Edit tour

Windows Analysis Report
http://microsoft.biosency.com/

Overview

General Information

Sample URL:	http://microsoft.biosency.com/
Analysis ID:	1522081
Tags:	openphish
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Invalid 'forgot password' link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4784 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2196,i,4525585386826145495,10144725593978225122,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://microsoft.biosency.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveContent-Length: 612sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: */*Origin: https://msft.hsprotect.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://msft.hsprotect.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_212.2.dr, chromecache_234.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_165.2.dr, chromecache_233.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_165.2.dr, chromecache_233.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_127.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
Source: chromecache_127.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/css/bootstrap.min.css
Source: chromecache_127.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.bundle.min.js
Source: chromecache_223.2.dr	String found in binary or memory: https://client.hsprotect.net/PXzC5j78di/main.min.js
Source: chromecache_130.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_130.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_220.2.dr	String found in binary or memory: https://fpt.live.com/
Source: chromecache_185.2.dr, chromecache_200.2.dr, chromecache_224.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_133.2.dr	String found in binary or memory: https://github.com/FontCustom/fontcustom
Source: chromecache_165.2.dr, chromecache_233.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_133.2.dr	String found in binary or memory: https://github.com/icons8
Source: chromecache_185.2.dr, chromecache_200.2.dr, chromecache_224.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_185.2.dr, chromecache_200.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_133.2.dr	String found in binary or memory: https://icons8.com/
Source: chromecache_133.2.dr	String found in binary or memory: https://icons8.com/contact
Source: chromecache_133.2.dr	String found in binary or memory: https://icons8.com/good-boy-license/
Source: chromecache_133.2.dr	String found in binary or memory: https://icons8.com/line-awesome
Source: chromecache_129.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_129.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_127.2.dr	String found in binary or memory: https://maxcdn.icons8.com/fonts/line-awesome/1.1/css/line-awesome.min.css
Source: chromecache_133.2.dr	String found in binary or memory: https://plus.google.com/
Source: chromecache_127.2.dr	String found in binary or memory: https://signup.live.com/?lic=1
Source: chromecache_133.2.dr	String found in binary or memory: https://twitter.com/icons_8
Source: chromecache_127.2.dr	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/css/all.css

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49930 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@26/192@70/16

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2196,i,4525585386826145495,10144725593978225122,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://microsoft.biosency.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2196,i,4525585386826145495,10144725593978225122,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://microsoft.biosency.com/	100%	SlashNext	Credential Stealing type: Phishing & Social usering

Source	Detection	Scanner	Label
http://knockoutjs.com/	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0016.t-0009.t-msedge.net	13.107.246.44	true	false	unknown
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0029.t-0009.t-msedge.net	13.107.246.57	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
inbound-weighted.protechts.net	35.190.10.96	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
s-part-0036.t-0009.t-msedge.net	13.107.246.64	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
stk.hsprotect.net	34.107.199.61	true	false	unknown
microsoft.biosency.com	130.93.125.135	true	false	unknown
1220595937.rsc.cdn77.org	195.181.170.18	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
js.monitor.azure.com	unknown	unknown	false	unknown
signup.live.com	unknown	unknown	false	unknown
collector-pxzc5j78di.hsprotect.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
logincdn.msftauth.net	unknown	unknown	false	unknown
mem.gfx.ms	unknown	unknown	false	unknown
use.fontawesome.com	unknown	unknown	false	unknown
client.hsprotect.net	unknown	unknown	false	unknown
c.s-microsoft.com	unknown	unknown	false	unknown
maxcdn.icons8.com	unknown	unknown	false	unknown
msft.hsprotect.net	unknown	unknown	false	unknown
support.content.office.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
fpt.live.com	unknown	unknown	false	unknown
acctcdn.msftauth.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://signup.live.com/?lic=1	false	unknown
https://mem.gfx.ms/scripts/me/MeControl/10.24228.4/en-US/meCore.min.js	false	unknown
https://mem.gfx.ms/meversion?partner=SMCConvergence&market=en-us&uhf=1	false	unknown
https://microsoft.biosency.com/	true	unknown
https://microsoft.biosency.com/assets/img/background.png	true	unknown
https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.bundle.min.js	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js	false	unknown
https://maxcdn.icons8.com/fonts/line-awesome/1.1/css/line-awesome.min.css	false	unknown
http://microsoft.biosency.com/	true	unknown
https://microsoft.biosency.com/assets/img/favicon32.svg	true	unknown
https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/css/bootstrap.min.css	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	false	unknown
https://microsoft.biosency.com/assets/img/microsoft_logo.svg	true	unknown
https://maxcdn.icons8.com/fonts/line-awesome/1.1/fonts/line-awesome.woff2?v=1.1.	false	unknown
https://stk.hsprotect.net/ns?c=029dbc40-7e2b-11ef-856f-85724689caa7	false	unknown
https://collector-pxzc5j78di.hsprotect.net/api/v2/msft	false	unknown
https://microsoft.biosency.com/assets/css/styles.min.css	true	unknown
https://microsoft.biosency.com/assets/js/script.min.js	true	unknown
https://logincdn.msftauth.net/16.000/content/js/MeControl_byKfhfjpuoP7eXmeHHGYoA2.js	false	unknown
https://mem.gfx.ms/scripts/me/MeControl/10.24228.4/en-US/meBoot.min.js	false	unknown
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://icons8.com/good-boy-license/	chromecache_133.2.dr	false		unknown
https://icons8.com/	chromecache_133.2.dr	false		unknown
https://use.fontawesome.com/releases/v5.12.0/css/all.css	chromecache_127.2.dr	false		unknown
https://github.com/FontCustom/fontcustom	chromecache_133.2.dr	false		unknown
https://github.com/icons8	chromecache_133.2.dr	false		unknown
http://knockoutjs.com/	chromecache_165.2.dr, chromecache_233.2.dr	false	URL Reputation: safe	unknown
https://client.hsprotect.net/PXzC5j78di/main.min.js	chromecache_223.2.dr	false		unknown
https://github.com/douglascrockford/JSON-js	chromecache_165.2.dr, chromecache_233.2.dr	false		unknown
https://getbootstrap.com/)	chromecache_185.2.dr, chromecache_200.2.dr, chromecache_224.2.dr	false	URL Reputation: safe	unknown
https://login.windows-ppe.net	chromecache_129.2.dr	false		unknown
https://fpt.live.com/	chromecache_220.2.dr	false		unknown
https://icons8.com/contact	chromecache_133.2.dr	false		unknown
https://fontawesome.com/license/free	chromecache_130.2.dr	false	URL Reputation: safe	unknown
https://icons8.com/line-awesome	chromecache_133.2.dr	false		unknown
https://twitter.com/icons_8	chromecache_133.2.dr	false		unknown
https://fontawesome.com	chromecache_130.2.dr	false	URL Reputation: safe	unknown
https://plus.google.com/	chromecache_133.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_185.2.dr, chromecache_200.2.dr	false		unknown
https://login.microsoftonline.com	chromecache_129.2.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_165.2.dr, chromecache_233.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_185.2.dr, chromecache_200.2.dr, chromecache_224.2.dr	false		unknown
http://github.com/requirejs/almond/LICENSE	chromecache_212.2.dr, chromecache_234.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.64	s-part-0036.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
35.190.10.96	inbound-weighted.protechts.net	United States	15169	GOOGLEUS	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.44	s-part-0016.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
34.107.199.61	stk.hsprotect.net	United States	15169	GOOGLEUS	false
13.107.246.57	s-part-0029.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
195.181.170.18	1220595937.rsc.cdn77.org	United Kingdom	60068	CDN77GB	false
130.93.125.135	microsoft.biosency.com	France	25540	ALPHALINK-ASFR	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522081
Start date and time:	2024-09-29 08:19:52 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://microsoft.biosency.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@26/192@70/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://signup.live.com/?lic=1 Browse: https://support.microsoft.com/en-us/help/4463210/windows-10-sign-in-microsoft-account-windows-hello-security-key Browse: https://account.microsoft.com/account/manage-my-account

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 142.250.185.206, 74.125.133.84, 34.104.35.123, 104.21.27.152, 172.67.142.245, 216.58.206.74, 142.250.185.202, 142.250.185.138, 142.250.186.42, 172.217.18.10, 216.58.206.42, 172.217.16.202, 142.250.186.74, 142.250.181.234, 142.250.186.170, 142.250.185.234, 172.217.16.138, 142.250.184.234, 142.250.185.170, 142.250.186.106, 142.250.184.202, 52.165.165.26, 192.229.221.95, 20.242.39.171, 93.184.221.240, 13.107.42.22, 52.167.30.171, 142.250.185.106, 2.23.209.55, 2.23.209.54, 104.208.16.89, 95.101.148.110, 104.208.16.91, 13.85.23.206, 95.101.149.131, 104.102.52.100, 2.16.168.6, 2.16.168.7, 184.28.89.233, 52.182.143.210, 88.221.110.176, 88.221.110.179, 20.190.159.23, 20.190.159.75, 20.190.159.2, 20.190.159.0, 40.126.31.69, 20.190.159.68, 40.126.31.73, 20.190.159.73, 216.58.212.170, 142.250.185.74, 40.126.31.67, 20.190.159.4, 20.31.169.57, 95.101.150.103, 142.250.185.227, 142.250.184.238
Excluded domains from analysis (whitelisted): greenid-prod-pme.eastus2.cloudapp.azure.com, lgincdnmsftuswe2.azureedge.net, pme-greenid-prod.trafficmanager.net, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, use.fontawesome.com.cdn.cloudflare.net, ak.privatelink.msidentity.com, onedscolprdcus17.centralus.cloudapp.azure.com, www.microsoft.com-c-3.edgekey.net, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, login.live.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, acctcdnvzeuno.azureedge.net, wu-b-net.trafficmanager.net, onedscolprdcus10.centralus.cloudapp.azure.com, acctcdnvzeuno.ec.azureedge.net, fpt2.microsoft.com, fs.microsoft.com, acctcdnmsftuswe2.azureedge.net, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, account.microsoft.com.edgekey.net, lgincdnvzeuno.ec.azureedge.net, e12627.g.akamaiedge.net, aadcdn.msauth.net, prodstack.support.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://microsoft.biosency.com/

Input	Output
URL: https://microsoft.biosency.com/ Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Sign in", "prominent_button_name":"Next", "text_input_field_labels":"Email, phone, or Skype", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://signup.live.com/?lic=1 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"Next", "text_input_field_labels":["someone@example.com", "Get a new email address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0 Model: jbxai	{ "brand":["Windows Hello"], "contains_trigger_text":true, "trigger_text":"Sign in", "prominent_button_name":"Sign-in options", "text_input_field_labels":["Select Facial recognition (Windows Hello)", "Select Fingerprint recognition (Windows Hello)", "Select PIN (Windows Hello)"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://signup.live.com/?lic=1 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Next", "text_input_field_labels":["someone@example.com", "Get a new email address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://signup.live.com/?lic=1 Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"live.com", "classification":"wellknown", "reasons":["The URL 'signup.live.com' is a subdomain of 'live.com', which is a legitimate domain associated with Microsoft.", "Microsoft is a well-known brand and 'live.com' is commonly used for their services.", "The input fields 'someone@example.com' and 'Get a new email address' are typical for a legitimate signup page."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"someone@example.com, Get a new email address"}

