Edit tour

Windows Analysis Report
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT0yNzlhNjA0ZS05MTMyLTQyNDYtYjQwOC1kZTQzOWFlMmRmNTMmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l

Overview

General Information

Sample URL:	https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT0yNzlhNjA0ZS05MTMyLTQyNDYtYjQwOC1kZTQzOWFlMmRmNTMmcz0wMDAwM
Analysis ID:	1520812
Infos:

Detection

Score:	4
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 5768 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6768 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1952,i,3575760107684391540,14792378179534548501,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6404 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0yNzlhNjA0ZS05MTMyLTQyNDYtYjQwOC1kZTQzOWFlMmRmNTMmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u...	HTTP Parser: Iframe src: https://fpt.live.com?session_id=3d90045f99d5477f8d646f39ea9b8305&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u...	HTTP Parser: Iframe src: https://fpt.live.com?session_id=3d90045f99d5477f8d646f39ea9b8305&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u...	HTTP Parser: Iframe src: https://fpt.live.com?session_id=3d90045f99d5477f8d646f39ea9b8305&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
Source: https://login.live.com/ppsecure/post.srf?mkt=en-US&username=cheese1&client_id=51483342-085c-4d86-bf88-cf50c7252078&contextid=78E186C1D25663E1&opid=7ED6D70942355491&bk=1727474117&uaid=3d90045f99d5477f8d646f39ea9b8305&pid=15216	HTTP Parser: Iframe src: https://fpt.live.com?session_id=3d90045f99d5477f8d646f39ea9b8305&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
Source: https://login.live.com/ppsecure/post.srf?mkt=en-US&username=cheese1&client_id=51483342-085c-4d86-bf88-cf50c7252078&contextid=78E186C1D25663E1&opid=7ED6D70942355491&bk=1727474117&uaid=3d90045f99d5477f8d646f39ea9b8305&pid=15216	HTTP Parser: Iframe src: https://fpt.live.com?session_id=3d90045f99d5477f8d646f39ea9b8305&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/oauth20_authorize.srf%3fusername%3dcheese1%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3den-US%26username%3dcheese1%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26uaid%3d3d90045f99d5477f8d646f39ea9b8305%26contextid%3d78E186C1D25663E1%26opid%3d7ED6D70942355491%26bk%3d1727474130&id=293577&uiflavor=web&client_id=1E00004417ACAE&uaid=3d90045f99d5477f8d646f39ea9b8305&mkt=EN-US&lc=1033&bk=1727474130	HTTP Parser: Number of links: 0

Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u...

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0

HTTP Parser: Base64 decoded: 4e9f3596-81a3-4f26-a701-1e7eef161b0e2e2197c5-6f39-4437-a6eb-b44725c2090e

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u...	HTTP Parser: Title: Sign in to your Microsoft account does not match URL
Source: https://login.live.com/ppsecure/post.srf?mkt=en-US&username=cheese1&client_id=51483342-085c-4d86-bf88-cf50c7252078&contextid=78E186C1D25663E1&opid=7ED6D70942355491&bk=1727474117&uaid=3d90045f99d5477f8d646f39ea9b8305&pid=15216	HTTP Parser: Title: Sign in to your Microsoft account does not match URL

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: <input type="password" .../> found
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u...	HTTP Parser: <input type="password" .../> found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: No favicon
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u...	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/ppsecure/post.srf?mkt=en-US&username=cheese1&client_id=51483342-085c-4d86-bf88-cf50c7252078&contextid=78E186C1D25663E1&opid=7ED6D70942355491&bk=1727474117&uaid=3d90045f99d5477f8d646f39ea9b8305&pid=15216	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/ppsecure/post.srf?mkt=en-US&username=cheese1&client_id=51483342-085c-4d86-bf88-cf50c7252078&contextid=78E186C1D25663E1&opid=7ED6D70942355491&bk=1727474117&uaid=3d90045f99d5477f8d646f39ea9b8305&pid=15216	HTTP Parser: No <meta name="author".. found
Source: https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/oauth20_authorize.srf%3fusername%3dcheese1%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3den-US%26username%3dcheese1%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26uaid%3d3d90045f99d5477f8d646f39ea9b8305%26contextid%3d78E186C1D25663E1%26opid%3d7ED6D70942355491%26bk%3d1727474130&id=293577&uiflavor=web&client_id=1E00004417ACAE&uaid=3d90045f99d5477f8d646f39ea9b8305&mkt=EN-US&lc=1033&bk=1727474130	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/ppsecure/post.srf?mkt=en-US&username=cheese1&client_id=51483342-085c-4d86-bf88-cf50c7252078&contextid=78E186C1D25663E1&opid=7ED6D70942355491&bk=1727474117&uaid=3d90045f99d5477f8d646f39ea9b8305&pid=15216	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/ppsecure/post.srf?mkt=en-US&username=cheese1&client_id=51483342-085c-4d86-bf88-cf50c7252078&contextid=78E186C1D25663E1&opid=7ED6D70942355491&bk=1727474117&uaid=3d90045f99d5477f8d646f39ea9b8305&pid=15216	HTTP Parser: No <meta name="copyright".. found
Source: https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/oauth20_authorize.srf%3fusername%3dcheese1%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3den-US%26username%3dcheese1%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26uaid%3d3d90045f99d5477f8d646f39ea9b8305%26contextid%3d78E186C1D25663E1%26opid%3d7ED6D70942355491%26bk%3d1727474130&id=293577&uiflavor=web&client_id=1E00004417ACAE&uaid=3d90045f99d5477f8d646f39ea9b8305&mkt=EN-US&lc=1033&bk=1727474130	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49750 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.16:52689 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: nam.safelink.emails.azure.net to https://admin.microsoft.com/adminportal/home?#/subscriptions

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET /redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0yNzlhNjA0ZS05MTMyLTQyNDYtYjQwOC1kZTQzOWFlMmRmNTMmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l HTTP/1.1Host: nam.safelink.emails.azure.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=aUrdNzKYFXN+zUT&MD=2cpo+sxf HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=aUrdNzKYFXN+zUT&MD=2cpo+sxf HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/login_en_aPH1MdAMytMMq1WvwJPhJA2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/login_en_aPH1MdAMytMMq1WvwJPhJA2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000.30374.3/images/favicon.ico HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000.30374.3/images/favicon.ico HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/reset-password-signinname_en_iGkKHb6MchyJTpOn_ZeIdw2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/reset-password-signinname_en_iGkKHb6MchyJTpOn_ZeIdw2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: nam.safelink.emails.azure.net
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: acctcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: fpt.live.com
Source: global traffic	DNS traffic detected: DNS query: account.live.com

Source: chromecache_172.1.dr, chromecache_167.1.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_172.1.dr, chromecache_167.1.dr	String found in binary or memory: https://localcdn.centro-dev.com:5555/inline.bundle.js.map
Source: chromecache_159.1.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_159.1.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 52709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 52735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52703
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52700
Source: unknown	Network traffic detected: HTTP traffic on port 52713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52709
Source: unknown	Network traffic detected: HTTP traffic on port 52707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52713
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52723
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52720
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52735
Source: unknown	Network traffic detected: HTTP traffic on port 52697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52695
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52696
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52732
Source: unknown	Network traffic detected: HTTP traffic on port 52731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52731
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 52740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52741
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 52720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 52745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49750 version: TLS 1.2

Source: classification engine

Classification label: clean4.win@28/93@26/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1952,i,3575760107684391540,14792378179534548501,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0yNzlhNjA0ZS05MTMyLTQyNDYtYjQwOC1kZTQzOWFlMmRmNTMmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1952,i,3575760107684391540,14792378179534548501,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://login.microsoftonline.com	0%	URL Reputation	safe
http://fb.me/use-check-prop-types	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
nam.safelink.emails.azure.net	unknown	unknown	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
logincdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
fpt.live.com	unknown	unknown	false	unknown
account.live.com	unknown	unknown	false	unknown
acctcdn.msftauth.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js	false	unknown
https://logincdn.msftauth.net/shared/5/js/login_en_aPH1MdAMytMMq1WvwJPhJA2.js	false	unknown
https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	false	unknown
https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg	false	unknown
https://logincdn.msftauth.net/16.000.30374.3/images/favicon.ico	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://login.microsoftonline.com	chromecache_159.1.dr	false	URL Reputation: safe	unknown
https://login.windows-ppe.net	chromecache_159.1.dr	false		unknown
http://fb.me/use-check-prop-types	chromecache_172.1.dr, chromecache_167.1.dr	false	URL Reputation: safe	unknown
https://localcdn.centro-dev.com:5555/inline.bundle.js.map	chromecache_172.1.dr, chromecache_167.1.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520812
Start date and time:	2024-09-27 23:53:10 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT0yNzlhNjA0ZS05MTMyLTQyNDYtYjQwOC1kZTQzOWFlMmRmNTMmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean4.win@28/93@26/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 172.217.18.14, 74.125.133.84, 34.104.35.123, 13.107.6.156, 23.38.98.96, 23.38.98.104, 40.126.32.136, 40.126.32.74, 20.190.160.20, 20.190.160.17, 40.126.32.68, 40.126.32.133, 40.126.32.72, 40.126.32.138, 93.184.221.240, 2.16.238.24, 2.16.238.6, 20.190.159.68, 40.126.31.71, 20.190.159.73, 20.190.159.2, 20.190.159.64, 40.126.31.69, 20.190.159.4, 40.126.31.73, 142.250.184.234, 172.217.16.138, 142.250.186.138, 142.250.184.202, 142.250.186.106, 216.58.206.42, 172.217.16.202, 142.250.181.234, 216.58.206.74, 142.250.186.74, 216.58.212.170, 142.250.185.74, 172.217.18.106, 142.250.186.170, 142.250.186.42, 172.217.18.10, 13.69.116.104, 142.250.186.35, 40.126.32.76, 40.126.32.134, 20.190.160.14, 20.190.160.22, 172.217.16.142, 20.190.159.0, 20.190.159.75, 20.190.159.23, 51.11.192.49, 52.167.30.171, 20.190.159.71, 40.126.31.67, 142.250.185.170, 142.250.185.106, 142.250.74.202, 142.250.185.202, 142.250.185.138, 142.250.185.234, 51.116.253.169, 20.189.173.16, 13.107.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0yNzlhNjA0ZS05MTMyLTQyNDYtYjQwOC1kZTQzOWFlMmRmNTMmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l

Input	Output
URL: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2fo Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Enter password", "prominent_button_name":"Sign in", "text_input_field_labels":["Password", "Email code"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2fo Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Enter password", "prominent_button_name":"Sign in", "text_input_field_labels":["Password", "Email code to cm*****@googlemail.com"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2fo Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"login.live.com", "classification":"wellknown", "reasons":["The URL 'login.live.com' is a subdomain of 'live.com', which is a legitimate domain owned by Microsoft.", "Microsoft is a well-known brand and 'live.com' is commonly associated with Microsoft services.", "The input fields 'Password' and 'Email code' are typical for a login page, especially for services provided by Microsoft."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"Password, Email code"}

URL: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2fo Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"login.live.com", "classification":"wellknown", "reasons":["The URL 'login.live.com' is a legitimate and well-known domain associated with Microsoft services.", "Microsoft is a well-known brand and 'login.live.com' is commonly used for Microsoft account logins.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Password' and 'Email code' are typical for a login page, especially for a service like Microsoft."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"Password, Email code to cm*****@googlemail.com"}

URL: https://login.live.com/ppsecure/post.srf?mkt=en-US&username=cheese1&client_id=51483342-085c-4d86-bf88-cf50c7252078&contextid=78E186C1D25663E1&opid=7ED6D70942355491&bk=1727474117&uaid=3d90045f99d5477f8d646f39ea9b8305&pid=15216 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Sign in", "prominent_button_name":"Reset your password", "text_input_field_labels":["Reset your password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.live.com/ppsecure/post.srf?mkt=en-US&username=cheese1&client_id=51483342-085c-4d86-bf88-cf50c7252078&contextid=78E186C1D25663E1&opid=7ED6D70942355491&bk=1727474117&uaid=3d90045f99d5477f8d646f39ea9b8305&pid=15216 Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"login.live.com", "classification":"wellknown", "reasons":["The URL 'login.live.com' is a subdomain of 'live.com', which is a legitimate domain owned by Microsoft.", "Microsoft is a well-known brand and 'live.com' is commonly associated with Microsoft services.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input field 'Reset your password' is a common feature on legitimate Microsoft login pages."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"Reset your password"}

URL: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2fo Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Enter password", "prominent_button_name":"Sign in", "text_input_field_labels":["Email code to cm*****@googlemail.com"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2fo Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"login.live.com", "classification":"wellknown", "reasons":["The URL 'login.live.com' is a legitimate and well-known domain associated with Microsoft services.", "Microsoft is a well-known brand and 'login.live.com' is commonly used for Microsoft account logins.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"Email code to cm*****@googlemail.com"}

URL: https://login.live.com/ppsecure/post.srf?mkt=en-US&username=cheese1&client_id=51483342-085c-4d86-bf88-cf50c7252078&contextid=78E186C1D25663E1&opid=7ED6D70942355491&bk=1727474117&uaid=3d90045f99d5477f8d646f39ea9b8305&pid=15216 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Sign-in is blocked", "prominent_button_name":"Reset your password", "text_input_field_labels":["cheese1"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.live.com/ppsecure/post.srf?mkt=en-US&username=cheese1&client_id=51483342-085c-4d86-bf88-cf50c7252078&contextid=78E186C1D25663E1&opid=7ED6D70942355491&bk=1727474117&uaid=3d90045f99d5477f8d646f39ea9b8305&pid=15216 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Sign in", "prominent_button_name":"Sign in", "text_input_field_labels":["username", "password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/oauth20_authorize.srf%3fusername%3dcheese1%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3den-US%26username%3dcheese1%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%2 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Recover your account", "prominent_button_name":"Next", "text_input_field_labels":["Email, phone, or Skype name"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.live.com/ppsecure/post.srf?mkt=en-US&username=cheese1&client_id=51483342-085c-4d86-bf88-cf50c7252078&contextid=78E186C1D25663E1&opid=7ED6D70942355491&bk=1727474117&uaid=3d90045f99d5477f8d646f39ea9b8305&pid=15216 Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"login.live.com", "classification":"wellknown", "reasons":["The URL 'login.live.com' is a subdomain of 'live.com', which is a legitimate domain owned by Microsoft.", "Microsoft is a well-known brand and 'live.com' is commonly associated with Microsoft services.", "The input fields 'username' and 'password' are typical for a login page, which aligns with the purpose of 'login.live.com'."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"username, password"}

URL: https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/oauth20_authorize.srf%3fusername%3dcheese1%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3den-US%26username%3dcheese1%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%2 Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"live.com", "classification":"wellknown", "reasons":["The URL 'account.live.com' matches the legitimate domain name associated with Microsoft services.", "Microsoft is a well-known brand and 'live.com' is a recognized domain for their services.", "The input fields (Email, phone, or Skype name) are typical for Microsoft account login pages."], "brand_matches":[false], "url_match":false, "brand_input":"Microsoft", "input_fields":"Email, phone, or Skype name"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 20:53:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9881709609273757
Encrypted:	false
SSDEEP:	48:8TdcTgc/cHuidAKZdA1FehwiZUklqehay+3:8W/pdy
MD5:	341C6499D74712117A1992FEF468D7BA
SHA1:	77CBBC4655A42BFC4850342B17F22800665F908E
SHA-256:	52162111F6CB99BF40A71E163DFD879CCA0F3ABD079C7D377ED7F931A1CC00C9
SHA-512:	29812855F1FCB8C6EAFFDC1495732D25A35F924D03B124316904468EACE3CE6785C73876E778787000E39F3FF456B68441EE33ECC445EE1D729FFD69F180B427
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....\...'...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I;Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............lc......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 20:53:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.005724113621697
Encrypted:	false
SSDEEP:	48:8MdcTgc/cHuidAKZdA1seh/iZUkAQkqehNy+2:8z/f9QYy
MD5:	786846789F9091659C0BEC5041AE2C20
SHA1:	80D48801D2C08FCBB41F4625B0B34668A36E2EA9
SHA-256:	D16507ECF4538D8786310DF1DA8056FB2E5A96A7070749A3E118C6FCBBFA67EC
SHA-512:	F9032E63E06D91B985933FDA623912E0EB4883BF2E9D3C30B035F7AE5B269E3AAE705454DEE18D09BA056C42F13439FC75EE36F117C54EFA412B0E4DDFB0EB35
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........'...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I;Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............lc......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.013872444245189
Encrypted:	false
SSDEEP:	48:8udcTgcAHuidAKZdA14meh7sFiZUkmgqeh7sDy+BX:8p/nnZy
MD5:	CC9B10BA02EF69938E14919309812340
SHA1:	8972AE4325547762883D3ECD120E281BFD51373B
SHA-256:	1BC308A294257163F0E2F218A6B58E569800CC5EE66EB45798662452B172EFE9
SHA-512:	088B60492F10E48760C3A13489927A012E95945AB4348F1B04A852C3A1B47FDA936069F3EC7A8B4D9D99137690197F58C2FF754F8CBFA3FD8FB2BAE4345902E6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I;Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............lc......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 20:53:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.004786325080665
Encrypted:	false
SSDEEP:	48:8pCdcTgc/cHuidAKZdA1TehDiZUkwqehRy+R:8//s7y
MD5:	7B09A55A7860869C58B37D1F5D66E34F
SHA1:	B1F17540BB8D0B0E0A83A9F314FE51CEE29A17EC
SHA-256:	B62F6674275C9D65400633F0C828851A20208A8931D1B0FAA084A852390E4508
SHA-512:	A2D2A6D31D7D994D85F0B6F224847F45424FA13573B5914F09D2F163D86FCC8BC577AB0AF7FC550335EAC5F1077401B1ACF4D65F106230C8950B7A836C26EE78
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........'...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I;Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............lc......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 20:53:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.991214640520589
Encrypted:	false
SSDEEP:	48:8UdcTgc/cHuidAKZdA1dehBiZUk1W1qehvy+C:87/89Py
MD5:	E8BED521431E0F461E58FF4098E1ABAA
SHA1:	6494318D9D963BC4444C1B9A0C9F7BD73DCEBD52
SHA-256:	988E8CCF70CC2A88E515C06D421104AA0B62043E323AF87184E164A80642400E
SHA-512:	44873F46D64ECDE443644032D46EA1D9BF55CCE01FAA76B556DB49AA14E77B59E527F019DC571BBD4471E4981F87A24E885E7CD0AC1AFFFD6E1D8363D44B1588
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.... S..'...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I;Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............lc......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 20:53:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.001198956139774
Encrypted:	false
SSDEEP:	48:8HWdcTgc/cHuidAKZdA1duTeehOuTbbiZUk5OjqehOuTbZy+yT+:8HR/OTfTbxWOvTbZy7T
MD5:	89A12EA46E7772293DB33C29364C3725
SHA1:	65EAE10D71FAFA8C66370EB64D8478C25028B77F
SHA-256:	E0A2E86982DBED67A0D64D4E9C1130537BB81D56F2AA646EBE2F4CDA6295B47C
SHA-512:	E41C5D6E8BC782438BF471467FB2EC70893836DA7D2B78312F99F6D41469422B5C00FF82396D71931F6471172CAAA3E12D915DA3036DBF747AF71E5C063768EE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....'Z..'...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I;Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............lc......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
Category:	dropped
Size (bytes):	49804
Entropy (8bit):	7.994672288751266
Encrypted:	true
SSDEEP:	1536:SMuttwJ0uUmAcZjNL6nnQlL+mwKLiQC7Mn3dxPErr:SwJ0vmAcKnnQF+8LJOMn3DPE/
MD5:	6DE768A4DF1E0D0061CDB52EF06346C4
SHA1:	3829A667B97668008023DDA98F4C0772174C8EF6
SHA-256:	58732EEE2ED9091F4F5776DC8A8A14116CBE5A2BA1CCDA0256896BAB08A52128
SHA-512:	CC6966D2C2B43E762750102E734DA6B88D7BFB92DDB5D482EE25029337D95E997466E83001586F2B63DAEE890B5F3188E8EC0F1B084D5EB67CFEA55EDDFAD47D
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w..nf.0.ff.X.'V......4.r~........=........,..JU.......T~.l..?..E.....X..\|t~P9...TN..G..?^.~.............Xx.0..Q..Fa4.#7.q...F.;......4...Q.W&~.@....O.T.y.37J.+Ggf...P....Pz.N...>..a.D..<.m./A,...Q.....WN.Q...8.Db$.G.H<...'....J,..8..{nG.2@HYkL../......=.pL....A?.&Ng.i,......2lo...$.<.3...?~pW..=...L..&x.QR.u3..#6q2....U.Y1..".M. .<W."7@......w..."H,@......0..P....p:...[...E].A..%..V.K\.......F.ir.}.Lc{s..O.g..(\|.........9o..A.t.K....Wv.l6..T.......t.........+..........-w {l..g...V..\=W.j.oaT}t.J`E..$W......;.k.\.t.w~}".....jf..W..."..a..0y........@.T.1.G0........Y_....../..........@.....]+....q\.cR.....t.3S-5g....'U.j.d......y.n,:).\|.?.FW...d...\|.......*.`.3....kMKf...#..,DM.TY+..g.........e+.>...{y..N/..g-#FV.V.p.......Xs.(..{..}..-.O..H=."...........8M.g..!H..0.~.Tdf.;...$D%N .)..!..V...'r\.... ...&....J\|."Nd%D:uw:.<W.+...H&.Z...L=..U.v....J.t.0%+...U..3M....y...L..G...p='.....pB"-..\|.....j .a".i=O.R Q2..."...

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	dropped
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449703
Category:	dropped
Size (bytes):	122193
Entropy (8bit):	7.997505273485286
Encrypted:	true
SSDEEP:	3072:H4ojbjOwCNA0H+Zenw+OA6m3SmjcnlDHG21TIoN:dHyi0Ity3wnY2lIA
MD5:	AF2A7A4929E13F15A045C8C8D80A4543
SHA1:	6A1EC81A5085D0846C77DD616AE686FF732C32D6
SHA-256:	EB47C5509CEF44C582EF8ABB8C58766EA6118AD40B0FFC22A7652ED1DC6FEE8B
SHA-512:	D3B1FC08CB7DDE27E9A16B749B0024A9F11D5067B0D023F8EB2E468533297DFC5BD7739C9B696F8D11D269350FA5F2D329FE6ABC4AB679888FDC97B2450DB336
Malicious:	false
Reputation:	low
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.QX..................Oix..).NK7...KW...........`....G/..=......[..R......Y....KS.7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...a.^.]..a.X&......2.o...$,..s..l<^0)..1...Yu..w.$..0c.=c.}...xT"d....{..@.&.. .es0q.$bl.D..1:z+y..t.F..X.....qn.../fUI...q....r.f.wk..Q.Y.I2.....<.GU'...\|..1t.y...{....w..y.s.+.t5.A.J.............$...}...k.......tu........;Vf...]...\|.Q......Z.].^...q..VMw........`.<..;;.....{}0.US..O..m..v<x..%3..Tu`...U...;.~{....c.?....?...v ..-E..2......{+..*T.....p....S...qR..+K1@k..mkQo...A........]p_.X2........B.....I..3..7..]d....@.bX....z.g...\|..V-K[..^(..y...^N.^..oJF.kQ.P.R..F..om.B.pL.<F....R...(..i..,......I.F< ..T...`1.W3....L....+.S.M.c....110..........H....E,O..v..l..=...H$.J..J....4.C..dzPI..S.B@RJ.V>..GJ."/.eEwC..Q}d.k......KN\|.i...=.....!.V....<%J.D......b

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/images/favicon.ico?v=2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65439)
Category:	downloaded
Size (bytes):	90677
Entropy (8bit):	5.331203510001561
Encrypted:	false
SSDEEP:	768:FVEDx3ySKZOP00d5TjMSYzSRRM1d0YjSRpUKHHacTItx7vtn1yC0JalF1rmq6Llb:v+0Z9yFrGi8SRGfyC0JalFx3gKa7
MD5:	57FD0FB79B8289945CA246DE0908D270
SHA1:	7FC9AB444778E83D566F35102D604969ED50576D
SHA-256:	EB327424AA27D47E4499187303774F8F22557359DB3C6BB583E033E07DD0B337
SHA-512:	99F654C722C50C08BB1C68A18BF6EED1FDA1E4CCF6D30BE65BFA6F24B21BA2F1995870C8CF54E820655B41497716DDFDD7487E0A33C121B322F705FA37E5DA09
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js
Preview:	/! For license information please see oneds-analytics-js_077217740c853b5d4fe8.js.LICENSE.txt /."use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[471],{2278:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore:function(){return qo},ApplicationInsights:function(){return ja},BE_PROFILE:function(){return Vo},BaseTelemetryPlugin:function(){return di},Cloud:function(){return Vi},CoreUtils:function(){return Hr},Device:function(){return Xi},DiagnosticLogger:function(){return et},EventLatency:function(){return Ga},EventPersistence:function(){return Qa},EventsDiscardedReason:function(){return Ho},InternalAppInsightsCore:function(){return Ko},Loc:function(){return $i},LoggingSeverity:function(){return Wa},MinChannelPriorty:function(){return $a},NRT_PROFILE:function(){return Wo},NotificationManager:function(){return Uo},PostChannel:function(){return qa},PropertiesPlugin:function(){return Po},RT_PROFILE:function(){return jo},Session:function(){return B

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113401
Category:	downloaded
Size (bytes):	20414
Entropy (8bit):	7.979508934961097
Encrypted:	false
SSDEEP:	384:ekqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IMU7ULgCsHqZo9v8:9CGEiL/w7R8DW9Z5BU7UMZHqok
MD5:	48981D3CF57E7C58CA7E3E851EF9354E
SHA1:	73593DE7633B10F9FFD0EF0E46280FA40FF433FF
SHA-256:	8A5E756923CC5C3F013862427B7622F58A52501C5A6017FFF2FDB2AFD94A10C2
SHA-512:	4E2B6EA222CE77E6EC12E059362DDDEA13758CDC77259FF5CF449BED5A1677E112CF49CD7ED7B1378F96FFD7C5E21BE66D2CA7EB2A9CD8026732F867FB5AE8B1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12836)
Category:	dropped
Size (bytes):	433551
Entropy (8bit):	5.340194017869482
Encrypted:	false
SSDEEP:	3072:t8S8CMMPE4XY9EmY6j8o0okZHxDvH+qrtCsFQZ4yP6qdWsyBhwmoQMtU0ed+v/9R:XE4KYk8/3SvQXomoQ+U09/eVwMIec7
MD5:	BE429D47487D7F8DB28FBE37320E61AC
SHA1:	26AFF4FAD6831FB5CE28C22CF41DA9EAB9F900EA
SHA-256:	70487DF2B7E5ED35FCDE2BD7E43ABE95F3F10589B2DBFF2968098E000E4511E8
SHA-512:	D8160B9A8575E2ED78E0520E5E2FE69DB9854C675ED6ED4E90B6C2DCA8CC65BCB31F076C50AB0E95E52FE5F9EFBDE8BAF8B189A408A43AA201513185962CFEEE
Malicious:	false
Reputation:	low
Preview:	!function(){var e,t,n,r,i,o,a,s,u={647410:function(e,t,n){const r=n(702557),i=n(45984);window.$messageFormat={...r,...i}},911683:function(e){const t=[];e.exports={loadPolyfills:function(){return Promise.all(t)}}},758758:function(e,t){var n;n=function(e){"use strict";var t=document.createElement,n=0;document.createElement=function(e,r){var i=t.call(document,e,r);return"template"!==e&&(i.elementTiming=n++),i};var r=document.createElementNS;document.createElementNS=function(e,t,n){var i=r.call(document,e,t,n);return i.elementTiming=1,i};var i=function(e,t){return{name:e,value:void 0===t?-1:t,delta:0,entries:[],id:"v2-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12)}},o=function(e,t){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){if("first-input"===e&&!("PerformanceEventTiming"in self))return;var n=new PerformanceObserver((function(e){return e.getEntries().map(t)}));return n.observe({type:e,buffered:!0}),n}}catch(e){}},a=function(e,t){var n=functio

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	dropped
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:fCu:au
MD5:	AAAB7A355103063D9EEB4824A3A6B374
SHA1:	E51555F02C32321F3E48F07A0FA5AF46DF835BFC
SHA-256:	79BA862622D6FA84AC7E4F98EB95043A255FC2C81711E9400A8AA4D4B1608471
SHA-512:	D1A0C9C4F628459F5CA904405B2A66A69425A50E8DCE1BAA43161D784EB219BD3E1FD9447BCBACC314652EDA08CF0B02C863C87F3AC1534AE0F62A414C191F1B
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/Images/Clear.PNG?ctx=jscb1.0&session_id=3d90045f99d5477f8d646f39ea9b8305&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=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&eci=eyJ1dmRyIjoiR29vZ2xlIEluYy4gKEdvb2dsZSkiLCJ1cmRyIjoiQU5HTEUgKEdvb2dsZSwgVnVsa2FuIDEuMy4wIChTd2lmdFNoYWRlciBEZXZpY2UgKFN1Ynplcm8pICgweDAwMDBDMERFKSksIFN3aWZ0U2hhZGVyIGRyaXZlcikiLCJ2ZHIiOiJXZWJLaXQiLCJyZHIiOiJXZWJLaXQgV2ViR0wiLCJpZHVoIjoiMTViNmNhNDcyNjliZTQyODc1Njg1MDY5MzdlOTkxN2MifQ==&PageId=SI&u1=&u3=10.0.0&u4=x86&u5=64&u2=(Google%20Chrome%2C117.0.5938.132)%2C(Not%3BA%3DBrand%2C8.0.0.0)%2C(Chromium%2C117.0.5938.132)
Preview:	dfp:OK

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12836)
Category:	downloaded
Size (bytes):	433551
Entropy (8bit):	5.340194017869482
Encrypted:	false
SSDEEP:	3072:t8S8CMMPE4XY9EmY6j8o0okZHxDvH+qrtCsFQZ4yP6qdWsyBhwmoQMtU0ed+v/9R:XE4KYk8/3SvQXomoQ+U09/eVwMIec7
MD5:	BE429D47487D7F8DB28FBE37320E61AC
SHA1:	26AFF4FAD6831FB5CE28C22CF41DA9EAB9F900EA
SHA-256:	70487DF2B7E5ED35FCDE2BD7E43ABE95F3F10589B2DBFF2968098E000E4511E8
SHA-512:	D8160B9A8575E2ED78E0520E5E2FE69DB9854C675ED6ED4E90B6C2DCA8CC65BCB31F076C50AB0E95E52FE5F9EFBDE8BAF8B189A408A43AA201513185962CFEEE
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/admincenter/admin-main/2024.9.23.3/inline.en.bundle.js
Preview:	!function(){var e,t,n,r,i,o,a,s,u={647410:function(e,t,n){const r=n(702557),i=n(45984);window.$messageFormat={...r,...i}},911683:function(e){const t=[];e.exports={loadPolyfills:function(){return Promise.all(t)}}},758758:function(e,t){var n;n=function(e){"use strict";var t=document.createElement,n=0;document.createElement=function(e,r){var i=t.call(document,e,r);return"template"!==e&&(i.elementTiming=n++),i};var r=document.createElementNS;document.createElementNS=function(e,t,n){var i=r.call(document,e,t,n);return i.elementTiming=1,i};var i=function(e,t){return{name:e,value:void 0===t?-1:t,delta:0,entries:[],id:"v2-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12)}},o=function(e,t){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){if("first-input"===e&&!("PerformanceEventTiming"in self))return;var n=new PerformanceObserver((function(e){return e.getEntries().map(t)}));return n.observe({type:e,buffered:!0}),n}}catch(e){}},a=function(e,t){var n=functio

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90677
Category:	downloaded
Size (bytes):	32811
Entropy (8bit):	7.992877953733209
Encrypted:	true
SSDEEP:	768:fDPYSdMWwCyzH8REcKPN/8p0x7UQzlRMXv1FevViDAqA:a8REcsUp0xUQzc/8VCAV
MD5:	2E287EB418940084B921590C6E672C9E
SHA1:	1FC75A9DAA054EF88AAEA181F3A9B4CBA2B6B6E1
SHA-256:	6C2C58DAAE76131A00D1BFEE20852F372CF594BE7F4A8848ACC42F8BF72C1BBD
SHA-512:	A77F69571B0F04F4A2354D9E18E41EF86F22274EAED20C02215B632BFEF09C6543A83591E9DB3F2B4036A9684BFF666EB6A7B253BA18893500E9CD541AB752A0
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js
Preview:	...........iw.8.?.~>....%."9K'R...q:.fw.,.n_.Z.l.eRMR^b.O...A.N...yq.t,b!.....BU....4kM.Lr..I.]DE.&..TF..K.J.9.7.$....(..'?....f...tG...?y8~0..;..w;[....;.u........D.......N:W.d........E..eR...q..sJG.O.Z,....l......~.........'.d.......n.N..@.../....l'...".J3Y..n3Y...o..T...P0..j..-.....v.m7T.LM. .....Ev.7...IC.q..[.t>nj.e..OE<m...l)^.K.......8:M.&.]zz..j.X..K........'3..Tk....Z.2.GQ6..Fi._.\|v.Bf.W?...T.]:j(.%F.)..t_^........8.:..DN..8....B.>\|<..~..\|H.x.q.=-.f.~..{.z..&t...e.LfE,.;.d...n.....2..FH. .Y,.J...EC.cj. .F......o.....\...&\.J..fJiJ.S..4.5..NM]m.....Q.....e.O..iSs'........'Z..6A(Y.8..eQ.....2..I.?...;dS..I...D..@./7t.:z.......c...dF..B.......9...8)..h.........<.I...2.\FY+.=S.8...$Qv...<..IL.x".w9_..3.."-nfR.(..WDN..L.....z..I8.E..Ub......d..M.....sq.N........p..lX...A]3Y....j...%.`N..G.v..6.m.KH.M......Z..a2.N.....4....,u.O.vWM...=d..J.r`..b.....N.hzp..C..?.. ......:..M6............;.w.."B.^.ZP.N.:.[..(:...(.y.)q...

