64 65 62 62 66 36 61 38 65 66 30 36 32 34 63 63 32 33 34 30 30 62 37 36 35 38 37 39 63 38 61 39 65 30 31 34 31 33 34 64 36 32 63 63 66 34 64 39 38 61 36 36 36 34 32 66 65 37 30 63 63 64 35 63 37 38 32 30 64 36 34 62 66 64 64 38 31 31 62 34 36 Data Ascii: 8219f3ec7614641647a378b10754e96b5f87727b7dba2abe531c678e0536c169d64b606d404c3f36f58c6185a9bd49ba714d3e315a2ea2c52ceb658be95f4870e01c033e909088a7e99ca9a9d9bd0d7c385debbf6a8ef0624cc23400b765879c8a9e014134d62ccf4d98a66642fe70ccd5c7820d64bfdd811b46

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49806	35.190.10.96	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:18 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:18 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 30 Aug 2024 16:33:17 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: POST, HEAD, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-30 16:33:18 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49805	34.107.199.61	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:18 UTC	382	OUT	GET /ns?c=8e918b00-66ed-11ef-8007-db71fc4d53af HTTP/1.1 Host: stk.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:18 UTC	153	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:33:17 GMT Content-Type: text/html Content-Length: 244 Access-Control-Allow-Origin: * Connection: close
2024-08-30 16:33:18 UTC	244	IN	Data Raw: 36 37 39 66 63 30 36 38 64 30 63 62 39 64 61 38 36 63 33 61 65 39 32 63 38 32 31 39 32 66 32 65 65 32 61 66 38 34 39 62 31 38 63 33 39 34 37 61 66 61 33 64 36 64 32 37 35 61 31 33 32 32 35 33 65 39 32 62 66 64 64 65 30 37 36 64 32 39 61 38 37 61 64 61 65 66 66 39 34 39 62 64 38 62 64 61 31 37 32 66 31 33 61 65 64 66 63 64 38 32 36 31 61 30 64 36 36 35 36 66 37 34 39 39 34 61 32 35 64 64 32 64 37 66 31 34 39 38 39 39 61 61 33 33 35 66 33 65 63 63 30 36 65 66 39 34 64 35 39 66 39 62 66 64 64 64 62 31 34 64 64 39 30 66 32 61 37 64 34 65 39 65 34 66 65 65 35 38 65 61 39 35 66 66 33 63 35 63 36 34 64 35 64 63 35 31 35 64 66 37 63 61 35 63 33 62 30 65 32 39 38 37 66 63 35 66 33 34 33 31 34 33 34 63 38 31 36 65 62 61 33 30 38 31 Data Ascii: 679fc068d0cb9da86c3ae92c82192f2ee2af849b18c3947afa3d6d275a132253e92bfdde076d29a87adaeff949bd8bda172f13aedfcd8261a0d6656f74994a25dd2d7f149899aa335f3ecc06ef94d59f9bfdddb14dd90f2a7d4e9e4fee58ea95ff3c5c64d5dc515df7ca5c3b0e2987fc5f3431434c816eba3081

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49809	35.190.10.96	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:18 UTC	650	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 8823 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:18 UTC	8823	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 48 52 66 56 56 68 51 64 48 4e 31 65 58 51 47 44 78 41 65 45 46 59 51 43 45 6b 51 63 55 68 6b 47 56 46 6e 41 31 4e 55 41 6e 73 50 45 41 67 44 42 51 41 48 41 67 45 48 42 77 73 46 42 77 4d 43 48 68 42 34 64 67 64 67 66 56 39 30 5a 6d 64 46 41 67 38 51 43 45 6c 50 48 68 42 6c 41 6d 64 48 59 32 41 47 58 58 35 36 5a 77 38 51 43 41 59 4b 48 41 63 65 45 47 56 31 51 6b 5a 51 57 67 5a 34 55 41 4e 56 44 78 41 49 45 41 49 4c 56 77 42 51 43 6c 51 48 42 67 4d 46 56 31 41 43 42 6c 4d 4c 43 31 46 55 41 67 56 58 56 31 4e 54 43 31 4d 44 55 31 45 47 45 42 34 51 61 32 4e 38 5a 33 42 4c 59 45 4a 6b 53 41 49 50 45 41 67 51 55 55 41 4b 52 41 70 59 43 67 51 46 41 6b 46 52 51 30 64 56 42 45 42 48 58 67 49 51 48 68 42 72 57 45 56 Data Ascii: payload=aUkQRhAIEHRfVVhQdHN1eXQGDxAeEFYQCEkQcUhkGVFnA1NUAnsPEAgDBQAHAgEHBwsFBwMCHhB4dgdgfV90ZmdFAg8QCElPHhBlAmdHY2AGXX56Zw8QCAYKHAceEGV1QkZQWgZ4UANVDxAIEAILVwBQClQHBgMFV1ACBlMLC1FUAgVXV1NTC1MDU1EGEB4Qa2N8Z3BLYEJkSAIPEAgQUUAKRApYCgQFAkFRQ0dVBEBHXgIQHhBrWEV