URL: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0 Model: jbxai	{ "brand":["Windows Hello"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign-in options", "text_input_field_labels":[], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://signup.live.com/?lic=1 Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"live.com", "classification":"wellknown", "reasons":["The brand 'Microsoft' is well-known and commonly associated with the domain 'live.com'.", "The URL 'signup.live.com' is a subdomain of 'live.com', which is a legitimate domain owned by Microsoft.", "The input fields 'someone@example.com' and 'Get a new email address' are consistent with Microsoft's services for email sign-up and management."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"someone@example.com, Get a new email address"}

URL: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign-in options", "text_input_field_labels":["Select Facial recognition (Windows Hello)", "Select Fingerprint recognition (Windows Hello)", "Select PIN (Windows Hello)"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.646439344671015
Encrypted:	false
SSDEEP:	3:xRhVnCm:xrQm
MD5:	F79FFC1767406D43B996B050CEC09ED2
SHA1:	EA4F919251BCDE6EE3CB2E45C0356E1FA3B86661
SHA-256:	1E62D5B3EFE0ECE892FF79BD65457FF2DC48A840444AFD53DEEDF2F2869BD685
SHA-512:	1B4C7C09D52BB2D26F505C148FD92B987AD680E675E7496EB8E92279F750587EBCE45DECD718CBBDFB91A4CEAADCA14AD918C4F8AA7971D199593C82C31BB92F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAnAwrJpDUzjsBIFDdbBmF8=?alt=proto
Preview:	Cg0KCw3WwZhfGgQIZBgC

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	631
Entropy (8bit):	6.391875872958697
Encrypted:	false
SSDEEP:	12:6v/7s6UVprYe6IZeuLgou+/CAztgbbvCR00aJzS4VQIjXuYEMwoQIjXuHBOLPMdo:hX7rRkf+/rMcCJzAIjNEMwNIj8Efl9
MD5:	FB2ED9313C602F40B7A2762ACC15FF89
SHA1:	8A390D07A8401D40CBC1A16D873911FA4CB463F5
SHA-256:	B241D02FAB4B17291AF37993EB249F9303EB5897610ABAFAC4C9F6AA6A878369
SHA-512:	9CBCF5C7B8409494F6D543434ECAFF42DE8A2D0632A17931062D7D1CC130D43E61162EEDB0965B545E65E0687DED4D4B51E29631568AF34B157A7D02A3852508
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...{PLTE.P".J$x......P".P".J$x.........K..K..K..D.o..w..w..w.........................................................P"...................$tRNS.DD...CC..DEC..CEDDEC..CED...CC...DD.c,8....bKGD(........pHYs...........~.....tIME....."4...4...QIDAT8...G.. ...Q..s....?......s.f..a`.A... .bA!..,/dYQ.....a.((j^.m?4..Q.?.....2>.........%tEXtdate:create.2020-05-28T22:34:52+02:00.t.....%tEXtdate:modify.2020-05-28T22:34:52+02:00.)<'...WzTXtRaw profile type iptc..x.....qV((.O..I.R..#..c..#.K.... D.4.d.#.T ...........H.J.....t.B5.....IEND.B`.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	264
Entropy (8bit):	3.9576841727930927
Encrypted:	false
SSDEEP:	6:y3ZzwvcLRRWYzB1GhpGawwoiIQMWUSGIzBQJSkWnVgXQQn:owO8pG7wZMWpzBMSkWE7n
MD5:	D120DFD042E0E6EC0A3ABAA0DE1AE16C
SHA1:	590BFAE70EC9E457F815357CBB7ABF66E9754556
SHA-256:	8C66F821D90EAC9CF22C8B7A4CEE07F6EEAAD021C69A6AF05CBDB3772B474CCA
SHA-512:	6FE96395F7D756C04E4F97C43242889F10E4404BBEDF53F9A2404F4B63939D6D4C7A1797B7B9D098CB108F1A1AB02B88B6659393D1DF1012B7B988414A9B7696
Malicious:	false
Reputation:	low
URL:	https://stk.hsprotect.net/ns?c=029dbc40-7e2b-11ef-856f-85724689caa7
Preview:	f0e88baca01ffa7d37489605737e9d338689ec295bfe80bade0528fc840f5df59b644d2ef0ca8a5a2fa1cbf63e39455c0ddcc9e4203f50847b166495eecad3505ae4a94051f52fbf99dd3be5d58fa6171feb7e05b82273fe4e1eb7f20799b3956827f02886081f532a7297e331496d5d4bbd59c7c678522c93bff88bf8ba25773f4e3b00

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	3832
Entropy (8bit):	4.92522429789377
Encrypted:	false
SSDEEP:	48:omdIFIoP+8ODcaSwb4bqKSXPzyfPmdd0bVKwDieeHFVQbYKpE9BVhwgM:oqInQDNkONXLKedii+cZVh/M
MD5:	E524A36BE23802505E2951D6978C8FD1
SHA1:	2AA219BBEC58DA88AD99B4EFC0939CE4BFAE0345
SHA-256:	65B8E27BF22602F794B10458E6D997F0C2FF284E72FDC4227DDA2229D8B84AD7
SHA-512:	FDCD860A1CAE6AB05AA59F33C69431530013809136BB0359F68DBFD9E32BF81FB4DBBFFFD7E12950F4E9FC8CDF4DF011BC4201AA4D5BD2A9866FB76803690822
Malicious:	false
Reputation:	low
URL:	https://microsoft.biosency.com/
Preview:	<!DOCTYPE html>.<html>..<head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no">. <title>Sign in to your Microsoft account</title>. <link rel="icon" type="image/svg+xml" sizes="21x21" href="assets/img/favicon16.svg">. <link rel="icon" type="image/svg+xml" sizes="43x43" href="assets/img/favicon32.svg">. <link rel="icon" type="image/svg+xml" sizes="240x240" href="assets/img/favicon%20180.svg">. <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/css/bootstrap.min.css">. <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.12.0/css/all.css">. <link rel="stylesheet" href="https://maxcdn.icons8.com/fonts/line-awesome/1.1/css/line-awesome.min.css">. <link rel="stylesheet" href="assets/css/styles.min.css">.</head>..<body class="text-nowrap" style="width: 100%;height: 100vh;">. <div id="loginForm" class="container"><img id="image" src="assets/

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3637)
Category:	downloaded
Size (bytes):	3690
Entropy (8bit):	5.141541571595828
Encrypted:	false
SSDEEP:	96:Af3vI6YmI62HUbHbZbpVuJRDhxwC9jTx+IRcaOs/Z:Af3vI6YmI62HUrllgffOQZ
MD5:	A249B03B72AB5E7B60E7806457B9BE61
SHA1:	FF0B5F4FB91A9DBF147262AD59B292C6C2DFE122
SHA-256:	48FF8C6449BEF199F206C7A1C49403E10DC6341A9D4A1F8946B042DDE66E315F
SHA-512:	29F204E3813972DC76FCE3DD6715093646EB0DA52DEDAC5E7E09B618E5CF8703CDE95D463727EB29F90D461D0C5A73B5701EC39B994A268103A06306144A6F34
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/PromotionBanner.Main.min.js?v=SP-MZEm-8ZnyBsehxJQD4Q3GNBqdSh-JRrBC3eZuMV8
Preview:	!function(){"use strict";var n;!function(n){n.PromotionBanner=".PromotionBanner",n.TopPageBanner=".TopPageBanner",n.AboveUhfBanner=".AboveUhfBanner",n.RailBanner=".RailBanner",n.NpsRailBanner=".NpsRailBanner",n.RailSecondaryCtaBanner=".RailSecondaryCtaBanner"}(n\|\|(n={}));var e=[{dismissSelector:null,clickSelector:"#ucsTopBannerButtonLink",element:n.PromotionBanner},{dismissSelector:"#top-banner-dismiss-button",clickSelector:"#ucsTopBannerButtonLink",element:n.TopPageBanner},{dismissSelector:"#uhf-banner-close",clickSelector:"#upgradeUhfBannerButton",element:n.AboveUhfBanner},{dismissSelector:"#rail-banner-dismiss-button",clickSelector:"#rail-banner-button",element:n.RailBanner},{dismissSelector:"#nps-rail-close",clickSelector:"#nps-rail-link",element:n.NpsRailBanner},{dismissSelector:"#rail-banner-dismiss-button",clickSelector:"#rail-banner-button, #rail-banner-button-secondary",element:n.RailSecondaryCtaBanner}],t=function(){return t=Object.assign\|\|function(n){for(var e,t=1,r=argument

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56994)
Category:	downloaded
Size (bytes):	57180
Entropy (8bit):	4.716647457854574
Encrypted:	false
SSDEEP:	768:sEC319PizNq4/xBo8UHJikQ2R/oMQyYJrX75CthZQz5:sEkPUE4/3uHEB2Wfd7stAF
MD5:	500D1A92F875B1D96D37A3A3F8F0438C
SHA1:	703603273F5D5D52EB456D6385E1A68294FBD568
SHA-256:	C9B46437D7418E1712DAAAD6D73FA17C2C6AFB5681770C90339C25428415B7FD
SHA-512:	73DDE27CFA13BCC744247FEB288701C7FFC02F5CE7ABDFB8FD198C19A7C8FEF9D315EFDD2B09E7D6EA1EB33136CC90504D2D429390AA48113EDF89E0D8FB6126
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.12.0/css/all.css
Preview:	/!. Font Awesome Free 5.12.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pu