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65470)
Category:	downloaded
Size (bytes):	946086
Entropy (8bit):	5.409753384157591
Encrypted:	false
SSDEEP:	6144:XusPgI1Jco6/NNXkrBM7J3h7YLem7hGtvjSungUX19O+cgNp/2kA3lzVNzgA9WEC:NONZ3lm7UvjPs+7NfsgA9Wn
MD5:	68F1F531D00CCAD30CAB55AFC093E124
SHA1:	92956CEA8F77453A460F33DF51E601653A5E0FD9
SHA-256:	F709D9E0A2435C4E5D66CDF6EC744006D5A32AD329AB489181924CEDBD72D4AF
SHA-512:	2493C3065C58BDEF0504E104A27B4F61787DD16DDEE22E2C243638FA94F632E868FAF38F76CEDB7F90A8FC56C8AC2A0A62BDBCCA9603F78BF027BBCDDD621B88
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/js/login_en_aPH1MdAMytMMq1WvwJPhJA2.js
Preview:	/! For license information please see login_en.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function s(e){return r.isMemo(e)?a:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=a;var c=Object.defineProperty,u=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,p=Object.getOwnPropertyDescriptor,f=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(g){var o=f(n);o&&o!==g&&e(t,o,r)}var a=u(n);d&&(a=a.concat(d(n)));for(var l=s(t),m=s(n),h=0;h<a.length;++h){var b=a[h];if(!(i[b]\|\|r&&r[b

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	downloaded
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 644076
Category:	downloaded
Size (bytes):	170734
Entropy (8bit):	7.99820664079895
Encrypted:	true
SSDEEP:	3072:VnqanNo3e6mc+FL+mbhRT/BQD28KQPqv2NKXQPCafTuggFCPtUnAjDgVw:VqaJc+wmbhRTJ+DKCIXgargPtUnAPgVw
MD5:	8F5BE56A993E851163F96471BD77E117
SHA1:	8D46AD4565CA492D520035CC7ABF069EF90A3C8C
SHA-256:	D47483C76252B60913230242E59A917D9C2B6CA2EF7C438C6205E821BCFBD085
SHA-512:	A72510585F696F001DD72AB92B3C513D05086C747CC512A4D538AB65880870799BD41C892290112D6EAE316B5DDC15393E456C364C897627CB8C444B60DC4EED
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/js/reset-password-signinname_en_iGkKHb6MchyJTpOn_ZeIdw2.js
Preview:	...........kw.. ....[7K.<.....[..v'.yu.....x..d3.H...8......$.$..9w.V,...B..T.....cs. /6f.Xf..H.i^....L&.UJ.Q.RV..,/.b.]..Y.e.\.....x.t...^.........t.... .:O..)..B."....v.F.....:Kl..q...'E..;...B..W.t6y.g..Z..\.2..}.=..&.Y........Yr.....SY..JPV......A...."/.3...iF..d...l.}.T.3..Vg.h.W..d6..IQ^R...2.J~H.K.,..n....).z.H....n.m._..z06....Y-.l...K9.!k.D.C....]_..a...H..[9=.d6....P...M.....2~}.I....f.+.Eu)J....."..Xi)../.].O.Y)...d9..E..b.x.G..T..\|3tC._.yQ..A.....t.t.....f...(..'E.O.,...n.....~..+\|..%..v.A.'=..qR.S..!7/.,4..A..3..B1.......D6..sC'qr8?.B.Azx..Wt..%..3J...$B..2^..8..Uqy...N.e....g.yx....J..J....M..t6..........?<H.n..D.E/.d....lk.BUR......\.D....1......i;.#.[d.......ZQ5....V..c.)d.t%g.'\|'.....]X7.J!.%3U....m..Er..u..y[1...y>....1no..).Q\lpG,..;O'.X.!L.bj.V..a..J..l..7...]S.xY..S..'..U.SUr..v+z...wEUl.&.M.gi.....Bk.9,o.....,.v......ENf...ji ....&..&..}q.Z.6.E..Q.<....9..R.yhg.1.3\.rZ...c...n...`.I^S... .."..V.1..y.2$.."*

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65470)
Category:	dropped
Size (bytes):	946086
Entropy (8bit):	5.409753384157591
Encrypted:	false
SSDEEP:	6144:XusPgI1Jco6/NNXkrBM7J3h7YLem7hGtvjSungUX19O+cgNp/2kA3lzVNzgA9WEC:NONZ3lm7UvjPs+7NfsgA9Wn
MD5:	68F1F531D00CCAD30CAB55AFC093E124
SHA1:	92956CEA8F77453A460F33DF51E601653A5E0FD9
SHA-256:	F709D9E0A2435C4E5D66CDF6EC744006D5A32AD329AB489181924CEDBD72D4AF
SHA-512:	2493C3065C58BDEF0504E104A27B4F61787DD16DDEE22E2C243638FA94F632E868FAF38F76CEDB7F90A8FC56C8AC2A0A62BDBCCA9603F78BF027BBCDDD621B88
Malicious:	false
Reputation:	low
Preview:	/! For license information please see login_en.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function s(e){return r.isMemo(e)?a:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=a;var c=Object.defineProperty,u=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,p=Object.getOwnPropertyDescriptor,f=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(g){var o=f(n);o&&o!==g&&e(t,o,r)}var a=u(n);d&&(a=a.concat(d(n)));for(var l=s(t),m=s(n),h=0;h<a.length;++h){var b=a[h];if(!(i[b]\|\|r&&r[b

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65439)
Category:	dropped
Size (bytes):	90677
Entropy (8bit):	5.331203510001561
Encrypted:	false
SSDEEP:	768:FVEDx3ySKZOP00d5TjMSYzSRRM1d0YjSRpUKHHacTItx7vtn1yC0JalF1rmq6Llb:v+0Z9yFrGi8SRGfyC0JalFx3gKa7
MD5:	57FD0FB79B8289945CA246DE0908D270
SHA1:	7FC9AB444778E83D566F35102D604969ED50576D
SHA-256:	EB327424AA27D47E4499187303774F8F22557359DB3C6BB583E033E07DD0B337
SHA-512:	99F654C722C50C08BB1C68A18BF6EED1FDA1E4CCF6D30BE65BFA6F24B21BA2F1995870C8CF54E820655B41497716DDFDD7487E0A33C121B322F705FA37E5DA09
Malicious:	false
Reputation:	low
Preview:	/! For license information please see oneds-analytics-js_077217740c853b5d4fe8.js.LICENSE.txt /."use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[471],{2278:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore:function(){return qo},ApplicationInsights:function(){return ja},BE_PROFILE:function(){return Vo},BaseTelemetryPlugin:function(){return di},Cloud:function(){return Vi},CoreUtils:function(){return Hr},Device:function(){return Xi},DiagnosticLogger:function(){return et},EventLatency:function(){return Ga},EventPersistence:function(){return Qa},EventsDiscardedReason:function(){return Ho},InternalAppInsightsCore:function(){return Ko},Loc:function(){return $i},LoggingSeverity:function(){return Wa},MinChannelPriorty:function(){return $a},NRT_PROFILE:function(){return Wo},NotificationManager:function(){return Uo},PostChannel:function(){return qa},PropertiesPlugin:function(){return Po},RT_PROFILE:function(){return jo},Session:function(){return B

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.925790510960767
Encrypted:	false
SSDEEP:	3:pvAP2ybsTEwTp+AFcbKRR:p4PTbsTEmpNcc
MD5:	88A9F7A8F7681BBFD0C42E3AED069D5E
SHA1:	2933C1BBE7AB6C2A20DA92400E50C69F837F5A8F
SHA-256:	0E0C579E7D9FE8DA04A7E301963EFDCB3B102436234608EC6AEDBE225BFDFE5F
SHA-512:	7C6B805474E25C3810AF30A313BCDB9323DE84706AC30FB41ADD016936143434223B7217486DE09AF87003E6862361CD7E60BB1C0B1FED2A2E49AE04ED44A8FA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlwWwY0Nini5hIFDVd69_0=?alt=proto
Preview:	CjAKLg1Xevf9GgQISxgCKiEIClIdChNAIS4jKiRfLT8rJiUvLCleKDo9EAEY/////w8=

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
Category:	downloaded
Size (bytes):	49804
Entropy (8bit):	7.994672288751266
Encrypted:	true
SSDEEP:	1536:SMuttwJ0uUmAcZjNL6nnQlL+mwKLiQC7Mn3dxPErr:SwJ0vmAcKnnQF+8LJOMn3DPE/
MD5:	6DE768A4DF1E0D0061CDB52EF06346C4
SHA1:	3829A667B97668008023DDA98F4C0772174C8EF6
SHA-256:	58732EEE2ED9091F4F5776DC8A8A14116CBE5A2BA1CCDA0256896BAB08A52128
SHA-512:	CC6966D2C2B43E762750102E734DA6B88D7BFB92DDB5D482EE25029337D95E997466E83001586F2B63DAEE890B5F3188E8EC0F1B084D5EB67CFEA55EDDFAD47D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	...........m[.8.0........OL....;w..nf.0.ff.X.'V......4.r~........=........,..JU.......T~.l..?..E.....X..\|t~P9...TN..G..?^.~.............Xx.0..Q..Fa4.#7.q...F.;......4...Q.W&~.@....O.T.y.37J.+Ggf...P....Pz.N...>..a.D..<.m./A,...Q.....WN.Q...8.Db$.G.H<...'....J,..8..{nG.2@HYkL../......=.pL....A?.&Ng.i,......2lo...$.<.3...?~pW..=...L..&x.QR.u3..#6q2....U.Y1..".M. .<W."7@......w..."H,@......0..P....p:...[...E].A..%..V.K\.......F.ir.}.Lc{s..O.g..(\|.........9o..A.t.K....Wv.l6..T.......t.........+..........-w {l..g...V..\=W.j.oaT}t.J`E..$W......;.k.\.t.w~}".....jf..W..."..a..0y........@.T.1.G0........Y_....../..........@.....]+....q\.cR.....t.3S-5g....'U.j.d......y.n,:).\|.?.FW...d...\|.......*.`.3....kMKf...#..,DM.TY+..g.........e+.>...{y..N/..g-#FV.V.p.......Xs.(..{..}..-.O..H=."...........8M.g..!H..0.~.Tdf.;...$D%N .)..!..V...'r\.... ...&....J\|."Nd%D:uw:.<W.+...H&.Z...L=..U.v....J.t.0%+...U..3M....y...L..G...p='.....pB"-..\|.....j .a".i=O.R Q2..."...

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	182
Entropy (8bit):	5.111382121361486
Encrypted:	false
SSDEEP:	3:PouVKQnFqDmJS4RKYPOyzAEtGFUvzUbG3SQLDUfQ3zfc7MBWhtoAc9Zxu:h4Qn4mc4sLWAEtSUbU63lUYDfYMch07U
MD5:	B74499BDA902C84D1468A84DA5F443FB
SHA1:	0A3259A9852BE07405F10D39293466137C44BB4F
SHA-256:	0BA26423ED3348AE5C95A103E7D7AF6EA3B202C4A4830EFF7D609558925A5382
SHA-512:	B82A3F5996F65F36565E066845E673B7AB1587F6A64B7CD41225A5867CE6CFC38CE0DB7349AA0855C23F2E562C26D932EF53DB9DA9E42228D58C54B0DC6EBBD4
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/?session_id=3d90045f99d5477f8d646f39ea9b8305&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>window.parent.postMessage('dfp:OK', '*');</script>..</head>..<body/>..</html>..

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 644076
Category:	dropped
Size (bytes):	170734
Entropy (8bit):	7.99820664079895
Encrypted:	true
SSDEEP:	3072:VnqanNo3e6mc+FL+mbhRT/BQD28KQPqv2NKXQPCafTuggFCPtUnAjDgVw:VqaJc+wmbhRTJ+DKCIXgargPtUnAPgVw
MD5:	8F5BE56A993E851163F96471BD77E117
SHA1:	8D46AD4565CA492D520035CC7ABF069EF90A3C8C
SHA-256:	D47483C76252B60913230242E59A917D9C2B6CA2EF7C438C6205E821BCFBD085
SHA-512:	A72510585F696F001DD72AB92B3C513D05086C747CC512A4D538AB65880870799BD41C892290112D6EAE316B5DDC15393E456C364C897627CB8C444B60DC4EED
Malicious:	false
Reputation:	low
Preview:	...........kw.. ....[7K.<.....[..v'.yu.....x..d3.H...8......$.$..9w.V,...B..T.....cs. /6f.Xf..H.i^....L&.UJ.Q.RV..,/.b.]..Y.e.\.....x.t...^.........t.... .:O..)..B."....v.F.....:Kl..q...'E..;...B..W.t6y.g..Z..\.2..}.=..&.Y........Yr.....SY..JPV......A...."/.3...iF..d...l.}.T.3..Vg.h.W..d6..IQ^R...2.J~H.K.,..n....).z.H....n.m._..z06....Y-.l...K9.!k.D.C....]_..a...H..[9=.d6....P...M.....2~}.I....f.+.Eu)J....."..Xi)../.].O.Y)...d9..E..b.x.G..T..\|3tC._.yQ..A.....t.t.....f...(..'E.O.,...n.....~..+\|..%..v.A.'=..qR.S..!7/.,4..A..3..B1.......D6..sC'qr8?.B.Azx..Wt..%..3J...$B..2^..8..Uqy...N.e....g.yx....J..J....M..t6..........?<H.n..D.E/.d....lk.BUR......\.D....1......i;.#.[d.......ZQ5....V..c.)d.t%g.'\|'.....]X7.J!.%3U....m..Er..u..y[1...y>....1no..).Q\lpG,..;O'.X.!L.bj.V..a..J..l..7...]S.xY..S..'..U.SUr..v+z...wEUl.&.M.gi.....Bk.9,o.....,.v......ENf...ji ....&..&..}q.Z.6.E..Q.<....9..R.yhg.1.3\.rZ...c...n...`.I^S... .."..V.1..y.2$.."*

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449703
Category:	downloaded
Size (bytes):	122193
Entropy (8bit):	7.997505273485286
Encrypted:	true
SSDEEP:	3072:H4ojbjOwCNA0H+Zenw+OA6m3SmjcnlDHG21TIoN:dHyi0Ity3wnY2lIA
MD5:	AF2A7A4929E13F15A045C8C8D80A4543
SHA1:	6A1EC81A5085D0846C77DD616AE686FF732C32D6
SHA-256:	EB47C5509CEF44C582EF8ABB8C58766EA6118AD40B0FFC22A7652ED1DC6FEE8B
SHA-512:	D3B1FC08CB7DDE27E9A16B749B0024A9F11D5067B0D023F8EB2E468533297DFC5BD7739C9B696F8D11D269350FA5F2D329FE6ABC4AB679888FDC97B2450DB336
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.QX..................Oix..).NK7...KW...........`....G/..=......[..R......Y....KS.7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...a.^.]..a.X&......2.o...$,..s..l<^0)..1...Yu..w.$..0c.=c.}...xT"d....{..@.&.. .es0q.$bl.D..1:z+y..t.F..X.....qn.../fUI...q....r.f.wk..Q.Y.I2.....<.GU'...\|..1t.y...{....w..y.s.+.t5.A.J.............$...}...k.......tu........;Vf...]...\|.Q......Z.].^...q..VMw........`.<..;;.....{}0.US..O..m..v<x..%3..Tu`...U...;.~{....c.?....?...v ..-E..2......{+..*T.....p....S...qR..+K1@k..mkQo...A........]p_.X2........B.....I..3..7..]d....@.bX....z.g...\|..V-K[..^(..y...^N.^..oJF.kQ.P.R..F..om.B.pL.<F....R...(..i..,......I.F< ..T...`1.W3....L....+.S.M.c....110..........H....E,O..v..l..=...H$.J..J....4.C..dzPI..S.B@RJ.V>..GJ."/.eEwC..Q}d.k......KN\|.i...=.....!.V....<%J.D......b

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2625), with CRLF line terminators
Category:	downloaded
Size (bytes):	2746
Entropy (8bit):	5.656791573387565
Encrypted:	false
SSDEEP:	48:t1XXw+kOhX/BxVgnK/Q6GiuGq9juwbae13NhcKBLd4se4r0HbvTwKK9XCIIQoNfk:H9W3iuV96wDrHBZ4sJo7TwKQX3n/
MD5:	AB6F9D373748FD9BC505E5D9E047A8FA
SHA1:	91091279F70AD460E8A0CF924619A78C34A705FC
SHA-256:	0CA6C3C52DD015AF4BC581A38603D15101218EA8539F38D1B4CAC353EF0BD685
SHA-512:	3BF1EABE6491F514210CC3229AA83F087C31356A1B8CFD662D9EE10AD751610C5690ED92B7D13D62C3CBF3B6EA4D77C4F9D8320F72CB19FE4CEEFB920927D27C
Malicious:	false
Reputation:	low
URL:	https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=3d90045f99d5477f8d646f39ea9b8305&id=01ecdfc2-5b14-0136-4fb1-276ce75f89f2&w=8DCDF3F14FCFD7D&tkt=taBcrIH61PuCVH7eNCyH0K%252fD9DJ44Cptuv0RyrXgXCuaSDAHurnH%252fH9S%252b1CsCgv5KdZFSCo3U3UPg5JxcrONsLwzXekH4AXXCv%252bt7UgMl7roahVB2%252fIrDdem9sTF7gfr7fvcxiNkDIE2ptoDN3XlPnTIIlJEEOmF5j7Gkl3hz7uNX6EQ9IGQYYramm28Q2f08ORA1E7HN8wYxxGV9Qxekwb%252fRWMFhD0Hta%252fCLn0wgU6VstIXUdxZ5MuSZqpsywbsH004OGnHPkYnvYYhsHuTXrY0lCWVRKYYJFP1YLipsi8S%252bYxyA47uDJsD%252bwbK8tNb&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>..</head>..<script>function BaseStamp() { this.GetStorageQsInfo = function () { if (window.localStorage) { var n = window.localStorage.getItem(lsKey); var lsupd = "False"; if (lsupd === "true" && n) { var xhr = new XMLHttpRequest(), method = "GET", url = target + "updatels.html?ofid=" + n + "&session_id=" + sid + "&CustomerId=" + cid; xhr.open(method, url, true); xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE && xhr.status === 200) { var update = xhr.responseText; if (update && update.toLowerCase() === "true") { window.localStorage.setItem(lsKey, id); } } }; xhr.send(); } if (n && n != null && n != "" \|\| (window.localStorage.setItem(lsKey, id), n = id), id != n) return "session_id=" + sid + "&CustomerId=" + cid + "&fid=" + id + "&ofid=" + n + "&w=" + ticks + "&auth=" + encodeURIComponent(authKey) } return "" }; this.newXMLHttp = function () { var n = null; return

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90677
Category:	dropped
Size (bytes):	32811
Entropy (8bit):	7.992877953733209
Encrypted:	true
SSDEEP:	768:fDPYSdMWwCyzH8REcKPN/8p0x7UQzlRMXv1FevViDAqA:a8REcsUp0xUQzc/8VCAV
MD5:	2E287EB418940084B921590C6E672C9E
SHA1:	1FC75A9DAA054EF88AAEA181F3A9B4CBA2B6B6E1
SHA-256:	6C2C58DAAE76131A00D1BFEE20852F372CF594BE7F4A8848ACC42F8BF72C1BBD
SHA-512:	A77F69571B0F04F4A2354D9E18E41EF86F22274EAED20C02215B632BFEF09C6543A83591E9DB3F2B4036A9684BFF666EB6A7B253BA18893500E9CD541AB752A0
Malicious:	false
Reputation:	low
Preview:	...........iw.8.?.~>....%."9K'R...q:.fw.,.n_.Z.l.eRMR^b.O...A.N...yq.t,b!.....BU....4kM.Lr..I.]DE.&..TF..K.J.9.7.$....(..'?....f...tG...?y8~0..;..w;[....;.u........D.......N:W.d........E..eR...q..sJG.O.Z,....l......~.........'.d.......n.N..@.../....l'...".J3Y..n3Y...o..T...P0..j..-.....v.m7T.LM. .....Ev.7...IC.q..[.t>nj.e..OE<m...l)^.K.......8:M.&.]zz..j.X..K........'3..Tk....Z.2.GQ6..Fi._.\|v.Bf.W?...T.]:j(.%F.)..t_^........8.:..DN..8....B.>\|<..~..\|H.x.q.=-.f.~..{.z..&t...e.LfE,.;.d...n.....2..FH. .Y,.J...EC.cj. .F......o.....\...&\.J..fJiJ.S..4.5..NM]m.....Q.....e.O..iSs'........'Z..6A(Y.8..eQ.....2..I.?...;dS..I...D..@./7t.:z.......c...dF..B.......9...8)..h.........<.I...2.\FY+.=S.8...$Qv...<..IL.x".w9_..3.."-nfR.(..WDN..L.....z..I8.E..Ub......d..M.....sq.N........p..lX...A]3Y....j...%.`N..G.v..6.m.KH.M......Z..a2.N.....4....,u.O.vWM...=d..J.r`..b.....N.hzp..C..?.. ......:..M6............;.w.."B.^.ZP.N.:.[..(:...(.y.)q...

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/16.000.30374.3/images/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:fCu:au
MD5:	AAAB7A355103063D9EEB4824A3A6B374
SHA1:	E51555F02C32321F3E48F07A0FA5AF46DF835BFC
SHA-256:	79BA862622D6FA84AC7E4F98EB95043A255FC2C81711E9400A8AA4D4B1608471
SHA-512:	D1A0C9C4F628459F5CA904405B2A66A69425A50E8DCE1BAA43161D784EB219BD3E1FD9447BCBACC314652EDA08CF0B02C863C87F3AC1534AE0F62A414C191F1B
Malicious:	false
Reputation:	low
Preview:	dfp:OK

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.8464393446710154
Encrypted:	false
SSDEEP:	3:mJHCm:m8m
MD5:	139A010C54200F8E63F5F8196DFC6B88
SHA1:	1F239A55AE74A6A1741A5070A428E48108088B29
SHA-256:	071CB6EC5D3727D93DB3261F2CADA840A8511897A3BFA677A338E3C855CB7D18
SHA-512:	D58E9D7D6E5347F131DA02F5AE1C5352A103DF3995C2903D3B69A9539B85B0EAABBE4DE455993E588973007CFB0B72D5FCCBD1437781B1C3E6D2CD298EE79FEC
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnw8PvhQPeM6xIFDewtwx0=?alt=proto
Preview:	Cg0KCw3sLcMdGgQIZBgC