2024-08-30 16:33:18 UTC	400	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:33:18 GMT Content-Type: application/json; charset=utf-8 Content-Length: 848 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-30 16:33:18 UTC	848	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 50 6d 41 2b 59 44 35 67 63 31 42 2f 64 7a 78 7a 50 44 77 2f 63 7a 70 75 4f 6a 59 34 4e 7a 34 34 62 54 38 32 4f 32 34 2b 4f 6a 5a 74 62 44 77 37 4e 6d 30 33 62 54 30 34 50 7a 30 35 4e 6a 78 75 61 7a 6c 73 4f 6a 34 2b 61 6d 73 33 50 54 59 35 50 7a 73 36 50 57 30 38 50 47 73 33 4e 7a 67 32 4e 6a 77 35 50 54 73 2b 61 7a 63 31 4e 31 68 45 59 6c 78 64 57 58 64 75 49 47 5a 38 62 48 74 75 58 32 6b 2b 65 47 4a 4c 57 55 52 6a 4f 32 70 44 52 32 68 42 51 30 35 4c 59 32 6c 32 50 47 74 4d 56 6c 70 41 5a 6d 78 31 52 58 78 6e 66 30 78 4a 65 7a 74 69 61 31 70 72 50 6c 67 67 4e 32 52 61 54 46 56 61 51 6b 6c 4c 64 58 5a 6b 65 57 52 41 53 6a 74 6a 51 45 4d 34 56 57 5a 67 58 32 67 79 4d 6a 55 2b 50 7a 38 2f 4e 53 52 4d 51 30 Data Ascii: {"do":null,"ob":"PmA+YD5gc1B/dzxzPDw/czpuOjY4Nz44bT82O24+OjZtbDw7Nm03bT04Pz05NjxuazlsOj4+ams3PTY5Pzs6PW08PGs3Nzg2Njw5PTs+azc1N1hEYlxdWXduIGZ8bHtuX2k+eGJLWURjO2pDR2hBQ05LY2l2PGtMVlpAZmx1RXxnf0xJeztia1prPlggN2RaTFVaQklLdXZkeWRASjtjQEM4VWZgX2gyMjU+Pz8/NSRMQ0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49810	13.107.246.42	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:19 UTC	599	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:19 UTC	764	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:33:19 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Thu, 29 Aug 2024 20:32:52 GMT ETag: 0x8DCC869C18A99EA x-ms-request-id: 0e587b6c-501e-0024-7e80-fab52c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240830T163319Z-16579567576w5bqfyu10zdac7g00000003h000000000037x x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-08-30 16:33:19 UTC	15620	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-30 16:33:19 UTC	1554	IN	Data Raw: 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49813	35.190.10.96	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:19 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:19 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 30 Aug 2024 16:33:18 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-30 16:33:19 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49814	13.107.246.60	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:20 UTC	364	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:20 UTC	764	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:33:20 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Thu, 29 Aug 2024 20:32:52 GMT ETag: 0x8DCC869C18A99EA x-ms-request-id: 0e587b6c-501e-0024-7e80-fab52c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240830T163320Z-16579567576ztstdfgdnkw0mpw00000003pg00000000wkg9 x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-08-30 16:33:20 UTC	15620	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-30 16:33:20 UTC	1554	IN	Data Raw: 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49817	35.190.10.96	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:24 UTC	650	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 6483 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:24 