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/images/favicon.ico?v=2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1704 x 1188, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	161708
Entropy (8bit):	7.869809585087105
Encrypted:	false
SSDEEP:	3072:P20ZLFqUh1SpJqz4VhROy0ys6GQnkjvX5xhD6GWJeFK8JwbO:VBfSpJqG7Ofy9GckD5xoGWqKjq
MD5:	56C0CC5DC00DF8D76D03245579A4BCE3
SHA1:	7F0A09BE85F30AA0F24E17F40E63EB2BA0A6D481
SHA-256:	79EE0F2FE37DD42616C1D64152635E5310CDAD145A9AABC35102A39015E01D58
SHA-512:	14FA089FE888416ED15329E512F200089374F5F05EE1DCF0B0BF740593344DB5990A0830D06F39FF0C2BB02C7C459895B51BE11615BCB578D254EC6D51B1B909
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/cff57ac0-8522-41e8-9fd7-beb8d2729b0a.png
Preview:	.PNG........IHDR..............s......pHYs.........&.:4....sRGB.........gAMA......a....!IDATx.....\g}&.?.......,o./ ....$a.ai'...o..1p....\|....3L>.a....L0&.7.:C...q.....-/....j.......y......U-.[~....S..V......z8.###;=..V..4w[..V.............9+..A...1..w...mmm=X ..044..f.).............yq3y..........P.....H$....."""""""""""""u..Z........\3.+.......=....&.............H.C.....M..3.U.....8.n......ADDDDDDDDDDDDd.&...\.T.l.`../&....)...............n.....,.R..T.I...?.,................[....\.B...f........... """"""""""""2O...G?.Q.W...j........M...:DDDDDDDDDDDDD...+...Q....&K...Ny.....n.................j.....b.........m.%......................^.Xt..?...Xx....c..3.<... """""""""""".@&g:...'in&v..9.._...X.z.3.j5."""""""""""""..,....].?.M.8a....S^{{._.V}.............,BKK...8..m...M.Pf...s.Nl...j..DDDDD """"""".444.X.f.-.B...N?.B..c......j5..DDDDDDDDDDDDD........c...n..v..oZ......T..FFFP.T.x@..........................D........k...9.$.3uww..>...F.g...[n..^.....r.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27557)
Category:	downloaded
Size (bytes):	28101
Entropy (8bit):	4.799557763132519
Encrypted:	false
SSDEEP:	384:+cMgnhpiWbEHJMdxefafwiYxM4EOXpJOccGfqVDiivbx0x+FZE:E2ci2yflYxMyZJOccGyVuivbx4+DE
MD5:	4334C8C70998D81BDE3E6765828811A6
SHA1:	DE27D3920885BE830EBA8B77FF1C3B320AFC5B98
SHA-256:	1E8638F605575BD335D49EFA95E165ADF7EF06DDA8E367661AC2517A0A3A96B4
SHA-512:	0340F7A2BB6053B2A8E42003EC0238ACF7CCF815D320D431028C83D1CF3B37A96D9CEB749E5C61828293D35B47FE306C2809D2A76E3FEE77F09D9124B5E5DE76
Malicious:	false
Reputation:	low
URL:	https://maxcdn.icons8.com/fonts/line-awesome/1.1/css/line-awesome.min.css
Preview:	/!. Line Awesome 1.1.0 by @icons_8 - https://icons8.com/line-awesome. * License - https://icons8.com/good-boy-license/ (Font: SIL OFL 1.1, CSS: MIT License). . Made with love by Icons8 [ https://icons8.com/ ] using FontCustom [ https://github.com/FontCustom/fontcustom ]. . Contacts:. * [ https://icons8.com/contact ]. . Follow Icon8 on. * Twitter [ https://twitter.com/icons_8 ]. * Facebook [ https://www.facebook.com/Icons8 ]. * Google+ [ https://plus.google.com/+Icons8 ]. * GitHub [ https://github.com/icons8 ]. */.la,.la-stack{display:inline-block}.la-fw,.la-li{text-align:center}@font-face{font-family:LineAwesome;src:url(../fonts/line-awesome.eot?v=1.1.);src:url(../fonts/line-awesome.eot??v=1.1.#iefix) format("embedded-opentype"),url(../fonts/line-awesome.woff2?v=1.1.) format("woff2"),url(../fonts/line-awesome.woff?v=1.1.) format("woff"),url(../fonts/line-awesome.ttf?v=1.1.) format("truetype"),url(../fonts/line-awesome.svg?v=1.1.#fa) format("svg");font-weigh

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 964 x 604, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	713732
Entropy (8bit):	7.993712164734999
Encrypted:	true
SSDEEP:	12288:JiEYN05hkzzSfCHKEUbK1RVcBGysxd2ozD+u/S7TFZFeXE+dIiDVDF4ZJ0LD:JQkOSqHKpARLz2oG8S7vFeXTF4m
MD5:	3B5120961679C5317DF2D3704A5A187F
SHA1:	71042510EFF3CA2316E28A99CD2F26937C0731C6
SHA-256:	EBB327D6AF7DEC63A7861428BD5FED958E3F80D64D0261C4652F6F4925E7B8BE
SHA-512:	9D73B6122312730EFA9FC5504D9B594001175F2C1F90DA3F143997F8E23CB873B6D8756B9703DC43DAAE80C7A04E2DD33968C31338D479441FE052908E83A103
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......\.....?.mm....pHYs.........mh......sRGB.........gAMA......a....IDATx.....<_...Fd.q...f..h$..<,..EB....8}.....a.....&\..#......v..'b.....{....U..k..._ke......g.../".......X.?{...N..E.........W..>.h.q.......5..O0......C].....n..=F.i..qw!/..\|_.u...><.}..J.........................g.W.~.x_..\|.{}}~..v.Qx....._......\|I,.q1.U...6.m_.,.../.{L.g.$`.V"........._*].../......f..Y....5,mG.KZ..{^.......7/q.....{^..R...<.....s...F...y..A.4.......o......q.#./...5sKhMv..\/...v...`.E.m&..~X.zM.......0.B.l....v.\.x..Z$Dr.:..Kh\|..G..O...=G.{^..n.Y.C....^..u.^..]....ko..\|nK..1.}s.i....k.....O}..C..CQm.}...\|9...gy-x....yo:.O....cr..S.../...\.y..}!v-.+>.?...5.u.nE.+.5.../Pu..ue\.g.."......c..D.6..=..S.3./..<.h..\T.%._...&Cb_.]]A....7....._.+EZ..x.........[.......%..b6.W.<.....k.W....... ....6....H.t...'u?..J.b..i.t..w.[...BQ.....?&.-.r..].=..T.;oy]2.[.7F<c........osv..oo..c.s$}......}%..L6...}X..Q~..o^W.....x.{r......j..!....4.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65402)
Category:	downloaded
Size (bytes):	155420
Entropy (8bit):	5.666795604419237
Encrypted:	false
SSDEEP:	3072:Br8hd5AC9+fUyIPYN8gAwl1axj9hEQqhTQSGrtgdovHBP8ys:BriaC9F/m8ZYQ6MSGRgdSHBts
MD5:	15EA7DAF357DF050DA684A3DB9D0BEE9
SHA1:	87F7E1188E26F43298382305FEF4BF2C341ABCD1
SHA-256:	0F648267D95FE932C8F14E293872096593601FEF696F259BAB331C52B256B224
SHA-512:	846F76A8BB0F179A6B51277A78E567791F4C9D0D9358FC3A27FC2589A11D2DF98DEA2CC1EAA4E8861E5E480EB1659EAED2F67D8D5816B19E40D22F1B4FDC59BA
Malicious:	false
Reputation:	low
URL:	https://client.hsprotect.net/PXzC5j78di/main.min.js
Preview:	// @license Copyright (C) 2014-2024 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed..try{window._pxAppId="PXzC5j78di",function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function n(t,n){if(t){if("string"==typeof t)return e(t,n);var r=Object.prototype.toString.call(t).slice(8,-1);return"Object"===r&&t.constructor&&(r=t.constructor.name),"Map"===r\|\|"Set"===r?Array.from(t):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?e(t,n):void 0}}function r(t){return function(t){if(Array.isArray(t))return e(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2824)
Category:	downloaded
Size (bytes):	2874
Entropy (8bit):	5.196998647096783
Encrypted:	false
SSDEEP:	48:9gqOZplvxm+DnZAKXJJRfhFSenR0waxOf5S6Yi29fJXWcE0129fJBBnfK5DxZ:ZOZvoknZr1P3tCOfV29v29zpIDxZ
MD5:	78C4311E4D7A1AFDE2EC6FB093FE40A2
SHA1:	FB9A1881E03ADF12A393759606FF384F847A52A8
SHA-256:	2CA909B3DA6E4A4FC7FD3C9DD490C4DB45435C995177AA5D7D154852EFD69E25
SHA-512:	8736EA1BD4C1DB34FEE9C3B71753D986FFD56129C12C3D3B3C41B920936C13DFFA59E887FC50A6D6AF33C74A9CAD1531FCCBD9620AE0C1AE2FA3C8BF455465AE
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/SilentSignIn.Main.min.js?v=LKkJs9puSk_H_Tyd1JDE20VDXJlRd6pdfRVIUu_WniU
Preview:	!function(){"use strict";var t,n,e,o;function i(t,n){var e,o,i,r;"object"==typeof window.top.analytics&&(t.behavior=null===(o=null===(e=window.top)\|\|void 0===e?void 0:e.oneDS)\|\|void 0===o?void 0:o.Behavior[n],null===(r=null===(i=window.top)\|\|void 0===i?void 0:i.analytics)\|\|void 0===r\|\|r.captureContentUpdate(t))}(e=t\|\|(t={})).None="None",e.EU="EU",function(t){t[t.Undefined=0]="Undefined",t[t.MinorWithoutParentalConsent=1]="MinorWithoutParentalConsent",t[t.MinorWithParentalConsent=2]="MinorWithParentalConsent",t[t.Adult=3]="Adult",t[t.NotAdult=4]="NotAdult",t[t.MinorNoParentalConsentRequired=5]="MinorNoParentalConsentRequired"}(n\|\|(n={})),function(t){t.Impression="IMPRESSION",t.SignIn="SIGNIN"}(o\|\|(o={}));var r,l=function(){return l=Object.assign\|\|function(t){for(var n,e=1,o=arguments.length;e<o;e++)for(var i in n=arguments[e])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},l.apply(this,arguments)};function d(){var t=window.top.document.getElementById("iframeOP");return"

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.378783493486175
Encrypted:	false
SSDEEP:	3:qinPt:qyPt
MD5:	4C42AB4890733A2B01B1B3269C4855E7
SHA1:	5B68BFE664DCBC629042EA45C23954EEF1A9F698
SHA-256:	F69E8FC1414A82F108CFA0725E5211AF1865A9CEA342A5F01E6B2B5ABE47E010
SHA-512:	0631C6EFD555699CB2273107FE5AF565FEC2234344E2D412C23E4EE43C6D721CB2B058764622E44FD544D840FF64D7C866565E280127C701CAAB0A48C35D4F5C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwkEecmoKQp5HxIFDYOoWz0SBQ3OQUx6?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw3OQUx6GgA=

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (5167), with no line terminators
Category:	downloaded
Size (bytes):	5172
Entropy (8bit):	5.2996444594490715
Encrypted:	false
SSDEEP:	96:maSsBZbROvF/xCkt/+5HnoaYn/7lJY/nEkZJjJE0+H/k7A/kOJQJsJgJqJaNJ/Je:maSsBZbRO1xxtDa+7lJ4nVZJjJE0+f0k
MD5:	DE166AA9ADF2414323C2753B85A1A15B
SHA1:	5A22600FE878C436AAC125FAF8CC5B7AB56A3116
SHA-256:	3F8BEE024642190823492958CD4EB3E45B5D1B29191E3794B61A8BA6DC813C09
SHA-512:	5C6416A113141EB328DAFB5311E6FB1F9250BBE5F332E6D77155FA6F16BFD8B43C2B8908575E0102B90869342770AA444A9F2259E48EC03E18B739D95E181230
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/Article/left-nav.css?v=P4vuAkZCGQgjSSlYzU6z5FtdGykZHjeUthqLptyBPAk
Preview:	.html[dir=rtl] .supLeftNavActiveCategory{padding-left:30px;padding-right:0;border-right:3px solid #434343;border-left:none}html[dir=rtl] .supLeftNavCategory{border-left:none;padding-right:16px;padding-left:0}html[dir=rtl] .supLeftNavCategory:not(.supLeftNavActiveCategory){border-left:none;border-right:3px solid #e6e6e6}html[dir=rtl] .supLeftNavArticles{padding-right:13px;padding-left:0}html[dir=rtl] .supLeftNavMobileView{right:0}html[dir=rtl] .supLeftNavMobileViewCloseButton{border-left:0;border-right:solid thin #e6e6e6}html[dir=rtl] .supLeftNavMobileViewClose{right:12px}html[dir=rtl] #supLeftNav{float:right;padding-right:0;padding-left:20px}#supLeftNav{box-sizing:border-box;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:1.4em;font-weight:400;line-height:1.28;padding-right:20px;color:#767676;margin-top:17px}#supLeftNavDisplayTitle,#supLeftNavMobileDisplayTitle{color:#1e1e1e;margin-bottom:20px;margin-top