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 27, 2024 23:53:40.457128048 CEST	49701	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:40.457165003 CEST	443	49701	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:40.457227945 CEST	49701	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:40.457468987 CEST	49701	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:40.457478046 CEST	443	49701	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:40.457787037 CEST	49702	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:40.457793951 CEST	443	49702	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:40.457856894 CEST	49702	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:40.458069086 CEST	49702	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:40.458076000 CEST	443	49702	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:41.118741035 CEST	443	49702	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:41.119134903 CEST	49702	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:41.119163036 CEST	443	49702	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:41.120753050 CEST	443	49702	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:41.120842934 CEST	49702	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:41.121761084 CEST	49702	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:41.121862888 CEST	443	49702	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:41.122004986 CEST	49702	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:41.122011900 CEST	443	49702	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:41.133507013 CEST	443	49701	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:41.134831905 CEST	49701	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:41.134844065 CEST	443	49701	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:41.138395071 CEST	443	49701	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:41.138601065 CEST	49701	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:41.138808012 CEST	49701	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:41.138977051 CEST	443	49701	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:41.165450096 CEST	49702	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:41.181433916 CEST	49701	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:41.181448936 CEST	443	49701	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:41.229401112 CEST	49701	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:41.519859076 CEST	443	49702	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:41.520160913 CEST	443	49702	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:41.520241976 CEST	49702	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:41.520489931 CEST	49702	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:41.520509005 CEST	443	49702	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:41.520518064 CEST	49702	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:41.520565987 CEST	49702	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:43.102193117 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 27, 2024 23:53:43.403667927 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 27, 2024 23:53:44.008568048 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 27, 2024 23:53:44.370394945 CEST	49710	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:53:44.370438099 CEST	443	49710	142.250.184.196	192.168.2.16
Sep 27, 2024 23:53:44.370598078 CEST	49710	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:53:44.370835066 CEST	49710	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:53:44.370851994 CEST	443	49710	142.250.184.196	192.168.2.16
Sep 27, 2024 23:53:44.439913034 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:44.439949036 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:44.440027952 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:44.440293074 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:44.440308094 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.017149925 CEST	443	49710	142.250.184.196	192.168.2.16
Sep 27, 2024 23:53:45.017376900 CEST	49710	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:53:45.017384052 CEST	443	49710	142.250.184.196	192.168.2.16
Sep 27, 2024 23:53:45.019062996 CEST	443	49710	142.250.184.196	192.168.2.16
Sep 27, 2024 23:53:45.019150972 CEST	49710	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:53:45.020124912 CEST	49710	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:53:45.020205975 CEST	443	49710	142.250.184.196	192.168.2.16
Sep 27, 2024 23:53:45.068394899 CEST	49710	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:53:45.068402052 CEST	443	49710	142.250.184.196	192.168.2.16
Sep 27, 2024 23:53:45.116322041 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.116430998 CEST	49710	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:53:45.116724014 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.116753101 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.117697001 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.117780924 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.118762970 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.118932009 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.118937016 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.118968010 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.164426088 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.164432049 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.211406946 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.211417913 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 27, 2024 23:53:45.220556021 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.220617056 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.220638990 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.220659018 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.220695019 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.220699072 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.220724106 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.220732927 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.220758915 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.220768929 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.220792055 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.220829010 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.309999943 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.310077906 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.310123920 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.310142040 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.310151100 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.310177088 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.310205936 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.311780930 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.311826944 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.311866999 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.311872005 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.311899900 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.311927080 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.311929941 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.311956882 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.312011003 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.312016010 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.312098980 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.312155962 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.312391996 CEST	49712	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.312405109 CEST	443	49712	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.323338032 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.323355913 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.323460102 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.323704004 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.323713064 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.837573051 CEST	443	49701	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:45.837750912 CEST	443	49701	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:45.838071108 CEST	49701	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:45.846684933 CEST	49701	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:53:45.846698999 CEST	443	49701	13.107.246.45	192.168.2.16
Sep 27, 2024 23:53:45.877873898 CEST	49689	80	192.168.2.16	192.229.211.108
Sep 27, 2024 23:53:45.979737043 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.980783939 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.980813026 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.981940031 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.982125044 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.982455015 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:45.982512951 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:45.982635021 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.027411938 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.029613972 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.029635906 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.081598043 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.081648111 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.081686974 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.081912994 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.081912994 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.081940889 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.081954002 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.082032919 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.167973995 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.168001890 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.168088913 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.168101072 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.168121099 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.168261051 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.168261051 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.168272972 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.168508053 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.169680119 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.169725895 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.169756889 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.169764042 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.169812918 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.169825077 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.169897079 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.169902086 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.169984102 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.172456980 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.172771931 CEST	49715	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.172785997 CEST	443	49715	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.431478024 CEST	49720	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.431539059 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.431627035 CEST	49720	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.432467937 CEST	49720	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.432485104 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.509048939 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.509087086 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.509243011 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.509686947 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.509700060 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.510077953 CEST	49723	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.510124922 CEST	443	49723	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:46.510195971 CEST	49723	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.510525942 CEST	49723	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:46.510548115 CEST	443	49723	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.075099945 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.075376034 CEST	49720	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.075417042 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.075767040 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.076136112 CEST	49720	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.076210976 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.076288939 CEST	49720	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.123404980 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.124461889 CEST	49720	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.157537937 CEST	443	49723	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.157625914 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.157871008 CEST	49723	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.157896996 CEST	443	49723	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.157993078 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.158025980 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.158512115 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.158924103 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.158972025 CEST	443	49723	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.159045935 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.159080029 CEST	49723	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.159087896 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.159332037 CEST	49723	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.159418106 CEST	443	49723	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.159503937 CEST	49723	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.159512997 CEST	443	49723	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.176821947 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.176842928 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.176850080 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.176887035 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.176915884 CEST	49720	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.176919937 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.176935911 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.176953077 CEST	49720	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.176981926 CEST	49720	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.203422070 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.203489065 CEST	49723	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.203553915 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.259943962 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.259979010 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.259989977 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.260044098 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.260077000 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.260096073 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.260108948 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.260173082 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.260200024 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.260343075 CEST	443	49723	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.260366917 CEST	443	49723	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.260373116 CEST	443	49723	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.260385036 CEST	443	49723	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.260411978 CEST	443	49723	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.260447979 CEST	49723	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.260483980 CEST	443	49723	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.260502100 CEST	49723	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.260554075 CEST	49723	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.261543989 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.261625051 CEST	49720	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.261631012 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.261684895 CEST	49720	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.261756897 CEST	49723	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.261773109 CEST	443	49723	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.262912989 CEST	49720	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.262918949 CEST	443	49720	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.266153097 CEST	49727	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.266191006 CEST	443	49727	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.266289949 CEST	49727	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.266563892 CEST	49727	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.266582012 CEST	443	49727	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.346582890 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.346613884 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.346709013 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.346718073 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.346772909 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.348025084 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.348051071 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.348139048 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.348146915 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.348196030 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.434925079 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.434958935 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.435035944 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.435048103 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.435100079 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.435832024 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.435853004 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.435913086 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.435920954 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.435970068 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.436655998 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.436677933 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.436737061 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.436745882 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.436800003 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.437829018 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.437849045 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.437911034 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.437917948 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.437968016 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.523185015 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.523281097 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.523304939 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.523423910 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.523478031 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.523891926 CEST	49722	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.523904085 CEST	443	49722	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.527806044 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.527826071 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.527930021 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.528131962 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.528145075 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.535089016 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.535096884 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.535161972 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.535396099 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.535403967 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.618419886 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 27, 2024 23:53:47.938257933 CEST	443	49727	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.938616991 CEST	49727	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.938641071 CEST	443	49727	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.939827919 CEST	443	49727	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.940207958 CEST	49727	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.940354109 CEST	49727	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:47.940386057 CEST	443	49727	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:47.983467102 CEST	49727	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.042483091 CEST	443	49727	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.042550087 CEST	443	49727	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.042571068 CEST	443	49727	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.042622089 CEST	443	49727	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.042634964 CEST	49727	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.042649031 CEST	443	49727	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.042659044 CEST	443	49727	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.042722940 CEST	49727	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.042732000 CEST	443	49727	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.042859077 CEST	443	49727	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.042923927 CEST	49727	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.043477058 CEST	49727	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.043488979 CEST	443	49727	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.176147938 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.176454067 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.176486969 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.177723885 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.178037882 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.178131104 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.178212881 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.196379900 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.196603060 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.196618080 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.197596073 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.197664976 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.197926044 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.197981119 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.198049068 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.198055029 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.223397970 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.253428936 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.282044888 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.282075882 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.282097101 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.282146931 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.282176018 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.282217979 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.282248020 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.302458048 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.302489996 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.302498102 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.302529097 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.302546978 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.302557945 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.302572012 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.302594900 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.302633047 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.302676916 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.369561911 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.369595051 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.369803905 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.369849920 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.369914055 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.371691942 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.371711969 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.371792078 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.371812105 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.371859074 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.391304970 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.391328096 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.391464949 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.391514063 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.391563892 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.393426895 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.393441916 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.393526077 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.393548012 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.393593073 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.458065987 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.458101034 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.458188057 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.458226919 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.458365917 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.459187984 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.459212065 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.459253073 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.459260941 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.459326982 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.460215092 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.460238934 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.460282087 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.460289001 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.460333109 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.460355043 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.461626053 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.461647987 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.461694956 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.461702108 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.461751938 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.481463909 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.481509924 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.481559992 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.481585979 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.481662989 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.483284950 CEST	49730	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.483309984 CEST	443	49730	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.502126932 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.502222061 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.502316952 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.503158092 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.503194094 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.546317101 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.546442986 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.546475887 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.546503067 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.546721935 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.551201105 CEST	49729	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.551234961 CEST	443	49729	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.594062090 CEST	49732	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.594105959 CEST	443	49732	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.594235897 CEST	49732	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.594465017 CEST	49732	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.594484091 CEST	443	49732	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.618781090 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.618815899 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:48.618937016 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.619157076 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:48.619174957 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.168872118 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.169177055 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.169241905 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.169605017 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.169918060 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.169998884 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.170037031 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.215405941 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.224406958 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.259799004 CEST	443	49732	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.260162115 CEST	49732	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.260184050 CEST	443	49732	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.260536909 CEST	443	49732	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.260867119 CEST	49732	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.260943890 CEST	443	49732	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.261050940 CEST	49732	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.275120974 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.275140047 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.275146008 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.275183916 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.275202036 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.275219917 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.275228977 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.275258064 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.275290012 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.275316000 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.276920080 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.277153015 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.277168989 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.277635098 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.277916908 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.277997971 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.278075933 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.307404995 CEST	443	49732	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.319422007 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.347632885 CEST	49734	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:49.347667933 CEST	443	49734	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:49.347757101 CEST	49734	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:49.349701881 CEST	49734	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:49.349731922 CEST	443	49734	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:49.365044117 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.365061045 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.365159988 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.365185976 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.365255117 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.366946936 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.366962910 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.367044926 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.367060900 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.367115974 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.370384932 CEST	443	49732	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.370409012 CEST	443	49732	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.370428085 CEST	443	49732	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.370484114 CEST	49732	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.370503902 CEST	443	49732	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.370523930 CEST	443	49732	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.370526075 CEST	49732	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.370568991 CEST	49732	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.371105909 CEST	49732	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.371118069 CEST	443	49732	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.373389006 CEST	49735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.373409986 CEST	443	49735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.373491049 CEST	49735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.373713017 CEST	49735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.373728991 CEST	443	49735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.385178089 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.385212898 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.385231972 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.385377884 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.385379076 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.385397911 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.385488033 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.454704046 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.454751015 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.454791069 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.454791069 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.454859972 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.455365896 CEST	49731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.455394030 CEST	443	49731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.472815990 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.472841024 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.472896099 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.472915888 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.472945929 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.472965956 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.475013971 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.475043058 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.475085974 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.475094080 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.475127935 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.475152969 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.561784029 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.561817884 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.561863899 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.561878920 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.561904907 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.561925888 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.562743902 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.562769890 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.562809944 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.562819004 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.562849998 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.562863111 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.563940048 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.563963890 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.564033985 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.564043999 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.564090014 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.565125942 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.565146923 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.565197945 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.565210104 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.565218925 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.565264940 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.565273046 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.565300941 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.565346003 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.565726042 CEST	49733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.565743923 CEST	443	49733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.568636894 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.568703890 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.568767071 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.569024086 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.569042921 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.612284899 CEST	49737	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.612391949 CEST	443	49737	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.612479925 CEST	49737	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.612808943 CEST	49738	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.612831116 CEST	443	49738	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.612905025 CEST	49738	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.613185883 CEST	49737	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.613217115 CEST	443	49737	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.613389969 CEST	49738	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.613415956 CEST	443	49738	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.628027916 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.628074884 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.628165960 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.628391981 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.628412962 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.931607962 CEST	49741	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.931713104 CEST	443	49741	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.931958914 CEST	49741	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.932192087 CEST	49741	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:49.932214975 CEST	443	49741	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:49.996279955 CEST	443	49734	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:49.996421099 CEST	49734	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:50.000147104 CEST	49734	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:50.000154972 CEST	443	49734	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:50.000389099 CEST	443	49734	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:50.016757965 CEST	443	49735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.017076969 CEST	49735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.017086983 CEST	443	49735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.017616987 CEST	443	49735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.018230915 CEST	49735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.018347979 CEST	443	49735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.019743919 CEST	49735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.041570902 CEST	49734	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:50.047868013 CEST	49734	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:50.063427925 CEST	443	49735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.095406055 CEST	443	49734	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:50.119556904 CEST	443	49735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.119585037 CEST	443	49735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.119604111 CEST	443	49735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.119693995 CEST	49735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.119712114 CEST	443	49735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.119786978 CEST	49735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.120503902 CEST	49735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.120516062 CEST	443	49735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.201502085 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.201828957 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.201848030 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.202208042 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.202558994 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.202634096 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.202701092 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.247411013 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.261317015 CEST	443	49737	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.261651039 CEST	49737	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.261694908 CEST	443	49737	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.262196064 CEST	443	49737	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.262487888 CEST	49737	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.262573957 CEST	443	49737	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.262638092 CEST	49737	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.270067930 CEST	443	49734	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:50.270143032 CEST	443	49734	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:50.270207882 CEST	49734	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:50.270267010 CEST	49734	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:50.270281076 CEST	443	49734	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:50.270296097 CEST	49734	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:50.270303011 CEST	443	49734	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:50.287931919 CEST	443	49738	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.288264036 CEST	49738	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.288304090 CEST	443	49738	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.288805962 CEST	443	49738	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.289113998 CEST	49738	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.289207935 CEST	443	49738	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.289262056 CEST	49738	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.303404093 CEST	443	49737	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.306533098 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.306807041 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.306832075 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.307437897 CEST	49737	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.308279991 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.308365107 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.308806896 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.308888912 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.309135914 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.309145927 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.310157061 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.310178041 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.310193062 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.310262918 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.310272932 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.310322046 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.312540054 CEST	49742	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:50.312583923 CEST	443	49742	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:50.312691927 CEST	49742	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:50.312954903 CEST	49742	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:50.312964916 CEST	443	49742	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:50.331403017 CEST	443	49738	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.339452028 CEST	49738	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.355436087 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.366642952 CEST	443	49737	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.366729975 CEST	443	49737	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.366786957 CEST	49737	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.367582083 CEST	49737	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.367629051 CEST	443	49737	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.370388985 CEST	49743	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.370434999 CEST	443	49743	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.370666981 CEST	49743	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.370737076 CEST	49743	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.370745897 CEST	443	49743	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.399589062 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.399614096 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.399724960 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.399740934 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.399801016 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.402072906 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.402089119 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.402163982 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.402172089 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.402215004 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.404834032 CEST	443	49738	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.404861927 CEST	443	49738	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.404928923 CEST	49738	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.404939890 CEST	443	49738	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.405545950 CEST	49738	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.405570984 CEST	443	49738	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.405596972 CEST	49738	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.405626059 CEST	49738	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.408236980 CEST	49744	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.408276081 CEST	443	49744	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.408365965 CEST	49744	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.408631086 CEST	49744	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.408642054 CEST	443	49744	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.424663067 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.424691916 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.424701929 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.424732924 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.424761057 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.424762011 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.424776077 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.424791098 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.424809933 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.424837112 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.478158951 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.478183985 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.478240967 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.478271961 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.478291988 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.478348970 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.485696077 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.485726118 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.485775948 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.485785961 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.485833883 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.486648083 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.486676931 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.486731052 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.486737013 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.486772060 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.486793041 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.518992901 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.519026041 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.519068956 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.519072056 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.519085884 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.519134998 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.519150019 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.519186020 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.519424915 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.519578934 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.519598007 CEST	443	49739	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.519634008 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.519654036 CEST	49739	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.524621010 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.524651051 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.524732113 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.524971962 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.524983883 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.573170900 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.573198080 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.573259115 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.573275089 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.573299885 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.573324919 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.574425936 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.574482918 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.574489117 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.574502945 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.574544907 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.574672937 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.574692965 CEST	443	49736	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.574704885 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.574740887 CEST	49736	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.576446056 CEST	443	49741	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.576805115 CEST	49741	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.576865911 CEST	443	49741	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.577930927 CEST	443	49741	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.578006029 CEST	49741	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.578349113 CEST	49741	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.578427076 CEST	443	49741	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.578578949 CEST	49741	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.578596115 CEST	443	49741	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.626480103 CEST	49741	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.676538944 CEST	443	49741	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.676733971 CEST	443	49741	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.676886082 CEST	49741	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.696567059 CEST	49741	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.696599960 CEST	443	49741	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.699525118 CEST	49746	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.699546099 CEST	443	49746	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:50.699620008 CEST	49746	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.699887037 CEST	49746	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:50.699898958 CEST	443	49746	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.018851995 CEST	443	49742	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:51.018996954 CEST	49742	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:51.034471035 CEST	49742	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:51.034496069 CEST	443	49742	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:51.034693003 CEST	443	49742	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:51.037595034 CEST	49742	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:51.037731886 CEST	443	49743	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.038021088 CEST	49743	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.038029909 CEST	443	49743	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.038479090 CEST	443	49743	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.042671919 CEST	49743	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.042752981 CEST	443	49743	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.042813063 CEST	49743	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.079435110 CEST	443	49742	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:51.087430000 CEST	443	49743	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.088561058 CEST	49743	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.119889975 CEST	443	49744	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.120898962 CEST	49744	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.120927095 CEST	443	49744	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.121278048 CEST	443	49744	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.122494936 CEST	49744	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.122559071 CEST	443	49744	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.122668028 CEST	49744	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.155585051 CEST	443	49743	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.155668020 CEST	443	49743	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.157068968 CEST	49743	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.157334089 CEST	49743	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.157351971 CEST	443	49743	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.166460991 CEST	49744	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.166479111 CEST	443	49744	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.227864027 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.228148937 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.228164911 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.229605913 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.229681015 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.229959965 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.230038881 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.230094910 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.253551006 CEST	443	49744	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.253740072 CEST	443	49744	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.253787994 CEST	443	49744	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.253829956 CEST	49744	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.253866911 CEST	49744	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.254509926 CEST	49744	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.254530907 CEST	443	49744	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.263070107 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 27, 2024 23:53:51.275409937 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.278423071 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.278433084 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.306057930 CEST	443	49742	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:51.306124926 CEST	443	49742	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:51.306196928 CEST	49742	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:51.307054996 CEST	49742	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:51.307069063 CEST	443	49742	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:51.307089090 CEST	49742	443	192.168.2.16	184.28.90.27
Sep 27, 2024 23:53:51.307095051 CEST	443	49742	184.28.90.27	192.168.2.16
Sep 27, 2024 23:53:51.326400995 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.347678900 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.347707987 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.347717047 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.347747087 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.347764969 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.347765923 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.347784996 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.347801924 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.347819090 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.347856045 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.413398981 CEST	443	49746	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.414916039 CEST	49746	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.414937973 CEST	443	49746	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.416101933 CEST	443	49746	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.416162014 CEST	49746	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.416626930 CEST	49746	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.416690111 CEST	443	49746	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.416806936 CEST	49746	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.416816950 CEST	443	49746	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.433549881 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.433564901 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.433593035 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.433644056 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.433655977 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.433685064 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.433708906 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.434607983 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.434673071 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.434681892 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.434698105 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.434747934 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.434930086 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.434943914 CEST	443	49745	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.434954882 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.434988976 CEST	49745	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.470449924 CEST	49746	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.519793987 CEST	443	49746	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.519860983 CEST	443	49746	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.520117998 CEST	49746	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.520776033 CEST	49746	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:53:51.520782948 CEST	443	49746	13.107.246.60	192.168.2.16
Sep 27, 2024 23:53:51.564517021 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 27, 2024 23:53:52.169416904 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 27, 2024 23:53:52.229948044 CEST	49748	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:53:52.230038881 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:52.230137110 CEST	49748	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:53:52.231103897 CEST	49748	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:53:52.231142044 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:52.432410002 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 27, 2024 23:53:53.027226925 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:53.027314901 CEST	49748	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:53:53.030112028 CEST	49748	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:53:53.030127048 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:53.030395031 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:53.081444979 CEST	49748	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:53:53.087502003 CEST	49748	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:53:53.131401062 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:53.348943949 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:53.348963022 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:53.348969936 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:53.348978043 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:53.349011898 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:53.349065065 CEST	49748	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:53:53.349123001 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:53.349153042 CEST	49748	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:53:53.349179029 CEST	49748	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:53:53.350255013 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:53.350315094 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:53.350323915 CEST	49748	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:53:53.350364923 CEST	49748	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:53:53.367983103 CEST	49748	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:53:53.368036032 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:53.368063927 CEST	49748	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:53:53.368079901 CEST	443	49748	4.245.163.56	192.168.2.16
Sep 27, 2024 23:53:53.384778023 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 27, 2024 23:53:54.911993980 CEST	443	49710	142.250.184.196	192.168.2.16
Sep 27, 2024 23:53:54.912062883 CEST	443	49710	142.250.184.196	192.168.2.16
Sep 27, 2024 23:53:54.912203074 CEST	49710	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:53:55.736633062 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 27, 2024 23:53:55.784698963 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 27, 2024 23:53:55.834104061 CEST	49710	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:53:55.834150076 CEST	443	49710	142.250.184.196	192.168.2.16
Sep 27, 2024 23:53:56.039509058 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 27, 2024 23:53:56.646466970 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 27, 2024 23:53:57.860522985 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 27, 2024 23:54:00.267529011 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 27, 2024 23:54:00.586441040 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 27, 2024 23:54:02.039452076 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 27, 2024 23:54:05.068484068 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 27, 2024 23:54:10.193540096 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 27, 2024 23:54:14.681607008 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 27, 2024 23:54:29.755975008 CEST	49750	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:54:29.756007910 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:29.756108999 CEST	49750	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:54:29.756443977 CEST	49750	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:54:29.756460905 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:30.555147886 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:30.555224895 CEST	49750	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:54:30.556668043 CEST	49750	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:54:30.556678057 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:30.556912899 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:30.558439016 CEST	49750	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:54:30.603410006 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:30.893381119 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:30.893399954 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:30.893462896 CEST	49750	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:54:30.893469095 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:30.893506050 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:30.893538952 CEST	49750	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:54:30.893558025 CEST	49750	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:54:30.895317078 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:30.895370960 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:30.895386934 CEST	49750	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:54:30.895420074 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:30.895435095 CEST	49750	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:54:30.896039963 CEST	49750	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:54:30.896051884 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:30.896065950 CEST	49750	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:54:30.896183014 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:30.896214962 CEST	443	49750	4.245.163.56	192.168.2.16
Sep 27, 2024 23:54:30.896253109 CEST	49750	443	192.168.2.16	4.245.163.56
Sep 27, 2024 23:54:44.403583050 CEST	49752	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:54:44.403631926 CEST	443	49752	142.250.184.196	192.168.2.16
Sep 27, 2024 23:54:44.403732061 CEST	49752	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:54:44.403937101 CEST	49752	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:54:44.403948069 CEST	443	49752	142.250.184.196	192.168.2.16
Sep 27, 2024 23:54:45.062556982 CEST	443	49752	142.250.184.196	192.168.2.16
Sep 27, 2024 23:54:45.062871933 CEST	49752	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:54:45.062895060 CEST	443	49752	142.250.184.196	192.168.2.16
Sep 27, 2024 23:54:45.063359022 CEST	443	49752	142.250.184.196	192.168.2.16
Sep 27, 2024 23:54:45.063631058 CEST	49752	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:54:45.063716888 CEST	443	49752	142.250.184.196	192.168.2.16
Sep 27, 2024 23:54:45.106583118 CEST	49752	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:54:54.952280045 CEST	443	49752	142.250.184.196	192.168.2.16
Sep 27, 2024 23:54:54.952346087 CEST	443	49752	142.250.184.196	192.168.2.16
Sep 27, 2024 23:54:54.952405930 CEST	49752	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:54:55.825687885 CEST	49752	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:54:55.825721025 CEST	443	49752	142.250.184.196	192.168.2.16
Sep 27, 2024 23:54:56.624396086 CEST	49754	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:56.624433041 CEST	443	49754	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:56.624520063 CEST	49754	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:56.624599934 CEST	49755	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:56.624690056 CEST	443	49755	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:56.624779940 CEST	49755	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:56.624855042 CEST	49754	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:56.624866962 CEST	443	49754	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:56.625051022 CEST	49755	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:56.625088930 CEST	443	49755	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.275197029 CEST	443	49755	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.275620937 CEST	49755	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:57.275688887 CEST	443	49755	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.276042938 CEST	443	49755	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.276523113 CEST	49755	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:57.276595116 CEST	443	49755	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.276696920 CEST	49755	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:57.303241968 CEST	443	49754	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.304956913 CEST	49754	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:57.304980993 CEST	443	49754	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.306104898 CEST	443	49754	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.306951046 CEST	49754	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:57.307106972 CEST	49754	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:57.307111025 CEST	443	49754	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.307125092 CEST	443	49754	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.323420048 CEST	443	49755	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.355856895 CEST	49754	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:57.376368046 CEST	443	49755	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.376390934 CEST	443	49755	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.376460075 CEST	443	49755	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.376496077 CEST	49755	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:57.376558065 CEST	49755	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:57.383111000 CEST	49755	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:57.383155107 CEST	443	49755	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.409065008 CEST	443	49754	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.409120083 CEST	443	49754	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.409192085 CEST	49754	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:57.409202099 CEST	443	49754	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.409266949 CEST	443	49754	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.409285069 CEST	49754	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:57.409329891 CEST	49754	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:57.419605017 CEST	49754	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:54:57.419620037 CEST	443	49754	13.107.246.60	192.168.2.16
Sep 27, 2024 23:54:57.422585964 CEST	49756	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:57.422656059 CEST	443	49756	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:57.422760010 CEST	49756	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:57.428792000 CEST	49756	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:57.428819895 CEST	443	49756	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:57.431462049 CEST	49757	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:57.431488037 CEST	443	49757	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:57.431586981 CEST	49757	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:57.431771040 CEST	49757	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:57.431782007 CEST	443	49757	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.071566105 CEST	443	49757	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.071906090 CEST	49757	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:58.071916103 CEST	443	49757	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.072426081 CEST	443	49757	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.072839022 CEST	49757	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:58.072922945 CEST	443	49757	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.073050022 CEST	49757	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:58.075779915 CEST	443	49756	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.076019049 CEST	49756	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:58.076050997 CEST	443	49756	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.077169895 CEST	443	49756	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.077532053 CEST	49756	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:58.077670097 CEST	49756	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:58.077708006 CEST	443	49756	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.119441032 CEST	443	49757	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.129611969 CEST	49756	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:58.170532942 CEST	443	49757	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.170563936 CEST	443	49757	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.170646906 CEST	443	49757	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.170697927 CEST	49757	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:58.170747042 CEST	49757	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:58.171562910 CEST	49757	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:58.171575069 CEST	443	49757	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.178358078 CEST	443	49756	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.178411961 CEST	443	49756	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.178489923 CEST	49756	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:58.178514004 CEST	443	49756	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.178596020 CEST	443	49756	13.107.246.45	192.168.2.16
Sep 27, 2024 23:54:58.178596973 CEST	49756	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:58.178654909 CEST	49756	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:58.179189920 CEST	49756	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:54:58.179214001 CEST	443	49756	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:11.975992918 CEST	52689	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:11.980922937 CEST	53	52689	1.1.1.1	192.168.2.16
Sep 27, 2024 23:55:11.981116056 CEST	52689	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:11.981132030 CEST	52689	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:11.986155033 CEST	53	52689	1.1.1.1	192.168.2.16
Sep 27, 2024 23:55:12.485647917 CEST	53	52689	1.1.1.1	192.168.2.16
Sep 27, 2024 23:55:12.486337900 CEST	52689	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:12.497229099 CEST	53	52689	1.1.1.1	192.168.2.16
Sep 27, 2024 23:55:12.497349024 CEST	52689	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:17.699441910 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:17.699558973 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:17.699661970 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:17.700284004 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:17.700320005 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:17.714449883 CEST	52696	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:17.714477062 CEST	443	52696	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:17.714534044 CEST	52696	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:17.715118885 CEST	52696	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:17.715131044 CEST	443	52696	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:17.722403049 CEST	52697	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:17.722428083 CEST	443	52697	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:17.722487926 CEST	52697	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:17.725135088 CEST	52697	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:17.725150108 CEST	443	52697	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:18.388503075 CEST	443	52697	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:18.388834000 CEST	52697	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:18.388849974 CEST	443	52697	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:18.390599012 CEST	443	52697	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:18.390697956 CEST	52697	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:18.402492046 CEST	52697	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:18.402697086 CEST	443	52697	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:18.448668003 CEST	52697	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:18.448679924 CEST	443	52697	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:18.496655941 CEST	52697	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:18.527100086 CEST	443	52696	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.527350903 CEST	52696	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.527364016 CEST	443	52696	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.528943062 CEST	443	52696	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.529031038 CEST	52696	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.530225992 CEST	52696	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.530312061 CEST	443	52696	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.554445982 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.554692984 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.554764986 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.555831909 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.555912971 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.556916952 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.557009935 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.557084084 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.557101965 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.576684952 CEST	52696	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.576693058 CEST	443	52696	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.607705116 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.623670101 CEST	52696	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.851924896 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.853317022 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.853323936 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.853338003 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.853400946 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.853420973 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.853461027 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.853524923 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.853526115 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.941628933 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.941649914 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.941749096 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.941797972 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.941903114 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.944183111 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.944200993 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.944286108 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:18.944303036 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:18.944367886 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.034900904 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.034917116 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.035013914 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.035031080 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.035089970 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.037189960 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.037204981 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.037312984 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.037328959 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.037389040 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.038631916 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.038649082 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.038716078 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.038732052 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.038789988 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.041177034 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.041192055 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.041277885 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.041294098 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.041348934 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.122797966 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.122813940 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.122899055 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.122915983 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.122984886 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.124135971 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.124150038 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.124255896 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.124269962 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.124330997 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.125236034 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.125252962 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.125328064 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.125341892 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.125405073 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.126506090 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.126518965 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.126590967 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.126605034 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.126674891 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.127845049 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.127860069 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.127933025 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.127945900 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.128005981 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.130405903 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.130419970 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.130496979 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.130511045 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.130568027 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.131515026 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.131531954 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.131603956 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.131624937 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.131695986 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.212377071 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.212392092 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.212508917 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.212529898 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.212599993 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.213330030 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.213345051 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.213449955 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.213479042 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.213557959 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.214160919 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.214175940 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.214248896 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.214277983 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.214342117 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.215027094 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.215040922 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.215122938 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.215136051 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.215192080 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.215723038 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.215738058 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.215801001 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.215816021 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.215850115 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.215871096 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.216326952 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.216340065 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.216403961 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.216418982 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.216464996 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.216464996 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.218396902 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.218413115 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.218488932 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.218502045 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.218561888 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.218847990 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.218867064 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.218934059 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.218950987 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.219007969 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.304141998 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.304157972 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.304241896 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.304258108 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.304337025 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.305099964 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.305114985 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.305192947 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.305207014 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.305294037 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.305938005 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.305952072 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.306025982 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.306037903 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.306101084 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.307027102 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.307041883 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.307115078 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.307127953 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.307190895 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.307337999 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.307352066 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.307470083 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.307482004 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.307535887 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.308257103 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.308271885 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.308340073 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.308352947 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.308412075 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.309298038 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.309314966 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.309379101 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.309391975 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.309452057 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.310030937 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.310045958 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.310126066 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.310139894 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.310193062 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.393050909 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.393073082 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.394175053 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.395241022 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.396085024 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.396085978 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.396085978 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.396152020 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.396198034 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.396377087 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.396377087 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.396754026 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.396769047 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.396837950 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.396856070 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.396908998 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.397536993 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.397551060 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.397655010 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.397672892 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.397732019 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.398149967 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.398171902 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.398236036 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.398250103 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.398296118 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.399260998 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.399276972 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.399362087 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.399378061 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.399440050 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.482218981 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.482238054 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.482338905 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.482403040 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.482502937 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.483155012 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.483170033 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.483249903 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.483263969 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.483319044 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.483925104 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.483939886 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.484011889 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.484025955 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.484078884 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.484458923 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.484473944 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.484541893 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.484555006 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.484616041 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.485295057 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.485311031 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.485379934 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.485393047 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.485449076 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.486361027 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.486373901 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.486454010 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.486468077 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.486522913 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.487166882 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.487180948 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.487257957 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.487271070 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.487327099 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.487763882 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.487778902 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.487854004 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.487865925 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.487924099 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.570658922 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.570679903 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.570811033 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.570835114 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.570890903 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.571520090 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.571533918 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.571605921 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.571620941 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.571674109 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.572242975 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.572257042 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.572321892 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.572335958 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.572391033 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.573051929 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.573065996 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.573133945 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.573147058 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.573203087 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.573671103 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.573693037 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.573762894 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.573776007 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.573851109 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.574584961 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.574604988 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.574680090 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.574693918 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.574754000 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.575257063 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.575270891 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.575347900 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.575361013 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.575412035 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.575942039 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.575957060 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.576023102 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.576050997 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.576111078 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.661077023 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.661098003 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.661206007 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.661238909 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.661295891 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.661859989 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.661875963 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.661959887 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.661974907 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.662039042 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.663233042 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.663249016 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.663316965 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.663345098 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.663409948 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.663558960 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.663626909 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.663630009 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.663690090 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.663702011 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.663707018 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.663754940 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.663877010 CEST	52695	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.663909912 CEST	443	52695	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.677118063 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.677165985 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.677236080 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.677422047 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.677432060 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.711055040 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.711128950 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.711344957 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.711563110 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.711596012 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.743225098 CEST	52702	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.743249893 CEST	443	52702	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.743325949 CEST	52702	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.743593931 CEST	52703	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.743617058 CEST	443	52703	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.743671894 CEST	52703	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.743927002 CEST	52702	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.743952990 CEST	443	52702	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:19.744123936 CEST	52703	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:19.744131088 CEST	443	52703	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.524338961 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.524642944 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.524662018 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.525640965 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.525713921 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.525995970 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.526050091 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.526137114 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.526144028 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.540766954 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.540992975 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.541022062 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.541507006 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.541791916 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.541873932 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.541894913 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.571852922 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.583436012 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.586781979 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.606571913 CEST	443	52702	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.606921911 CEST	52702	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.606945992 CEST	443	52702	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.607930899 CEST	443	52702	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.608014107 CEST	52702	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.608279943 CEST	52702	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.608359098 CEST	443	52702	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.608392954 CEST	52702	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.609416962 CEST	443	52703	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.609596014 CEST	52703	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.609607935 CEST	443	52703	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.610563040 CEST	443	52703	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.610629082 CEST	52703	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.610852957 CEST	52703	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.610897064 CEST	443	52703	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.610924006 CEST	52703	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.650772095 CEST	52702	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.650791883 CEST	443	52702	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.655448914 CEST	443	52703	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.665745974 CEST	52703	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.665757895 CEST	443	52703	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.697776079 CEST	52702	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.713773966 CEST	52703	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.793088913 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.795557976 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.795566082 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.795576096 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.795623064 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.795650959 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.795669079 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.795702934 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.795725107 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.813004971 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.814856052 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.814877033 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.814918041 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.814940929 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.814986944 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.815011978 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.815043926 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.815043926 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.815071106 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.872598886 CEST	443	52702	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.873161077 CEST	443	52702	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.873219967 CEST	443	52702	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.873222113 CEST	52702	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.873277903 CEST	52702	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.873436928 CEST	52702	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.873466969 CEST	443	52702	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.875463009 CEST	52707	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.875499010 CEST	443	52707	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.875569105 CEST	52707	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.875798941 CEST	52707	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.875812054 CEST	443	52707	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.888045073 CEST	443	52703	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.888308048 CEST	443	52703	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.888353109 CEST	52703	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.888360023 CEST	443	52703	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.888381958 CEST	443	52703	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.888526917 CEST	52703	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.888681889 CEST	52703	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.888694048 CEST	443	52703	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.889478922 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.889496088 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.889558077 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.889565945 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.889597893 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.889610052 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.891278028 CEST	52708	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.891304970 CEST	443	52708	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.891387939 CEST	52708	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.891571045 CEST	52708	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.891582966 CEST	443	52708	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.892288923 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.892302990 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.892374039 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.892385006 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.892436981 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.911375046 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.911490917 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.911581039 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.911581039 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.911606073 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.911659956 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.913475990 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.913523912 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.913563013 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.913583040 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.913605928 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.913655043 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.978933096 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.978954077 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.979051113 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.979068041 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.979120016 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.980516911 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.980532885 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.980597973 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.980606079 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.980650902 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.982276917 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.982291937 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.982389927 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.982397079 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.982439995 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.997348070 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.997394085 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.997450113 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.997474909 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.997505903 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.997531891 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.998183012 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.998222113 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.998269081 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.998284101 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.998332024 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.998332024 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.998348951 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.998380899 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.998419046 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.998442888 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.998454094 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.998558998 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:20.998610973 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.998843908 CEST	52701	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:20.998866081 CEST	443	52701	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.002417088 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.002480984 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.002568007 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.002862930 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.002895117 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.069433928 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.069453001 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.069565058 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.069578886 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.069644928 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.070568085 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.070585012 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.070657969 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.070663929 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.070705891 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.071666002 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.071682930 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.071753979 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.071764946 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.071811914 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.072722912 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.072741032 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.072804928 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.072809935 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.072854042 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.073724985 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.073740959 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.073818922 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.073826075 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.073865891 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.074223042 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.074742079 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.074757099 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.074822903 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.074830055 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.074871063 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.117508888 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.117531061 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.117613077 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.117621899 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.117664099 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.160545111 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.160561085 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.160656929 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.160665989 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.160722017 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.161179066 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.161195040 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.161259890 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.161266088 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.161309958 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.161856890 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.161874056 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.161931992 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.161938906 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.161982059 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.162659883 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.162677050 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.162746906 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.162751913 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.162796974 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.163482904 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.163500071 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.163564920 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.163575888 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.163614035 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.164129972 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.164145947 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.164196968 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.164207935 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.164243937 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.164855957 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.164872885 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.164932966 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.164940119 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.164978981 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.250876904 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.250895023 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.250988960 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.251003027 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.251051903 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.251338959 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.251354933 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.251410007 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.251415014 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.251461029 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.251811028 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.251826048 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.251892090 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.251899004 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.251945019 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.252424002 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.252439976 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.252509117 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.252513885 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.252557039 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.253252983 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.253278017 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.253336906 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.253343105 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.253366947 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.253391027 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.256210089 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.256225109 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.256283045 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.256289959 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.256320000 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.256340027 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.256803989 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.256819010 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.256877899 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.256882906 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.256925106 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.257191896 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.257214069 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.257266045 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.257276058 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.257312059 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.257328987 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.341492891 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.341510057 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.341599941 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.341609001 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.341661930 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.342012882 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.342029095 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.342096090 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.342102051 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.342149019 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.342806101 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.342820883 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.342873096 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.342884064 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.342895031 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.342925072 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.343561888 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.343579054 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.343653917 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.343660116 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.343714952 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.344342947 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.344357967 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.344424963 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.344430923 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.344477892 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.345062017 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.345077991 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.345155001 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.345160007 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.345208883 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.345864058 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.345880985 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.345946074 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.345952034 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.345993042 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.346170902 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.346198082 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.346237898 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.346242905 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.346265078 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.346287012 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.432221889 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.432240963 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.432324886 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.432337999 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.432383060 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.432666063 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.432682037 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.432723999 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.432729959 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.432786942 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.433686972 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.433703899 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.433773994 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.433779955 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.433821917 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.434530020 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.434547901 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.434617043 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.434622049 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.434674025 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.434824944 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.434848070 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.434884071 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.434887886 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.434917927 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.434933901 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.435534000 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.435579062 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.435601950 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.435607910 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.435666084 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.436431885 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.436453104 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.436518908 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.436525106 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.436575890 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.437182903 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.437210083 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.437249899 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.437253952 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.437267065 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.437290907 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.523056984 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.523075104 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.523173094 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.523185015 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.523230076 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.523741007 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.523756981 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.523821115 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.523827076 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.523880005 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.524178982 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.524204016 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.524265051 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.524271011 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.524322033 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.524955034 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.524971008 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.525012970 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.525017977 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.525046110 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.525060892 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.525542021 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.525561094 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.525621891 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.525626898 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.525665998 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.525675058 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.526082039 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.526112080 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.526149988 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.526154995 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.526182890 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.526453018 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.526465893 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.526529074 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.526537895 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.527184010 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.527200937 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.527252913 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.527259111 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.527282000 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.573698044 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.613953114 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.613974094 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.614085913 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.614106894 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.614171028 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.614789963 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.614805937 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.614875078 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.614881039 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.614923000 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.615504980 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.615520954 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.615591049 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.615597010 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.615659952 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.616261005 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.616278887 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.616347075 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.616352081 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.616405010 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.617036104 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.617050886 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.617117882 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.617122889 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.617163897 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.617369890 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.617438078 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.617438078 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.617465019 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.617479086 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.617492914 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.617518902 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.617703915 CEST	52700	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.617719889 CEST	443	52700	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.700839996 CEST	443	52707	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.701143980 CEST	52707	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.701158047 CEST	443	52707	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.701523066 CEST	443	52707	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.702100992 CEST	52707	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.702172041 CEST	443	52707	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.702789068 CEST	443	52708	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.704041004 CEST	52708	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.704056978 CEST	443	52708	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.704574108 CEST	443	52708	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.705615044 CEST	52707	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.706063986 CEST	52708	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.706147909 CEST	443	52708	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.706177950 CEST	52708	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.749677896 CEST	52708	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.749691963 CEST	443	52708	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.751403093 CEST	443	52707	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.812172890 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.812443972 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.812475920 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.813971996 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.814057112 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.814529896 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.814615011 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.814899921 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:21.814915895 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:21.860688925 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.108422995 CEST	443	52707	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.108464956 CEST	443	52707	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.108531952 CEST	52707	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.108545065 CEST	443	52707	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.108555079 CEST	443	52707	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.108597994 CEST	52707	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.108597994 CEST	443	52708	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.108664989 CEST	443	52708	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.108716965 CEST	52708	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.108731031 CEST	443	52708	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.108750105 CEST	443	52708	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.108787060 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.108795881 CEST	52708	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.109518051 CEST	52707	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.109529972 CEST	443	52707	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.109769106 CEST	52708	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.109782934 CEST	443	52708	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.114229918 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.114243984 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.114265919 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.114320993 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.114391088 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.114429951 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.114460945 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.171919107 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.172008038 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.172065973 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.172130108 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.172169924 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.172190905 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.174165010 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.174209118 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.174257040 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.174273014 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.174304962 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.174330950 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.259711981 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.259793043 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.259835958 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.259856939 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.259886980 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.259912968 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.260445118 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.260482073 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.260524035 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.260556936 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.260577917 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.260611057 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.261341095 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.261423111 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.261435986 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.261543036 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.261598110 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.261847019 CEST	52709	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.261876106 CEST	443	52709	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.939548969 CEST	52713	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.939589024 CEST	443	52713	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:22.939661980 CEST	52713	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.939997911 CEST	52713	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:22.940011024 CEST	443	52713	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:23.122977972 CEST	443	52697	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:23.123130083 CEST	443	52697	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:23.123200893 CEST	52697	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:23.723975897 CEST	52697	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:23.724008083 CEST	443	52697	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:24.860996962 CEST	443	52713	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:24.861367941 CEST	52713	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:24.861391068 CEST	443	52713	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:24.861862898 CEST	443	52713	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:24.862287045 CEST	52713	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:24.862369061 CEST	443	52713	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:24.862469912 CEST	52713	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:24.907402039 CEST	443	52713	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:25.130626917 CEST	443	52713	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:25.131934881 CEST	443	52713	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:25.131980896 CEST	443	52713	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:25.132030010 CEST	52713	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:25.132047892 CEST	443	52713	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:25.132081032 CEST	52713	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:25.132103920 CEST	52713	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:25.132110119 CEST	443	52713	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:25.132148981 CEST	52713	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:25.132225037 CEST	443	52713	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:25.132270098 CEST	52713	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:25.132719040 CEST	52713	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:25.132731915 CEST	443	52713	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:25.137115002 CEST	52715	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:25.137187958 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:25.137278080 CEST	52715	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:25.137578011 CEST	52715	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:25.137612104 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:25.942337036 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:25.942605972 CEST	52715	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:25.942656994 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:25.942969084 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:25.943280935 CEST	52715	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:25.943348885 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:25.943424940 CEST	52715	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:25.987723112 CEST	52715	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:25.987765074 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:26.207617998 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:26.209264040 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:26.209271908 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:26.209321976 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:26.209382057 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:26.209489107 CEST	52715	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:26.209489107 CEST	52715	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:26.209517956 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:26.209578037 CEST	52715	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:26.209914923 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:26.209969997 CEST	52715	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:26.209978104 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:26.210031033 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:26.210088968 CEST	52715	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:26.210189104 CEST	52715	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:26.210202932 CEST	443	52715	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:26.210216045 CEST	52715	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:26.210264921 CEST	52715	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:29.030078888 CEST	52720	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:29.030170918 CEST	443	52720	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:29.030241966 CEST	52720	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:29.032821894 CEST	52720	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:29.032865047 CEST	443	52720	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:29.944010973 CEST	443	52720	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:29.944308996 CEST	52720	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:29.944333076 CEST	443	52720	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:29.945507050 CEST	443	52720	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:29.945817947 CEST	52720	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:29.945991039 CEST	443	52720	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:29.988703012 CEST	52720	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:30.344445944 CEST	52722	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:30.344485044 CEST	443	52722	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:30.344559908 CEST	52722	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:30.344826937 CEST	52723	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:30.344834089 CEST	443	52723	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:30.344894886 CEST	52723	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:30.345103025 CEST	52722	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:30.345115900 CEST	443	52722	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:30.345276117 CEST	52723	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:30.345282078 CEST	443	52723	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:31.101507902 CEST	443	52723	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:31.101855993 CEST	52723	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:31.101881027 CEST	443	52723	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:31.102363110 CEST	443	52723	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:31.102648973 CEST	52723	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:31.102720976 CEST	443	52723	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:31.144473076 CEST	443	52722	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:31.144779921 CEST	52722	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:31.144808054 CEST	443	52722	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:31.145966053 CEST	443	52722	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:31.146333933 CEST	52722	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:31.146506071 CEST	443	52722	152.199.21.175	192.168.2.16
Sep 27, 2024 23:55:31.148740053 CEST	52723	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:31.196706057 CEST	52722	443	192.168.2.16	152.199.21.175
Sep 27, 2024 23:55:35.716254950 CEST	443	52723	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:35.716346025 CEST	443	52723	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:35.716407061 CEST	52723	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:35.838846922 CEST	52723	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:35.838877916 CEST	443	52723	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:38.504610062 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:38.504684925 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:38.504762888 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:38.507436991 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:38.507468939 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.172993898 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.173338890 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:39.173369884 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.174357891 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.174443960 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:39.177520990 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:39.177594900 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.177923918 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:39.177942038 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.220755100 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:39.831933975 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.831957102 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.831964970 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.832005978 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.832041979 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:39.832048893 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.832092047 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.832124949 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:39.832125902 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:39.832154989 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:39.917342901 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.917362928 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.917445898 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:39.917484999 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.917521954 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:39.917613983 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:39.918798923 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.918817043 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.918912888 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:39.918927908 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:39.919289112 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.004616976 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.004635096 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.004795074 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.004812002 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.004848957 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.005436897 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.005456924 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.005585909 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.005585909 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.005604982 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.005784988 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.006308079 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.006324053 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.006640911 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.006654024 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.007493973 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.007512093 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.007626057 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.007626057 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.007642031 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.008826017 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.090595007 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.090610027 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.090791941 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.090791941 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.090821028 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.091037035 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.091403961 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.091418028 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.091521978 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.091535091 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.092025042 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.092046022 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.092144966 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.092159986 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.092245102 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.092327118 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.092391968 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.092428923 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.092802048 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.093085051 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.093130112 CEST	443	52731	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.093167067 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.093378067 CEST	52731	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.126720905 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:40.126761913 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:40.126912117 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:40.128668070 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:40.128696918 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:40.184670925 CEST	52733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.184706926 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.188772917 CEST	52733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.192687035 CEST	52733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.192694902 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.261948109 CEST	52734	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.261960030 CEST	52735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.261977911 CEST	443	52734	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.262027025 CEST	443	52735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.264759064 CEST	52734	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.264775991 CEST	52735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.264969110 CEST	52734	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.264981985 CEST	443	52734	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.268676996 CEST	52735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.268712044 CEST	443	52735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.790726900 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:40.791029930 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:40.791059971 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:40.791956902 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:40.792109013 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:40.792531967 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:40.792594910 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:40.792736053 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:40.792752028 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:40.836419106 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.836919069 CEST	52733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.836930037 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.837202072 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.841032028 CEST	52733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.841074944 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:40.841202974 CEST	52733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:40.848676920 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:40.887403965 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.073730946 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.073750019 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.073756933 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.073807955 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.073820114 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.073831081 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.073856115 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.073896885 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.073926926 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.073928118 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.073956013 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.076451063 CEST	443	52735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.076747894 CEST	52735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.076767921 CEST	443	52735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.077294111 CEST	443	52734	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.077502012 CEST	52734	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.077513933 CEST	443	52734	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.077960968 CEST	443	52735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.078037024 CEST	52735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.078418970 CEST	52735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.078483105 CEST	443	52735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.078576088 CEST	52735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.078589916 CEST	443	52735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.079001904 CEST	443	52734	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.079077959 CEST	52734	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.079458952 CEST	52734	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.079567909 CEST	443	52734	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.079602957 CEST	52734	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.079953909 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.079988003 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.080051899 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.080066919 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.080132961 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.081063986 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.081080914 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.081094980 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.081145048 CEST	52733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.081151009 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.081227064 CEST	52733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.083031893 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.083045959 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.083076954 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.083117008 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.083127975 CEST	52733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.083185911 CEST	52733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.083971024 CEST	52733	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.083980083 CEST	443	52733	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.084043980 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.084057093 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.084122896 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.084137917 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.084192991 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.085974932 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.085992098 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.086113930 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.086127996 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.086188078 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.087867022 CEST	52738	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.087883949 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.087950945 CEST	52738	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.088253975 CEST	52738	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.088263035 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.089011908 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.089025974 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.089102983 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.089118004 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.089219093 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.090889931 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.090903997 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.090980053 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.090993881 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.091063023 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.092246056 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.092259884 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.092322111 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.092330933 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.092375994 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.127404928 CEST	443	52734	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.132731915 CEST	52735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.132741928 CEST	52734	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.132750988 CEST	443	52734	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.168329000 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.168344975 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.168437004 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.168456078 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.168530941 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.168926954 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.168942928 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.169143915 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.169152975 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.169210911 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.169763088 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.169776917 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.169837952 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.169847012 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.169919014 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.170120001 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.170169115 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.170185089 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.170223951 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.171154976 CEST	52732	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.171168089 CEST	443	52732	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.179716110 CEST	52734	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.186881065 CEST	443	52734	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.187267065 CEST	443	52734	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.187318087 CEST	52734	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.187758923 CEST	52734	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.187767982 CEST	443	52734	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.187856913 CEST	443	52735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.188076019 CEST	443	52735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.188113928 CEST	443	52735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.188127041 CEST	52735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.188179970 CEST	52735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.190864086 CEST	52735	443	192.168.2.16	13.107.246.60
Sep 27, 2024 23:55:41.190874100 CEST	443	52735	13.107.246.60	192.168.2.16
Sep 27, 2024 23:55:41.206051111 CEST	52739	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.206125021 CEST	443	52739	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.206216097 CEST	52739	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.206507921 CEST	52739	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.206530094 CEST	443	52739	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.254863977 CEST	52740	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.254966974 CEST	443	52740	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.255085945 CEST	52740	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.255552053 CEST	52741	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.255573034 CEST	443	52741	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.255634069 CEST	52741	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.256047964 CEST	52740	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.256088972 CEST	443	52740	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.256259918 CEST	52741	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.256272078 CEST	443	52741	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.720935106 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.721260071 CEST	52738	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.721282005 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.721565008 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.722151995 CEST	52738	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.722203970 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.722333908 CEST	52738	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.767402887 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.829596043 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.829617023 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.829632044 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.829713106 CEST	52738	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.829722881 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.829802990 CEST	52738	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.870287895 CEST	443	52739	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.870578051 CEST	52739	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.870644093 CEST	443	52739	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.871644974 CEST	443	52739	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.871756077 CEST	52739	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.872327089 CEST	52739	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.872395039 CEST	443	52739	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.872631073 CEST	52739	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.872648954 CEST	443	52739	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.902215004 CEST	443	52741	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.902550936 CEST	52741	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.902564049 CEST	443	52741	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.903534889 CEST	443	52741	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.903637886 CEST	52741	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.904036999 CEST	52741	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.904092073 CEST	443	52741	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.904257059 CEST	52741	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.904263020 CEST	443	52741	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.905642986 CEST	443	52740	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.905980110 CEST	52740	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.906016111 CEST	443	52740	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.906528950 CEST	443	52740	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.906985998 CEST	52740	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.907077074 CEST	443	52740	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.907128096 CEST	52740	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.909629107 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.909656048 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.909691095 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.909729958 CEST	52738	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.909744978 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.909754038 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.909791946 CEST	52738	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.909820080 CEST	52738	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.910931110 CEST	52738	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.910940886 CEST	443	52738	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.918091059 CEST	52739	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.947438002 CEST	443	52740	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.956760883 CEST	52741	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.956765890 CEST	52740	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.992238998 CEST	443	52739	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.992255926 CEST	443	52739	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.992261887 CEST	443	52739	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.992285967 CEST	443	52739	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.992311001 CEST	443	52739	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.992347956 CEST	52739	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.992398024 CEST	443	52739	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:41.992432117 CEST	52739	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.992548943 CEST	52739	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.993479013 CEST	52739	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:41.993509054 CEST	443	52739	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.003776073 CEST	443	52741	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.004012108 CEST	443	52741	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.004198074 CEST	52741	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.004654884 CEST	52741	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.004661083 CEST	443	52741	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.006582022 CEST	443	52740	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.007050991 CEST	443	52740	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.007107973 CEST	443	52740	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.007308960 CEST	52740	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.007308960 CEST	52740	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.007812023 CEST	52740	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.007844925 CEST	443	52740	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.040122986 CEST	52743	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.040177107 CEST	443	52743	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.040462017 CEST	52743	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.040462017 CEST	52743	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.040541887 CEST	443	52743	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.676213980 CEST	443	52743	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.676554918 CEST	52743	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.676577091 CEST	443	52743	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.677460909 CEST	443	52743	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.677562952 CEST	52743	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.678189993 CEST	52743	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.678189993 CEST	52743	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.678255081 CEST	443	52743	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.721748114 CEST	52743	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.721760988 CEST	443	52743	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.769751072 CEST	52743	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.781306028 CEST	443	52743	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.781323910 CEST	443	52743	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.781330109 CEST	443	52743	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.781342983 CEST	443	52743	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.781347990 CEST	443	52743	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.781356096 CEST	443	52743	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.781403065 CEST	52743	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.781443119 CEST	443	52743	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:42.781496048 CEST	52743	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.781615973 CEST	52743	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.782773972 CEST	52743	443	192.168.2.16	13.107.246.45
Sep 27, 2024 23:55:42.782804012 CEST	443	52743	13.107.246.45	192.168.2.16
Sep 27, 2024 23:55:44.465913057 CEST	52745	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:55:44.465934992 CEST	443	52745	142.250.184.196	192.168.2.16
Sep 27, 2024 23:55:44.466039896 CEST	52745	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:55:44.466217041 CEST	52745	443	192.168.2.16	142.250.184.196
Sep 27, 2024 23:55:44.466228008 CEST	443	52745	142.250.184.196	192.168.2.16
Sep 27, 2024 23:55:45.101488113 CEST	443	52745	142.250.184.196	192.168.2.16
Sep 27, 2024 23:55:45.148762941 CEST	52745	443	192.168.2.16	142.250.184.196