UTC	6483	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 47 56 31 51 6b 5a 51 57 67 5a 33 55 77 4e 42 44 78 41 65 45 46 59 51 43 45 6b 51 56 6b 74 65 63 56 42 6d 65 48 56 68 5a 41 49 50 45 41 67 51 42 6c 4d 43 42 56 46 57 43 77 56 58 43 67 46 51 42 77 51 44 56 41 52 57 56 67 70 52 55 77 45 45 41 67 55 4b 56 67 6f 4b 56 6c 63 51 48 68 42 51 59 46 5a 72 64 30 74 61 42 32 70 68 64 77 38 51 43 42 41 47 55 77 49 46 55 56 59 4c 42 56 63 4b 41 56 41 48 42 41 4e 55 42 46 5a 57 43 6c 46 54 41 51 51 43 42 51 70 57 43 67 70 57 56 78 41 65 45 48 31 68 51 58 39 51 41 51 74 32 63 51 4d 4b 44 78 41 49 45 46 4d 46 42 67 4a 58 56 31 52 57 56 67 4e 52 43 67 49 43 41 51 73 42 43 31 5a 58 55 41 51 46 56 77 49 4c 42 67 63 43 43 77 42 57 45 42 34 51 56 48 64 72 65 48 4e 59 57 55 52 Data Ascii: payload=aUkQRhAIEGV1QkZQWgZ3UwNBDxAeEFYQCEkQVktecVBmeHVhZAIPEAgQBlMCBVFWCwVXCgFQBwQDVARWVgpRUwEEAgUKVgoKVlcQHhBQYFZrd0taB2phdw8QCBAGUwIFUVYLBVcKAVAHBANUBFZWClFTAQQCBQpWCgpWVxAeEH1hQX9QAQt2cQMKDxAIEFMFBgJXV1RWVgNRCgICAQsBC1ZXUAQFVwILBgcCCwBWEB4QVHdreHNYWUR
2024-08-30 16:33:24 UTC	400	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:33:23 GMT Content-Type: application/json; charset=utf-8 Content-Length: 248 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-30 16:33:24 UTC	248	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 59 47 41 2b 50 6d 42 67 63 32 78 36 63 58 46 78 63 57 41 2b 50 6a 35 67 59 44 34 2b 63 31 42 2f 64 32 74 71 63 7a 77 38 50 33 4e 71 61 7a 39 74 62 54 59 36 4f 7a 31 71 4e 7a 6c 72 4f 57 35 71 61 54 34 34 4f 6a 68 74 4f 47 31 75 61 32 34 35 4e 7a 6b 32 61 7a 73 36 61 6a 64 74 4f 47 70 74 4e 6a 59 2f 61 7a 34 2b 61 6d 6f 34 61 57 35 73 61 54 78 71 50 44 5a 73 50 54 6f 32 62 47 34 35 4e 57 70 32 52 54 39 75 57 44 35 6a 62 44 78 64 5a 32 31 58 54 6d 5a 41 5a 55 6f 38 51 6d 56 61 65 45 4a 31 57 6a 31 43 53 31 35 32 51 55 74 65 66 45 5a 69 56 57 6c 75 50 55 5a 6d 51 47 56 4f 66 45 5a 69 59 33 68 57 50 6a 5a 2f 56 55 78 47 4f 56 67 2b 50 6a 5a 7a 65 33 31 36 61 6e 4d 38 50 7a 38 3d 22 7d 0a Data Ascii: {"do":null,"ob":"YGA+PmBgc2x6cXFxcWA+Pj5gYD4+c1B/d2tqczw8P3Nqaz9tbTY6Oz1qNzlrOW5qaT44OjhtOG1ua245Nzk2azs6ajdtOGptNjY/az4+amo4aW5saTxqPDZsPTo2bG45NWp2RT9uWD5jbDxdZ21XTmZAZUo8QmVaeEJ1Wj1CS152QUtefEZiVWluPUZmQGVOfEZiY3hWPjZ/VUxGOVg+PjZze316anM8Pz8="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49818	35.190.10.96	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:33:25 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:33:25 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 30 Aug 2024 16:33:24 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-30 16:33:25 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Target ID:	0
Start time:	12:32:42
Start date:	30/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:32:46
Start date:	30/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2220,i,16230979761057172952,5645982782825242545,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	12:32:47
Start date:	30/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0wN2RkNTQyZS1hZGNiLTQyZTgtODFiYS0zZDdjYjNmYTEyNTYmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT0wN2RkNTQyZS1hZGNiLTQyZTgtODFiYS0zZDdjYjNmYTEyNTYmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Windows Analysis Report
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT0wN2RkNTQyZS1hZGNiLTQyZTgtODFiYS0zZDdjYjNmYTEyNTYmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l