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	21727
Entropy (8bit):	5.232101618468897
Encrypted:	false
SSDEEP:	384:xYzlQeau9P3TI8NCUiLFv1uP4ZVSc2uQyea+eHbJjaTbz7NiCR6Rv98NOsQzOiL/:xYhQel3TI2ChBt2OVSZuQoJjG7N1R6Rp
MD5:	C49C34EE38F103BCB82F58DED32F57DB
SHA1:	757C8CE6D92102903F636C20B70E414A5E9A2E20
SHA-256:	BDBBDA3BD97031FF5BCB76B427D2ECD9C4617922C3860F662E51FB18AC5CC591
SHA-512:	5C5307784F8B7D3CF479154CADF3525D1D1BF05216D72BB32ABEF6E25183E26FB4D84DB7B14AA2868B11F54E23284D02BFE0309EE4D560AC79A507F762DBC219
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/feedback.js?v=vbvaO9lwMf9by3a0J9Ls2cRheSLDhg9mLlH7GKxcxZE
Preview:	/! Copyright (C) Microsoft. All rights reserved. /....(function ($) {...'use strict';...(function smartFeedback() {....var activatedStarRatingValue = null;....var activatedStarRatingLabel = null;....var userSelectionIsInfoHelpful = null;......var checkBoxSelected = false;....var starRatingSelected = false;....var verbatimEntered = false;....var $spanDisplayElementsForStarCheckbox = $(".translationRatingStar, .checkboxTick");....var $extendedFeedbackStarCheckboxElements = $(".translationRatingStar, .articleExperienceOptionsCheckbox");......var $extendedFeedback = $("#extendedFeedback");....var $extendedFeedbackForm = $("#extendedFeedbackForm");....var $feedbackWrapper = $('#supWrapperToPreventFeedbackFlickering');....var $starRatingDescription = $("#starRatingDescription");....var $supDisableStickyFeedbackButton = $("#supDisableStickyFeedbackButton");....var isEnableStarRating = $feedbackWrapper.data("enableStarRating") ? $feedbackWrapper.data("enableStarRating").toLowerCase() === "tr

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	20946
Entropy (8bit):	7.93232536946356
Encrypted:	false
SSDEEP:	384:ecpgK1ekapmcRcYDw6SaYAwQTniYPMalqQm6vkoP9njpqNT:eKjUkapAsw6C9ePM2qQm6vkoFnwT
MD5:	68B6034D22E6083CF2592BF4B8B71F0E
SHA1:	0981B22AF5F2BF930794557717FF7C7F4FF563FF
SHA-256:	56E5D47C342207184BE9DE6E3CF06CF26C32B34EE799B3ACC95EBEEEEFA5484A
SHA-512:	3CDA6510769E8EE427103B1D76A0035E2A3E62C4EF0E789DBC28969B12F2DF2C1F7E7652FDF9CC99C7C086CF2764A19520D15A5FED86ECC5CAB9D9F77D534E93
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/9e557d93-f803-44df-a274-1282d542cf63.png
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...QgIDATx....nEy....j.%bU.X..n^......Im..M."Z...+hU...m.e.....A.FQ.m......D....ELTD...Uo}...>.\|3....v....y..gf.:.?.yf..n.m..a........+.~..J u..}.k.........:;v.P......qM.c;.1.S..j..@v....O...c.@.....5Z.P.E{...P.(.......PvvQ..... .IGj...U.:}.#..Xghj.C.MQ...Kua...)G,4]..?.........#.......w.Ti'.Vy....S....%._).'...J...%.u\.R.Oo.R,p......"Y....N:V.P.R.W......O..Pk...n......Z.....).....HVc.Z.M....H....X......5....$....p......".>...<U...Sc.\|.K...Q.NR...k...k...F...).....H...=.....+.zj(....]/5.\.........).....H...\.@.;.\|.......I.&5.'.(6.cTz^.....c.r...r....k.)s.b..<.#......I.1R....k..6........R.d....r.]...NT].H.....D.#%.N..X.......7.t,..z.;cS.p].f....E-...6.#......IuG...p..c[.g.`..v..R1V...J.9.J... ..HqIw.NS..........3.G..pI.+p.....#.N.......Gp....).....Hf.H..1.#.4..2r.f....t..;.Z.7W........".=1d...^.....M ..I..T...../.t.T................_JLz)......{..hFJ...E..t9.).WaXj&

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2674)
Category:	downloaded
Size (bytes):	2728
Entropy (8bit):	5.253272384445131
Encrypted:	false
SSDEEP:	48:M1wQmQqQNrfAI4dz2eLNBxROk2oDZ8nVlnQiOk50NQclnmlnmZ5flnqlnuln5jBN:emQjNj4t2eLNgsdiQj+RacmVYU57vzKO
MD5:	468D4ACC570CFFC7101AC8A63514AD31
SHA1:	6983E89B6EC798B5B8C2B3B76D9311808437B572
SHA-256:	B4B342F2025799CA602A75590B324E7493B0903726720BCE4CA793207C83255C
SHA-512:	9042A219E8511FF281B9F680B3577CE3EAE29E881F24BE1D2B46C89D1F0013E30AA890C1A0181FF83975E125F62C0C6E896D3B8515067221143D9A3290B42865
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/MeControlCallout.Main.min.js?v=tLNC8gJXmcpgKnVZCzJOdJOwkDcmcgvOTKeTIHyDJVw
Preview:	!function(){"use strict";var t,e,n=function(t){try{return sessionStorage.getItem(t)}catch(t){}return null};!function(t){t.EXPANDED="meControlAccountSelectorExpanded",t.COLLAPSED="meControlAccountSelectorCollapsed",t.SWITCHTYPE="meControlSwitchAccountType",t.SWITCHMSA="meControlSwitchMSAAccount",t.SWITCHAAD="meControlSwitchAADAccount"}(t\|\|(t={})),function(t){t.REMOVE="teachingCalloutRemove",t.SHOWN="teachingCalloutShown",t.TIMEOUT="teachingCalloutTimeout"}(e\|\|(e={}));var o,i,a=$("#meControl"),l=$("#smcTeachingCalloutPopover"),c=$("#teachingCalloutDismiss"),r="teachingCalloutShown";function d(t,e){var n,o={isAuto:!1,content:{contentId:e},behavior:t};null===(n=window.analytics)\|\|void 0===n\|\|n.captureContentUpdate(o)}$((function(){l&&l.length>0&&(function(t,e){if(t.length&&e.length){var n=t.offset().top;i=window.setInterval((function(){var o=e.offset().top;t.offset({top:n+o})}),15)}}(l,a),window.document.addEventListener("displayTeachingCallout",(function(t){try{if(null===n(r)&&null!=t.det

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (503)
Category:	downloaded
Size (bytes):	558
Entropy (8bit):	4.98634955391743
Encrypted:	false
SSDEEP:	12:c83DOkFYerjD6tD7fgu1M+WqQRxsZAsDFYAWCyQPO:cmZr6t/zpeT/oWCyaO
MD5:	A3BC5418F2834309CE2918B15F3B8EEA
SHA1:	62BA2712C6D4960F1057E103F6E1F3C95F2C701B
SHA-256:	B2B62643A7C4FE4A4E12934AD819F0293CC00181B78D8091AFFFF3617CEB96B1
SHA-512:	460E22E36E93BEC194D00D47754108539D2E54FF59D4293EEC25463BC3D642879C10D9BBFD881BBE5EC244819F325C422B6D7A7504000BBCE432E4D2A08FB58B
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/shimmerExperiment.Main.min.js?v=srYmQ6fE_kpOEpNK2BnwKTzAAYG3jYCRr__zYXzrlrE
Preview:	!function(){"use strict";function e(e){return document.querySelectorAll(e)}function t(e,t){e.remove(),t.style.removeProperty("display")}window.addEventListener("load",(function(){var o,r=e(".ocpSectionLayout .ocpSection"),n=e(".ocpSectionLayout .shimmer-effect");if(r.length===n.length)for(var i=0;i<n.length;i++){var c=(o=n[i],Number(o.getAttribute("shimmer-delay")));setTimeout(t,c,n[i],r[i])}else n.forEach((function(e){e.remove()})),r.forEach((function(e){e.style.removeProperty("display")}))}))}();.//# sourceMappingURL=shimmerExperiment.Main.min.js.map

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	25084
Entropy (8bit):	7.954629745011792
Encrypted:	false
SSDEEP:	384:z4b+mWMn+0y7Pg/1ZG7QBkT1ptdZXWVTTaGOKPKb3BZE3SDL0Fkx1qEPNugrtRPI:E+5Mn34PglkT9XICcPKb3Bh0e5tQT
MD5:	9AA997545CAD62F24960E39B773AE81C
SHA1:	3EBF01E3B3630F127309F816F13FF86B94798E07
SHA-256:	BC5E9528086858FD7BFF758A1B0AE0D559A9930E279ECDF4955572B6AD1E53EA
SHA-512:	4B2572DEA6B5C777AF39359095D97EB8078B3B252D4A70191837BF5C641B860CD4AF56719B3D96E45CBEBB13465625FD5DD6E66BC03F009487FEBEAF5D9F7169
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...a.IDATx..y..Eu...u}.@1.....D...IX..0,A..Fc.`.,.D..H .eUX.....E..X.H...1q......(....l...r.!.....rz.....yf......9.{6z.......h....__......r.S.C..F...T.o...<.9.M..$].6.:...9..vSrN.B.2.Ug....x..rU6i>zY..C.lK.._.v.H.......9.S..U.]T.v..Y8..LJ...tl.C....m(...&.(QpAP.x\".._.G..$.L..)T[.."j$...}...@>z.n-..X.U..45&.S.....N.m\...m"I"...\.q.\|M.6#.............Q....."...e..m.6..f.....Sj...cK+DH...+]..".......i..Q.......xS.24@....C".$b.]'Y...<J.$.jY7J........i..0..1..........y./)Db.@_@.m.X\|..u..f..w..C@.\{.mc..u&....5k..`.j.ZO7.L...7.....R..zxp...B...Y....&!#..v...m[.\\|!}....B%-..K!U..cjj..Z...^...(.J....LHYK.'.@r.....d[..Q>..[VJ..b...H5H-....h.9..K.;.1..#.)fy.........r..B.X.L.)..PV$=..:.6!.B..Z.\|...).....%@..IK.G....'ci....(.-.......R.....5W..]..4.......2[..m...9..g...w.....p.4t..... ..(.je...r..R....{E.y.Xhr..U.>.H....5}.,Q.4S.$..I...R..` ....=R.#.-Y.}l......U.W...