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 27, 2024 23:53:39.555182934 CEST	53	53469	1.1.1.1	192.168.2.16
Sep 27, 2024 23:53:39.628432989 CEST	53	61926	1.1.1.1	192.168.2.16
Sep 27, 2024 23:53:40.416883945 CEST	57450	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:53:40.417094946 CEST	54301	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:53:40.614638090 CEST	53	57279	1.1.1.1	192.168.2.16
Sep 27, 2024 23:53:43.042399883 CEST	63828	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:53:43.042570114 CEST	50011	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:53:44.353369951 CEST	55644	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:53:44.353641987 CEST	55494	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:53:44.360152006 CEST	53	55644	1.1.1.1	192.168.2.16
Sep 27, 2024 23:53:44.360388994 CEST	53	55494	1.1.1.1	192.168.2.16
Sep 27, 2024 23:53:46.326045036 CEST	52618	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:53:46.326195002 CEST	61430	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:53:46.430073977 CEST	57423	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:53:46.430439949 CEST	58150	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:53:46.436609030 CEST	53	57423	1.1.1.1	192.168.2.16
Sep 27, 2024 23:53:46.451545000 CEST	53	58150	1.1.1.1	192.168.2.16
Sep 27, 2024 23:53:49.723170996 CEST	53	49210	1.1.1.1	192.168.2.16
Sep 27, 2024 23:53:57.708631039 CEST	53	55280	1.1.1.1	192.168.2.16
Sep 27, 2024 23:54:16.723278046 CEST	53	60363	1.1.1.1	192.168.2.16
Sep 27, 2024 23:54:39.279830933 CEST	53	53845	1.1.1.1	192.168.2.16
Sep 27, 2024 23:54:39.523061037 CEST	53	50565	1.1.1.1	192.168.2.16
Sep 27, 2024 23:54:47.433048964 CEST	138	138	192.168.2.16	192.168.2.255
Sep 27, 2024 23:54:57.891689062 CEST	49168	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:54:57.891932964 CEST	49211	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:07.843760967 CEST	53	56266	1.1.1.1	192.168.2.16
Sep 27, 2024 23:55:11.975434065 CEST	53	55188	1.1.1.1	192.168.2.16
Sep 27, 2024 23:55:17.624046087 CEST	49469	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:17.624409914 CEST	60324	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:17.631460905 CEST	53	49469	1.1.1.1	192.168.2.16
Sep 27, 2024 23:55:17.648895025 CEST	53	60324	1.1.1.1	192.168.2.16
Sep 27, 2024 23:55:17.697833061 CEST	56448	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:17.698013067 CEST	52560	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:19.666564941 CEST	58422	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:19.666716099 CEST	50548	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:19.675841093 CEST	53	58422	1.1.1.1	192.168.2.16
Sep 27, 2024 23:55:19.676723003 CEST	53	50548	1.1.1.1	192.168.2.16
Sep 27, 2024 23:55:20.083796978 CEST	57446	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:20.083988905 CEST	62028	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:20.238226891 CEST	53	50253	1.1.1.1	192.168.2.16
Sep 27, 2024 23:55:22.924752951 CEST	52329	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:22.924945116 CEST	56183	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:36.117523909 CEST	50216	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:36.117870092 CEST	53089	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:40.391406059 CEST	57217	53	192.168.2.16	1.1.1.1
Sep 27, 2024 23:55:40.391587973 CEST	62099	53	192.168.2.16	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 27, 2024 23:53:46.451711893 CEST	192.168.2.16	1.1.1.1	c271	(Port unreachable)	Destination Unreachable
Sep 27, 2024 23:55:17.729878902 CEST	192.168.2.16	1.1.1.1	c2e9	(Port unreachable)	Destination Unreachable
Sep 27, 2024 23:55:22.952080965 CEST	192.168.2.16	1.1.1.1	c2ad	(Port unreachable)	Destination Unreachable
Sep 27, 2024 23:55:36.158091068 CEST	192.168.2.16	1.1.1.1	c29a	(Port unreachable)	Destination Unreachable
Sep 27, 2024 23:55:40.437237978 CEST	192.168.2.16	1.1.1.1	c29a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 27, 2024 23:53:40.416883945 CEST	192.168.2.16	1.1.1.1	0xc5da	Standard query (0)	nam.safelink.emails.azure.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:53:40.417094946 CEST	192.168.2.16	1.1.1.1	0xaa91	Standard query (0)	nam.safelink.emails.azure.net	65	IN (0x0001)	false
Sep 27, 2024 23:53:43.042399883 CEST	192.168.2.16	1.1.1.1	0x340d	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:53:43.042570114 CEST	192.168.2.16	1.1.1.1	0x3e80	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Sep 27, 2024 23:53:44.353369951 CEST	192.168.2.16	1.1.1.1	0x4017	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:53:44.353641987 CEST	192.168.2.16	1.1.1.1	0xa32b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 23:53:46.326045036 CEST	192.168.2.16	1.1.1.1	0xb590	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:53:46.326195002 CEST	192.168.2.16	1.1.1.1	0xf4c5	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Sep 27, 2024 23:53:46.430073977 CEST	192.168.2.16	1.1.1.1	0x9a36	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:53:46.430439949 CEST	192.168.2.16	1.1.1.1	0x7cb8	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Sep 27, 2024 23:54:57.891689062 CEST	192.168.2.16	1.1.1.1	0x5f97	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:54:57.891932964 CEST	192.168.2.16	1.1.1.1	0xffbb	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Sep 27, 2024 23:55:17.624046087 CEST	192.168.2.16	1.1.1.1	0xc034	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:17.624409914 CEST	192.168.2.16	1.1.1.1	0xa089	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Sep 27, 2024 23:55:17.697833061 CEST	192.168.2.16	1.1.1.1	0xb4d2	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:17.698013067 CEST	192.168.2.16	1.1.1.1	0xc7ea	Standard query (0)	acctcdn.msftauth.net	65	IN (0x0001)	false
Sep 27, 2024 23:55:19.666564941 CEST	192.168.2.16	1.1.1.1	0x1de4	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:19.666716099 CEST	192.168.2.16	1.1.1.1	0x55b1	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Sep 27, 2024 23:55:20.083796978 CEST	192.168.2.16	1.1.1.1	0x143c	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:20.083988905 CEST	192.168.2.16	1.1.1.1	0xfe4e	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Sep 27, 2024 23:55:22.924752951 CEST	192.168.2.16	1.1.1.1	0xbc73	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:22.924945116 CEST	192.168.2.16	1.1.1.1	0xdf67	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Sep 27, 2024 23:55:36.117523909 CEST	192.168.2.16	1.1.1.1	0x6122	Standard query (0)	account.live.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:36.117870092 CEST	192.168.2.16	1.1.1.1	0x8739	Standard query (0)	account.live.com	65	IN (0x0001)	false
Sep 27, 2024 23:55:40.391406059 CEST	192.168.2.16	1.1.1.1	0x8fdf	Standard query (0)	account.live.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:40.391587973 CEST	192.168.2.16	1.1.1.1	0xf916	Standard query (0)	account.live.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 27, 2024 23:53:40.451723099 CEST	1.1.1.1	192.168.2.16	0xc5da	No error (0)	nam.safelink.emails.azure.net	meo-traf-nam.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:40.451723099 CEST	1.1.1.1	192.168.2.16	0xc5da	No error (0)	meo-afd-nam-ggd3beb3e0hnezbu.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:40.451723099 CEST	1.1.1.1	192.168.2.16	0xc5da	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:40.451723099 CEST	1.1.1.1	192.168.2.16	0xc5da	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:53:40.456553936 CEST	1.1.1.1	192.168.2.16	0xaa91	No error (0)	nam.safelink.emails.azure.net	meo-traf-nam.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:40.456553936 CEST	1.1.1.1	192.168.2.16	0xaa91	No error (0)	meo-afd-nam-ggd3beb3e0hnezbu.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:41.529364109 CEST	1.1.1.1	192.168.2.16	0x8842	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:41.533277988 CEST	1.1.1.1	192.168.2.16	0xef7d	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:43.049330950 CEST	1.1.1.1	192.168.2.16	0x340d	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:43.049452066 CEST	1.1.1.1	192.168.2.16	0x3e80	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:44.360152006 CEST	1.1.1.1	192.168.2.16	0x4017	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:53:44.360388994 CEST	1.1.1.1	192.168.2.16	0xa32b	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 23:53:44.438837051 CEST	1.1.1.1	192.168.2.16	0x5042	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:44.438837051 CEST	1.1.1.1	192.168.2.16	0x5042	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:53:45.322088957 CEST	1.1.1.1	192.168.2.16	0x3a41	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:45.322088957 CEST	1.1.1.1	192.168.2.16	0x3a41	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:53:46.333661079 CEST	1.1.1.1	192.168.2.16	0xf4c5	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:46.335184097 CEST	1.1.1.1	192.168.2.16	0xb590	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:46.436609030 CEST	1.1.1.1	192.168.2.16	0x9a36	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:46.436609030 CEST	1.1.1.1	192.168.2.16	0x9a36	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:46.436609030 CEST	1.1.1.1	192.168.2.16	0x9a36	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:53:46.451545000 CEST	1.1.1.1	192.168.2.16	0x7cb8	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:53:46.451545000 CEST	1.1.1.1	192.168.2.16	0x7cb8	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:54:56.623584986 CEST	1.1.1.1	192.168.2.16	0x6927	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:54:56.623584986 CEST	1.1.1.1	192.168.2.16	0x6927	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:54:57.416414022 CEST	1.1.1.1	192.168.2.16	0x5801	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:54:57.416414022 CEST	1.1.1.1	192.168.2.16	0x5801	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:54:57.899565935 CEST	1.1.1.1	192.168.2.16	0x5f97	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:54:57.900108099 CEST	1.1.1.1	192.168.2.16	0xffbb	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.631460905 CEST	1.1.1.1	192.168.2.16	0xc034	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.631460905 CEST	1.1.1.1	192.168.2.16	0xc034	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.631460905 CEST	1.1.1.1	192.168.2.16	0xc034	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:17.648895025 CEST	1.1.1.1	192.168.2.16	0xa089	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.648895025 CEST	1.1.1.1	192.168.2.16	0xa089	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.703732014 CEST	1.1.1.1	192.168.2.16	0xc618	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.703732014 CEST	1.1.1.1	192.168.2.16	0xc618	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:17.706440926 CEST	1.1.1.1	192.168.2.16	0xb4d2	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.706440926 CEST	1.1.1.1	192.168.2.16	0xb4d2	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.706440926 CEST	1.1.1.1	192.168.2.16	0xb4d2	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:17.712810040 CEST	1.1.1.1	192.168.2.16	0xc7ea	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.712810040 CEST	1.1.1.1	192.168.2.16	0xc7ea	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.723648071 CEST	1.1.1.1	192.168.2.16	0xaec8	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.723648071 CEST	1.1.1.1	192.168.2.16	0xaec8	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:17.730705976 CEST	1.1.1.1	192.168.2.16	0x33a2	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.730705976 CEST	1.1.1.1	192.168.2.16	0x33a2	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:17.731504917 CEST	1.1.1.1	192.168.2.16	0xac2	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.742855072 CEST	1.1.1.1	192.168.2.16	0x64b5	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.742855072 CEST	1.1.1.1	192.168.2.16	0x64b5	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:17.755614996 CEST	1.1.1.1	192.168.2.16	0x35e3	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.755614996 CEST	1.1.1.1	192.168.2.16	0x35e3	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:17.760946035 CEST	1.1.1.1	192.168.2.16	0x8b4e	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:17.760946035 CEST	1.1.1.1	192.168.2.16	0x8b4e	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:17.762053967 CEST	1.1.1.1	192.168.2.16	0xff8e	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:19.675841093 CEST	1.1.1.1	192.168.2.16	0x1de4	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:19.675841093 CEST	1.1.1.1	192.168.2.16	0x1de4	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:19.675841093 CEST	1.1.1.1	192.168.2.16	0x1de4	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:19.676723003 CEST	1.1.1.1	192.168.2.16	0x55b1	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:19.676723003 CEST	1.1.1.1	192.168.2.16	0x55b1	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:20.091952085 CEST	1.1.1.1	192.168.2.16	0xfe4e	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:20.092957020 CEST	1.1.1.1	192.168.2.16	0x143c	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:22.932504892 CEST	1.1.1.1	192.168.2.16	0xbc73	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:22.951989889 CEST	1.1.1.1	192.168.2.16	0xdf67	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:36.130223989 CEST	1.1.1.1	192.168.2.16	0x6122	No error (0)	account.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:36.158000946 CEST	1.1.1.1	192.168.2.16	0x8739	No error (0)	account.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:40.125952959 CEST	1.1.1.1	192.168.2.16	0x7c0	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:40.125952959 CEST	1.1.1.1	192.168.2.16	0x7c0	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Sep 27, 2024 23:55:40.400532961 CEST	1.1.1.1	192.168.2.16	0x8fdf	No error (0)	account.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:40.437103033 CEST	1.1.1.1	192.168.2.16	0xf916	No error (0)	account.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:42.039364100 CEST	1.1.1.1	192.168.2.16	0x4864	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 23:55:42.039364100 CEST	1.1.1.1	192.168.2.16	0x4864	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

nam.safelink.emails.azure.net

https:

aadcdn.msauth.net

logincdn.msftauth.net

logincdn.msauth.net

acctcdn.msauth.net

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49702	13.107.246.45	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:41 UTC	893	OUT	GET /redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0yNzlhNjA0ZS05MTMyLTQyNDYtYjQwOC1kZTQzOWFlMmRmNTMmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l HTTP/1.1 Host: nam.safelink.emails.azure.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:41 UTC	791	IN	HTTP/1.1 302 Found Date: Fri, 27 Sep 2024 21:53:41 GMT Content-Type: text/html; charset=utf-8 Content-Length: 177 Connection: close Cache-Control: private Location: https://admin.microsoft.com/adminportal/home?#/subscriptions Set-Cookie: ASP.NET_SessionId=jcvftsfiv5xlhmdzapgnojjm; path=/; secure; HttpOnly; SameSite=Lax Strict-Transport-Security: max-age=31536000 Azure-Version: 20240910-1020-421335 Azure-SiteName: meo-api-nam-cu09-cy Azure-InstanceId: 75cd0a32ed8ede29109c715177aec940eeb46980efb6e8f4e692282aec94cb61 Azure-RegionName: West Central US Azure-SlotName: unknown X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Arr-Disable-Session-Affinity: true x-azure-ref: 20240927T215341Z-15767c5fc55xgp8c992y5v5w1800000002p000000000rbw1 X-Cache: CONFIG_NOCACHE
2024-09-27 21:53:41 UTC	177	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 64 6d 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 61 64 6d 69 6e 70 6f 72 74 61 6c 2f 68 6f 6d 65 3f 23 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://admin.microsoft.com/adminportal/home?#/subscriptions">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49712	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:45 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:45 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:45 GMT Content-Type: application/x-javascript Content-Length: 49804 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:28 GMT ETag: 0x8DCB563D09FF90F x-ms-request-id: e10fc963-b01e-001c-0ed7-109136000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215345Z-15767c5fc55rv8zjq9dg0musxg00000002k000000000kwnx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:45 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a e8 6e 66 80 30 04 66 66 17 58 2e 27 56 c0 dd c1 ce da 0e 34 13 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 c1 45 ef fc a2 d2 ff 58 b9 f8 7c 74 7e 50 39 83 b7 7f 54 4e fb 17 47 fb 87 3f 5e 0f 7e 14 ff bf b8 f7 e3 ca d8 9f 88 0a fc 0e dd 58 78 95 30 a8 84 51 c5 0f 46 61 34 0d 23 37 11 71 e5 01 fe 46 be 3b a9 8c a3 f0 a1 92 dc 8b ca 34 0a bf 88 51 12 57 26 7e 9c 40 a1 a1 98 84 4f 95 2a 54 17 79 95 33 37 4a 9e 2b 47 67 66 1d ea 17 50 9b 7f e7 07 50 7a 14 4e 9f e1 f9 3e a9 04 61 e2 8f 44 c5 0d 3c aa 6d 02 2f 41 2c 2a b3 c0 13 51 e5 e9 de 1f dd 57 4e fc 51 14 c6 e1 38 a9 44 62 24 Data Ascii: m[80OL;wnf0ffX.'V4r~=,JUT~l?EX\|t~P9TNG?^~Xx0QFa4#7qF;4QW&~@OTy37J+GgfPPzN>aD<m/A,QWNQ8Db$
2024-09-27 21:53:45 UTC	16384	IN	Data Raw: 27 1c c8 cc 3b 47 70 68 d3 97 de 38 51 da 2b 6d ae c3 c3 92 66 30 2c c7 e2 0e a7 d6 2d 0d 94 23 88 9f 19 2d 1f 22 de b2 95 e2 e1 43 fe ba 22 db f8 db c7 de c7 bd 8f bb 46 5e a9 e2 79 8b bb 39 80 f2 13 69 1c da 46 ac bd 01 17 40 95 be ca 7a c8 5e 78 9e 4e f0 34 2a 49 07 20 d2 55 18 4e aa f9 a9 79 19 46 01 fd be 74 21 2c 48 25 ed 0b d8 5c e1 21 97 5b fb 1f fa e7 08 c5 f1 db 24 52 d4 24 94 ea 86 a0 ac 71 9b a5 70 df 6e 64 32 7d bb 49 7e 1c 3a 35 86 3a 0b bc 11 b9 bc 63 53 13 db b6 21 b2 17 b6 8c 6c 3a de c8 b0 48 30 1a 78 e1 93 b1 f2 84 d9 a0 da 32 3b 49 9d 0e a3 ba 0c c0 20 f1 60 44 0e bf e1 b1 1f 00 db 07 eb f8 0b 93 7a ee 80 51 71 65 d0 f1 46 c6 4d b5 e4 80 4a d1 c1 db 33 01 93 60 94 84 63 3e bb 8d 4e f6 d7 4e 72 4b bf 55 91 07 da 56 22 f5 25 bb 62 d4 f0 Data Ascii: ';Gph8Q+mf0,-#-"C"F^y9iF@z^xN4*I UNyFt!,H%\![$R$qpnd2}I~:5:cS!l:H0x2;I `DzQqeFMJ3`c>NNrKUV"%b
2024-09-27 21:53:45 UTC	16384	IN	Data Raw: 4f f2 d1 5f e3 49 57 25 53 20 30 da 2c 5f 9e fb be 25 d9 53 ac e2 06 6d fc 67 4d 28 10 b5 f0 53 88 c0 7e 3e c3 5e b0 96 88 a4 6a 56 81 ac 3c e2 4c 74 3e 79 ed bb 38 fd f9 09 7e 74 9f 32 42 c7 41 04 97 ac e7 a6 59 52 fe 59 8b 9a b4 f3 4a 8b b4 d6 10 bd d9 0f af 84 78 1b c9 34 c0 e1 99 a8 cd 23 a0 ce 8d b4 0e 00 99 43 46 38 aa 5e e1 a4 f2 b1 1e 2b 7f d5 16 32 3e 8d f2 99 ec b5 f7 ea 3d de 6a 55 6b ab 45 a6 da 10 6c 86 da dd 41 0a 35 3a 57 9c 6d af f8 17 dd 86 fe 9a 8f 67 27 ed 3a 5b 96 b7 fe 68 25 95 d8 2b b0 d4 b5 c8 c6 c9 ae 2d 62 2a 76 b4 6a a4 5b 48 7c 83 75 29 d5 f1 80 c1 6d 15 f3 46 e2 9d 67 bd 75 10 d5 0f fa 52 85 d6 65 ac 67 bd 66 c1 72 a4 33 6d ea 5c 99 93 86 6e a9 fd 34 e0 24 b4 0d 56 b1 61 56 94 05 d2 f1 9b 06 fa d6 bf 56 69 91 4c 38 d2 41 5f b8 Data Ascii: O_IW%S 0,_%SmgM(S~>^jV<Lt>y8~t2BAYRYJx4#CF8^+2>=jUkElA5:Wmg':[h%+-b*vj[H\|u)mFguRegfr3m\n4$VaVViL8A_
2024-09-27 21:53:45 UTC	1443	IN	Data Raw: 0e d0 f4 68 6c d8 37 44 70 d3 c6 9c 6a 8d 33 2e 82 62 3b 12 9c f1 56 32 89 89 b7 1c f8 4d 92 80 1d 13 a3 81 6b 0f 74 b0 f6 84 70 e9 e9 2c 49 af 92 78 a0 74 57 ec ad 25 df 18 38 c3 d4 53 29 e6 ae 8e 8b 93 b1 d2 56 e2 b7 bf 85 b6 94 6e 6e da cf 4a 54 d6 75 6d ac a3 fc 6d 23 e6 09 04 32 6d 06 4d 28 cf 16 35 28 24 8a d7 e3 11 0c 87 53 1f 83 11 24 c4 fc c3 89 41 42 39 c4 98 16 56 9e 4f 6d b3 c6 ef 84 26 af d9 dd a3 84 63 8c fa 7b eb 2a bd af dc 00 b7 88 03 05 8e ec fa fd 82 bd 9f 8c 0b 40 5f cc ab 16 c9 2c 13 c1 24 45 9b f2 c5 95 32 0f ac 16 0c f7 e9 05 a9 ed 10 12 2b 87 10 71 c9 25 6e 4c d0 b4 d8 26 e3 b3 13 af d7 74 bb 7d 5f d3 95 83 db 5b 37 ea 39 ca bb f7 00 bc c7 7d 71 70 80 36 07 87 17 11 46 47 79 ad 8b 01 fd 00 09 4b 55 8e 3a 38 8f 1e 84 6f dd b5 0c 51 Data Ascii: hl7Dpj3.b;V2Mktp,IxtW%8S)VnnJTumm#2mM(5($S$AB9VOm&c{*@_,$E2+q%nL&t}_[79}qp6FGyKU:8oQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49715	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:45 UTC	408	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:46 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:45 GMT Content-Type: application/x-javascript Content-Length: 49804 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:28 GMT ETag: 0x8DCB563D09FF90F x-ms-request-id: e10fc963-b01e-001c-0ed7-109136000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215345Z-15767c5fc554wklc0x4mc5pq0w000000030g000000004v0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:46 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a e8 6e 66 80 30 04 66 66 17 58 2e 27 56 c0 dd c1 ce da 0e 34 13 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 c1 45 ef fc a2 d2 ff 58 b9 f8 7c 74 7e 50 39 83 b7 7f 54 4e fb 17 47 fb 87 3f 5e 0f 7e 14 ff bf b8 f7 e3 ca d8 9f 88 0a fc 0e dd 58 78 95 30 a8 84 51 c5 0f 46 61 34 0d 23 37 11 71 e5 01 fe 46 be 3b a9 8c a3 f0 a1 92 dc 8b ca 34 0a bf 88 51 12 57 26 7e 9c 40 a1 a1 98 84 4f 95 2a 54 17 79 95 33 37 4a 9e 2b 47 67 66 1d ea 17 50 9b 7f e7 07 50 7a 14 4e 9f e1 f9 3e a9 04 61 e2 8f 44 c5 0d 3c aa 6d 02 2f 41 2c 2a b3 c0 13 51 e5 e9 de 1f dd 57 4e fc 51 14 c6 e1 38 a9 44 62 24 Data Ascii: m[80OL;wnf0ffX.'V4r~=,JUT~l?EX\|t~P9TNG?^~Xx0QFa4#7qF;4QW&~@OTy37J+GgfPPzN>aD<m/A,QWNQ8Db$
2024-09-27 21:53:46 UTC	16384	IN	Data Raw: 27 1c c8 cc 3b 47 70 68 d3 97 de 38 51 da 2b 6d ae c3 c3 92 66 30 2c c7 e2 0e a7 d6 2d 0d 94 23 88 9f 19 2d 1f 22 de b2 95 e2 e1 43 fe ba 22 db f8 db c7 de c7 bd 8f bb 46 5e a9 e2 79 8b bb 39 80 f2 13 69 1c da 46 ac bd 01 17 40 95 be ca 7a c8 5e 78 9e 4e f0 34 2a 49 07 20 d2 55 18 4e aa f9 a9 79 19 46 01 fd be 74 21 2c 48 25 ed 0b d8 5c e1 21 97 5b fb 1f fa e7 08 c5 f1 db 24 52 d4 24 94 ea 86 a0 ac 71 9b a5 70 df 6e 64 32 7d bb 49 7e 1c 3a 35 86 3a 0b bc 11 b9 bc 63 53 13 db b6 21 b2 17 b6 8c 6c 3a de c8 b0 48 30 1a 78 e1 93 b1 f2 84 d9 a0 da 32 3b 49 9d 0e a3 ba 0c c0 20 f1 60 44 0e bf e1 b1 1f 00 db 07 eb f8 0b 93 7a ee 80 51 71 65 d0 f1 46 c6 4d b5 e4 80 4a d1 c1 db 33 01 93 60 94 84 63 3e bb 8d 4e f6 d7 4e 72 4b bf 55 91 07 da 56 22 f5 25 bb 62 d4 f0 Data Ascii: ';Gph8Q+mf0,-#-"C"F^y9iF@z^xN4*I UNyFt!,H%\![$R$qpnd2}I~:5:cS!l:H0x2;I `DzQqeFMJ3`c>NNrKUV"%b
2024-09-27 21:53:46 UTC	16384	IN	Data Raw: 4f f2 d1 5f e3 49 57 25 53 20 30 da 2c 5f 9e fb be 25 d9 53 ac e2 06 6d fc 67 4d 28 10 b5 f0 53 88 c0 7e 3e c3 5e b0 96 88 a4 6a 56 81 ac 3c e2 4c 74 3e 79 ed bb 38 fd f9 09 7e 74 9f 32 42 c7 41 04 97 ac e7 a6 59 52 fe 59 8b 9a b4 f3 4a 8b b4 d6 10 bd d9 0f af 84 78 1b c9 34 c0 e1 99 a8 cd 23 a0 ce 8d b4 0e 00 99 43 46 38 aa 5e e1 a4 f2 b1 1e 2b 7f d5 16 32 3e 8d f2 99 ec b5 f7 ea 3d de 6a 55 6b ab 45 a6 da 10 6c 86 da dd 41 0a 35 3a 57 9c 6d af f8 17 dd 86 fe 9a 8f 67 27 ed 3a 5b 96 b7 fe 68 25 95 d8 2b b0 d4 b5 c8 c6 c9 ae 2d 62 2a 76 b4 6a a4 5b 48 7c 83 75 29 d5 f1 80 c1 6d 15 f3 46 e2 9d 67 bd 75 10 d5 0f fa 52 85 d6 65 ac 67 bd 66 c1 72 a4 33 6d ea 5c 99 93 86 6e a9 fd 34 e0 24 b4 0d 56 b1 61 56 94 05 d2 f1 9b 06 fa d6 bf 56 69 91 4c 38 d2 41 5f b8 Data Ascii: O_IW%S 0,_%SmgM(S~>^jV<Lt>y8~t2BAYRYJx4#CF8^+2>=jUkElA5:Wmg':[h%+-b*vj[H\|u)mFguRegfr3m\n4$VaVViL8A_
2024-09-27 21:53:46 UTC	1443	IN	Data Raw: 0e d0 f4 68 6c d8 37 44 70 d3 c6 9c 6a 8d 33 2e 82 62 3b 12 9c f1 56 32 89 89 b7 1c f8 4d 92 80 1d 13 a3 81 6b 0f 74 b0 f6 84 70 e9 e9 2c 49 af 92 78 a0 74 57 ec ad 25 df 18 38 c3 d4 53 29 e6 ae 8e 8b 93 b1 d2 56 e2 b7 bf 85 b6 94 6e 6e da cf 4a 54 d6 75 6d ac a3 fc 6d 23 e6 09 04 32 6d 06 4d 28 cf 16 35 28 24 8a d7 e3 11 0c 87 53 1f 83 11 24 c4 fc c3 89 41 42 39 c4 98 16 56 9e 4f 6d b3 c6 ef 84 26 af d9 dd a3 84 63 8c fa 7b eb 2a bd af dc 00 b7 88 03 05 8e ec fa fd 82 bd 9f 8c 0b 40 5f cc ab 16 c9 2c 13 c1 24 45 9b f2 c5 95 32 0f ac 16 0c f7 e9 05 a9 ed 10 12 2b 87 10 71 c9 25 6e 4c d0 b4 d8 26 e3 b3 13 af d7 74 bb 7d 5f d3 95 83 db 5b 37 ea 39 ca bb f7 00 bc c7 7d 71 70 80 36 07 87 17 11 46 47 79 ad 8b 01 fd 00 09 4b 55 8e 3a 38 8f 1e 84 6f dd b5 0c 51 Data Ascii: hl7Dpj3.b;V2Mktp,IxtW%8S)VnnJTumm#2mM(5($S$AB9VOm&c{*@_,$E2+q%nL&t}_[79}qp6FGyKU:8oQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49720	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:47 UTC	658	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:47 UTC	781	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:47 GMT Content-Type: text/css Content-Length: 20414 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 03 Jul 2024 21:48:08 GMT ETag: 0x8DC9BA9D4131BFD x-ms-request-id: 4bf48da9-e01e-0012-6dec-0f872b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215347Z-15767c5fc55rv8zjq9dg0musxg00000002p000000000adn8 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:47 UTC	15603	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-09-27 21:53:47 UTC	4811	IN	Data Raw: e7 bc b1 e2 92 61 7d df b0 68 ac ab 2c aa b1 88 da cb c6 22 89 f4 a2 b1 42 53 1e da 58 e7 55 1e b5 fb a5 96 31 c6 85 9c 5c 95 58 0f 77 34 04 a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e 2b 17 af 8a ce 37 c9 36 db ed 73 c6 5e f7 a6 Data Ascii: a}h,"BSXU1\Xw4bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44pRd,+B"&}Ynedep_e~,1G3<@.+76s^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49722	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:47 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:47 UTC	798	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:47 GMT Content-Type: application/x-javascript Content-Length: 122193 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 01:33:09 GMT ETag: 0x8DCCC8188A08D46 x-ms-request-id: a6e6408e-701e-003f-0d12-103458000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215347Z-15767c5fc55ncqdn59ub6rndq0000000027g00000000kvn7 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:47 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 51 58 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 ef c8 8e 99 5b 0a 83 52 18 95 bc c0 09 a3 59 18 d9 09 8b 4b 53 f8 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsQXOix)NK7KW`G/.=[RYKS7l4i)ydY$.^@R%oJgP7(70Vj#Yi,*<zcs0I)b
2024-09-27 21:53:47 UTC	16384	IN	Data Raw: 5a 40 01 48 3f 65 7e fe 9d 70 17 86 b2 5a 68 c6 d8 53 99 2b af 38 61 68 21 9b ce f0 76 06 77 2f b1 8a f6 1c e0 29 00 38 c8 06 c3 b2 0a 2b df 30 39 1d 64 f6 0d 4f 7a e2 7e 34 6d 3a 9a 00 0c 34 01 08 95 1f a4 6f 71 e1 37 9b b1 78 a5 1c ea ef e8 81 02 0a d3 b1 1d 3d 65 57 f3 d1 f7 33 e7 1d 77 84 3e 5b e4 6f 88 37 0e 56 73 7f 47 df 2d 25 77 ad 3e cb 46 b1 09 fd 59 e9 9a c6 25 5e 69 86 3d a4 ea 02 54 96 92 e8 0a dd c2 1a 8f 36 b8 e8 31 2b aa 16 b9 42 96 2b 1f f5 5b f8 9d e1 36 fa d1 00 84 23 1a 82 2d d1 a8 e4 55 1d 39 d3 31 2c 3a 0c 18 07 db b4 66 53 10 09 0c e7 b8 eb e1 00 b8 8f 67 e8 6b fa e2 d9 63 2f 68 1b f4 cd 05 5f 49 5f d2 84 a2 d5 ed ad f3 4c d4 f3 44 d8 0b 44 4c 5c 78 f3 82 ab 26 01 e4 a3 c7 f5 32 bb 60 81 8c 06 67 3a 21 1f 45 b4 1c 02 ad c9 fa cc a4 Data Ascii: Z@H?e~pZhS+8ah!vw/)8+09dOz~4m:4oq7x=eW3w>[o7VsG-%w>FY%^i=T61+B+[6#-U91,:fSgkc/h_I_LDDL\x&2`g:!E
2024-09-27 21:53:47 UTC	16384	IN	Data Raw: 77 01 ab 86 93 13 0d e2 04 ad c1 bb 90 2b c3 9b df 13 1b 27 31 62 9a df 88 b4 22 90 79 9f bc 0f 9c 27 11 fb 1f b8 72 a6 d3 af de 87 e3 dd 83 c3 37 64 0e c5 fd 5c 9d 61 05 a8 a8 c7 32 2f 55 dd 9b 53 55 9e d8 44 8b 91 7e 0a 94 60 d1 1a 25 3d 4c a7 67 62 6e 14 d4 3d c4 dd 94 09 78 03 83 b1 98 8c 98 fa 44 64 c2 09 39 8c 7b 11 12 01 b7 84 d2 68 0b 3f 42 3a 43 9e 37 ea 66 1f 11 96 d2 99 0b de 60 31 6c 06 7e 1f 60 2f e5 2b 1b 5c 43 6a dd 95 0d ee cc 69 5c a5 09 1f 25 9d b5 6c f7 bc 62 11 b4 c2 84 82 a9 45 99 57 f5 2c 9d e8 c5 38 e0 86 3e a7 79 15 8b 8b 56 aa 40 4d 64 ec bc 31 ab ab 6d 1e 6e 1b c3 dc 45 ef e1 4c 03 88 3c c8 3e b0 fe 39 35 52 5e c9 79 43 d9 d1 ca d5 54 a3 b6 ee c4 5d a8 6b 63 07 30 7d a6 73 b4 dd 65 ba 72 a1 7a df 6c a7 fe fe d6 5e 4e e4 90 95 6e Data Ascii: w+'1b"y'r7d\a2/USUD~`%=Lgbn=xDd9{h?B:C7f`1l~`/+\Cji\%lbEW,8>yV@Md1mnEL<>95R^yCT]kc0}serzl^Nn
2024-09-27 21:53:47 UTC	16384	IN	Data Raw: 30 09 f5 14 35 60 ce f2 fe e8 1a b9 e3 49 f2 26 1c 0f 1f 45 ee 29 dd dd b3 30 20 25 b2 3c 1f 46 65 59 b4 27 33 de a0 d8 84 6d 8d 13 e9 7b 19 fd 2c 29 1a f9 07 fb 09 37 13 1e 81 af e3 38 d7 1a 8a bf c1 36 cf d0 b6 42 7c 9d 14 e0 d0 ef c9 18 43 4d c5 77 71 59 77 8e 86 e0 a6 ee b8 6d 25 93 bb 6e 34 d6 c5 bd 30 36 1f 71 7d 0a 29 8b 9e fd d3 20 11 52 2b a4 a9 df a3 6b 09 78 22 6a b0 e5 b4 03 2f 7f 92 e6 f1 e0 f1 f3 4d 94 b0 19 60 76 9a a7 23 28 93 76 42 3f c6 88 36 5d bb 46 a9 01 63 8f b8 42 99 64 e6 92 d1 19 60 eb 35 2a 5c 4d f2 80 57 d1 4d fa 51 56 f9 b1 c1 12 09 54 6e 43 94 2a ec a1 e3 f3 ac 01 44 68 83 84 57 8d 1f d1 6f d0 8f 2e e0 09 bd 70 82 4f 6d de 88 b3 06 4a 70 95 cf 7f 44 bc d8 56 9c 5a 0d 87 8d 74 00 d3 43 f9 aa 30 27 f7 48 f1 e7 7d 97 ec 41 df 0b Data Ascii: 05`I&E)0 %<FeY'3m{,)786B\|CMwqYwm%n406q}) R+kx"j/M`v#(vB?6]FcBd`5\MWMQVTnCDhWo.pOmJpDVZtC0'H}A
2024-09-27 21:53:47 UTC	16384	IN	Data Raw: 92 03 92 9f b2 90 ac b0 72 18 98 1e 26 58 4c 56 0d f0 06 7e 5a ea ad 15 59 17 96 6f 16 b5 36 49 01 f9 99 3e cf 46 45 9c df 70 be 0d 1e 85 fe 33 ed 87 06 bf 78 64 42 a2 03 be a2 0f 92 e1 4a 73 fa 08 1a 35 fe 39 bf 8e 9c 9a 34 94 48 08 3d 8d b1 ad 19 96 66 3b 2a ab ae 60 84 ac bf 74 3a b2 04 69 0e a4 71 ea 6c 6a f6 bc a2 fa 6a e1 19 28 41 f3 40 09 7f 2b b7 21 10 05 39 0d 1d 7c e6 ed f6 2e 69 dc 7f 12 45 d1 08 f8 1d b0 cb 41 22 66 e0 e6 cc 3b 69 60 1c 9a 87 30 93 c0 11 da 2c 85 94 58 61 06 19 8a 3d 84 c3 a8 44 19 66 35 9d e2 26 23 96 13 55 97 30 19 53 44 9b 78 fa 7c 5f ca ac 66 f2 68 83 f3 b8 08 91 50 70 67 01 e8 36 d0 56 81 59 a7 1e f1 da 42 be c7 d0 f5 cb a1 83 f4 1b 8c 78 5c 7d a4 db 2b 40 c2 64 41 45 d3 8e 38 d9 b4 4d 48 3b 4f 45 41 18 a2 c3 86 1a c5 b9 Data Ascii: r&XLV~ZYo6I>FEp3xdBJs594H=f;*`t:iqljj(A@+!9\|.iEA"f;i`0,Xa=Df5&#U0SDx\|_fhPpg6VYBx\}+@dAE8MH;OEA
2024-09-27 21:53:47 UTC	16384	IN	Data Raw: 18 b5 fc df b9 b3 94 45 81 eb 67 71 e4 c5 d2 96 22 49 58 94 cb 4c b0 28 ce 61 62 f1 fc 6e 96 f3 6a 37 35 07 4d 19 90 0e 36 3a f0 0d 9c 2a 81 1d 2d 19 4f 04 de 40 c0 62 26 f7 83 e6 5e 0a 2c 13 20 cd dc e3 81 4c 30 87 8e 93 db 32 0b 5c 91 c7 5e 1e 7a fb c1 bd 9a e3 a7 7e 22 5d df 49 b8 cb 58 2c 3d c7 97 b6 cd 93 2c 70 02 11 db 98 d7 fd 90 93 9f 3a 09 d8 4d e0 fb 22 4f a2 38 08 12 4c 58 96 44 61 92 24 79 c0 c1 25 f6 d2 4d 2d a1 52 1b 24 94 3b ae 00 c5 e6 5e 62 fb 89 1b 78 18 4e 90 88 3c b0 59 76 37 ef d3 5a 67 69 ec 70 16 b9 3c 70 d5 bf be c7 38 88 2a 89 73 df 06 52 38 ee dd 1c 76 ab dd 84 86 47 64 11 b8 76 9e 81 ab 4a 3b b4 c1 29 64 ec 05 22 64 36 13 3e 8f f7 43 bc 61 9a f0 50 d8 e0 a2 b6 90 49 06 8e 0a 36 94 83 b5 63 f1 42 3f 12 c1 7e ba 89 0c ee b9 81 88 Data Ascii: Egq"IXL(abnj75M6:-O@b&^, L02\^z~"]IX,=,p:M"O8LXDa$y%M-R$;^bxN<Yv7Zgip<p8sR8vGdvJ;)d"d6>CaPI6cB?~
2024-09-27 21:53:47 UTC	16384	IN	Data Raw: 12 cf 7f 7a f2 a0 8f d8 ea d9 9b bf ec dc 0e b2 86 d1 dd cf 1b 69 ae d2 87 20 3b f3 54 bf dc e8 39 98 92 df 9b e9 ad fa 56 bd f6 87 4d fd d5 09 2b 7f 60 b4 19 bd 5c 57 63 fe 76 e1 f8 44 e1 4d eb 56 ce cf ca 85 e1 99 6b 46 fe fa e7 2f c7 e3 f0 f9 bc 2a 5f a6 2f 43 db cb df 2e 09 6d 93 6d fc ed 27 a8 4e 67 a6 55 fb 42 bd 32 7c f9 79 ff 5e 15 95 06 f7 79 b3 cf de f6 6c d6 2f ff de 4c d0 b2 e0 66 95 e4 1b c6 df 68 75 5a 49 b2 b6 4b 7e 29 f3 3b 45 7e 35 f5 e6 d3 86 c8 49 f5 b7 f9 e3 52 c8 e7 05 26 bd de 5c da c9 00 69 9a fb 8d 94 9f 7f 52 40 81 90 87 74 8b d8 97 a5 ff fc 53 cd cc 93 55 2e bc 7c 7d 07 9a df 99 8e ee 84 bf bf be 46 ad 7d da 44 8b bf 2a 5a 69 99 a1 14 ea 2f 0c 99 ee a4 4c cf 2a 96 cb f4 2e 3a 75 5d f5 ee aa f5 ae aa eb dd 94 bb a2 7a c9 2e 49 ce Data Ascii: zi ;T9VM+`\WcvDMVkF/_/C.mm'NgUB2\|y^yl/LfhuZIK~);E~5IR&\iR@tSU.\|}F}DZi/L*.:u]z.I
2024-09-27 21:53:47 UTC	8303	IN	Data Raw: 60 d5 08 91 5e b1 44 5d 0b 2d 94 1e 42 c1 d7 11 0b b1 0e 2a 15 3c 8f e9 63 3a 55 74 59 09 2e b5 00 1f e3 aa bd 03 35 07 6f 63 52 84 e7 2f 6d 92 c1 e9 10 89 6f ae 45 64 ba b3 43 a5 af 97 81 17 65 a6 74 2d 26 19 e0 80 9e a0 b0 1d df 68 09 61 20 c0 85 83 29 61 48 2a cd e5 cf 7e 0c d2 57 4b 07 9f 78 e2 49 14 5d ce 09 3e 99 f3 27 2f 6d 97 38 30 1e 7c b6 e4 cf 4e 38 0a 33 4c d5 40 bd e9 d0 e1 50 24 7f 1e c3 bf b1 06 0f 4e 81 10 48 7c 90 24 91 1b 20 ed 03 48 60 11 18 c0 df 52 33 97 8f 0d 06 a7 3c 12 12 8f 96 45 c9 f6 12 df 00 07 55 bc 63 54 71 cd 81 80 87 c9 0c c9 f0 fc 90 cd e8 24 9c df 9c 84 58 fe 14 b4 11 18 8c a3 2c 8c d0 3b 09 05 72 21 3d 3f 79 c2 e0 8a 58 f5 91 88 53 0a 1e 03 57 fb 24 b5 72 e2 fb 78 24 c9 09 e7 35 b1 e3 10 7d 02 b4 2b ba f2 ef 43 7b 99 5e Data Ascii: `^D]-B<c:UtY.5ocR/moEdCet-&ha )aH~WKxI]>'/m80\|N83L@P$NH\|$ H`R3<EUcTq$X,;r!=?yXSW$rx$5}+C{^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49723	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:47 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:47 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:47 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: 7f0ef5b1-b01e-0004-6fab-0f39ee000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215347Z-15767c5fc55whfstvfw43u8fp400000002pg00000000rdb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:47 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-09-27 21:53:47 UTC	733	IN	Data Raw: c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 1c b1 69 b0 ed 3a Data Ascii: ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!i:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49727	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:47 UTC	429	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:48 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:47 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: 7f0ef5b1-b01e-0004-6fab-0f39ee000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215347Z-15767c5fc55rv8zjq9dg0musxg00000002m000000000g4xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:48 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-09-27 21:53:48 UTC	733	IN	Data Raw: c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 1c b1 69 b0 ed 3a Data Ascii: ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!i:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49729	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:48 UTC	410	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:48 UTC	798	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:48 GMT Content-Type: application/x-javascript Content-Length: 122193 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 01:33:09 GMT ETag: 0x8DCCC8188A08D46 x-ms-request-id: a6e6408e-701e-003f-0d12-103458000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215348Z-15767c5fc55kg97hfq5uqyxxaw00000002kg00000000h1wy x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:48 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 51 58 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 ef c8 8e 99 5b 0a 83 52 18 95 bc c0 09 a3 59 18 d9 09 8b 4b 53 f8 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsQXOix)NK7KW`G/.=[RYKS7l4i)ydY$.^@R%oJgP7(70Vj#Yi,*<zcs0I)b
2024-09-27 21:53:48 UTC	16384	IN	Data Raw: 5a 40 01 48 3f 65 7e fe 9d 70 17 86 b2 5a 68 c6 d8 53 99 2b af 38 61 68 21 9b ce f0 76 06 77 2f b1 8a f6 1c e0 29 00 38 c8 06 c3 b2 0a 2b df 30 39 1d 64 f6 0d 4f 7a e2 7e 34 6d 3a 9a 00 0c 34 01 08 95 1f a4 6f 71 e1 37 9b b1 78 a5 1c ea ef e8 81 02 0a d3 b1 1d 3d 65 57 f3 d1 f7 33 e7 1d 77 84 3e 5b e4 6f 88 37 0e 56 73 7f 47 df 2d 25 77 ad 3e cb 46 b1 09 fd 59 e9 9a c6 25 5e 69 86 3d a4 ea 02 54 96 92 e8 0a dd c2 1a 8f 36 b8 e8 31 2b aa 16 b9 42 96 2b 1f f5 5b f8 9d e1 36 fa d1 00 84 23 1a 82 2d d1 a8 e4 55 1d 39 d3 31 2c 3a 0c 18 07 db b4 66 53 10 09 0c e7 b8 eb e1 00 b8 8f 67 e8 6b fa e2 d9 63 2f 68 1b f4 cd 05 5f 49 5f d2 84 a2 d5 ed ad f3 4c d4 f3 44 d8 0b 44 4c 5c 78 f3 82 ab 26 01 e4 a3 c7 f5 32 bb 60 81 8c 06 67 3a 21 1f 45 b4 1c 02 ad c9 fa cc a4 Data Ascii: Z@H?e~pZhS+8ah!vw/)8+09dOz~4m:4oq7x=eW3w>[o7VsG-%w>FY%^i=T61+B+[6#-U91,:fSgkc/h_I_LDDL\x&2`g:!E
2024-09-27 21:53:48 UTC	16384	IN	Data Raw: 77 01 ab 86 93 13 0d e2 04 ad c1 bb 90 2b c3 9b df 13 1b 27 31 62 9a df 88 b4 22 90 79 9f bc 0f 9c 27 11 fb 1f b8 72 a6 d3 af de 87 e3 dd 83 c3 37 64 0e c5 fd 5c 9d 61 05 a8 a8 c7 32 2f 55 dd 9b 53 55 9e d8 44 8b 91 7e 0a 94 60 d1 1a 25 3d 4c a7 67 62 6e 14 d4 3d c4 dd 94 09 78 03 83 b1 98 8c 98 fa 44 64 c2 09 39 8c 7b 11 12 01 b7 84 d2 68 0b 3f 42 3a 43 9e 37 ea 66 1f 11 96 d2 99 0b de 60 31 6c 06 7e 1f 60 2f e5 2b 1b 5c 43 6a dd 95 0d ee cc 69 5c a5 09 1f 25 9d b5 6c f7 bc 62 11 b4 c2 84 82 a9 45 99 57 f5 2c 9d e8 c5 38 e0 86 3e a7 79 15 8b 8b 56 aa 40 4d 64 ec bc 31 ab ab 6d 1e 6e 1b c3 dc 45 ef e1 4c 03 88 3c c8 3e b0 fe 39 35 52 5e c9 79 43 d9 d1 ca d5 54 a3 b6 ee c4 5d a8 6b 63 07 30 7d a6 73 b4 dd 65 ba 72 a1 7a df 6c a7 fe fe d6 5e 4e e4 90 95 6e Data Ascii: w+'1b"y'r7d\a2/USUD~`%=Lgbn=xDd9{h?B:C7f`1l~`/+\Cji\%lbEW,8>yV@Md1mnEL<>95R^yCT]kc0}serzl^Nn
2024-09-27 21:53:48 UTC	16384	IN	Data Raw: 30 09 f5 14 35 60 ce f2 fe e8 1a b9 e3 49 f2 26 1c 0f 1f 45 ee 29 dd dd b3 30 20 25 b2 3c 1f 46 65 59 b4 27 33 de a0 d8 84 6d 8d 13 e9 7b 19 fd 2c 29 1a f9 07 fb 09 37 13 1e 81 af e3 38 d7 1a 8a bf c1 36 cf d0 b6 42 7c 9d 14 e0 d0 ef c9 18 43 4d c5 77 71 59 77 8e 86 e0 a6 ee b8 6d 25 93 bb 6e 34 d6 c5 bd 30 36 1f 71 7d 0a 29 8b 9e fd d3 20 11 52 2b a4 a9 df a3 6b 09 78 22 6a b0 e5 b4 03 2f 7f 92 e6 f1 e0 f1 f3 4d 94 b0 19 60 76 9a a7 23 28 93 76 42 3f c6 88 36 5d bb 46 a9 01 63 8f b8 42 99 64 e6 92 d1 19 60 eb 35 2a 5c 4d f2 80 57 d1 4d fa 51 56 f9 b1 c1 12 09 54 6e 43 94 2a ec a1 e3 f3 ac 01 44 68 83 84 57 8d 1f d1 6f d0 8f 2e e0 09 bd 70 82 4f 6d de 88 b3 06 4a 70 95 cf 7f 44 bc d8 56 9c 5a 0d 87 8d 74 00 d3 43 f9 aa 30 27 f7 48 f1 e7 7d 97 ec 41 df 0b Data Ascii: 05`I&E)0 %<FeY'3m{,)786B\|CMwqYwm%n406q}) R+kx"j/M`v#(vB?6]FcBd`5\MWMQVTnCDhWo.pOmJpDVZtC0'H}A
2024-09-27 21:53:48 UTC	16384	IN	Data Raw: 92 03 92 9f b2 90 ac b0 72 18 98 1e 26 58 4c 56 0d f0 06 7e 5a ea ad 15 59 17 96 6f 16 b5 36 49 01 f9 99 3e cf 46 45 9c df 70 be 0d 1e 85 fe 33 ed 87 06 bf 78 64 42 a2 03 be a2 0f 92 e1 4a 73 fa 08 1a 35 fe 39 bf 8e 9c 9a 34 94 48 08 3d 8d b1 ad 19 96 66 3b 2a ab ae 60 84 ac bf 74 3a b2 04 69 0e a4 71 ea 6c 6a f6 bc a2 fa 6a e1 19 28 41 f3 40 09 7f 2b b7 21 10 05 39 0d 1d 7c e6 ed f6 2e 69 dc 7f 12 45 d1 08 f8 1d b0 cb 41 22 66 e0 e6 cc 3b 69 60 1c 9a 87 30 93 c0 11 da 2c 85 94 58 61 06 19 8a 3d 84 c3 a8 44 19 66 35 9d e2 26 23 96 13 55 97 30 19 53 44 9b 78 fa 7c 5f ca ac 66 f2 68 83 f3 b8 08 91 50 70 67 01 e8 36 d0 56 81 59 a7 1e f1 da 42 be c7 d0 f5 cb a1 83 f4 1b 8c 78 5c 7d a4 db 2b 40 c2 64 41 45 d3 8e 38 d9 b4 4d 48 3b 4f 45 41 18 a2 c3 86 1a c5 b9 Data Ascii: r&XLV~ZYo6I>FEp3xdBJs594H=f;*`t:iqljj(A@+!9\|.iEA"f;i`0,Xa=Df5&#U0SDx\|_fhPpg6VYBx\}+@dAE8MH;OEA
2024-09-27 21:53:48 UTC	16384	IN	Data Raw: 18 b5 fc df b9 b3 94 45 81 eb 67 71 e4 c5 d2 96 22 49 58 94 cb 4c b0 28 ce 61 62 f1 fc 6e 96 f3 6a 37 35 07 4d 19 90 0e 36 3a f0 0d 9c 2a 81 1d 2d 19 4f 04 de 40 c0 62 26 f7 83 e6 5e 0a 2c 13 20 cd dc e3 81 4c 30 87 8e 93 db 32 0b 5c 91 c7 5e 1e 7a fb c1 bd 9a e3 a7 7e 22 5d df 49 b8 cb 58 2c 3d c7 97 b6 cd 93 2c 70 02 11 db 98 d7 fd 90 93 9f 3a 09 d8 4d e0 fb 22 4f a2 38 08 12 4c 58 96 44 61 92 24 79 c0 c1 25 f6 d2 4d 2d a1 52 1b 24 94 3b ae 00 c5 e6 5e 62 fb 89 1b 78 18 4e 90 88 3c b0 59 76 37 ef d3 5a 67 69 ec 70 16 b9 3c 70 d5 bf be c7 38 88 2a 89 73 df 06 52 38 ee dd 1c 76 ab dd 84 86 47 64 11 b8 76 9e 81 ab 4a 3b b4 c1 29 64 ec 05 22 64 36 13 3e 8f f7 43 bc 61 9a f0 50 d8 e0 a2 b6 90 49 06 8e 0a 36 94 83 b5 63 f1 42 3f 12 c1 7e ba 89 0c ee b9 81 88 Data Ascii: Egq"IXL(abnj75M6:-O@b&^, L02\^z~"]IX,=,p:M"O8LXDa$y%M-R$;^bxN<Yv7Zgip<p8sR8vGdvJ;)d"d6>CaPI6cB?~
2024-09-27 21:53:48 UTC	16384	IN	Data Raw: 12 cf 7f 7a f2 a0 8f d8 ea d9 9b bf ec dc 0e b2 86 d1 dd cf 1b 69 ae d2 87 20 3b f3 54 bf dc e8 39 98 92 df 9b e9 ad fa 56 bd f6 87 4d fd d5 09 2b 7f 60 b4 19 bd 5c 57 63 fe 76 e1 f8 44 e1 4d eb 56 ce cf ca 85 e1 99 6b 46 fe fa e7 2f c7 e3 f0 f9 bc 2a 5f a6 2f 43 db cb df 2e 09 6d 93 6d fc ed 27 a8 4e 67 a6 55 fb 42 bd 32 7c f9 79 ff 5e 15 95 06 f7 79 b3 cf de f6 6c d6 2f ff de 4c d0 b2 e0 66 95 e4 1b c6 df 68 75 5a 49 b2 b6 4b 7e 29 f3 3b 45 7e 35 f5 e6 d3 86 c8 49 f5 b7 f9 e3 52 c8 e7 05 26 bd de 5c da c9 00 69 9a fb 8d 94 9f 7f 52 40 81 90 87 74 8b d8 97 a5 ff fc 53 cd cc 93 55 2e bc 7c 7d 07 9a df 99 8e ee 84 bf bf be 46 ad 7d da 44 8b bf 2a 5a 69 99 a1 14 ea 2f 0c 99 ee a4 4c cf 2a 96 cb f4 2e 3a 75 5d f5 ee aa f5 ae aa eb dd 94 bb a2 7a c9 2e 49 ce Data Ascii: zi ;T9VM+`\WcvDMVkF/_/C.mm'NgUB2\|y^yl/LfhuZIK~);E~5IR&\iR@tSU.\|}F}DZi/L*.:u]z.I