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/jquery/dist/jquery.min.js?v=9_aliU8dGd2tb6OSsuzixeV4y_faTqgFtohetphbbj0
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.873235826376328
Encrypted:	false
SSDEEP:	3:YA8rQaC:YAoQaC
MD5:	5FC018D9E6C56911BBC8DC5DDCD0C768
SHA1:	70979F57A85D527ED8ABCBF02CFF44640C58BDE6
SHA-256:	2E6D78A4AE644F3B60AFD3C33E66539FF6C5F6A8ED6ABC40A3AF06AC020EC020
SHA-512:	1E3B86274B3590E28366F2D2DE86A1844058E213BD225AAA05D992CA70523F65D2BD543F9F762A805A2C4D5961AA34F5A19EBE70E135939C9CD3C63F6B5F5524
Malicious:	false
Reputation:	low
Preview:	{"error":"Method Not Allowed"}.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65398)
Category:	downloaded
Size (bytes):	149977
Entropy (8bit):	5.425465014322962
Encrypted:	false
SSDEEP:	3072:ds2R7b4i2VvQ8jDNbSDU6ez/4/fOmToUJdupe:dvJ26Dkw/LT9JduY
MD5:	107489D1ED6BE77BFD69EBE4D7B52B6D
SHA1:	FD56DF206A1DD0223D6D18ADAC841582282A346E
SHA-256:	3BBC0000E28054DDBE38B2E7A21DCA8D66FDA56EA48448BCE4658BC6B518A970
SHA-512:	51C5F6D9D7D10D06777ADE20C7E63CBFA354B830B68D32FEDE4B93C15D80873C501C0CCC4D006FD58C639662D2DCBBA193B61427D30F8938EDA4B9049743BC65
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/oneds/dist/ms.analytics-web-4.0.2.min.js?v=O7wAAOKAVN2-OLLnoh3KjWb9pW6khEi85GWLxrUYqXA
Preview:	/!. 1DS JS SDK Analytics Web, 4.0.2. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof define&&define.amd)define(["exports"],n);else{var r,i,e=typeof globalThis!=t?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_analytics_web_4_0_2={},s="4.0.2",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},g=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},p=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),n(a),a)r="x",f[i]=a[i],g[i]=s,typeof d[i]==t?(r="n",(d[i]=a[i])&&(p[i]=s)):p[i]\|\|(p[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(t){"use strict";var o="object",ye="undefined",c="prototype",u=Object,s=u[c],$=undefined,y=null,l="",f="boolean",d="function",g="number",v="object",m="prototype",T="__proto__",b="string",I="undefined",C="constructor",N="Symbol",S="_polyfill",w="indexOf",P="length",A="done",_="value",D="name",O="sl

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65398)
Category:	dropped
Size (bytes):	149977
Entropy (8bit):	5.425465014322962
Encrypted:	false
SSDEEP:	3072:ds2R7b4i2VvQ8jDNbSDU6ez/4/fOmToUJdupe:dvJ26Dkw/LT9JduY
MD5:	107489D1ED6BE77BFD69EBE4D7B52B6D
SHA1:	FD56DF206A1DD0223D6D18ADAC841582282A346E
SHA-256:	3BBC0000E28054DDBE38B2E7A21DCA8D66FDA56EA48448BCE4658BC6B518A970
SHA-512:	51C5F6D9D7D10D06777ADE20C7E63CBFA354B830B68D32FEDE4B93C15D80873C501C0CCC4D006FD58C639662D2DCBBA193B61427D30F8938EDA4B9049743BC65
Malicious:	false
Reputation:	low
Preview:	/!. 1DS JS SDK Analytics Web, 4.0.2. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof define&&define.amd)define(["exports"],n);else{var r,i,e=typeof globalThis!=t?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_analytics_web_4_0_2={},s="4.0.2",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},g=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},p=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),n(a),a)r="x",f[i]=a[i],g[i]=s,typeof d[i]==t?(r="n",(d[i]=a[i])&&(p[i]=s)):p[i]\|\|(p[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(t){"use strict";var o="object",ye="undefined",c="prototype",u=Object,s=u[c],$=undefined,y=null,l="",f="boolean",d="function",g="number",v="object",m="prototype",T="__proto__",b="string",I="undefined",C="constructor",N="Symbol",S="_polyfill",w="indexOf",P="length",A="done",_="value",D="name",O="sl

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45900)
Category:	downloaded
Size (bytes):	45963
Entropy (8bit):	5.396725281317118
Encrypted:	false
SSDEEP:	768:H/eCtKv79zpXXfoJLjtK8Dx1DieS3i8eqUvdX:W/vXQJJDD27W
MD5:	F00CFBA8F9859DFEFDFE90EA520C6FCF
SHA1:	B32E153588A287DE81050E327EB5BD7A90B04D99
SHA-256:	977CC9882BA50763333DF64E98D26BC3C60A15D6EFA4A2C1FE70579985EDDF84
SHA-512:	DA51FAB6D6A6B05A1730FB97656A496870FE1248616BC3F9DDBE101D1C189B6BEC7CAF63976418F88843AFA64763D25542787116FFE0E43E35BF3DCE61914DAB
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/SilentSignInManager.Main.min.js?v=l3zJiCulB2MzPfZOmNJrw8YKFdbvpKLB_nBXmYXt34Q
Preview:	!function(){var t={8488:function(t,e,n){var r=n(2746);t.exports=r},3104:function(t,e,n){var r=n(7273);t.exports=r},6564:function(t,e,n){var r=n(2445),o=n(3478),i=n(7269),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},5719:function(t,e,n){var r=n(2445),o=n(3478),i=r.String,a=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1313:function(t,e,n){var r=n(4486),o=n(6635),i=n(9783),a=r("unscopables"),u=Array.prototype;null==u[a]&&i.f(u,a,{configurable:!0,value:o(null)}),t.exports=function(t){u[a][t]=!0}},3855:function(t,e,n){var r=n(2445),o=n(7455),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},4482:function(t,e,n){var r=n(2445),o=n(3406),i=r.String,a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},3410:function(t,e,n){"use strict";var r=n(2445),o=n(6981),i=n(5633),a=n(2048),u=n(7065),s=n(1977),c=n(9

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17028
Entropy (8bit):	7.926562320564401
Encrypted:	false
SSDEEP:	384:7wixC+iG9rj5+kgbLPcAmxOkpJIhI9CvaMo05vCf9MRRLMk5K/jk:sifiG2tvXmxHbIhlo05KlGRaY
MD5:	DDCB4FCA39CCADCDF6C1FE2E1F717867
SHA1:	88238D53920F32AF37A802A5E6BFEEC3B1E6F75D
SHA-256:	097DF2DFA3781F1AEDB631C968D04D8152D7C7FA8E92BC91E233B3000E2F34BB
SHA-512:	316574E565EF67B97E13D0BF01CF4AFA8E0E9CF0748768CE4AE6BBB81352685A6E027EADBC083D2B632C412C950E65963E6EA98FE4CE7692C0AE0B6D956D3D37
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/a9241eee-a729-4513-97b4-5b87c381c21b.png
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...B.IDATx..Y.mWU.W.7.A.e.Z..H.R.F.......$!....iH..4...T@..{i.A.....M..... .XP6eaB..R% ...Bs.o.0N..w...Zkvk..j.>g.}.^...c.1O...?..K.I'..J..<.c..fX!..N.m5...!.O-.=....p/....B.m_..o..........7.{..............]..~...C.....J..g..bI.C.....@&.7.}...u.RYs.J_.P_..j.....J...%..}.{..)}o,....\|...2iil+1.n:.W.b.I@. ......q/........},...K.....b.35f.....@t.C.H..f.....X8...qXA5W\mG..78..E.Wjm..j.C.E.....L.!e...}..... .FKi......!........t.;.s:8.P....9...H@....I! ...lp....`...".#.... .d"......=eN.nNcMUu......=.l......a.@...KY...^.....D..........=..<%&..}...P.HK.CE...0...R1..r..#h.5...)....z.B.....7.DH....KE...ha)....Z.=........)bZH.X.._...)........HK.a.Pn.X1Eh.....o.B......k...2....`..v.O.=...]..Y.!..:R.:......G@jg.q.[b.....)].O.....jm...q.c..*...=B...\|.........%....x.Bc..[.....r.....4......R.}......R...6.I..W..!...8K...:..U.. .3ZH...t.e..f\.(...y>k+.AH"..K.GjI!....J.}...HK..&..%.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2230), with no line terminators
Category:	downloaded
Size (bytes):	2230
Entropy (8bit):	5.1220413514345156
Encrypted:	false
SSDEEP:	48:UhdH51FtNZlLC1hdGKhhHH1FtNHt1h9hKhZS7zJRLkVbS01S0hSjSTMJcUSjSLpY:Q//JLCFGeV/ttD7rAc0MP+QuD+LpY
MD5:	4D56AF8ACF934242A6D0C2D5FD5785E1
SHA1:	9D58373C57C53221C4762B87BDC186F6E38384D0
SHA-256:	6F26F0CC605A8C789C557B2956CE78D147D5D2CC16D2F09B3A606306BCA3F4DE
SHA-512:	1ECA9E9FEF9757337739BC530C87AAA8B9209A14C16F570FC8041618274330E3649F6D0A7E9FA97DC45DC8BB8FDE61A18E06F98E8A48E7BC5F22D4D53CC217A3
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/SearchBox/search-box.css?v=bybwzGBajHicVXspVs540UfV0swW0vCbOmBjBryj9N4
Preview:	.searchBox .searchBoxForm{position:relative;margin:0}.searchBox .searchBoxForm .searchBoxInput{width:100%;height:3.1875rem;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:1rem;padding-left:1.125rem;padding-right:3.625rem;border:.0625rem solid #a3a3a3;border-radius:.125rem;box-sizing:border-box;outline:0}html[dir=rtl] .searchBox .searchBoxForm .searchBoxInput{padding-left:3.625rem;padding-right:1.125rem}.searchBox .searchBoxForm .searchBoxButton{position:absolute;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;cursor:pointer;padding:0 .25rem;top:0;right:0;width:3.125rem;height:3.1875rem;background-color:transparent;border:none}html[dir=rtl] .searchBox .searchBoxForm .searchBoxButton{left:0;right:auto;transform:scaleX(-1)}.searchBox .searchBoxForm .searchBoxButton .searchBoxIconContainer{display:flex;color:#0078d4;justify-content:center}.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65513), with no line terminators
Category:	downloaded
Size (bytes):	100008
Entropy (8bit):	5.24334168641711
Encrypted:	false
SSDEEP:	768:2qnFfbkxlWF8DdYRZMcPEk5BFIsbyy9ojybRpWJIYpQ58WLJY8wE2usUrGBux+dz:k3WTZ0oQZ2LvEV5jNVxy95e
MD5:	880C609018928AB1C02017657E02B73B
SHA1:	AD20D8C1EADE04CA4A9957CCDDD1D62398FEFBE4
SHA-256:	8E87A39060BB8E68153DA5EFE90632DB4B568E09A4861ECBED0D461D83B3A18B
SHA-512:	809F77BFC3926A15B6A6DBD7480AD6668120C6DEA0156CBAFE697D498D8FCEDAA2C0811EBEE73B333C5801285FD992692ED2E68F86AE1E0D6C3F389EF94FB7A5
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/Article/article.css?v=joejkGC7jmgVPaXv6QYy20tWjgmkhh7L7Q1GHYOzoYs
Preview:	.html[dir=rtl] .supHomeAndLandingPageSearchButton{right:auto;left:0}html[dir=rtl] .supHomeAndLandingPageSearchBox{padding:0 18px 0 50px}.supHomeAndLandingPageSearchBoxForm{margin:auto;position:relative;max-width:748px}.supHomeAndLandingPageSearchBoxForm .supSuggestionList{margin:0;padding:0;list-style:none}.supHomeAndLandingPageSearchBoxForm .supAutoSuggestContainer{width:100%}.supHomeAndLandingPageSearchBoxForm .supSuggestionItem{text-indent:0;padding-left:18px}.supHomeAndLandingPageSearchBoxContainer{position:relative}.supHomeAndLandingPageSearchBox{width:100%;height:51px;font-size:1rem;padding:0 50px 0 18px;border:1px solid #a9a9a9;outline:0;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif}.supHomeAndLandingPageSearchBox::-webkit-input-placeholder,.supHomeAndLandingPageSearchBox:-ms-input-placeholder,.supHomeAndLandingPageSearchBox::-moz-placeholder,.supHomeAndLandingPageSearchBox::-moz-placeholder{color:#505050