2024-09-27 21:53:48 UTC	8303	IN	Data Raw: 60 d5 08 91 5e b1 44 5d 0b 2d 94 1e 42 c1 d7 11 0b b1 0e 2a 15 3c 8f e9 63 3a 55 74 59 09 2e b5 00 1f e3 aa bd 03 35 07 6f 63 52 84 e7 2f 6d 92 c1 e9 10 89 6f ae 45 64 ba b3 43 a5 af 97 81 17 65 a6 74 2d 26 19 e0 80 9e a0 b0 1d df 68 09 61 20 c0 85 83 29 61 48 2a cd e5 cf 7e 0c d2 57 4b 07 9f 78 e2 49 14 5d ce 09 3e 99 f3 27 2f 6d 97 38 30 1e 7c b6 e4 cf 4e 38 0a 33 4c d5 40 bd e9 d0 e1 50 24 7f 1e c3 bf b1 06 0f 4e 81 10 48 7c 90 24 91 1b 20 ed 03 48 60 11 18 c0 df 52 33 97 8f 0d 06 a7 3c 12 12 8f 96 45 c9 f6 12 df 00 07 55 bc 63 54 71 cd 81 80 87 c9 0c c9 f0 fc 90 cd e8 24 9c df 9c 84 58 fe 14 b4 11 18 8c a3 2c 8c d0 3b 09 05 72 21 3d 3f 79 c2 e0 8a 58 f5 91 88 53 0a 1e 03 57 fb 24 b5 72 e2 fb 78 24 c9 09 e7 35 b1 e3 10 7d 02 b4 2b ba f2 ef 43 7b 99 5e Data Ascii: `^D]-B<c:UtY.5ocR/moEdCet-&ha )aH~WKxI]>'/m80\|N83L@P$NH\|$ H`R3<EUcTq$X,;r!=?yXSW$rx$5}+C{^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49730	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:48 UTC	577	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:48 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:48 GMT Content-Type: application/x-javascript Content-Length: 61052 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 25 May 2023 17:22:47 GMT ETag: 0x8DB5D44A8CEE4F4 x-ms-request-id: 2a357062-b01e-0042-62c9-0f457b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215348Z-15767c5fc55whfstvfw43u8fp400000002n000000000xfh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:48 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c da 34 29 2f 71 48 23 bc b2 44 db 4c b4 45 4b 9c 8c ac d1 81 c8 96 04 9b 04 18 00 94 ac 91 f8 df 9f aa ea 1d 04 28 29 c9 7d ef 7b 12 8b 40 a3 7a af ae ae ae ae c5 bf 89 93 51 7a d3 2c f8 98 4f 78 91 dd 9e dd f0 f3 69 34 fc fa 53 9e 26 d3 70 e9 d7 fb fb 93 d3 a0 39 9d e5 57 fe c9 c9 fa 29 3b 61 8c 5d cc 92 61 11 a7 89 cf 59 c1 92 e0 ce 9b e5 bc 91 17 59 3c 2c bc 6e d2 cc fc 22 60 49 73 e4 17 cc fb 35 1a cf f8 cf 50 81 c7 7c 9d 2d b8 cb 78 31 cb 92 46 d6 e4 f3 40 c3 f6 af 79 52 6c 47 05 4f 86 b7 35 e0 51 19 7c 9f 67 79 9c 63 16 5e 93 e5 dc ca 72 94 45 43 be cd af f9 b8 06 78 64 01 6f 4c a7 83 24 8f 2f af 8a 7c 33 cd aa 8b 8f 9d 16 bd 8b 72 5e 0b 6a 17 7d d6 ff 06 4d 1e f1 d1 20 Data Ascii: iwF0'W4)/qH#DLEK()}{@zQz,Oxi4S&p9W);a]aYY<,n"`Is5P\|-x1F@yRlGO5Q\|gyc^rECxdoL$/\|3r^j}M
2024-09-27 21:53:48 UTC	16384	IN	Data Raw: 45 5f ae b8 15 0a 6b 9f 0b 6f 06 46 14 14 a0 01 d4 75 81 77 09 f9 14 b6 80 d5 55 f7 1d da c5 86 b6 4e 3c e4 1f ba 37 9b b7 b5 c3 23 d4 c8 84 ec 45 b0 c9 37 15 f4 52 19 68 52 db 84 ba 3a 93 b3 c0 d0 32 cd 34 96 c5 e1 77 a8 86 82 5b a0 e4 0c 44 e8 9f fe b7 62 f3 e2 12 ef cd f4 45 86 1d 76 a9 ca dd 36 79 da 4e 84 b4 06 0b 02 f6 93 7c 32 6b 9e 1f 01 48 1d b9 b0 1d 0e 45 73 ff 0a 48 49 e1 df 50 90 3f 40 e9 4f 5c e1 0c 8a 9e 20 e1 3d f7 f7 d8 4d ad e8 59 f6 8d fc 90 12 fc 6f ee 36 ee 97 d9 84 b2 55 80 c3 3d dc ed cb 9b 20 58 b6 fb e2 12 a8 93 cc bb ce 09 d9 17 b7 1b 9e c3 3b 01 49 81 06 e2 8a cd c8 00 2b 23 63 ac 8c 91 a8 99 6f 92 81 56 7b 8e f7 8d b2 42 9c 4a 97 0c 0b bf 45 f5 d2 62 f4 5e b0 ec 3b b3 a4 63 b8 24 72 e0 05 15 1f 7d e2 3d 3f 37 19 0f e3 4b d8 f3 Data Ascii: E_koFuwUN<7#E7RhR:24w[DbEv6yN\|2kHEsHIP?@O\ =MYo6U= X;I+#coV{BJEb^;c$r}=?7K
2024-09-27 21:53:48 UTC	16384	IN	Data Raw: 6d 6f 68 90 c6 f2 9e eb 33 2a c7 18 89 31 56 eb 59 ec bb 71 89 7f aa 93 e3 73 84 51 29 6d 4a 14 bb 22 63 6f 55 2c 47 e7 05 5d 5b 13 bf a6 ac 26 93 2d 98 72 a5 b7 e5 5a dc 5a c8 41 d4 fd e4 3e 1d 71 da 8f 3c 15 aa a8 02 27 5f eb 0a 69 e7 9e 8a 73 ab 65 64 09 18 b0 07 f0 47 1a e5 af 1f a1 b3 aa 6f 4a be 45 d8 0b 7b 11 7c 72 79 14 0f bd 57 cd 6e 76 d1 ec b5 e1 b3 8d 9d 95 66 c2 ca 10 cd 0f a3 7c 90 c5 ac c9 5a ae fa 7f c2 e6 88 97 22 c9 e1 52 b2 22 5d 8a f0 0f 96 12 40 d3 a5 e8 7c be 94 98 1b 2d 25 d5 4c 26 46 3d 61 3a 5c 4a 00 f5 97 a2 e2 77 4b d1 f9 c9 52 72 ef 6a 29 b9 77 6c 21 fc db 40 f8 5d c6 fc 1b 37 be c9 6d fc 7a 4e 9b e8 e0 a1 68 5f 34 7d d6 b3 76 7a fe 9b e8 2e 1e 44 9c d8 a2 fa f9 8d 92 11 d2 4d a4 6e 0a 47 ef 48 fc 1c f5 39 69 8b 0e 7f d4 a7 84 Data Ascii: moh3*1VYqsQ)mJ"coU,G][&-rZZA>q<'_isedGoJE{\|ryWnvf\|Z"R"]@\|-%L&F=a:\JwKRrj)wl!@]7mzNh_4}vz.DMnGH9i
2024-09-27 21:53:48 UTC	12691	IN	Data Raw: 05 12 73 65 5f 43 ee b5 a6 0a 6e 83 08 03 ba f6 3a d7 c1 f5 6c 76 ab 4e 60 47 68 19 58 60 f5 1f 5e bb c3 54 de 2e 80 82 4f c9 76 ef a4 d4 b5 72 0a ee 68 55 55 91 83 40 67 5f dc f5 4a 1c f6 94 3e 3d 7d 79 a0 3e 39 55 07 e7 28 38 b8 38 65 d6 f5 5b 91 70 12 1c 69 47 2b 47 a6 a3 95 0e 6d 81 13 58 fc 26 42 bf 8e 1d ad 38 fe 3e ed 53 99 91 95 ee 68 64 66 52 9b 89 03 08 8d 1b 82 51 74 a5 1c f1 3a ed 15 45 74 3b 29 5e 35 bb d6 fb fa 7a db 7a 27 1a 93 ee 23 3d 44 bf 15 6d ad 43 c0 d2 64 91 ac 81 29 f3 92 ec 05 5f 59 d7 da da 65 be a6 3f da b7 38 0a be 24 da e8 8d 01 b8 41 ae b4 0b ff d2 ba a5 24 85 d5 3e 9e 97 b0 f2 d1 73 cf a0 45 b4 57 a1 27 69 f7 9e 79 d0 2d 71 2f 29 4f 51 86 ce 20 a4 8e 6f 80 45 9c a5 63 47 7c 28 33 2f 2a 99 bd c0 49 d2 0d 4e f3 57 e8 09 fe a7 Data Ascii: se_Cn:lvN`GhX`^T.OvrhUU@g_J>=}y>9U(88e[piG+GmX&B8>ShdfRQt:Et;)^5zz'#=DmCd)_Ye?8$A$>sEW'iy-q/)OQ oEcG\|(3/*INW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49731	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:49 UTC	392	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:49 UTC	812	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:49 GMT Content-Type: application/x-javascript Content-Length: 61052 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 25 May 2023 17:22:47 GMT ETag: 0x8DB5D44A8CEE4F4 x-ms-request-id: 2a357062-b01e-0042-62c9-0f457b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215349Z-15767c5fc55ncqdn59ub6rndq0000000027g00000000kvr0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:49 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c da 34 29 2f 71 48 23 bc b2 44 db 4c b4 45 4b 9c 8c ac d1 81 c8 96 04 9b 04 18 00 94 ac 91 f8 df 9f aa ea 1d 04 28 29 c9 7d ef 7b 12 8b 40 a3 7a af ae ae ae ae c5 bf 89 93 51 7a d3 2c f8 98 4f 78 91 dd 9e dd f0 f3 69 34 fc fa 53 9e 26 d3 70 e9 d7 fb fb 93 d3 a0 39 9d e5 57 fe c9 c9 fa 29 3b 61 8c 5d cc 92 61 11 a7 89 cf 59 c1 92 e0 ce 9b e5 bc 91 17 59 3c 2c bc 6e d2 cc fc 22 60 49 73 e4 17 cc fb 35 1a cf f8 cf 50 81 c7 7c 9d 2d b8 cb 78 31 cb 92 46 d6 e4 f3 40 c3 f6 af 79 52 6c 47 05 4f 86 b7 35 e0 51 19 7c 9f 67 79 9c 63 16 5e 93 e5 dc ca 72 94 45 43 be cd af f9 b8 06 78 64 01 6f 4c a7 83 24 8f 2f af 8a 7c 33 cd aa 8b 8f 9d 16 bd 8b 72 5e 0b 6a 17 7d d6 ff 06 4d 1e f1 d1 20 Data Ascii: iwF0'W4)/qH#DLEK()}{@zQz,Oxi4S&p9W);a]aYY<,n"`Is5P\|-x1F@yRlGO5Q\|gyc^rECxdoL$/\|3r^j}M
2024-09-27 21:53:49 UTC	16384	IN	Data Raw: c0 bf 2d 5f 47 89 51 d4 c5 e2 ee 4a 5e 8f 74 11 ba 78 22 35 03 45 5f ae b8 15 0a 6b 9f 0b 6f 06 46 14 14 a0 01 d4 75 81 77 09 f9 14 b6 80 d5 55 f7 1d da c5 86 b6 4e 3c e4 1f ba 37 9b b7 b5 c3 23 d4 c8 84 ec 45 b0 c9 37 15 f4 52 19 68 52 db 84 ba 3a 93 b3 c0 d0 32 cd 34 96 c5 e1 77 a8 86 82 5b a0 e4 0c 44 e8 9f fe b7 62 f3 e2 12 ef cd f4 45 86 1d 76 a9 ca dd 36 79 da 4e 84 b4 06 0b 02 f6 93 7c 32 6b 9e 1f 01 48 1d b9 b0 1d 0e 45 73 ff 0a 48 49 e1 df 50 90 3f 40 e9 4f 5c e1 0c 8a 9e 20 e1 3d f7 f7 d8 4d ad e8 59 f6 8d fc 90 12 fc 6f ee 36 ee 97 d9 84 b2 55 80 c3 3d dc ed cb 9b 20 58 b6 fb e2 12 a8 93 cc bb ce 09 d9 17 b7 1b 9e c3 3b 01 49 81 06 e2 8a cd c8 00 2b 23 63 ac 8c 91 a8 99 6f 92 81 56 7b 8e f7 8d b2 42 9c 4a 97 0c 0b bf 45 f5 d2 62 f4 5e b0 ec 3b Data Ascii: -_GQJ^tx"5E_koFuwUN<7#E7RhR:24w[DbEv6yN\|2kHEsHIP?@O\ =MYo6U= X;I+#coV{BJEb^;
2024-09-27 21:53:49 UTC	16384	IN	Data Raw: db 7c 4f c0 28 e6 7a 08 96 01 95 5d ed bb d4 15 db ec c7 f1 16 6d 6f 68 90 c6 f2 9e eb 33 2a c7 18 89 31 56 eb 59 ec bb 71 89 7f aa 93 e3 73 84 51 29 6d 4a 14 bb 22 63 6f 55 2c 47 e7 05 5d 5b 13 bf a6 ac 26 93 2d 98 72 a5 b7 e5 5a dc 5a c8 41 d4 fd e4 3e 1d 71 da 8f 3c 15 aa a8 02 27 5f eb 0a 69 e7 9e 8a 73 ab 65 64 09 18 b0 07 f0 47 1a e5 af 1f a1 b3 aa 6f 4a be 45 d8 0b 7b 11 7c 72 79 14 0f bd 57 cd 6e 76 d1 ec b5 e1 b3 8d 9d 95 66 c2 ca 10 cd 0f a3 7c 90 c5 ac c9 5a ae fa 7f c2 e6 88 97 22 c9 e1 52 b2 22 5d 8a f0 0f 96 12 40 d3 a5 e8 7c be 94 98 1b 2d 25 d5 4c 26 46 3d 61 3a 5c 4a 00 f5 97 a2 e2 77 4b d1 f9 c9 52 72 ef 6a 29 b9 77 6c 21 fc db 40 f8 5d c6 fc 1b 37 be c9 6d fc 7a 4e 9b e8 e0 a1 68 5f 34 7d d6 b3 76 7a fe 9b e8 2e 1e 44 9c d8 a2 fa f9 8d Data Ascii: \|O(z]moh3*1VYqsQ)mJ"coU,G][&-rZZA>q<'_isedGoJE{\|ryWnvf\|Z"R"]@\|-%L&F=a:\JwKRrj)wl!@]7mzNh_4}vz.D
2024-09-27 21:53:49 UTC	12712	IN	Data Raw: e2 10 e0 f3 4d ea f3 dd c5 16 fd bd 12 9b ed 3a 78 d7 71 cb 0f 05 12 73 65 5f 43 ee b5 a6 0a 6e 83 08 03 ba f6 3a d7 c1 f5 6c 76 ab 4e 60 47 68 19 58 60 f5 1f 5e bb c3 54 de 2e 80 82 4f c9 76 ef a4 d4 b5 72 0a ee 68 55 55 91 83 40 67 5f dc f5 4a 1c f6 94 3e 3d 7d 79 a0 3e 39 55 07 e7 28 38 b8 38 65 d6 f5 5b 91 70 12 1c 69 47 2b 47 a6 a3 95 0e 6d 81 13 58 fc 26 42 bf 8e 1d ad 38 fe 3e ed 53 99 91 95 ee 68 64 66 52 9b 89 03 08 8d 1b 82 51 74 a5 1c f1 3a ed 15 45 74 3b 29 5e 35 bb d6 fb fa 7a db 7a 27 1a 93 ee 23 3d 44 bf 15 6d ad 43 c0 d2 64 91 ac 81 29 f3 92 ec 05 5f 59 d7 da da 65 be a6 3f da b7 38 0a be 24 da e8 8d 01 b8 41 ae b4 0b ff d2 ba a5 24 85 d5 3e 9e 97 b0 f2 d1 73 cf a0 45 b4 57 a1 27 69 f7 9e 79 d0 2d 71 2f 29 4f 51 86 ce 20 a4 8e 6f 80 45 9c Data Ascii: M:xqse_Cn:lvN`GhX`^T.OvrhUU@g_J>=}y>9U(88e[piG+GmX&B8>ShdfRQt:Et;)^5zz'#=DmCd)_Ye?8$A$>sEW'iy-q/)OQ oE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49732	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:49 UTC	649	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:49 UTC	738	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:49 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 20de5975-101e-003a-5fe7-0fd92e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215349Z-15767c5fc554wklc0x4mc5pq0w00000002w000000000qemv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:49 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-09-27 21:53:49 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49733	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:49 UTC	618	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:49 UTC	792	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:49 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: 81b58fb2-b01e-0059-76aa-0f336a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215349Z-15767c5fc559lm6vwp3h1khw8n00000002x000000000hnzv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:49 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-09-27 21:53:49 UTC	16384	IN	Data Raw: 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 ae d0 47 c2 99 47 5b 6a a1 db c9 ce 2d d0 71 08 5a 64 11 58 a4 Data Ascii: Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUFGG[j-qZdX
2024-09-27 21:53:49 UTC	16384	IN	Data Raw: 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 5e a0 b7 cf f0 f1 eb 15 f7 97 49 1a 67 29 5a 32 4a cf 61 c8 54 Data Ascii: i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9^Ig)Z2JaT
2024-09-27 21:53:49 UTC	16384	IN	Data Raw: c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 22 bf 58 45 07 fb 68 b5 36 b5 cb 52 b6 2d b7 eb c7 d3 70 f8 10 Data Ascii: juh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7"XEh6R-p
2024-09-27 21:53:49 UTC	16384	IN	Data Raw: b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 02 d4 b7 02 3a c1 61 cd 3d bd 16 ca 31 da 5e 8c 95 df 45 cb 01 Data Ascii: ^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{:a=1^E
2024-09-27 21:53:49 UTC	16384	IN	Data Raw: 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 b4 02 92 4b d5 b1 75 17 96 0e b3 72 50 0e 90 16 c6 12 14 96 41 Data Ascii: ojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$sKurPA
2024-09-27 21:53:49 UTC	16384	IN	Data Raw: 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc 62 0c f8 da ff d2 10 b6 5d 8b f8 dd ff 09 a0 f2 fc 73 ab 3f de Data Ascii: 6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3 b]s?
2024-09-27 21:53:49 UTC	2469	IN	Data Raw: 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f e7 bf 94 24 d3 33 bf ed be 46 3e eb 7b 14 3a 2b 1d a6 4f fa be Data Ascii: x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC$3F>{:+O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49735	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:50 UTC	404	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:50 UTC	738	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:50 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 20de5975-101e-003a-5fe7-0fd92e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215350Z-15767c5fc559lm6vwp3h1khw8n00000002x000000000hp0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:50 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-09-27 21:53:50 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49734	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:50 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 21:53:50 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=240672 Date: Fri, 27 Sep 2024 21:53:50 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49736	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:50 UTC	433	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:50 UTC	792	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:50 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: 81b58fb2-b01e-0059-76aa-0f336a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215350Z-15767c5fc55fdfx81a30vtr1fw00000002zg000000008x6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:50 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-09-27 21:53:50 UTC	16384	IN	Data Raw: 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 ae d0 47 c2 99 47 5b 6a a1 db c9 ce 2d d0 71 08 5a 64 11 58 a4 Data Ascii: Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUFGG[j-qZdX
2024-09-27 21:53:50 UTC	16384	IN	Data Raw: 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 5e a0 b7 cf f0 f1 eb 15 f7 97 49 1a 67 29 5a 32 4a cf 61 c8 54 Data Ascii: i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9^Ig)Z2JaT
2024-09-27 21:53:50 UTC	16384	IN	Data Raw: c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 22 bf 58 45 07 fb 68 b5 36 b5 cb 52 b6 2d b7 eb c7 d3 70 f8 10 Data Ascii: juh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7"XEh6R-p
2024-09-27 21:53:50 UTC	16384	IN	Data Raw: b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 02 d4 b7 02 3a c1 61 cd 3d bd 16 ca 31 da 5e 8c 95 df 45 cb 01 Data Ascii: ^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{:a=1^E
2024-09-27 21:53:50 UTC	16384	IN	Data Raw: 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 b4 02 92 4b d5 b1 75 17 96 0e b3 72 50 0e 90 16 c6 12 14 96 41 Data Ascii: ojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$sKurPA
2024-09-27 21:53:50 UTC	16384	IN	Data Raw: 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc 62 0c f8 da ff d2 10 b6 5d 8b f8 dd ff 09 a0 f2 fc 73 ab 3f de Data Ascii: 6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3 b]s?
2024-09-27 21:53:50 UTC	2469	IN	Data Raw: 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f e7 bf 94 24 d3 33 bf ed be 46 3e eb 7b 14 3a 2b 1d a6 4f fa be Data Ascii: x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC$3F>{:+O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49737	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:50 UTC	662	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:50 UTC	784	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:50 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 9c7b4821-901e-0045-01cb-0f2918000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215350Z-15767c5fc55whfstvfw43u8fp400000002n000000000xfmk x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:50 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49738	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:50 UTC	663	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:50 UTC	806	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:50 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: adf1d5ec-d01e-002d-0381-10079a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215350Z-15767c5fc55xgp8c992y5v5w1800000002sg00000000a3ne x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-27 21:53:50 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49739	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:50 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:50 UTC	818	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:50 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: 9c675ff4-801e-0042-42f9-0f0d69000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215350Z-15767c5fc552g4w83buhsr3htc00000002pg000000007bsp x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-27 21:53:50 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-09-27 21:53:50 UTC	16384	IN	Data Raw: bd d6 09 fe 7b 8a 19 bb cd 17 f0 ef de f3 f6 f9 b2 b5 d7 7c 4e 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd Data Ascii: {\|N6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x
2024-09-27 21:53:50 UTC	3218	IN	Data Raw: 01 95 50 8c 0f 4b 38 5d 1d 96 55 52 b0 ee 65 51 a5 80 82 a6 5f a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 Data Ascii: PK8]UReQ_-av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49741	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:50 UTC	663	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:50 UTC	784	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:50 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: ef87b68f-c01e-0064-4af9-0f32ce000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215350Z-15767c5fc55gs96cphvgp5f5vc00000002dg00000000u0bm x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:50 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:51 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 21:53:51 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=240701 Date: Fri, 27 Sep 2024 21:53:51 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 21:53:51 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49743	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:51 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:51 UTC	805	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:51 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 9c7b4821-901e-0045-01cb-0f2918000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215351Z-15767c5fc55rg5b7sh1vuv8t7n00000002x000000000m2c8 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-27 21:53:51 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49744	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:51 UTC	418	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:51 UTC	785	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:51 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: adf1d5ec-d01e-002d-0381-10079a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215351Z-15767c5fc55v7j95gq2uzq37a000000002ug00000000e3gv x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:51 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49745	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:51 UTC	439	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:51 UTC	797	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:51 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: 9c675ff4-801e-0042-42f9-0f0d69000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215351Z-15767c5fc55rv8zjq9dg0musxg00000002r000000000217f x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:53:51 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-09-27 21:53:51 UTC	16384	IN	Data Raw: 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c cb 13 7e 4b 7f b3 f5 a0 bd 18 b0 9c 02 ae 84 Data Ascii: 6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x~K
2024-09-27 21:53:51 UTC	3197	IN	Data Raw: a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 23 de 14 2a 36 0a d3 69 66 72 2e 59 04 99 e6 Data Ascii: -av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x#*6ifr.Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49746	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:51 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:53:51 UTC	805	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:53:51 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: ef87b68f-c01e-0064-4af9-0f32ce000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215351Z-15767c5fc55fdfx81a30vtr1fw00000002y000000000ezkf x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-27 21:53:51 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49748	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:53:53 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=aUrdNzKYFXN+zUT&MD=2cpo+sxf HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-27 21:53:53 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 3431b400-a166-4b8c-b5d9-e36e551e8e2f MS-RequestId: 0a162f83-a64e-4cc4-b228-0b212bceeec9 MS-CV: 8eo1Ai1EpEqIoaMW.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 27 Sep 2024 21:53:52 GMT Connection: close Content-Length: 24490
2024-09-27 21:53:53 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-09-27 21:53:53 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49750	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:54:30 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=aUrdNzKYFXN+zUT&MD=2cpo+sxf HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-27 21:54:30 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 1fbc481f-6230-4362-ad44-40165615e132 MS-RequestId: 9dfcf345-2b69-4af9-816e-51e63b0ca373 MS-CV: xpPCdzleEkW+5zEG.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 27 Sep 2024 21:54:29 GMT Connection: close Content-Length: 30005
2024-09-27 21:54:30 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-09-27 21:54:30 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49755	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:54:57 UTC	668	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:54:57 UTC	740	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:54:57 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: 9f37b09b-401e-0072-2bf1-0fb3a6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215457Z-15767c5fc55d6fcl6x6bw8cpdc00000002kg000000005rrf x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:54:57 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49754	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:54:57 UTC	662	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:54:57 UTC	734	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:54:57 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: 618fc748-501e-002b-53a9-0f439a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215457Z-15767c5fc55fcq6c0mhwdzxkgw00000002xg000000003pg5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:54:57 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49757	13.107.246.45	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:54:58 UTC	423	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:54:58 UTC	740	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:54:58 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: 9f37b09b-401e-0072-2bf1-0fb3a6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215458Z-15767c5fc55fcq6c0mhwdzxkgw00000002x0000000005gck x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:54:58 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49756	13.107.246.45	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:54:58 UTC	417	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:54:58 UTC	761	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:54:58 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: 1bdbb6f5-801e-005a-4707-10a5b1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215458Z-15767c5fc55fdfx81a30vtr1fw00000002w000000000rqna x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-27 21:54:58 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	52695	152.199.21.175	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:18 UTC	595	OUT	GET /shared/5/js/login_en_aPH1MdAMytMMq1WvwJPhJA2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:18 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 222586 Cache-Control: public, max-age=31536000 Content-MD5: 1TOWxsOGVZoUoHLacM8TCg== Content-Type: application/x-javascript Date: Fri, 27 Sep 2024 21:55:18 GMT Etag: 0x8DCD972C3CDB0C7 Last-Modified: Fri, 20 Sep 2024 12:50:11 GMT Server: ECAcc (lhc/794A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 0295bd6c-001e-00b7-7e21-0faccd000000 x-ms-version: 2009-09-19 Content-Length: 946086 Connection: close
2024-09-27 21:55:18 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6c 6f 67 69 6e 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 3d 7b 35 31 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 39 35 31 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 67 65 74 44 65 72 69 Data Ascii: /! For license information please see login_en.js.LICENSE.txt /!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDeri
2024-09-27 21:55:18 UTC	16383	IN	Data Raw: 65 64 3d 21 30 2c 76 6f 69 64 28 72 26 26 28 65 5b 6f 5d 2e 64 65 66 61 75 6c 74 53 65 6c 65 63 74 65 64 3d 21 30 29 29 3b 6e 75 6c 6c 21 3d 3d 74 7c 7c 65 5b 6f 5d 2e 64 69 73 61 62 6c 65 64 7c 7c 28 74 3d 65 5b 6f 5d 29 7d 6e 75 6c 6c 21 3d 3d 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 3d 21 30 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 39 31 29 29 3b 72 65 74 75 72 6e 20 69 28 7b 7d 2c 74 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 76 6f 69 64 20 30 2c 63 68 69 6c 64 72 65 6e 3a 22 22 2b 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 Data Ascii: ed=!0,void(r&&(e[o].defaultSelected=!0));null!==t\|\|e[o].disabled\|\|(t=e[o])}null!==t&&(t.selected=!0)}}function Ie(e,t){if(null!=t.dangerouslySetInnerHTML)throw Error(l(91));return i({},t,{value:void 0,defaultValue:void 0,children:""+e._wrapperState.initia
2024-09-27 21:55:18 UTC	2	IN	Data Raw: 45 72 Data Ascii: Er
2024-09-27 21:55:18 UTC	16383	IN	Data Raw: 72 6f 72 28 6c 28 33 33 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 6a 6e 5d 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 42 6e 28 65 29 7b 64 6f 7b 65 3d 65 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 65 26 26 35 21 3d 3d 65 2e 74 61 67 29 3b 72 65 74 75 72 6e 20 65 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 46 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6f 3d 6d 28 6e 29 3b 69 66 28 21 6f 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 6e 3d 6f 5b 74 5d 3b 65 3a 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 6f 6e 43 6c 69 63 6b 22 3a 63 61 73 65 22 6f 6e 43 6c 69 63 6b 43 61 70 74 75 72 65 22 3a 63 61 73 65 22 6f 6e 44 6f 75 Data Ascii: ror(l(33))}function Nn(e){return e[jn]\|\|null}function Bn(e){do{e=e.return}while(e&&5!==e.tag);return e\|\|null}function Fn(e,t){var n=e.stateNode;if(!n)return null;var o=m(n);if(!o)return null;n=o[t];e:switch(t){case"onClick":case"onClickCapture":case"onDou
2024-09-27 21:55:19 UTC	16383	IN	Data Raw: 5f 73 63 68 65 64 75 6c 65 43 61 6c 6c 62 61 63 6b 2c 54 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 63 61 6e 63 65 6c 43 61 6c 6c 62 61 63 6b 2c 6a 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 72 65 71 75 65 73 74 50 61 69 6e 74 2c 49 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 2c 4c 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 67 65 74 43 75 72 72 65 6e 74 50 72 69 6f 72 69 74 79 4c 65 76 65 6c 2c 44 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 49 6d 6d 65 64 69 61 74 65 50 72 69 6f 72 69 74 79 2c 52 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 55 73 65 72 42 6c 6f 63 6b 69 6e 67 50 72 69 6f 72 69 74 79 2c 4e 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 4e 6f 72 6d 61 6c 50 72 69 6f 72 69 74 79 2c 42 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 4c 6f 77 50 72 69 6f 72 69 74 79 2c 46 6f 3d Data Ascii: _scheduleCallback,To=a.unstable_cancelCallback,jo=a.unstable_requestPaint,Io=a.unstable_now,Lo=a.unstable_getCurrentPriorityLevel,Do=a.unstable_ImmediatePriority,Ro=a.unstable_UserBlockingPriority,No=a.unstable_NormalPriority,Bo=a.unstable_LowPriority,Fo=
2024-09-27 21:55:19 UTC	16383	IN	Data Raw: 29 3b 72 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 6e 75 6c 6c 3a 72 3b 76 61 72 20 69 3d 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 21 3d 3d 51 69 29 7b 76 61 72 20 61 3d 51 69 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 69 66 28 69 3d 61 2e 64 65 73 74 72 6f 79 2c 6e 75 6c 6c 21 3d 3d 72 26 26 5a 69 28 72 2c 61 2e 64 65 70 73 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6c 61 28 74 2c 6e 2c 69 2c 72 29 7d 4b 69 2e 65 66 66 65 63 74 54 61 67 7c 3d 65 2c 6f 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6c 61 28 31 7c 74 2c 6e 2c 69 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 64 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 63 61 28 35 31 36 2c 34 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 61 28 35 31 36 2c 34 2c 65 2c 74 29 Data Ascii: );r=void 0===r?null:r;var i=void 0;if(null!==Qi){var a=Qi.memoizedState;if(i=a.destroy,null!==r&&Zi(r,a.deps))return void la(t,n,i,r)}Ki.effectTag\|=e,o.memoizedState=la(1\|t,n,i,r)}function da(e,t){return ca(516,4,e,t)}function pa(e,t){return ua(516,4,e,t)
2024-09-27 21:55:19 UTC	16383	IN	Data Raw: 66 20 63 2e 6f 6e 43 6c 69 63 6b 26 26 28 65 2e 6f 6e 63 6c 69 63 6b 3d 70 6e 29 7d 78 6e 28 6f 2c 72 29 26 26 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 34 29 7d 6e 75 6c 6c 21 3d 3d 74 2e 72 65 66 26 26 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 31 32 38 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 61 73 65 20 36 3a 69 66 28 65 26 26 6e 75 6c 6c 21 3d 74 2e 73 74 61 74 65 4e 6f 64 65 29 4b 61 28 30 2c 74 2c 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2c 72 29 3b 65 6c 73 65 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 72 26 26 6e 75 6c 6c 3d 3d 3d 74 2e 73 74 61 74 65 4e 6f 64 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 31 36 36 29 29 3b 6e 3d 42 69 28 4e 69 2e 63 75 72 72 65 6e 74 29 2c 42 69 28 44 69 2e 63 75 72 72 65 6e 74 29 2c Data Ascii: f c.onClick&&(e.onclick=pn)}xn(o,r)&&(t.effectTag\|=4)}null!==t.ref&&(t.effectTag\|=128)}return null;case 6:if(e&&null!=t.stateNode)Ka(0,t,e.memoizedProps,r);else{if("string"!=typeof r&&null===t.stateNode)throw Error(l(166));n=Bi(Ni.current),Bi(Di.current),
2024-09-27 21:55:19 UTC	16383	IN	Data Raw: 6f 77 20 45 72 72 6f 72 28 6c 28 33 32 37 29 29 3b 69 66 28 5f 73 28 29 2c 65 3d 3d 3d 44 6c 26 26 74 3d 3d 3d 4e 6c 7c 7c 70 73 28 65 2c 74 29 2c 6e 75 6c 6c 21 3d 3d 52 6c 29 7b 76 61 72 20 6e 3d 4c 6c 3b 4c 6c 7c 3d 41 6c 3b 66 6f 72 28 76 61 72 20 72 3d 67 73 28 29 3b 3b 29 74 72 79 7b 62 73 28 29 3b 62 72 65 61 6b 7d 63 61 74 63 68 28 6f 29 7b 66 73 28 65 2c 6f 29 7d 69 66 28 61 69 28 29 2c 4c 6c 3d 6e 2c 6b 6c 2e 63 75 72 72 65 6e 74 3d 72 2c 31 3d 3d 3d 42 6c 29 74 68 72 6f 77 20 6e 3d 46 6c 2c 70 73 28 65 2c 74 29 2c 56 73 28 65 2c 74 29 2c 6c 73 28 65 29 2c 6e 3b 69 66 28 6e 75 6c 6c 21 3d 3d 52 6c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 32 36 31 29 29 3b 65 2e 66 69 6e 69 73 68 65 64 57 6f 72 6b 3d 65 2e 63 75 72 72 65 6e 74 2e 61 6c 74 65 Data Ascii: ow Error(l(327));if(_s(),e===Dl&&t===Nl\|\|ps(e,t),null!==Rl){var n=Ll;Ll\|=Al;for(var r=gs();;)try{bs();break}catch(o){fs(e,o)}if(ai(),Ll=n,kl.current=r,1===Bl)throw n=Fl,ps(e,t),Vs(e,t),ls(e),n;if(null!==Rl)throw Error(l(261));e.finishedWork=e.current.alte
2024-09-27 21:55:19 UTC	16383	IN	Data Raw: 65 6e 3a 6e 75 6c 6c 2c 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 3a 65 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 7d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 7a 73 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 74 61 67 3d 74 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 3d 65 2c 74 68 69 73 2e 70 69 6e 67 43 61 63 68 65 3d 74 68 69 73 2e 70 65 6e 64 69 6e 67 43 68 69 6c 64 72 65 6e 3d 6e 75 6c 6c 2c 74 68 69 73 2e 66 69 6e 69 73 68 65 64 45 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 30 2c 74 68 69 73 2e 66 69 6e 69 73 68 65 64 57 6f 72 6b 3d 6e 75 6c 6c 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 3d 2d 31 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f Data Ascii: en:null,implementation:e.implementation},t}function zs(e,t,n){this.tag=t,this.current=null,this.containerInfo=e,this.pingCache=this.pendingChildren=null,this.finishedExpirationTime=0,this.finishedWork=null,this.timeoutHandle=-1,this.pendingContext=this.co
2024-09-27 21:55:19 UTC	16383	IN	Data Raw: 74 63 68 65 72 3a 4d 2c 52 65 61 63 74 43 75 72 72 65 6e 74 42 61 74 63 68 43 6f 6e 66 69 67 3a 7b 73 75 73 70 65 6e 73 65 3a 6e 75 6c 6c 7d 2c 52 65 61 63 74 43 75 72 72 65 6e 74 4f 77 6e 65 72 3a 5f 2c 49 73 53 6f 6d 65 52 65 6e 64 65 72 65 72 41 63 74 69 6e 67 3a 7b 63 75 72 72 65 6e 74 3a 21 31 7d 2c 61 73 73 69 67 6e 3a 6f 7d 3b 74 2e 43 68 69 6c 64 72 65 6e 3d 7b 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 55 28 65 2c 72 2c 6e 75 6c 6c 2c 74 2c 6e 29 2c 72 7d 2c 66 6f 72 45 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 52 28 65 2c 42 2c 74 3d 49 28 6e 75 Data Ascii: tcher:M,ReactCurrentBatchConfig:{suspense:null},ReactCurrentOwner:_,IsSomeRendererActing:{current:!1},assign:o};t.Children={map:function(e,t,n){if(null==e)return e;var r=[];return U(e,r,null,t,n),r},forEach:function(e,t,n){if(null==e)return e;R(e,B,t=I(nu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	52700	152.199.21.175	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:20 UTC	392	OUT	GET /shared/5/js/login_en_aPH1MdAMytMMq1WvwJPhJA2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:20 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 222588 Cache-Control: public, max-age=31536000 Content-MD5: 1TOWxsOGVZoUoHLacM8TCg== Content-Type: application/x-javascript Date: Fri, 27 Sep 2024 21:55:20 GMT Etag: 0x8DCD972C3CDB0C7 Last-Modified: Fri, 20 Sep 2024 12:50:11 GMT Server: ECAcc (lhc/794A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 0295bd6c-001e-00b7-7e21-0faccd000000 x-ms-version: 2009-09-19 Content-Length: 946086 Connection: close
2024-09-27 21:55:20 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6c 6f 67 69 6e 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 3d 7b 35 31 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 39 35 31 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 67 65 74 44 65 72 69 Data Ascii: /! For license information please see login_en.js.LICENSE.txt /!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDeri
2024-09-27 21:55:20 UTC	1	IN	Data Raw: 65 Data Ascii: e
2024-09-27 21:55:20 UTC	16383	IN	Data Raw: 64 3d 21 30 2c 76 6f 69 64 28 72 26 26 28 65 5b 6f 5d 2e 64 65 66 61 75 6c 74 53 65 6c 65 63 74 65 64 3d 21 30 29 29 3b 6e 75 6c 6c 21 3d 3d 74 7c 7c 65 5b 6f 5d 2e 64 69 73 61 62 6c 65 64 7c 7c 28 74 3d 65 5b 6f 5d 29 7d 6e 75 6c 6c 21 3d 3d 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 3d 21 30 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 39 31 29 29 3b 72 65 74 75 72 6e 20 69 28 7b 7d 2c 74 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 76 6f 69 64 20 30 2c 63 68 69 6c 64 72 65 6e 3a 22 22 2b 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c Data Ascii: d=!0,void(r&&(e[o].defaultSelected=!0));null!==t\|\|e[o].disabled\|\|(t=e[o])}null!==t&&(t.selected=!0)}}function Ie(e,t){if(null!=t.dangerouslySetInnerHTML)throw Error(l(91));return i({},t,{value:void 0,defaultValue:void 0,children:""+e._wrapperState.initial
2024-09-27 21:55:20 UTC	16383	IN	Data Raw: 72 72 6f 72 28 6c 28 33 33 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 6a 6e 5d 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 42 6e 28 65 29 7b 64 6f 7b 65 3d 65 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 65 26 26 35 21 3d 3d 65 2e 74 61 67 29 3b 72 65 74 75 72 6e 20 65 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 46 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6f 3d 6d 28 6e 29 3b 69 66 28 21 6f 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 6e 3d 6f 5b 74 5d 3b 65 3a 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 6f 6e 43 6c 69 63 6b 22 3a 63 61 73 65 22 6f 6e 43 6c 69 63 6b 43 61 70 74 75 72 65 22 3a 63 61 73 65 22 6f 6e 44 6f Data Ascii: rror(l(33))}function Nn(e){return e[jn]\|\|null}function Bn(e){do{e=e.return}while(e&&5!==e.tag);return e\|\|null}function Fn(e,t){var n=e.stateNode;if(!n)return null;var o=m(n);if(!o)return null;n=o[t];e:switch(t){case"onClick":case"onClickCapture":case"onDo
2024-09-27 21:55:20 UTC	2	IN	Data Raw: 65 5f Data Ascii: e_
2024-09-27 21:55:20 UTC	16383	IN	Data Raw: 73 63 68 65 64 75 6c 65 43 61 6c 6c 62 61 63 6b 2c 54 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 63 61 6e 63 65 6c 43 61 6c 6c 62 61 63 6b 2c 6a 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 72 65 71 75 65 73 74 50 61 69 6e 74 2c 49 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 2c 4c 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 67 65 74 43 75 72 72 65 6e 74 50 72 69 6f 72 69 74 79 4c 65 76 65 6c 2c 44 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 49 6d 6d 65 64 69 61 74 65 50 72 69 6f 72 69 74 79 2c 52 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 55 73 65 72 42 6c 6f 63 6b 69 6e 67 50 72 69 6f 72 69 74 79 2c 4e 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 4e 6f 72 6d 61 6c 50 72 69 6f 72 69 74 79 2c 42 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 4c 6f 77 50 72 69 6f 72 69 74 79 2c 46 6f 3d 61 Data Ascii: scheduleCallback,To=a.unstable_cancelCallback,jo=a.unstable_requestPaint,Io=a.unstable_now,Lo=a.unstable_getCurrentPriorityLevel,Do=a.unstable_ImmediatePriority,Ro=a.unstable_UserBlockingPriority,No=a.unstable_NormalPriority,Bo=a.unstable_LowPriority,Fo=a
2024-09-27 21:55:20 UTC	16383	IN	Data Raw: 3b 72 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 6e 75 6c 6c 3a 72 3b 76 61 72 20 69 3d 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 21 3d 3d 51 69 29 7b 76 61 72 20 61 3d 51 69 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 69 66 28 69 3d 61 2e 64 65 73 74 72 6f 79 2c 6e 75 6c 6c 21 3d 3d 72 26 26 5a 69 28 72 2c 61 2e 64 65 70 73 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6c 61 28 74 2c 6e 2c 69 2c 72 29 7d 4b 69 2e 65 66 66 65 63 74 54 61 67 7c 3d 65 2c 6f 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6c 61 28 31 7c 74 2c 6e 2c 69 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 64 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 63 61 28 35 31 36 2c 34 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 61 28 35 31 36 2c 34 2c 65 2c 74 29 7d Data Ascii: ;r=void 0===r?null:r;var i=void 0;if(null!==Qi){var a=Qi.memoizedState;if(i=a.destroy,null!==r&&Zi(r,a.deps))return void la(t,n,i,r)}Ki.effectTag\|=e,o.memoizedState=la(1\|t,n,i,r)}function da(e,t){return ca(516,4,e,t)}function pa(e,t){return ua(516,4,e,t)}
2024-09-27 21:55:20 UTC	2	IN	Data Raw: 20 63 Data Ascii: c
2024-09-27 21:55:20 UTC	16383	IN	Data Raw: 2e 6f 6e 43 6c 69 63 6b 26 26 28 65 2e 6f 6e 63 6c 69 63 6b 3d 70 6e 29 7d 78 6e 28 6f 2c 72 29 26 26 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 34 29 7d 6e 75 6c 6c 21 3d 3d 74 2e 72 65 66 26 26 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 31 32 38 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 61 73 65 20 36 3a 69 66 28 65 26 26 6e 75 6c 6c 21 3d 74 2e 73 74 61 74 65 4e 6f 64 65 29 4b 61 28 30 2c 74 2c 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2c 72 29 3b 65 6c 73 65 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 72 26 26 6e 75 6c 6c 3d 3d 3d 74 2e 73 74 61 74 65 4e 6f 64 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 31 36 36 29 29 3b 6e 3d 42 69 28 4e 69 2e 63 75 72 72 65 6e 74 29 2c 42 69 28 44 69 2e 63 75 72 72 65 6e 74 29 2c 4c 61 28 Data Ascii: .onClick&&(e.onclick=pn)}xn(o,r)&&(t.effectTag\|=4)}null!==t.ref&&(t.effectTag\|=128)}return null;case 6:if(e&&null!=t.stateNode)Ka(0,t,e.memoizedProps,r);else{if("string"!=typeof r&&null===t.stateNode)throw Error(l(166));n=Bi(Ni.current),Bi(Di.current),La(
2024-09-27 21:55:20 UTC	1	IN	Data Raw: 45 Data Ascii: E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	52701	152.199.21.175	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:20 UTC	606	OUT	GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:20 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3934469 Cache-Control: public, max-age=31536000 Content-MD5: Lih+tBiUAIS5IVkMbmcsng== Content-Type: application/x-javascript Date: Fri, 27 Sep 2024 21:55:20 GMT Etag: 0x8DCB8B8BCF38323 Last-Modified: Fri, 09 Aug 2024 21:17:56 GMT Server: ECAcc (lhc/7922) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 85390ee5-001e-0062-515f-ed96e9000000 x-ms-version: 2009-09-19 Content-Length: 90677 Connection: close
2024-09-27 21:55:20 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6f 6e 65 64 73 2d 61 6e 61 6c 79 74 69 63 73 2d 6a 73 5f 30 37 37 32 31 37 37 34 30 63 38 35 33 62 35 64 34 66 65 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 31 5d 2c 7b 32 32 37 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 7b 41 70 70 49 6e 73 69 67 68 74 73 43 6f 72 65 Data Ascii: /! For license information please see oneds-analytics-js_077217740c853b5d4fe8.js.LICENSE.txt /"use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[471],{2278:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore
2024-09-27 21:55:20 UTC	16383	IN	Data Raw: 72 69 6e 67 22 2c 61 74 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 75 74 3d 22 65 78 70 69 72 65 73 22 2c 63 74 3d 6e 75 6c 6c 2c 73 74 3d 6e 75 6c 6c 2c 6c 74 3d 6e 75 6c 6c 2c 66 74 3d 44 65 28 29 2c 64 74 3d 7b 7d 2c 76 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 74 28 6e 2c 65 29 7b 76 61 72 20 74 3d 6d 74 2e 5f 63 6b 4d 67 72 7c 7c 76 74 2e 5f 63 6b 4d 67 72 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 6d 74 2e 5f 63 6b 4d 67 72 3d 6d 74 28 6e 2c 65 29 2c 76 74 2e 5f 63 6b 4d 67 72 3d 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 6e 29 7b 72 65 74 75 72 6e 21 6e 7c 7c 6e 2e 69 73 45 6e 61 62 6c 65 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 6e 2c 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 6e 26 26 42 6e 28 6e 2e 69 67 6e 6f 72 65 43 6f 6f Data Ascii: ring",at="toUTCString",ut="expires",ct=null,st=null,lt=null,ft=De(),dt={},vt={};function pt(n,e){var t=mt._ckMgr\|\|vt._ckMgr;return t\|\|(t=mt._ckMgr=mt(n,e),vt._ckMgr=t),t}function gt(n){return!n\|\|n.isEnabled()}function yt(n,e){return!!(e&&n&&Bn(n.ignoreCoo
2024-09-27 21:55:20 UTC	16383	IN	Data Raw: 20 74 65 28 75 29 7d 28 6e 2c 65 2c 74 29 3b 69 7c 7c 28 69 3d 75 29 2c 61 26 26 61 2e 5f 73 65 74 4e 65 78 74 28 75 29 2c 61 3d 75 7d 7d 29 29 7d 72 65 74 75 72 6e 20 72 26 26 21 69 3f 6c 69 28 5b 72 5d 2c 65 2c 74 29 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 6e 2e 70 75 73 68 28 65 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 57 6e 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6e 28 65 2c 74 29 7d 63 61 74 63 68 28 72 29 7b 72 74 28 65 2e 64 69 61 67 4c 6f 67 28 29 2c 32 2c 37 33 2c 22 55 6e 65 78 70 65 63 74 65 64 20 65 72 72 6f 72 20 63 61 6c 6c 69 6e 67 20 75 6e 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 2d 20 Data Ascii: te(u)}(n,e,t);i\|\|(i=u),a&&a._setNext(u),a=u}}))}return r&&!i?li([r],e,t):i}function fi(){var n=[];return{add:function(e){e&&n.push(e)},run:function(e,t){Wn(n,(function(n){try{n(e,t)}catch(r){rt(e.diagLog(),2,73,"Unexpected error calling unload handler -
2024-09-27 21:55:20 UTC	16383	IN	Data Raw: 3d 72 2e 72 6f 6c 65 56 65 72 2c 74 29 2c 64 29 7d 2c 6e 2e 61 70 70 6c 79 41 49 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3b 69 66 28 74 2e 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 54 72 61 63 65 29 7b 76 61 72 20 72 3d 70 28 29 3b 72 26 26 54 6f 28 32 2c 6e 2c 44 69 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 72 2e 67 65 74 54 72 61 63 65 49 64 28 29 2c 65 5b 31 5d 3d 72 2e 67 65 74 4e 61 6d 65 28 29 2c 65 5b 32 5d 3d 72 2e 67 65 74 53 70 61 6e 49 64 28 29 2c 65 29 2c 21 31 29 7d 7d 2c 6e 2e 61 70 70 6c 79 44 69 73 74 72 69 62 75 74 65 64 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3d 70 28 29 3b 69 66 28 74 29 7b 76 61 72 20 72 Data Ascii: =r.roleVer,t),d)},n.applyAITraceContext=function(n){var e;if(t.enableApplicationInsightsTrace){var r=p();r&&To(2,n,Di,((e={})[0]=r.getTraceId(),e[1]=r.getName(),e[2]=r.getSpanId(),e),!1)}},n.applyDistributedTraceContext=function(n){var e,t=p();if(t){var r
2024-09-27 21:55:20 UTC	16383	IN	Data Raw: 65 45 78 63 65 65 64 3a 5b 5d 2c 66 61 69 6c 65 64 45 76 74 73 3a 5b 5d 2c 62 61 74 63 68 65 73 3a 5b 5d 2c 6e 75 6d 45 76 65 6e 74 73 3a 30 2c 72 65 74 72 79 43 6e 74 3a 6e 2c 69 73 54 65 61 72 64 6f 77 6e 3a 65 2c 69 73 53 79 6e 63 3a 74 2c 69 73 42 65 61 63 6f 6e 3a 72 2c 73 65 6e 64 54 79 70 65 3a 6f 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 69 7d 7d 2c 6e 2e 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 74 26 26 72 26 26 21 74 2e 6f 76 65 72 66 6c 6f 77 3b 72 65 74 75 72 6e 20 6f 26 26 47 72 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 53 65 72 69 61 6c 69 7a 65 72 3a 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 Data Ascii: eExceed:[],failedEvts:[],batches:[],numEvents:0,retryCnt:n,isTeardown:e,isSync:t,isBeacon:r,sendType:o,sendReason:i}},n.appendPayload=function(t,r,i){var o=t&&r&&!t.overflow;return o&&Gr(e,(function(){return"Serializer:appendPayload"}),(function(){for(var
2024-09-27 21:55:20 UTC	8762	IN	Data Raw: 28 29 7b 28 62 3d 7b 7d 29 5b 6a 6f 5d 3d 5b 32 2c 31 2c 30 5d 2c 62 5b 57 6f 5d 3d 5b 36 2c 33 2c 30 5d 2c 62 5b 56 6f 5d 3d 5b 31 38 2c 39 2c 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 6b 3b 50 26 26 28 69 3d 4e 29 2c 57 6e 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 63 6f 75 6e 74 28 29 3e 30 26 26 57 6e 28 65 2e 65 76 65 6e 74 73 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 28 65 2e 73 79 6e 63 26 26 28 65 2e 6c 61 74 65 6e 63 79 3d 34 2c 65 2e 73 79 6e 63 3d 21 31 29 2c 65 2e 73 65 6e 64 41 74 74 65 6d 70 74 3c 69 3f 28 7a 72 28 65 2c 6e 2e 69 64 65 6e 74 69 66 69 65 72 29 2c 41 28 65 2c 21 31 29 29 3a 72 2e 70 75 73 68 28 65 29 29 7d 29 29 7d 29 29 2c 72 2e 6c 65 6e 67 74 Data Ascii: (){(b={})[jo]=[2,1,0],b[Wo]=[6,3,0],b[Vo]=[18,9,0]}function G(e,t){var r=[],i=k;P&&(i=N),Wn(e,(function(e){e&&e.count()>0&&Wn(e.events(),(function(e){e&&(e.sync&&(e.latency=4,e.sync=!1),e.sendAttempt<i?(zr(e,n.identifier),A(e,!1)):r.push(e))}))})),r.lengt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	52702	152.199.21.175	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:20 UTC	634	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:20 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16215489 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 27 Sep 2024 21:55:20 GMT Etag: 0x8DB77257FFE6B4E Last-Modified: Tue, 27 Jun 2023 15:45:14 GMT Server: ECAcc (lhc/793D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e98d5e21-301e-0028-71ad-7d9304000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-09-27 21:55:20 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	52703	152.199.21.175	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:20 UTC	621	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:20 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16215452 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 27 Sep 2024 21:55:20 GMT Etag: 0x8DB77257C91B168 Last-Modified: Tue, 27 Jun 2023 15:45:09 GMT Server: ECAcc (lhc/7913) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5a38ddb4-801e-0053-2bad-7d4413000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-09-27 21:55:20 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	52707	152.199.21.175	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:21 UTC	400	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:22 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16215490 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 27 Sep 2024 21:55:21 GMT Etag: 0x8DB77257FFE6B4E Last-Modified: Tue, 27 Jun 2023 15:45:14 GMT Server: ECAcc (lhc/793D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e98d5e21-301e-0028-71ad-7d9304000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-09-27 21:55:22 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	52708	152.199.21.175	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:21 UTC	387	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:22 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16215453 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 27 Sep 2024 21:55:21 GMT Etag: 0x8DB77257C91B168 Last-Modified: Tue, 27 Jun 2023 15:45:09 GMT Server: ECAcc (lhc/7913) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5a38ddb4-801e-0053-2bad-7d4413000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-09-27 21:55:22 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	52709	152.199.21.175	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:21 UTC	403	OUT	GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:22 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3934470 Cache-Control: public, max-age=31536000 Content-MD5: Lih+tBiUAIS5IVkMbmcsng== Content-Type: application/x-javascript Date: Fri, 27 Sep 2024 21:55:21 GMT Etag: 0x8DCB8B8BCF38323 Last-Modified: Fri, 09 Aug 2024 21:17:56 GMT Server: ECAcc (lhc/7922) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 85390ee5-001e-0062-515f-ed96e9000000 x-ms-version: 2009-09-19 Content-Length: 90677 Connection: close
2024-09-27 21:55:22 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6f 6e 65 64 73 2d 61 6e 61 6c 79 74 69 63 73 2d 6a 73 5f 30 37 37 32 31 37 37 34 30 63 38 35 33 62 35 64 34 66 65 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 31 5d 2c 7b 32 32 37 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 7b 41 70 70 49 6e 73 69 67 68 74 73 43 6f 72 65 Data Ascii: /! For license information please see oneds-analytics-js_077217740c853b5d4fe8.js.LICENSE.txt /"use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[471],{2278:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore
2024-09-27 21:55:22 UTC	1	IN	Data Raw: 72 Data Ascii: r
2024-09-27 21:55:22 UTC	16383	IN	Data Raw: 69 6e 67 22 2c 61 74 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 75 74 3d 22 65 78 70 69 72 65 73 22 2c 63 74 3d 6e 75 6c 6c 2c 73 74 3d 6e 75 6c 6c 2c 6c 74 3d 6e 75 6c 6c 2c 66 74 3d 44 65 28 29 2c 64 74 3d 7b 7d 2c 76 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 74 28 6e 2c 65 29 7b 76 61 72 20 74 3d 6d 74 2e 5f 63 6b 4d 67 72 7c 7c 76 74 2e 5f 63 6b 4d 67 72 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 6d 74 2e 5f 63 6b 4d 67 72 3d 6d 74 28 6e 2c 65 29 2c 76 74 2e 5f 63 6b 4d 67 72 3d 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 6e 29 7b 72 65 74 75 72 6e 21 6e 7c 7c 6e 2e 69 73 45 6e 61 62 6c 65 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 6e 2c 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 6e 26 26 42 6e 28 6e 2e 69 67 6e 6f 72 65 43 6f 6f 6b Data Ascii: ing",at="toUTCString",ut="expires",ct=null,st=null,lt=null,ft=De(),dt={},vt={};function pt(n,e){var t=mt._ckMgr\|\|vt._ckMgr;return t\|\|(t=mt._ckMgr=mt(n,e),vt._ckMgr=t),t}function gt(n){return!n\|\|n.isEnabled()}function yt(n,e){return!!(e&&n&&Bn(n.ignoreCook
2024-09-27 21:55:22 UTC	16383	IN	Data Raw: 74 65 28 75 29 7d 28 6e 2c 65 2c 74 29 3b 69 7c 7c 28 69 3d 75 29 2c 61 26 26 61 2e 5f 73 65 74 4e 65 78 74 28 75 29 2c 61 3d 75 7d 7d 29 29 7d 72 65 74 75 72 6e 20 72 26 26 21 69 3f 6c 69 28 5b 72 5d 2c 65 2c 74 29 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 6e 2e 70 75 73 68 28 65 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 57 6e 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6e 28 65 2c 74 29 7d 63 61 74 63 68 28 72 29 7b 72 74 28 65 2e 64 69 61 67 4c 6f 67 28 29 2c 32 2c 37 33 2c 22 55 6e 65 78 70 65 63 74 65 64 20 65 72 72 6f 72 20 63 61 6c 6c 69 6e 67 20 75 6e 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 2d 20 22 Data Ascii: te(u)}(n,e,t);i\|\|(i=u),a&&a._setNext(u),a=u}}))}return r&&!i?li([r],e,t):i}function fi(){var n=[];return{add:function(e){e&&n.push(e)},run:function(e,t){Wn(n,(function(n){try{n(e,t)}catch(r){rt(e.diagLog(),2,73,"Unexpected error calling unload handler - "
2024-09-27 21:55:22 UTC	16383	IN	Data Raw: 72 2e 72 6f 6c 65 56 65 72 2c 74 29 2c 64 29 7d 2c 6e 2e 61 70 70 6c 79 41 49 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3b 69 66 28 74 2e 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 54 72 61 63 65 29 7b 76 61 72 20 72 3d 70 28 29 3b 72 26 26 54 6f 28 32 2c 6e 2c 44 69 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 72 2e 67 65 74 54 72 61 63 65 49 64 28 29 2c 65 5b 31 5d 3d 72 2e 67 65 74 4e 61 6d 65 28 29 2c 65 5b 32 5d 3d 72 2e 67 65 74 53 70 61 6e 49 64 28 29 2c 65 29 2c 21 31 29 7d 7d 2c 6e 2e 61 70 70 6c 79 44 69 73 74 72 69 62 75 74 65 64 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3d 70 28 29 3b 69 66 28 74 29 7b 76 61 72 20 72 3d Data Ascii: r.roleVer,t),d)},n.applyAITraceContext=function(n){var e;if(t.enableApplicationInsightsTrace){var r=p();r&&To(2,n,Di,((e={})[0]=r.getTraceId(),e[1]=r.getName(),e[2]=r.getSpanId(),e),!1)}},n.applyDistributedTraceContext=function(n){var e,t=p();if(t){var r=
2024-09-27 21:55:22 UTC	16383	IN	Data Raw: 45 78 63 65 65 64 3a 5b 5d 2c 66 61 69 6c 65 64 45 76 74 73 3a 5b 5d 2c 62 61 74 63 68 65 73 3a 5b 5d 2c 6e 75 6d 45 76 65 6e 74 73 3a 30 2c 72 65 74 72 79 43 6e 74 3a 6e 2c 69 73 54 65 61 72 64 6f 77 6e 3a 65 2c 69 73 53 79 6e 63 3a 74 2c 69 73 42 65 61 63 6f 6e 3a 72 2c 73 65 6e 64 54 79 70 65 3a 6f 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 69 7d 7d 2c 6e 2e 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 74 26 26 72 26 26 21 74 2e 6f 76 65 72 66 6c 6f 77 3b 72 65 74 75 72 6e 20 6f 26 26 47 72 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 53 65 72 69 61 6c 69 7a 65 72 3a 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 Data Ascii: Exceed:[],failedEvts:[],batches:[],numEvents:0,retryCnt:n,isTeardown:e,isSync:t,isBeacon:r,sendType:o,sendReason:i}},n.appendPayload=function(t,r,i){var o=t&&r&&!t.overflow;return o&&Gr(e,(function(){return"Serializer:appendPayload"}),(function(){for(var
2024-09-27 21:55:22 UTC	8761	IN	Data Raw: 29 7b 28 62 3d 7b 7d 29 5b 6a 6f 5d 3d 5b 32 2c 31 2c 30 5d 2c 62 5b 57 6f 5d 3d 5b 36 2c 33 2c 30 5d 2c 62 5b 56 6f 5d 3d 5b 31 38 2c 39 2c 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 6b 3b 50 26 26 28 69 3d 4e 29 2c 57 6e 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 63 6f 75 6e 74 28 29 3e 30 26 26 57 6e 28 65 2e 65 76 65 6e 74 73 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 28 65 2e 73 79 6e 63 26 26 28 65 2e 6c 61 74 65 6e 63 79 3d 34 2c 65 2e 73 79 6e 63 3d 21 31 29 2c 65 2e 73 65 6e 64 41 74 74 65 6d 70 74 3c 69 3f 28 7a 72 28 65 2c 6e 2e 69 64 65 6e 74 69 66 69 65 72 29 2c 41 28 65 2c 21 31 29 29 3a 72 2e 70 75 73 68 28 65 29 29 7d 29 29 7d 29 29 2c 72 2e 6c 65 6e 67 74 68 Data Ascii: ){(b={})[jo]=[2,1,0],b[Wo]=[6,3,0],b[Vo]=[18,9,0]}function G(e,t){var r=[],i=k;P&&(i=N),Wn(e,(function(e){e&&e.count()>0&&Wn(e.events(),(function(e){e&&(e.sync&&(e.latency=4,e.sync=!1),e.sendAttempt<i?(zr(e,n.identifier),A(e,!1)):r.push(e))}))})),r.length