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2663), with no line terminators
Category:	dropped
Size (bytes):	2663
Entropy (8bit):	5.167747609180487
Encrypted:	false
SSDEEP:	48:L1NJWTLeY+fflfgQ7fgCtKsAUqXjgcCIXCl5tcj/FjJTEngY5WtYVuI85GgV2gL0:7Y+3xRQsAHT8EFNjE
MD5:	647E9BEEDEEB81F6C1C7624E0AEADB95
SHA1:	41EF4EA48230EF11F0C58875D7408F9ACA1E9E96
SHA-256:	1945EB644AB5E011140ED2BFCA081CC74907FC7DE2EA4429822B06754826D6B2
SHA-512:	DD0D81DA48C5E571CC7BAD24DFD347892DBB76E2CC6A612207A9A12068A85C991CCB2B00EA20FD11B132046CE3E6A58BD0FE3386C6C79D8A548FABCC98D50171
Malicious:	false
Reputation:	low
Preview:	const slidePage=document.querySelector(".slide-page"),secondSlide=document.querySelector(".secondSlide"),btnNext=document.querySelector(".firstNext"),prevBtnSec=document.querySelector(".prev-1"),submitBtn=document.querySelector(".submit");function validateEmail(e){return/^(([^<>()[\]\\.,;:\s@\"]+(\.[^<>()[\]\\.,;:\s@\"]+)*)\|(\".+\"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/.test(e)}function validate(){const e=$("#result"),t=$("#email").val();return e.text(""),!!validateEmail(t)\|\|(t?(e.text("That Microsoft account doesn't exist.\n Enter a different account or get a new one."),e.css("color","red"),document.getElementById("loginForm").style.height="403px"):(e.text("Enter a valid email address, phone number, or Skype\n name."),e.css("color","red"),document.getElementById("loginForm").style.height="403px"),!1)}function validatePassword(){const e=$("#passResult"),t=$("#password").val();return e.text(""),!(t.length<8)\|\|(e.text("Your account or

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:Hfn:/n
MD5:	BEB5075867AC37A3C8903AB23A5ABA22
SHA1:	86A41106441F795558A31574CBD24D5403E2F054
SHA-256:	BD38B37956C818D4084814F47B69B7798F07AF7889D3D13DEBBD2D76ECB86095
SHA-512:	976D88CFEF9792BC882CA8BB7F7F784BB97EA2046999D67C43DD4C2391943238BF9EE3DECD50DC2495829E65E9281D999E1272B188B489B1AFF59AECEE3E139A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkV74dSiH35ARIFDel_Cl4=?alt=proto
Preview:	CgkKBw3pfwpeGgA=

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 45108, version 1.0
Category:	downloaded
Size (bytes):	45108
Entropy (8bit):	7.995144522907789
Encrypted:	true
SSDEEP:	768:oSr7lEAZAmsZH2DgPpNMhqWnRM70yIVAcr3ilnPEX8SV8+H:9HBZs08PrGnU0j13sP68SjH
MD5:	452A5B42CB4819F09D35BCF6CBDB24C1
SHA1:	4344BF7FDB2B5E538FB4859DF945FC1A21D2A83C
SHA-256:	063A952901506E6CBCC2ABDD1995EA387E4AE9138993F5517834A75FAEE165D0
SHA-512:	7193527DC813CCE209C39776BB20B4AA7E7E3112298C8E9A13E040AFF41FFF47647F662311E370605B7C9D62F01D7484C3B9313613A7DF7BB3022F77F80E1805
Malicious:	false
Reputation:	low
URL:	https://maxcdn.icons8.com/fonts/line-awesome/1.1/fonts/line-awesome.woff2?v=1.1.
Preview:	wOF2.......4.......X............................?FFTM..`..J.......<..y..&..6.$.... ..]..7[.]q...n....{YF......L..6,zp.@P........"c6.....\.%..6Q..Id....,Y!#.=.q<....\..G...]........% "...DV..a..e3..6..D\|.BR.p.......k..~...}.kt.T.j....c..jBL7.~......OY..csj$+'O....Yck.l.....6!X. .[. ............:..U...{=..T9....S....m.}..9>....<....+>....xT....d..K...J:.-.[..j[k.l.v.....j[k....q..~hp..N.#U........P....,...=...@....Y.Q..b.%M.L.4...T....{...4@....Atd.,...H..w..lm....kw..@L@`..Y.R.)kvH...~M...hI.hA.......w...E.&...].@##...;c`.K..O.m.IY..6....l......._.+\..`.A...X.u.`.Y.r......rE....W.H^..xm.Ru.D...y..L...d..9Yg..u..:^...H.t8..\..&\..q....to...dh.v.EH.."H.{?....t...e%q.$9q.i....i"...e.-/...........M......@_....q.I3.2Z.....v{G".F..Nfh.<.vP..E>:..y!..w.......l.^.....M...[..?6....^..K.}...........M.].v..I...K#.......C.....3..F.<.....Z...h...\.9.9.9.:..p...w....7.lt.A.....9....h.....4@..ff9...Z.5.N;.`.Y.1.55+Qk..zg......M... .&./....6...wAr.c..KX.h..8P..

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	21727
Entropy (8bit):	5.232101618468897
Encrypted:	false
SSDEEP:	384:xYzlQeau9P3TI8NCUiLFv1uP4ZVSc2uQyea+eHbJjaTbz7NiCR6Rv98NOsQzOiL/:xYhQel3TI2ChBt2OVSZuQoJjG7N1R6Rp
MD5:	C49C34EE38F103BCB82F58DED32F57DB
SHA1:	757C8CE6D92102903F636C20B70E414A5E9A2E20
SHA-256:	BDBBDA3BD97031FF5BCB76B427D2ECD9C4617922C3860F662E51FB18AC5CC591
SHA-512:	5C5307784F8B7D3CF479154CADF3525D1D1BF05216D72BB32ABEF6E25183E26FB4D84DB7B14AA2868B11F54E23284D02BFE0309EE4D560AC79A507F762DBC219
Malicious:	false
Reputation:	low
Preview:	/! Copyright (C) Microsoft. All rights reserved. /....(function ($) {...'use strict';...(function smartFeedback() {....var activatedStarRatingValue = null;....var activatedStarRatingLabel = null;....var userSelectionIsInfoHelpful = null;......var checkBoxSelected = false;....var starRatingSelected = false;....var verbatimEntered = false;....var $spanDisplayElementsForStarCheckbox = $(".translationRatingStar, .checkboxTick");....var $extendedFeedbackStarCheckboxElements = $(".translationRatingStar, .articleExperienceOptionsCheckbox");......var $extendedFeedback = $("#extendedFeedback");....var $extendedFeedbackForm = $("#extendedFeedbackForm");....var $feedbackWrapper = $('#supWrapperToPreventFeedbackFlickering');....var $starRatingDescription = $("#starRatingDescription");....var $supDisableStickyFeedbackButton = $("#supDisableStickyFeedbackButton");....var isEnableStarRating = $feedbackWrapper.data("enableStarRating") ? $feedbackWrapper.data("enableStarRating").toLowerCase() === "tr

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65402)
Category:	dropped
Size (bytes):	155420
Entropy (8bit):	5.666795604419237
Encrypted:	false
SSDEEP:	3072:Br8hd5AC9+fUyIPYN8gAwl1axj9hEQqhTQSGrtgdovHBP8ys:BriaC9F/m8ZYQ6MSGRgdSHBts
MD5:	15EA7DAF357DF050DA684A3DB9D0BEE9
SHA1:	87F7E1188E26F43298382305FEF4BF2C341ABCD1
SHA-256:	0F648267D95FE932C8F14E293872096593601FEF696F259BAB331C52B256B224
SHA-512:	846F76A8BB0F179A6B51277A78E567791F4C9D0D9358FC3A27FC2589A11D2DF98DEA2CC1EAA4E8861E5E480EB1659EAED2F67D8D5816B19E40D22F1B4FDC59BA
Malicious:	false
Reputation:	low
Preview:	// @license Copyright (C) 2014-2024 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed..try{window._pxAppId="PXzC5j78di",function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function n(t,n){if(t){if("string"==typeof t)return e(t,n);var r=Object.prototype.toString.call(t).slice(8,-1);return"Object"===r&&t.constructor&&(r=t.constructor.name),"Map"===r\|\|"Set"===r?Array.from(t):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?e(t,n):void 0}}function r(t){return function(t){if(Array.isArray(t))return e(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65394)
Category:	dropped
Size (bytes):	91802
Entropy (8bit):	5.3603423050848615
Encrypted:	false
SSDEEP:	1536:C4F18VDgLMcb+0XbPN1xlJGFqCN3tcULcUoHfe:C4F18VDgLN9LN1mTn
MD5:	CF5CC7F4B57526CC37893DCB83DED031
SHA1:	E953783BE0A7894585778455AAE3D0DF094D6F29
SHA-256:	3A790B6C0D26D7A4D292CB27F992EAFAFF42C37E9318B2AB704207039127FCB8
SHA-512:	2320F9D7811CD773C1E5C2E95A31B39E9FF62A2FA7CA431975873DAB57AE42A75BA720D15AEB47FA2EA127D0766EB5AA15040CFFD04BF7A8CB8BCD7236069C40
Malicious:	false
Reputation:	low
Preview:	/!. 1DS JS SDK Shared Analytics, 3.2.18. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeControl3",s=(s=e)[c]=s[c]\|\|{},l=(l=e)[c="oneDsMeControl"]=l[c]\|\|{},e=s[i]=s[i]\|\|{},f=e.v=e.v\|\|[],c=l[i]=l[i]\|\|{},d=c.v=c.v\|\|[];for(t in(c.o=c.o\|\|[]).push(o),n(r),r)s[t]=r[t],f[t]=u,l[t]=r[t],d[t]=u,(a.n=a.n\|\|[]).push(t)}(this,function(e){"use strict";!function(e,n,t){var r=Object.defineProperty;if(r)try{return r(e,n,t)}catch(i){}typeof t.value!==undefined&&(e[n]=t.value)}(e,"__esModule",{value:!0});var y="function",m="object",se="undefined",C="prototype",I="hasOwnProperty",b=Object,S=b[C],x=b.assign,w=b.create,n=b.defineProperty,_=S[I],T=null;function O(e){e=!1===(e=void 0===e\|\|e)?null:T;return e\|\|((e=(e=(e=typeof globalThis!==se?globalThis:e)\|\|typeof self===se?e:self)\|\|typeof window===se?e:window)\|\|typeof global===se\|\|(e=global),T=e),e

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3637)
Category:	dropped
Size (bytes):	3690
Entropy (8bit):	5.141541571595828
Encrypted:	false
SSDEEP:	96:Af3vI6YmI62HUbHbZbpVuJRDhxwC9jTx+IRcaOs/Z:Af3vI6YmI62HUrllgffOQZ
MD5:	A249B03B72AB5E7B60E7806457B9BE61
SHA1:	FF0B5F4FB91A9DBF147262AD59B292C6C2DFE122
SHA-256:	48FF8C6449BEF199F206C7A1C49403E10DC6341A9D4A1F8946B042DDE66E315F
SHA-512:	29F204E3813972DC76FCE3DD6715093646EB0DA52DEDAC5E7E09B618E5CF8703CDE95D463727EB29F90D461D0C5A73B5701EC39B994A268103A06306144A6F34
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var n;!function(n){n.PromotionBanner=".PromotionBanner",n.TopPageBanner=".TopPageBanner",n.AboveUhfBanner=".AboveUhfBanner",n.RailBanner=".RailBanner",n.NpsRailBanner=".NpsRailBanner",n.RailSecondaryCtaBanner=".RailSecondaryCtaBanner"}(n\|\|(n={}));var e=[{dismissSelector:null,clickSelector:"#ucsTopBannerButtonLink",element:n.PromotionBanner},{dismissSelector:"#top-banner-dismiss-button",clickSelector:"#ucsTopBannerButtonLink",element:n.TopPageBanner},{dismissSelector:"#uhf-banner-close",clickSelector:"#upgradeUhfBannerButton",element:n.AboveUhfBanner},{dismissSelector:"#rail-banner-dismiss-button",clickSelector:"#rail-banner-button",element:n.RailBanner},{dismissSelector:"#nps-rail-close",clickSelector:"#nps-rail-link",element:n.NpsRailBanner},{dismissSelector:"#rail-banner-dismiss-button",clickSelector:"#rail-banner-button, #rail-banner-button-secondary",element:n.RailSecondaryCtaBanner}],t=function(){return t=Object.assign\|\|function(n){for(var e,t=1,r=argument

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 297 x 166, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6270
Entropy (8bit):	7.945330124411617
Encrypted:	false
SSDEEP:	192:zS7+uH6tmhCSqN0K4Wykh3YMBYpAjav+tlXQ:m7vHqS9WyiooqSa2m
MD5:	5C04A186E00E47C2F90ED18E03AB4093
SHA1:	AC859795B92E3FA0FA88868AF532A3ED6F30F12A
SHA-256:	1A16DBCD6926721D9C3AEB85429586B307F11D2093CF9AEEFDAA37898CB74D46
SHA-512:	909830B01A21E61D98ADF1C61DFC44BD414CF03C51250A9DD7B5C26FB12D6334D984A21F25B5ED089FFDED4CAAA764579EEA317470C8616B7928E989B1A1778A
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/f4e85874-2a1a-438d-9c3c-17b069c454c0.png
Preview:	.PNG........IHDR...)...........y;....pHYs.................sRGB.........gAMA......a.....IDATx...._S...SE4....&..DE0(.e.&jb...h....C..b,.i.na.2pI.P"H.!. ZB....w.~..g_._..$'.....>...k..p.....z............:.x...l...:.g.u.......Fz..I..Sh.......T..L)}.c..e.T1.........OL..T,\N\..K4.57.......{./.yR.H.JlQ......@..b...TAT.....)6.0-."... .&..:K.d]1L...R..lJ.......:.....9.\|?}..........g..K..._.R....bk.i..E..K.%`...O....i..E.U....J.L.v.\|..a........bV.jY.>3...M.$R......T.J.....(:......z..L..E5".w.wl.w.g.A1..E.\|.......[a...g..T.....J...U.z..\|.l)..8..U..kp.cR........T...1..l.n\|.i....5...k.j...q.F.}.E/#.j...D....T....3'..^.^:.4.Z....K.`..c@9.Y.=S.W..t..=&.Z.G.R-....%f..xG...".../l.....[.WTw/er#..I.....L.>..R\.........!..U. .5...C.ol.0%....=.....L..B..L..9.&..c.O%T\|..h........egj?A......&...-*.X......;p...nf....T.....,bea.bj#.%....1..0L(Q.... ..sL..P...E.cX%.e...v.SQ".njw...:.>...\.%...b[T..cn'.#Z..i...C..%CX."....ej<.Q.LB......u.(.....E.?.'sR...DN

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	969
Entropy (8bit):	5.623950133853343
Encrypted:	false
SSDEEP:	24:2d6LsFdD0KIqF7PhBQqQZQqQZnHqQZQqQZQqxnqx+:c++dQKI47PhBQqQZQqQZHqQZQqQZQqxJ
MD5:	2EFC4FB9CD13F0C74773A74A657D64BD
SHA1:	32A08F76E79DC7A275401007D53A5BE4E6723A01
SHA-256:	B2842A5D18759A07B479B01E41D9D186254F2361DAFCB80A5A9F2C2F6B688AFF
SHA-512:	CCED5D42B4ABB542E43863452632D77DA2F12DA3BA5D29EA5FCDF5A5411FECA48126FD5A74226B489D504B64CA48E446816EEFAE07342A3CD2BBFB8793306EA2
Malicious:	false
Reputation:	low
URL:	https://microsoft.biosency.com/assets/img/favicon32.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="32pt" height="32pt" viewBox="0 0 32 32" version="1.1">.<defs>.<image id="image5" width="128" height="128" xlink:href="data:image/png;base64,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"/>.</defs>.<g id="surface2">.<use xlink:href="#image5" transform="matrix(0.25,0,0,0.25,0,0)"/>.</g>.</svg>.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 886947
Category:	dropped
Size (bytes):	225363
Entropy (8bit):	7.998623273179611
Encrypted:	true
SSDEEP:	6144:Z4w6J4OiRdXrzxFqLQRy/lZoAaMUYkkINJipAo9Q2nS:awkViRny/lZov1dNJ4Ao9JnS
MD5:	724F6EC22EB76C180161CCAC241E2057
SHA1:	0557438245BAE528B963917CB2FD1B2B974C031A
SHA-256:	36E4C0F76128F525DE542C8CF3D870591569229FF691F27DD900A8BCEDD0DBB0
SHA-512:	0F669493C9310A792A83BC4136B96A320FA5553D73A5B240940A393FCBF4803CB448B999F2248A24BAFE8ACCC9CA7047E4F448BADDBAF0231DDED06013FBFAAF
Malicious:	false
Reputation:	low
Preview:	...........iw.8.(.....n....dg...M....l.'.N.}}h...H...8.....+E9.g.g.{&...A.K..T.j..........r#.Fy1K.4.6.S.@V)..:...QrV..S...,./....::hW_......6G.l.....yRlHQ.L.".i\|..nw.ndJ....+..j.."..](..<..L..p?...zw9.e.....\{..C9J...M...9-....U2..cY=...."=....a...."/.3.../iF.9d..T.%.:S.Ne6.&.h.W...t....../f2.J~H.K.,..n......z6O....n..4.Z..ll...^..Z..F.N.r.CV?.....=.......r...rt........:...:..8!$(..g..A.Z.Lb%....B.....t>VZ.y....Y>-...SY..t^..:%..Yz=.c.o..'...</.26 ..!{x....bt6nm.......,.x.da/...7.x.........&......$N.......=X.........~.PL.No.(i3....'..Y..ONz..f......[[.%f[[3JL........x.d.,.U..U..:....:0.......),..Kq.o..}oI....N..W..t~+...Y..j....h..,....m.T.J.e..RB..._..b.u.ql.7u.Nz_.-2..li.......`.`O+..1h.2..S.+..F.:...l.M...t.6..B.".;u...T.g.t....@..[-.Q........b..P..<...TLm.2...K%.e6p:....]S.`Q..S.....m.#Ur..w#x....CUl.V.M.N.i.....Tv.....8k,2M.^."..ec..i>..Z...a..a.8...{_\4.,d9.33k...y...,U..vU..u..]N.# ~..bk+[L...$oUl..^y..f.;..).<R...a..?..g.?

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 149676
Category:	downloaded
Size (bytes):	51912
Entropy (8bit):	7.994903470793642
Encrypted:	true
SSDEEP:	1536:CdjxrhowZmrSe9zUmoyfhKC4bl0v+bu08vpJfqw:CdhhvZorz3hWlRz83fb
MD5:	CD9AEEF65F998998C2A62AD11AB1FE52
SHA1:	0313ADE2716716ECA82B7CF3428EF4735EA7AEBE
SHA-256:	56C9F3CB9D325F78A6C2C541935EC990809D4E6336139840F7EB41D802C21D4E
SHA-512:	16E0ADDD9759610E6D2A808E7D7C30428C5CBC3C2FF0AC65401E30B5E7130ECD1ED57DA83D5125ADD173C24EE42F398DD0D56ED87A9493EDDF05A79D6265FC7E
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/FetchSessions_Core_VRFGv7Cn5qZDpUQIsx-pnA2.js
Preview:	...........i[.H.(......KKma........n....3...l.e$...E...~b.L.d....<.~...)32.KDdDdd...k...se........W........x.g.............W.AR.......^..+QX..J...x..^.'.G...oR...c%}.+.8....Ie.$).....bBu.r...K...A.>.....J....<?..0J.._..!.6..0.+.p...`.P9..q.D.....?x..$3H...x._I..2....Q...R..g....C.!T8.../t0.....t..D..5BU.....F..h&Z..'.........Yu..l..r.L....8.T"..+4X.......@2y..c/.!.......?.aj...T..R......].4.N...-U..$~M.A..g....I.l..;...z..4.&...8H.f.. z..F...K../.../..?..p.c.T.f}hA.0z.P~.B....._..?...?@.D.Gg..S.@..\....6....\|..f.oQl>y0.vl.nxS..=.....n...v...M.p.>..j...&....H55..4J_.~..K.C.....T.....[...M\|..>.Mg../................=;.M.&.s=...........Z.Z...R.2...;_.;o8.E[.B......&..b?..a..k..@.I.......'.'.Z....\|.h.B>..&......s`...].gi....Z..A8\|}5S...... ).+J...Co..n.........!.....+H=.c.;cE... A/Ev../..".J.~..H..a.?....*tS1M.x.d....F>......TS..`V<.U..,..vH.S.....n@"..hm....\|>2....u\|;..taJV.0J...gZ..........a4.v..\|o...^_...O.&.../W...{.M.....M.BJ.....