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	52713	152.199.21.175	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:24 UTC	612	OUT	GET /16.000.30374.3/images/favicon.ico HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:25 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 270820 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Fri, 27 Sep 2024 21:55:25 GMT Etag: 0x8DCDC2164BD5DC4 Last-Modified: Mon, 23 Sep 2024 22:45:16 GMT Server: ECAcc (lhc/790E) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ded21bf7-901e-002d-27b1-0ee7bd000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-09-27 21:55:25 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-09-27 21:55:25 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	52715	152.199.21.175	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:25 UTC	378	OUT	GET /16.000.30374.3/images/favicon.ico HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:26 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 270821 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Fri, 27 Sep 2024 21:55:26 GMT Etag: 0x8DCDC2164BD5DC4 Last-Modified: Mon, 23 Sep 2024 22:45:16 GMT Server: ECAcc (lhc/790E) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ded21bf7-901e-002d-27b1-0ee7bd000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-09-27 21:55:26 UTC	15684	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-09-27 21:55:26 UTC	1490	IN	Data Raw: 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	52731	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:39 UTC	617	OUT	GET /shared/5/js/reset-password-signinname_en_iGkKHb6MchyJTpOn_ZeIdw2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:39 UTC	793	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:55:39 GMT Content-Type: application/x-javascript Content-Length: 170734 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 18 Sep 2024 20:39:34 GMT ETag: 0x8DCD822015BAA9D x-ms-request-id: 915e21cd-101e-0040-4c27-11b3d1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215539Z-15767c5fc55v7j95gq2uzq37a000000002xg000000003kf0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-09-27 21:55:39 UTC	15591	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 6b 77 db b8 b2 20 fa fd fe 0a 5b 37 4b 8b 3c 86 15 c9 ce 93 0a 5b 93 c4 76 27 dd 79 75 1e dd e9 f6 f6 78 d1 12 64 33 91 48 85 a4 ec 38 b6 fe fb ad 07 9e 24 e5 24 fb cc 99 39 77 b2 56 2c 10 04 81 42 a1 00 54 15 aa 0a b7 ff 63 73 e3 20 2f 36 66 e9 58 66 a5 dc 48 b3 69 5e cc 93 2a cd b3 8d c5 4c 26 90 55 4a b9 51 c8 52 56 db 8b a4 2c 2f f2 62 b2 5d a6 a7 59 9a 65 c9 5c 1e cb ac f7 a9 ec bd 78 fe 74 ff d5 bb fd 5e f5 b5 da f8 8f db ff cf e6 74 99 8d b1 8e 20 bc 3a 4f 8a 0d 29 2a 91 89 42 e4 22 8d af ee 0e 76 ef 46 a6 00 bd 0a af 3a 4b 6c a9 2a d2 71 d5 19 e2 27 45 9c 05 3b 0f ef 0e 42 91 c7 57 e3 b3 74 36 79 9a 67 95 fc 5a bd bf 5c c8 32 da ec 8b b1 7d ae 3d d2 eb 89 9c 26 cb 59 f5 a6 c8 17 fc 9c 96 8b 59 72 f9 0a 80 c6 c7 Data Ascii: kw [7K<[v'yuxd3H8$$9wV,BTcs /6fXfHi^L&UJQRV,/b]Ye\xt^t :O)B"vF:Kl*q'E;BWt6ygZ\2}=&YYr
2024-09-27 21:55:39 UTC	16384	IN	Data Raw: 8f 30 08 57 c9 90 ec dc b7 48 db dd 21 74 ed ee 62 d9 53 b4 bd 17 bb 77 38 cd 68 d8 bd 8b 2d 02 33 b6 0b ed 3d cb e7 f8 cd 7d 0f b3 bb 0f 1c cc ee 3e f4 d1 7a a7 ef 21 f5 0e d4 f6 3c 2b 25 da 5a dc b9 67 f1 3b c0 3e 1e 0c 30 01 90 1c ec 60 02 c0 38 d8 c5 04 7c 73 70 07 13 f0 c1 c1 5d 4c 00 00 07 f7 30 01 4d 1f dc c7 04 34 7b f0 00 51 05 ed 1d 3c c4 c4 00 2b ec 63 8a aa c6 ba 77 b0 ee 01 56 7e 07 2a 7f b5 9c 33 3e 06 08 95 3b 54 3b 3b f0 1a 55 84 30 2c 89 37 13 80 ba eb 5a 1c 22 79 4d ff 79 7e 48 cf e8 c9 82 bf c4 f1 79 03 ed dd f5 a2 96 09 7b 48 69 95 38 1c 61 55 c6 34 bb c2 91 1a f5 a8 ed 38 51 d6 8e d4 b5 3e d7 ea f6 b9 ca 54 01 87 1f 1d d1 1d f2 0e 5c 51 07 3a ab 5d 28 ff 7d 7d 60 01 4c 57 a2 34 3e 7c 50 b9 5e 4f a8 17 81 b6 b5 ab 05 23 84 09 98 fc 42 Data Ascii: 0WH!tbSw8h-3=}>z!<+%Zg;>0`8\|sp]L0M4{Q<+cwV~*3>;T;;U0,7Z"yMy~Hy{Hi8aU48Q>T\Q:](}}`LW4>\|P^O#B
2024-09-27 21:55:39 UTC	16384	IN	Data Raw: 75 6a 31 59 06 2b 6f e7 38 52 8e 1e d6 5d f3 a7 99 77 a5 da a9 15 e5 60 75 0d 9b f1 d2 dc ae e6 4f 0d 57 7f c8 af 4e a7 fa 31 cf 5b 56 2a 46 00 34 e4 09 02 b8 36 54 58 79 97 ba db 2f 98 b9 be 95 15 6b 0a d9 a8 70 ae 66 8d 1f 97 66 2c 5d 69 f4 fe 21 5c db 18 e9 54 1f 24 2b 7b d8 8e 48 61 a3 0e c6 99 a5 09 a8 24 d4 97 1f 78 e5 ae 48 a8 e4 0d 4b 13 25 8d 8c ce c8 16 29 3a c0 e0 a4 7d f6 ad ea 57 52 1d cb 37 81 d1 e0 84 a2 22 c1 9e d1 af 89 d4 75 af d3 41 48 c9 d3 14 57 29 d2 b5 59 56 35 e3 18 aa 19 c9 fe 9c cc 4b 0a 4a 25 c4 55 1d ef 5e 50 d1 fa ff 80 cd 86 ad d2 74 76 45 6e 74 d8 cf d4 93 c3 b7 6d 69 41 c6 f2 97 4d 1a d4 a1 68 6b dd 6c 6a b8 ca b4 16 74 7d ea b9 de 8b 86 78 bb a3 fc 59 cf d3 a3 d1 3a 52 85 08 0c b5 69 d7 68 69 a8 a9 34 ce d0 f7 a8 96 b4 50 Data Ascii: uj1Y+o8R]w`uOWN1[V*F46TXy/kpff,]i!\T$+{Ha$xHK%):}WR7"uAHW)YV5KJ%U^PtvEntmiAMhkljt}xY:Rihi4P
2024-09-27 21:55:40 UTC	16384	IN	Data Raw: 28 67 1b 54 54 80 aa c2 c6 b9 c1 45 6e f0 5a 38 8f 08 65 f2 10 6e 73 8b 95 82 42 d3 84 1a 02 62 7b 9e 52 a6 b2 0d ac 7e f0 bc 53 46 45 09 d2 61 b8 8e dd db 12 96 df ad 7d 61 35 c4 18 d0 15 86 ad 46 5d 51 93 3d d8 54 9f 3c ac 99 dd d6 0b fe f1 9d 1d 3e bd 1d 21 6f 6d ad 60 f7 78 c2 1a e1 c2 9c d0 0e 50 9a a8 29 96 f3 80 7f 79 c2 f4 44 46 98 16 32 eb f3 34 48 ce 8b 8b 41 4e 46 b7 c5 02 f8 75 54 3e e2 25 1a bd e0 6d b7 84 5f 6b cd ac 68 64 ca 04 92 a1 a1 ee f2 b1 ee 0a d9 70 7b 87 3b 76 9d 63 e4 64 0a 34 af a2 18 3f 8d a6 09 b2 bf cc c9 ee d2 9f 69 8d 4d a5 88 d4 05 22 b7 88 f6 62 f4 25 87 79 29 20 19 8e d1 04 83 0f fc 75 1a 9a 1d b1 a0 bb db 9e 18 86 ab 18 00 d3 3d 82 04 d0 46 0a 85 31 32 85 3d 32 65 fa 8f 30 2b cd 13 d4 43 d2 f4 df e7 4b b4 03 7c 66 8c 35 Data Ascii: (gTTEnZ8ensBb{R~SFEa}a5F]Q=T<>!om`xP)yDF24HANFuT>%m_khdp{;vcd4?iM"b%y) u=F12=2e0+CK\|f5
2024-09-27 21:55:40 UTC	16384	IN	Data Raw: b3 d8 06 d4 42 68 d0 0a 71 08 fc 43 07 ff 74 56 7c 98 fd b3 9b 9b 26 0c 89 bd 60 35 f8 7e 73 83 7c c7 07 64 b4 2a c8 95 1f 22 c0 a0 07 dc 58 03 4e 81 d0 31 ba 67 37 49 c9 07 0a 51 b0 d0 c6 00 a4 fd de b9 07 c0 ab 56 fb 3e d5 79 6f 20 be 74 e0 8b b1 0f 34 c4 70 ae cc 8d 08 b7 85 0b 60 0b 79 e6 ea cc 43 8d 8d 01 4c c4 07 9c b6 0f ee da c9 98 69 01 39 ee 88 82 2b 52 4b b5 31 f3 08 70 be ba 4a 4b e1 0c c6 09 20 19 3d 68 b7 ba e7 31 0c c1 da 01 76 13 e0 31 46 02 ed 78 90 46 b5 c1 c0 b0 2e ed 73 8b 81 4c 9f 1c e8 33 8e 76 c7 92 83 07 24 83 da 4f fd 11 54 4d 60 9e bb 33 c0 f3 89 fb 1e b0 b5 d7 07 74 85 7f c6 18 3a 02 fe 00 5c d0 9e 0e 2d 28 b0 8b 33 67 ca 4a 9d c2 ff 97 b0 36 c6 50 ee c8 21 d5 93 0a 07 ca f6 36 ea c0 ae ae 36 89 5d 20 1c 6e 3b dd 66 a3 e1 4d 39 Data Ascii: BhqCtV\|&`5~s\|d*"XN1g7IQV>yo t4p`yCLi9+RK1pJK =h1v1FxF.sL3v$OTM`3t:\-(3gJ6P!66] n;fM9
2024-09-27 21:55:40 UTC	16384	IN	Data Raw: 38 c0 b6 38 86 17 b5 d6 a4 15 a8 77 41 88 13 13 25 16 a8 14 b6 1d 79 96 cd 3f b6 d2 81 bb 26 8e 9d c8 b2 7d c7 34 63 72 70 e5 8b 1d 58 e8 c0 d9 90 82 30 08 6d 14 9a 08 b4 01 db c1 64 5c e2 54 ac bd 91 1f db 18 c7 89 9d e1 2c b3 d3 d0 0b 9d 8c 7f 09 d5 1a ad 60 ee 05 7d 29 70 8c 92 04 af d7 4b b4 5e c3 fe 71 90 69 06 b1 65 7b a9 43 0e fa 92 84 f3 d2 d9 5e ed 43 18 24 88 8a cc 77 5d 0f d6 02 28 ce e3 c2 2d d9 ab 3d 17 21 99 13 c4 76 ea 3b ae 8b 41 81 8a 93 20 e4 4e af ed 57 f4 e2 a1 2c 70 93 38 06 05 02 f4 3e ca 72 f9 fe 5c ef e8 45 16 4a 24 38 18 81 b4 ce 82 20 89 4d d7 94 bc 43 d9 be 5d 64 66 80 b2 d8 0e 50 ea 59 c4 e9 18 7a 28 62 a3 58 ee db 85 d8 c9 b0 a5 82 24 8c 5d cb f1 40 da 80 60 17 a7 78 5f d7 11 a0 c5 8c ac 34 f0 6c d7 cf ac d8 8e b3 88 d3 c8 a4 Data Ascii: 88wA%y?&}4crpX0md\T,`})pK^qie{C^C$w](-=!v;A NW,p8>r\EJ$8 MC]dfPYz(bX$]@`x_4l
2024-09-27 21:55:40 UTC	16384	IN	Data Raw: e9 1e 5d 6f 63 ea 6f 56 3f 2e 3d 44 ab 09 6e f4 1e 1e 06 d2 13 42 e2 3b 2a ff 70 c4 d3 24 89 36 35 87 3d 70 bf 32 d3 86 9c 4a 83 a7 0e f4 aa 97 0c 3c c2 dd 36 45 99 31 c8 69 bc 72 70 49 12 33 28 83 29 53 b2 28 89 5a fe de 21 86 d2 38 42 b3 36 48 4b 19 24 1d 23 49 e5 cb 68 a4 99 1d 60 af ac 79 12 93 9c 7c df 4c 72 fa 6d 98 e4 64 2f 26 39 bf 66 26 39 b9 21 26 39 bf 01 26 19 4f 95 bb 98 b0 ce ec 6f c3 7e 7a 34 e1 87 d4 6f 26 cd 43 9c ea a9 ff 1b 8a 24 df 11 22 2e 0d dc f8 2b f7 4b 77 04 ec c3 27 6a ba 96 f8 3f d1 e3 c8 a1 9f d1 91 4b 1d 16 17 56 c6 b9 ff b5 91 ed 39 79 7a 28 d9 f6 4a 5f 09 47 64 8e 75 d7 0f f5 6f f4 4b 19 02 d4 6a 3e ee d6 fa 57 d3 3c f9 b0 c0 eb b5 7a 4c aa be e6 de 95 5e 3d af 3f 7a ce 24 5f 9b 0b 50 db 92 31 6f e6 4c a4 59 c0 d8 3b f9 da Data Ascii: ]ocoV?.=DnB;*p$65=p2J<6E1irpI3()S(Z!8B6HK$#Ih`y\|Lrmd/&9f&9!&9&Oo~z4o&C$".+Kw'j?KV9yz(J_GduoKj>W<zL^=?z$_P1oLY;
2024-09-27 21:55:40 UTC	16384	IN	Data Raw: 5d 36 08 d8 19 0d 86 75 7c 38 95 b2 3e e0 80 6a 09 cf 0d 1e 4e 2c 32 59 83 36 0a ec 0d 82 2f 7c f1 59 81 ce 60 5b 29 3a 38 66 ce 2a 2d a3 14 67 b2 6d 61 7b 8a be 0d fe 3a a7 de 8a 78 59 84 8d 58 99 90 f8 b4 e8 3a 04 ec 5d d7 9d 97 df 3b e2 61 44 a2 50 d6 91 df a1 e5 6f 8f 39 af f4 0d 02 66 32 aa 1f 57 54 5f 55 d7 a0 04 0b c6 72 f5 29 66 4c e5 f0 45 13 26 28 be 6b 4f 06 44 5a 3f 26 d2 86 05 08 f3 2a fa ae 58 d6 ab 97 0e 1b 6b fa 0c 7f 7c 9c 11 23 92 4d 6f f5 40 a4 31 2f b4 2b ce 5e 75 4f 0b 93 14 2b 3d 42 b0 12 7c cf ec a4 f6 33 e7 61 bf a2 e4 d6 13 5d 0c 2d dd 36 fb 36 87 45 82 f5 6b aa 3c 62 46 5f d9 a3 ad 3f d4 4c 52 ca 2c 56 5a dd f4 f6 aa 8b af c8 5d 28 bb 32 b3 75 ca d1 b5 aa a2 d3 58 f1 1c a0 58 a1 48 c2 d7 a7 9c b1 58 c0 72 be 84 bc bc 1e ea cb 05 Data Ascii: ]6u\|8>jN,2Y6/\|Y`[):8f-gma{:xYX:];aDPo9f2WT_Ur)fLE&(kODZ?&Xk\|#Mo@1/+^uO+=B\|3a]-66Ek<bF_?LR,VZ](2uXXHXr
2024-09-27 21:55:40 UTC	16384	IN	Data Raw: 67 18 e0 1e 56 4b 2a 69 30 06 63 c0 62 5d 36 63 9d 1b 2e 2b 0e 4b b2 e2 96 9d 34 2b 27 9c b7 df 19 04 ce 70 88 54 d8 aa 9c 86 7a c8 36 c0 67 81 82 6c d8 1b e2 d2 aa 20 61 76 b3 cd a3 42 1e 53 81 e6 48 d8 3e a1 56 dd 5d 03 c8 91 ab 94 55 79 0e ad dd 41 bb 73 4f 90 25 42 22 c9 7d 18 c4 1e 59 c9 01 14 f6 ff fd bf 95 9b 02 ba c8 ac ea 85 2b b4 4a f5 57 e6 45 ab 52 6c 0e a4 4f 87 77 2d 56 1a 13 7a e1 96 b5 b4 c5 11 d6 58 d7 78 2d f4 5e 89 1a 77 10 fe a0 21 30 53 0e de 6a 27 00 2e 43 15 db f3 6b 09 1a 05 f5 59 49 84 34 1b 35 5e 67 d0 8b 9d 59 1c c1 d1 59 31 02 ae 95 f3 87 8c 6a 45 55 32 1e a0 53 ac 1d d8 51 70 b2 84 3b c2 a5 d5 0e 3e e7 e3 ba b6 e8 1d 0d d6 3e 2c a8 31 db f1 f4 95 b5 e3 84 ee 0e ac 7a 3c 8d 62 0f 52 a1 2d 75 c8 e2 f1 09 dc 99 f9 d8 dc 9d a7 7b Data Ascii: gVK*i0cb]6c.+K4+'pTz6gl avBSH>V]UyAsO%B"}Y+JWERlOw-VzXx-^w!0Sj'.CkYI45^gYY1jEU2SQp;>>,1z<bR-u{
2024-09-27 21:55:40 UTC	16384	IN	Data Raw: 3d 35 ac 79 b4 02 11 7b 43 1c 3f 24 35 57 d3 10 6d 31 34 c6 4e 7c 9b e7 87 4d 16 09 76 35 a3 0c e5 3c e8 20 b9 00 b4 80 e4 1c 1c d4 b9 0f 8c 5a 4a 0a 4d d0 76 3c 3a eb f7 7d b4 bc b6 67 01 5d 8f 14 43 31 51 23 c1 1e 65 86 65 c4 37 cc 12 65 b3 9f 0a 41 51 c6 2f 38 bd 78 3a 01 26 42 30 3d f5 03 2a f7 a9 e5 cb ac cc ab f9 3f 86 cd 27 fb 16 90 9a 18 7e ef 35 f9 a5 41 b7 db 80 23 e7 4c 19 59 71 9f 3f 71 16 b8 dc 80 31 b3 b6 4c e9 2f 45 bd df 5b f8 a7 e2 85 6e c5 ca 9a 08 d9 26 35 5a 93 29 ee 3f 56 5a 0a 28 ab 80 39 cf 10 ad 1c 64 24 d2 62 6d 29 03 8b ab 4a c8 0e 52 81 b2 81 f4 2a d6 c6 1c 24 89 b0 ce 7d 5a e3 0e 0b 58 25 24 73 bf 9e 72 74 04 e5 44 74 f4 51 2a a7 c6 27 84 93 0b 93 0c 59 5e a0 8a 06 50 0f b2 f6 43 5f 6b 59 ae 3b bf 86 47 91 d8 b7 62 21 c3 56 21 Data Ascii: =5y{C?$5Wm14N\|Mv5< ZJMv<:}g]C1Q#ee7eAQ/8x:&B0=?'~5A#LYq?q1L/E[n&5Z)?VZ(9d$bm)JR$}ZX%$srtDtQ*'Y^PC_kY;Gb!V!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	52732	13.107.246.45	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:40 UTC	410	OUT	GET /shared/5/js/reset-password-signinname_en_iGkKHb6MchyJTpOn_ZeIdw2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:41 UTC	813	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:55:40 GMT Content-Type: application/x-javascript Content-Length: 170734 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 18 Sep 2024 20:39:34 GMT ETag: 0x8DCD822015BAA9D x-ms-request-id: 915e21cd-101e-0040-4c27-11b3d1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215540Z-15767c5fc55ncqdn59ub6rndq0000000029g00000000cmrx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-27 21:55:41 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 6b 77 db b8 b2 20 fa fd fe 0a 5b 37 4b 8b 3c 86 15 c9 ce 93 0a 5b 93 c4 76 27 dd 79 75 1e dd e9 f6 f6 78 d1 12 64 33 91 48 85 a4 ec 38 b6 fe fb ad 07 9e 24 e5 24 fb cc 99 39 77 b2 56 2c 10 04 81 42 a1 00 54 15 aa 0a b7 ff 63 73 e3 20 2f 36 66 e9 58 66 a5 dc 48 b3 69 5e cc 93 2a cd b3 8d c5 4c 26 90 55 4a b9 51 c8 52 56 db 8b a4 2c 2f f2 62 b2 5d a6 a7 59 9a 65 c9 5c 1e cb ac f7 a9 ec bd 78 fe 74 ff d5 bb fd 5e f5 b5 da f8 8f db ff cf e6 74 99 8d b1 8e 20 bc 3a 4f 8a 0d 29 2a 91 89 42 e4 22 8d af ee 0e 76 ef 46 a6 00 bd 0a af 3a 4b 6c a9 2a d2 71 d5 19 e2 27 45 9c 05 3b 0f ef 0e 42 91 c7 57 e3 b3 74 36 79 9a 67 95 fc 5a bd bf 5c c8 32 da ec 8b b1 7d ae 3d d2 eb 89 9c 26 cb 59 f5 a6 c8 17 fc 9c 96 8b 59 72 f9 0a 80 c6 c7 Data Ascii: kw [7K<[v'yuxd3H8$$9wV,BTcs /6fXfHi^L&UJQRV,/b]Ye\xt^t :O)B"vF:Kl*q'E;BWt6ygZ\2}=&YYr
2024-09-27 21:55:41 UTC	16384	IN	Data Raw: ef 73 fb d0 18 3c 40 25 8f 67 98 0b df bf c1 68 4f 1d b1 d3 8f 30 08 57 c9 90 ec dc b7 48 db dd 21 74 ed ee 62 d9 53 b4 bd 17 bb 77 38 cd 68 d8 bd 8b 2d 02 33 b6 0b ed 3d cb e7 f8 cd 7d 0f b3 bb 0f 1c cc ee 3e f4 d1 7a a7 ef 21 f5 0e d4 f6 3c 2b 25 da 5a dc b9 67 f1 3b c0 3e 1e 0c 30 01 90 1c ec 60 02 c0 38 d8 c5 04 7c 73 70 07 13 f0 c1 c1 5d 4c 00 00 07 f7 30 01 4d 1f dc c7 04 34 7b f0 00 51 05 ed 1d 3c c4 c4 00 2b ec 63 8a aa c6 ba 77 b0 ee 01 56 7e 07 2a 7f b5 9c 33 3e 06 08 95 3b 54 3b 3b f0 1a 55 84 30 2c 89 37 13 80 ba eb 5a 1c 22 79 4d ff 79 7e 48 cf e8 c9 82 bf c4 f1 79 03 ed dd f5 a2 96 09 7b 48 69 95 38 1c 61 55 c6 34 bb c2 91 1a f5 a8 ed 38 51 d6 8e d4 b5 3e d7 ea f6 b9 ca 54 01 87 1f 1d d1 1d f2 0e 5c 51 07 3a ab 5d 28 ff 7d 7d 60 01 4c 57 a2 Data Ascii: s<@%ghO0WH!tbSw8h-3=}>z!<+%Zg;>0`8\|sp]L0M4{Q<+cwV~*3>;T;;U0,7Z"yMy~Hy{Hi8aU48Q>T\Q:](}}`LW
2024-09-27 21:55:41 UTC	16384	IN	Data Raw: 2e 5d 2f b8 89 88 e6 1d d9 47 56 79 4f 18 5c 14 b1 f1 26 57 75 6a 31 59 06 2b 6f e7 38 52 8e 1e d6 5d f3 a7 99 77 a5 da a9 15 e5 60 75 0d 9b f1 d2 dc ae e6 4f 0d 57 7f c8 af 4e a7 fa 31 cf 5b 56 2a 46 00 34 e4 09 02 b8 36 54 58 79 97 ba db 2f 98 b9 be 95 15 6b 0a d9 a8 70 ae 66 8d 1f 97 66 2c 5d 69 f4 fe 21 5c db 18 e9 54 1f 24 2b 7b d8 8e 48 61 a3 0e c6 99 a5 09 a8 24 d4 97 1f 78 e5 ae 48 a8 e4 0d 4b 13 25 8d 8c ce c8 16 29 3a c0 e0 a4 7d f6 ad ea 57 52 1d cb 37 81 d1 e0 84 a2 22 c1 9e d1 af 89 d4 75 af d3 41 48 c9 d3 14 57 29 d2 b5 59 56 35 e3 18 aa 19 c9 fe 9c cc 4b 0a 4a 25 c4 55 1d ef 5e 50 d1 fa ff 80 cd 86 ad d2 74 76 45 6e 74 d8 cf d4 93 c3 b7 6d 69 41 c6 f2 97 4d 1a d4 a1 68 6b dd 6c 6a b8 ca b4 16 74 7d ea b9 de 8b 86 78 bb a3 fc 59 cf d3 a3 d1 Data Ascii: .]/GVyO\&Wuj1Y+o8R]w`uOWN1[V*F46TXy/kpff,]i!\T$+{Ha$xHK%):}WR7"uAHW)YV5KJ%U^PtvEntmiAMhkljt}xY
2024-09-27 21:55:41 UTC	16384	IN	Data Raw: 96 ce 9b 78 e3 3a c7 29 25 51 2b 63 38 8c 1b 79 34 8e e2 db 28 67 1b 54 54 80 aa c2 c6 b9 c1 45 6e f0 5a 38 8f 08 65 f2 10 6e 73 8b 95 82 42 d3 84 1a 02 62 7b 9e 52 a6 b2 0d ac 7e f0 bc 53 46 45 09 d2 61 b8 8e dd db 12 96 df ad 7d 61 35 c4 18 d0 15 86 ad 46 5d 51 93 3d d8 54 9f 3c ac 99 dd d6 0b fe f1 9d 1d 3e bd 1d 21 6f 6d ad 60 f7 78 c2 1a e1 c2 9c d0 0e 50 9a a8 29 96 f3 80 7f 79 c2 f4 44 46 98 16 32 eb f3 34 48 ce 8b 8b 41 4e 46 b7 c5 02 f8 75 54 3e e2 25 1a bd e0 6d b7 84 5f 6b cd ac 68 64 ca 04 92 a1 a1 ee f2 b1 ee 0a d9 70 7b 87 3b 76 9d 63 e4 64 0a 34 af a2 18 3f 8d a6 09 b2 bf cc c9 ee d2 9f 69 8d 4d a5 88 d4 05 22 b7 88 f6 62 f4 25 87 79 29 20 19 8e d1 04 83 0f fc 75 1a 9a 1d b1 a0 bb db 9e 18 86 ab 18 00 d3 3d 82 04 d0 46 0a 85 31 32 85 3d 32 Data Ascii: x:)%Q+c8y4(gTTEnZ8ensBb{R~SFEa}a5F]Q=T<>!om`xP)yDF24HANFuT>%m_khdp{;vcd4?iM"b%y) u=F12=2
2024-09-27 21:55:41 UTC	16384	IN	Data Raw: 79 94 e4 44 b1 e0 3a 80 c0 f2 41 ff ac 0d b7 25 a9 2f ac ec b3 d8 06 d4 42 68 d0 0a 71 08 fc 43 07 ff 74 56 7c 98 fd b3 9b 9b 26 0c 89 bd 60 35 f8 7e 73 83 7c c7 07 64 b4 2a c8 95 1f 22 c0 a0 07 dc 58 03 4e 81 d0 31 ba 67 37 49 c9 07 0a 51 b0 d0 c6 00 a4 fd de b9 07 c0 ab 56 fb 3e d5 79 6f 20 be 74 e0 8b b1 0f 34 c4 70 ae cc 8d 08 b7 85 0b 60 0b 79 e6 ea cc 43 8d 8d 01 4c c4 07 9c b6 0f ee da c9 98 69 01 39 ee 88 82 2b 52 4b b5 31 f3 08 70 be ba 4a 4b e1 0c c6 09 20 19 3d 68 b7 ba e7 31 0c c1 da 01 76 13 e0 31 46 02 ed 78 90 46 b5 c1 c0 b0 2e ed 73 8b 81 4c 9f 1c e8 33 8e 76 c7 92 83 07 24 83 da 4f fd 11 54 4d 60 9e bb 33 c0 f3 89 fb 1e b0 b5 d7 07 74 85 7f c6 18 3a 02 fe 00 5c d0 9e 0e 2d 28 b0 8b 33 67 ca 4a 9d c2 ff 97 b0 36 c6 50 ee c8 21 d5 93 0a 07 Data Ascii: yD:A%/BhqCtV\|&`5~s\|d*"XN1g7IQV>yo t4p`yCLi9+RK1pJK =h1v1FxF.sL3v$OTM`3t:\-(3gJ6P!
2024-09-27 21:55:41 UTC	16384	IN	Data Raw: 09 f8 8c 83 80 3b 10 37 7b b4 86 16 c0 05 1c 12 2a 1f 00 25 38 c0 b6 38 86 17 b5 d6 a4 15 a8 77 41 88 13 13 25 16 a8 14 b6 1d 79 96 cd 3f b6 d2 81 bb 26 8e 9d c8 b2 7d c7 34 63 72 70 e5 8b 1d 58 e8 c0 d9 90 82 30 08 6d 14 9a 08 b4 01 db c1 64 5c e2 54 ac bd 91 1f db 18 c7 89 9d e1 2c b3 d3 d0 0b 9d 8c 7f 09 d5 1a ad 60 ee 05 7d 29 70 8c 92 04 af d7 4b b4 5e c3 fe 71 90 69 06 b1 65 7b a9 43 0e fa 92 84 f3 d2 d9 5e ed 43 18 24 88 8a cc 77 5d 0f d6 02 28 ce e3 c2 2d d9 ab 3d 17 21 99 13 c4 76 ea 3b ae 8b 41 81 8a 93 20 e4 4e af ed 57 f4 e2 a1 2c 70 93 38 06 05 02 f4 3e ca 72 f9 fe 5c ef e8 45 16 4a 24 38 18 81 b4 ce 82 20 89 4d d7 94 bc 43 d9 be 5d 64 66 80 b2 d8 0e 50 ea 59 c4 e9 18 7a 28 62 a3 58 ee db 85 d8 c9 b0 a5 82 24 8c 5d cb f1 40 da 80 60 17 a7 78 Data Ascii: ;7{*%88wA%y?&}4crpX0md\T,`})pK^qie{C^C$w](-=!v;A NW,p8>r\EJ$8 MC]dfPYz(bX$]@`x
2024-09-27 21:55:41 UTC	16384	IN	Data Raw: c4 a1 98 48 11 35 91 94 54 47 1b 61 ed b2 2c 4a dd d2 0e dc e9 1e 5d 6f 63 ea 6f 56 3f 2e 3d 44 ab 09 6e f4 1e 1e 06 d2 13 42 e2 3b 2a ff 70 c4 d3 24 89 36 35 87 3d 70 bf 32 d3 86 9c 4a 83 a7 0e f4 aa 97 0c 3c c2 dd 36 45 99 31 c8 69 bc 72 70 49 12 33 28 83 29 53 b2 28 89 5a fe de 21 86 d2 38 42 b3 36 48 4b 19 24 1d 23 49 e5 cb 68 a4 99 1d 60 af ac 79 12 93 9c 7c df 4c 72 fa 6d 98 e4 64 2f 26 39 bf 66 26 39 b9 21 26 39 bf 01 26 19 4f 95 bb 98 b0 ce ec 6f c3 7e 7a 34 e1 87 d4 6f 26 cd 43 9c ea a9 ff 1b 8a 24 df 11 22 2e 0d dc f8 2b f7 4b 77 04 ec c3 27 6a ba 96 f8 3f d1 e3 c8 a1 9f d1 91 4b 1d 16 17 56 c6 b9 ff b5 91 ed 39 79 7a 28 d9 f6 4a 5f 09 47 64 8e 75 d7 0f f5 6f f4 4b 19 02 d4 6a 3e ee d6 fa 57 d3 3c f9 b0 c0 eb b5 7a 4c aa be e6 de 95 5e 3d af 3f Data Ascii: H5TGa,J]ocoV?.=DnB;*p$65=p2J<6E1irpI3()S(Z!8B6HK$#Ih`y\|Lrmd/&9f&9!&9&Oo~z4o&C$".+Kw'j?KV9yz(J_GduoKj>W<zL^=?
2024-09-27 21:55:41 UTC	16384	IN	Data Raw: 95 a7 1b 90 4c 19 36 8a f9 f7 d9 cd cf a7 71 4c 34 6b 03 5b 5d 36 08 d8 19 0d 86 75 7c 38 95 b2 3e e0 80 6a 09 cf 0d 1e 4e 2c 32 59 83 36 0a ec 0d 82 2f 7c f1 59 81 ce 60 5b 29 3a 38 66 ce 2a 2d a3 14 67 b2 6d 61 7b 8a be 0d fe 3a a7 de 8a 78 59 84 8d 58 99 90 f8 b4 e8 3a 04 ec 5d d7 9d 97 df 3b e2 61 44 a2 50 d6 91 df a1 e5 6f 8f 39 af f4 0d 02 66 32 aa 1f 57 54 5f 55 d7 a0 04 0b c6 72 f5 29 66 4c e5 f0 45 13 26 28 be 6b 4f 06 44 5a 3f 26 d2 86 05 08 f3 2a fa ae 58 d6 ab 97 0e 1b 6b fa 0c 7f 7c 9c 11 23 92 4d 6f f5 40 a4 31 2f b4 2b ce 5e 75 4f 0b 93 14 2b 3d 42 b0 12 7c cf ec a4 f6 33 e7 61 bf a2 e4 d6 13 5d 0c 2d dd 36 fb 36 87 45 82 f5 6b aa 3c 62 46 5f d9 a3 ad 3f d4 4c 52 ca 2c 56 5a dd f4 f6 aa 8b af c8 5d 28 bb 32 b3 75 ca d1 b5 aa a2 d3 58 f1 1c Data Ascii: L6qL4k[]6u\|8>jN,2Y6/\|Y`[):8f-gma{:xYX:];aDPo9f2WT_Ur)fLE&(kODZ?&Xk\|#Mo@1/+^uO+=B\|3a]-66Ek<bF_?LR,VZ](2uX
2024-09-27 21:55:41 UTC	16384	IN	Data Raw: 8e 40 6d 69 e2 ac d9 52 28 2c 75 98 5a e3 10 cb 46 ff f6 14 67 18 e0 1e 56 4b 2a 69 30 06 63 c0 62 5d 36 63 9d 1b 2e 2b 0e 4b b2 e2 96 9d 34 2b 27 9c b7 df 19 04 ce 70 88 54 d8 aa 9c 86 7a c8 36 c0 67 81 82 6c d8 1b e2 d2 aa 20 61 76 b3 cd a3 42 1e 53 81 e6 48 d8 3e a1 56 dd 5d 03 c8 91 ab 94 55 79 0e ad dd 41 bb 73 4f 90 25 42 22 c9 7d 18 c4 1e 59 c9 01 14 f6 ff fd bf 95 9b 02 ba c8 ac ea 85 2b b4 4a f5 57 e6 45 ab 52 6c 0e a4 4f 87 77 2d 56 1a 13 7a e1 96 b5 b4 c5 11 d6 58 d7 78 2d f4 5e 89 1a 77 10 fe a0 21 30 53 0e de 6a 27 00 2e 43 15 db f3 6b 09 1a 05 f5 59 49 84 34 1b 35 5e 67 d0 8b 9d 59 1c c1 d1 59 31 02 ae 95 f3 87 8c 6a 45 55 32 1e a0 53 ac 1d d8 51 70 b2 84 3b c2 a5 d5 0e 3e e7 e3 ba b6 e8 1d 0d d6 3e 2c a8 31 db f1 f4 95 b5 e3 84 ee 0e ac 7a Data Ascii: @miR(,uZFgVK*i0cb]6c.+K4+'pTz6gl avBSH>V]UyAsO%B"}Y+JWERlOw-VzXx-^w!0Sj'.CkYI45^gYY1jEU2SQp;>>,1z
2024-09-27 21:55:41 UTC	16384	IN	Data Raw: 38 f9 e6 b4 ab d0 6e 83 c3 59 88 d4 3b 1e 39 e1 d0 db e8 e3 3d 35 ac 79 b4 02 11 7b 43 1c 3f 24 35 57 d3 10 6d 31 34 c6 4e 7c 9b e7 87 4d 16 09 76 35 a3 0c e5 3c e8 20 b9 00 b4 80 e4 1c 1c d4 b9 0f 8c 5a 4a 0a 4d d0 76 3c 3a eb f7 7d b4 bc b6 67 01 5d 8f 14 43 31 51 23 c1 1e 65 86 65 c4 37 cc 12 65 b3 9f 0a 41 51 c6 2f 38 bd 78 3a 01 26 42 30 3d f5 03 2a f7 a9 e5 cb ac cc ab f9 3f 86 cd 27 fb 16 90 9a 18 7e ef 35 f9 a5 41 b7 db 80 23 e7 4c 19 59 71 9f 3f 71 16 b8 dc 80 31 b3 b6 4c e9 2f 45 bd df 5b f8 a7 e2 85 6e c5 ca 9a 08 d9 26 35 5a 93 29 ee 3f 56 5a 0a 28 ab 80 39 cf 10 ad 1c 64 24 d2 62 6d 29 03 8b ab 4a c8 0e 52 81 b2 81 f4 2a d6 c6 1c 24 89 b0 ce 7d 5a e3 0e 0b 58 25 24 73 bf 9e 72 74 04 e5 44 74 f4 51 2a a7 c6 27 84 93 0b 93 0c 59 5e a0 8a 06 50 Data Ascii: 8nY;9=5y{C?$5Wm14N\|Mv5< ZJMv<:}g]C1Q#ee7eAQ/8x:&B0=?'~5A#LYq?q1L/E[n&5Z)?VZ(9d$bm)JR$}ZX%$srtDtQ*'Y^P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	52733	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:40 UTC	608	OUT	GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:41 UTC	819	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:55:40 GMT Content-Type: application/x-javascript Content-Length: 32811 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 09 Aug 2024 21:16:17 GMT ETag: 0x8DCB8B881BE95D6 x-ms-request-id: c24896ae-001e-0035-0f18-1190ef000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215540Z-15767c5fc55w69c2zvnrz0gmgw00000002yg000000000f1d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T1 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-09-27 21:55:41 UTC	15565	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 69 77 db 38 b3 3f f8 7e 3e 85 c4 e9 f1 25 db b0 22 39 4b 27 52 18 9d c4 71 3a ce 66 77 ec 2c dd 6e 5f 1f 5a 82 6c b6 65 52 4d 52 5e 62 e9 bb 4f fd 0a 0b 41 8a 4e f2 9c ff 9d 79 71 fb 74 2c 62 21 08 14 0a 85 aa 42 55 e1 de af ed d6 ab 34 6b 4d e3 91 4c 72 d9 8a 93 49 9a 5d 44 45 9c 26 ad d9 54 46 94 95 4b d9 4a 13 39 ce 37 a2 24 9a de 14 f1 28 df f8 27 3f ee fe f6 db 66 ef b7 df 1e 74 47 8f 1f de 3f 79 38 7e 30 91 8f 3b ff e4 9d 77 3b 5b db 1f f6 b7 3b c5 75 d1 fa f5 de ff e5 cd d1 44 91 c5 a3 c2 1b f8 b9 9c 4e 3a 57 f2 64 16 8d ce b7 ce e6 c9 f9 f1 45 1e 8f 65 52 c4 c5 cd 71 1e e7 73 4a 47 e1 4f d5 5a 2c 0e 8f 82 ce 6c 9e 9f f9 87 87 0f 7e eb 1d 89 db cd cd df 1e f7 27 f3 64 84 ee fb 89 90 a2 08 6e 8b 4e e6 cb 40 14 9d Data Ascii: iw8?~>%"9K'Rq:fw,n_ZleRMR^bOANyqt,b!BU4kMLrI]DE&TFKJ97$('?ftG?y8~0;w;[;uDN:WdEeRqsJGOZ,l~'dnN@
2024-09-27 21:55:41 UTC	16384	IN	Data Raw: 7d ed 52 dc 70 af e6 f3 3f e8 25 f5 f0 ff d7 fe 25 ce 31 b8 06 af 71 1f 5f ed 9d 5c f7 74 ef 4c df cc 9e 34 fc 2b 3e c4 89 e7 91 7d e8 e3 6f a5 79 ea 98 eb ae 62 e3 88 d0 00 9e 6d f4 86 f4 db 77 72 8f 75 ee b1 a7 4e 0a 98 cd 48 c3 1a 17 45 db 40 3a 9b 4f 89 80 ef ce 60 76 4b 44 73 ff 26 27 f9 61 27 99 a4 06 ce bc e1 15 a1 09 a7 cf 1c a8 8d 8a 02 53 37 27 e1 79 30 3f 2d 73 10 b0 b4 52 45 65 a8 eb 33 32 c3 fd b8 bd aa 5e aa 26 53 f7 52 35 33 8b 70 46 e5 49 eb 30 03 ab 00 4d 09 1b 6a a3 e8 a4 ea ee e6 4e 5e 5e 4d a2 41 43 79 95 7a ee 8c 66 55 5e 8b c4 48 e5 6a 9c 92 9c 77 89 58 7b 29 6d ba 29 84 e3 84 b7 7a f5 8b e6 53 15 a3 24 ee 10 6e 15 b8 43 93 e3 c6 aa b7 9d 4c 92 18 23 22 8c f6 6a 3a e7 3e ba f2 ec 5e 9d 56 13 3f a4 2c 6b d3 1f 73 27 dd 3b 38 13 6d 43 Data Ascii: }Rp?%%1q_\tL4+>}oybmwruNHE@:O`vKDs&'a'S7'y0?-sREe32^&SR53pFI0MjN^^MACyzfU^HjwX{)m)zS$nCL#"j:>^V?,ks';8mC
2024-09-27 21:55:41 UTC	862	IN	Data Raw: 0b 1f 65 9b 96 67 0f 20 14 80 06 f7 e2 b5 db d6 c5 b4 c6 5f e1 7b 76 1b 9d a4 e9 6e 9a 5c c9 36 df 14 3a a1 47 d0 e6 00 88 d8 cb a3 30 41 78 cf 37 25 ca 2b 3e 60 ed a5 aa 8d 3e b1 ad 34 e9 15 75 67 50 a0 46 bb a6 5f ba e2 9b cb 04 07 93 40 5c 16 9d 00 ca 3e 80 25 94 2b 0d 7d a7 b8 f2 7b 9c 0f 81 b6 e6 a4 42 2b 4d 67 df ad 1c c2 6a 6a 2b c5 1d da d0 1a 13 bc 76 0c 6f b0 01 2d cd 69 36 32 b3 b1 61 89 73 7e d1 48 48 ae 58 07 06 be 0e 9a 29 24 b4 42 eb b3 33 30 e3 ac 59 a7 95 73 92 ac 5a 37 c8 01 f1 6e 70 24 b9 ea 6b 78 a5 f0 eb 4e 72 99 1e 24 a7 f4 2b 86 71 68 49 38 c1 ae 39 36 72 95 d6 c2 f6 d1 b0 ea 68 19 8e 93 78 3c 86 7b db cf e2 31 10 22 e1 00 a7 32 cd 00 81 da 73 9d 15 11 a1 5b 69 f1 d5 88 84 a3 8d 18 bd ae f9 f2 f9 75 df ea be c5 3e cb 14 48 d9 af 37 Data Ascii: eg _{vn\6:G0Ax7%+>`>4ugPF_@\>%+}{B+Mgjj+vo-i62as~HHX)$B30YsZ7np$kxNr$+qhI896rhx<{1"2s[iu>H7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	52735	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:41 UTC	634	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:41 UTC	807	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:55:41 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: 0e605a93-d01e-0068-1722-11a5c6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215541Z-15767c5fc55qdcd62bsn50hd6s00000002ag00000000r9tm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-09-27 21:55:41 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	52734	13.107.246.60	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:41 UTC	621	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:41 UTC	806	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:55:41 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: 7856a741-701e-0079-2022-1148cd000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215541Z-15767c5fc55rg5b7sh1vuv8t7n00000002u000000001040u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T1 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-09-27 21:55:41 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	52738	13.107.246.45	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:41 UTC	401	OUT	GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:41 UTC	812	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:55:41 GMT Content-Type: application/x-javascript Content-Length: 32811 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 09 Aug 2024 21:16:17 GMT ETag: 0x8DCB8B881BE95D6 x-ms-request-id: c24896ae-001e-0035-0f18-1190ef000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215541Z-15767c5fc55rg5b7sh1vuv8t7n000000031g000000001yx4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:55:41 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 69 77 db 38 b3 3f f8 7e 3e 85 c4 e9 f1 25 db b0 22 39 4b 27 52 18 9d c4 71 3a ce 66 77 ec 2c dd 6e 5f 1f 5a 82 6c b6 65 52 4d 52 5e 62 e9 bb 4f fd 0a 0b 41 8a 4e f2 9c ff 9d 79 71 fb 74 2c 62 21 08 14 0a 85 aa 42 55 e1 de af ed d6 ab 34 6b 4d e3 91 4c 72 d9 8a 93 49 9a 5d 44 45 9c 26 ad d9 54 46 94 95 4b d9 4a 13 39 ce 37 a2 24 9a de 14 f1 28 df f8 27 3f ee fe f6 db 66 ef b7 df 1e 74 47 8f 1f de 3f 79 38 7e 30 91 8f 3b ff e4 9d 77 3b 5b db 1f f6 b7 3b c5 75 d1 fa f5 de ff e5 cd d1 44 91 c5 a3 c2 1b f8 b9 9c 4e 3a 57 f2 64 16 8d ce b7 ce e6 c9 f9 f1 45 1e 8f 65 52 c4 c5 cd 71 1e e7 73 4a 47 e1 4f d5 5a 2c 0e 8f 82 ce 6c 9e 9f f9 87 87 0f 7e eb 1d 89 db cd cd df 1e f7 27 f3 64 84 ee fb 89 90 a2 08 6e 8b 4e e6 cb 40 14 9d Data Ascii: iw8?~>%"9K'Rq:fw,n_ZleRMR^bOANyqt,b!BU4kMLrI]DE&TFKJ97$('?ftG?y8~0;w;[;uDN:WdEeRqsJGOZ,l~'dnN@
2024-09-27 21:55:41 UTC	16384	IN	Data Raw: f3 3f e8 25 f5 f0 ff d7 fe 25 ce 31 b8 06 af 71 1f 5f ed 9d 5c f7 74 ef 4c df cc 9e 34 fc 2b 3e c4 89 e7 91 7d e8 e3 6f a5 79 ea 98 eb ae 62 e3 88 d0 00 9e 6d f4 86 f4 db 77 72 8f 75 ee b1 a7 4e 0a 98 cd 48 c3 1a 17 45 db 40 3a 9b 4f 89 80 ef ce 60 76 4b 44 73 ff 26 27 f9 61 27 99 a4 06 ce bc e1 15 a1 09 a7 cf 1c a8 8d 8a 02 53 37 27 e1 79 30 3f 2d 73 10 b0 b4 52 45 65 a8 eb 33 32 c3 fd b8 bd aa 5e aa 26 53 f7 52 35 33 8b 70 46 e5 49 eb 30 03 ab 00 4d 09 1b 6a a3 e8 a4 ea ee e6 4e 5e 5e 4d a2 41 43 79 95 7a ee 8c 66 55 5e 8b c4 48 e5 6a 9c 92 9c 77 89 58 7b 29 6d ba 29 84 e3 84 b7 7a f5 8b e6 53 15 a3 24 ee 10 6e 15 b8 43 93 e3 c6 aa b7 9d 4c 92 18 23 22 8c f6 6a 3a e7 3e ba f2 ec 5e 9d 56 13 3f a4 2c 6b d3 1f 73 27 dd 3b 38 13 6d 43 d7 31 d7 d3 eb 53 9c Data Ascii: ?%%1q_\tL4+>}oybmwruNHE@:O`vKDs&'a'S7'y0?-sREe32^&SR53pFI0MjN^^MACyzfU^HjwX{)m)zS$nCL#"j:>^V?,ks';8mC1S
2024-09-27 21:55:41 UTC	855	IN	Data Raw: 20 14 80 06 f7 e2 b5 db d6 c5 b4 c6 5f e1 7b 76 1b 9d a4 e9 6e 9a 5c c9 36 df 14 3a a1 47 d0 e6 00 88 d8 cb a3 30 41 78 cf 37 25 ca 2b 3e 60 ed a5 aa 8d 3e b1 ad 34 e9 15 75 67 50 a0 46 bb a6 5f ba e2 9b cb 04 07 93 40 5c 16 9d 00 ca 3e 80 25 94 2b 0d 7d a7 b8 f2 7b 9c 0f 81 b6 e6 a4 42 2b 4d 67 df ad 1c c2 6a 6a 2b c5 1d da d0 1a 13 bc 76 0c 6f b0 01 2d cd 69 36 32 b3 b1 61 89 73 7e d1 48 48 ae 58 07 06 be 0e 9a 29 24 b4 42 eb b3 33 30 e3 ac 59 a7 95 73 92 ac 5a 37 c8 01 f1 6e 70 24 b9 ea 6b 78 a5 f0 eb 4e 72 99 1e 24 a7 f4 2b 86 71 68 49 38 c1 ae 39 36 72 95 d6 c2 f6 d1 b0 ea 68 19 8e 93 78 3c 86 7b db cf e2 31 10 22 e1 00 a7 32 cd 00 81 da 73 9d 15 11 a1 5b 69 f1 d5 88 84 a3 8d 18 bd ae f9 f2 f9 75 df ea be c5 3e cb 14 48 d9 af 37 0a d8 03 eb b8 41 d4 Data Ascii: _{vn\6:G0Ax7%+>`>4ugPF_@\>%+}{B+Mgjj+vo-i62as~HHX)$B30YsZ7np$kxNr$+qhI896rhx<{1"2s[iu>H7A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	52739	13.107.246.45	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:41 UTC	600	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:41 UTC	757	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:55:41 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 27 Sep 2024 04:46:35 GMT ETag: 0x8DCDEAF5E020495 x-ms-request-id: eace7353-601e-00c4-0e1e-113692000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215541Z-15767c5fc55n4msda3xfqxy5w000000002sg0000000098u0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-27 21:55:41 UTC	15627	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-09-27 21:55:41 UTC	1547	IN	Data Raw: 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	52741	13.107.246.45	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:41 UTC	385	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:42 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:55:41 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: 7856a741-701e-0079-2022-1148cd000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215541Z-15767c5fc55n4msda3xfqxy5w000000002mg00000000y73e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:55:42 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	52740	13.107.246.45	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:41 UTC	398	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:42 UTC	800	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:55:41 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: 0e605a93-d01e-0068-1722-11a5c6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215541Z-15767c5fc55xsgnlxyxy40f4m000000002n000000000113t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-27 21:55:42 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	52743	13.107.246.45	443	6768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 21:55:42 UTC	364	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 21:55:42 UTC	757	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 21:55:42 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 27 Sep 2024 04:46:35 GMT ETag: 0x8DCDEAF5E020495 x-ms-request-id: eace7353-601e-00c4-0e1e-113692000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240927T215542Z-15767c5fc55lghvzbxktxfqntw00000002ag00000000aefz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-27 21:55:42 UTC	15627	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-09-27 21:55:42 UTC	1547	IN	Data Raw: 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""""

Target ID:	0
Start time:	17:53:37
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	17:53:38
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1952,i,3575760107684391540,14792378179534548501,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:53:39
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0yNzlhNjA0ZS05MTMyLTQyNDYtYjQwOC1kZTQzOWFlMmRmNTMmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT0yNzlhNjA0ZS05MTMyLTQyNDYtYjQwOC1kZTQzOWFlMmRmNTMmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Windows Analysis Report
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2FsubscriΡtions&p=bT0yNzlhNjA0ZS05MTMyLTQyNDYtYjQwOC1kZTQzOWFlMmRmNTMmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l