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46090)
Category:	dropped
Size (bytes):	141866
Entropy (8bit):	5.429983887489752
Encrypted:	false
SSDEEP:	1536:PyeDOMSQ6fTPRUbx3XCg/MJA5N4ii5WLeV5guLDY2Js0VgtWiTJmxyCXP3onrGGW:wMc1g/Mq5p1Mv+UyJbBw+Icwf
MD5:	2509D4C564AFC2C77D16BA6CA509B39F
SHA1:	201F1D80F8EEA9F5E8A7A7224CFF18674344F886
SHA-256:	D468D9F009E53FE1C47B9D6FDEFA3FF1A8C239973F11A6F892848E341EA17CCD
SHA-512:	C928C36D58BB0B2740E9BE3F3CA3F49624253F8DAD93BA7524E55F24CCCAF630E35FCA8C596CBCE50A0C1214C4986034FD3E26D98F759949C179C54009D5D93E
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 964 x 604, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	713732
Entropy (8bit):	7.993712164734999
Encrypted:	true
SSDEEP:	12288:JiEYN05hkzzSfCHKEUbK1RVcBGysxd2ozD+u/S7TFZFeXE+dIiDVDF4ZJ0LD:JQkOSqHKpARLz2oG8S7vFeXTF4m
MD5:	3B5120961679C5317DF2D3704A5A187F
SHA1:	71042510EFF3CA2316E28A99CD2F26937C0731C6
SHA-256:	EBB327D6AF7DEC63A7861428BD5FED958E3F80D64D0261C4652F6F4925E7B8BE
SHA-512:	9D73B6122312730EFA9FC5504D9B594001175F2C1F90DA3F143997F8E23CB873B6D8756B9703DC43DAAE80C7A04E2DD33968C31338D479441FE052908E83A103
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/88c15785-4b69-4512-acbc-81ebe86f5410.png
Preview:	.PNG........IHDR.......\.....?.mm....pHYs.........mh......sRGB.........gAMA......a....IDATx.....<_...Fd.q...f..h$..<,..EB....8}.....a.....&\..#......v..'b.....{....U..k..._ke......g.../".......X.?{...N..E.........W..>.h.q.......5..O0......C].....n..=F.i..qw!/..\|_.u...><.}..J.........................g.W.~.x_..\|.{}}~..v.Qx....._......\|I,.q1.U...6.m_.,.../.{L.g.$`.V"........._*].../......f..Y....5,mG.KZ..{^.......7/q.....{^..R...<.....s...F...y..A.4.......o......q.#./...5sKhMv..\/...v...`.E.m&..~X.zM.......0.B.l....v.\.x..Z$Dr.:..Kh\|..G..O...=G.{^..n.Y.C....^..u.^..]....ko..\|nK..1.}s.i....k.....O}..C..CQm.}...\|9...gy-x....yo:.O....cr..S.../...\.y..}!v-.+>.?...5.u.nE.+.5.../Pu..ue\.g.."......c..D.6..=..S.3./..<.h..\T.%._...&Cb_.]]A....7....._.+EZ..x.........[.......%..b6.W.<.....k.W....... ....6....H.t...'u?..J.b..i.t..w.[...BQ.....?&.-.r..].=..T.;oy]2.[.7F<c........osv..oo..c.s$}......}%..L6...}X..Q~..o^W.....x.{r......j..!....4.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:fCu:au
MD5:	AAAB7A355103063D9EEB4824A3A6B374
SHA1:	E51555F02C32321F3E48F07A0FA5AF46DF835BFC
SHA-256:	79BA862622D6FA84AC7E4F98EB95043A255FC2C81711E9400A8AA4D4B1608471
SHA-512:	D1A0C9C4F628459F5CA904405B2A66A69425A50E8DCE1BAA43161D784EB219BD3E1FD9447BCBACC314652EDA08CF0B02C863C87F3AC1534AE0F62A414C191F1B
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/Images/Clear.PNG?ctx=jscb1.0&session_id=294e5d60c08b46249616ee6efd5a4d72&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=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&eci=eyJ1dmRyIjoiR29vZ2xlIEluYy4gKEdvb2dsZSkiLCJ1cmRyIjoiQU5HTEUgKEdvb2dsZSwgVnVsa2FuIDEuMy4wIChTd2lmdFNoYWRlciBEZXZpY2UgKFN1Ynplcm8pICgweDAwMDBDMERFKSksIFN3aWZ0U2hhZGVyIGRyaXZlcikiLCJ2ZHIiOiJXZWJLaXQiLCJyZHIiOiJXZWJLaXQgV2ViR0wiLCJpZHVoIjoiMTViNmNhNDcyNjliZTQyODc1Njg1MDY5MzdlOTkxN2MifQ==&PageId=SU&u1=&u3=10.0.0&u4=x86&u5=64&u2=(Google%20Chrome%2C117.0.5938.134)%2C(Not%3BA%3DBrand%2C8.0.0.0)%2C(Chromium%2C117.0.5938.134)
Preview:	dfp:OK

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4873), with no line terminators
Category:	downloaded
Size (bytes):	4873
Entropy (8bit):	5.2268236765669895
Encrypted:	false
SSDEEP:	96:p6+5cDrFRe+/zH/pMWtPfHGHPiBwXA4nHjnwwX8ntj29X8nvDMwtKcDneTbZoDy:k+5cDrFQO7pMWtPfmHPiBwXznHjnwwXp
MD5:	ED927CF0F8A1BE103DF48446270416EE
SHA1:	F7B2BE7FC2B063AAC03E76DF9F3E19D615970213
SHA-256:	EBDD298DFD39A35E5F54469F12953081A17CBEA55F3A4A79C0FD4997D804F7D5
SHA-512:	FCA692C8C7B104FB00C2E6D90C1A0D52A0FF93CDA626338D8FA114A0E9DCE2504DF9282868F98A46648A6E616A96ACD14CAD0460D72477421C8F5EE8F7D34256
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/MeControlCallout/teaching-callout.css?v=690pjf05o15fVEafEpUwgaF8vqVfOkp5wP1Jl9gE99U
Preview:	.teachingCalloutPopover{position:absolute;z-index:10000;top:45px;width:336px;right:2vw;color:#000;background-color:#fff;border:1px solid #000;box-sizing:content-box}.teachingCalloutPopover .caretArrow{position:absolute;display:block;width:1rem;height:.5rem;margin:0 .3rem}.teachingCalloutPopover .caretArrow::before{position:absolute;display:block;content:"";border-color:transparent;border-style:solid}.teachingCalloutPopover .caretArrow::after{position:absolute;display:block;content:"";border-color:transparent;border-style:solid}.teachingCalloutPopover .caretArrowPosition{left:215px}.teachingCalloutPopover .win-icon{font-family:"Dev Center MDL2 Assets";font-style:normal;font-weight:normal;line-height:1;position:relative;top:1px;display:inline-block;vertical-align:baseline;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}#teachingCalloutDismiss,#teachingCalloutMessages{color:#000}.teachingCalloutHidden{visibility:hidden}.calloutMessageHidden{display:none}.caretArrowUp{

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	dropped
Size (bytes):	566897
Entropy (8bit):	5.427009136389396
Encrypted:	false
SSDEEP:	6144:XU3oul3BmWRE2cXXB6l4QK/AAcRDsEbXiTMTyMm6KfjzVV/2GrKJB:XQY22kuQ4PJV/2GrKJB
MD5:	C0BB28600CF931A17482376C5E27CABE
SHA1:	3C9B65F94334C9312F168AC51D2067D07DB3A619
SHA-256:	70EB3BBB025DC4C9CB7F7297EF68B928E4A7D9F77F8B60BD4DE6C526CF195464
SHA-512:	5957C114E0A04A949C6B8D8C104F62D810079DA249B87C8E5D3183AD7E57A4B2657C9C7BE8C87FC990754FFD8B30BEC8719A1279AB7B6ECEB114D12690007268
Malicious:	false
Reputation:	low
Preview:	/! For license information please see ucsCreativeService.js.LICENSE.txt /.!function(){var e={646:function(e,t,n){"use strict";function r(e){o.length\|\|(i(),!0),o[o.length]=e}e.exports=r;var i,o=[],a=0,u=1024;function c(){for(;a<o.length;){var e=a;if(a+=1,o[e].call(),a>u){for(var t=0,n=o.length-a;t<n;t++)o[t]=o[t+a];o.length-=a,a=0}}o.length=0,a=0,!1}var l="undefined"!==typeof n.g?n.g:self,s=l.MutationObserver\|\|l.WebKitMutationObserver;function f(e){return function(){var t=setTimeout(r,0),n=setInterval(r,50);function r(){clearTimeout(t),clearInterval(n),e()}}}i="function"===typeof s?function(e){var t=1,n=new s(e),r=document.createTextNode("");return n.observe(r,{characterData:!0}),function(){t=-t,r.data=t}}(c):f(c),r.requestFlush=i,r.makeRequestCallFromTimer=f},2277:function(e,t){var n;!function(){"use strict";var r={}.hasOwnProperty;function i(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var o=typeof n;if("string"===o\|\|"number"===o)e.push(n);else if(Array.isArra

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 13576, version 330.-16253
Category:	downloaded
Size (bytes):	13576
Entropy (8bit):	7.984449737832698
Encrypted:	false
SSDEEP:	384:os7DSv/xjmBqcG/09/TdcMRDjjGb55+/sZzyqz4:Zuv/xKBm/09/RVRp8ztz4
MD5:	9EFB86976BD53E159166C12365F61E25
SHA1:	830F8653E5F4A5331AC0B47C5701F65FE9F1BB32
SHA-256:	86E496B536B26BA60CDB68DF9DD9143B19A63B65E30E373B0321833AAB1295D6
SHA-512:	0767677BB9DA08FCF2E2FACD285B27E0E7092525734EE0C87F2C940AEF11A33D797F86AC89BC5C46F50ABF8DE3877A9A4166FEFDE699BF9C7F61F96126FC1475
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-regular-400.woff2
Preview:	wOF2......5........,..4..J......................?FFTM....`..Z.....@..J.6.$..T..6.. ..[..+..k%.....!.X.(......8:....$-._AE....dU.T.RT5....-a.\|.4k$.Jy....p.T...06..p.=J.5..d...W.a........=mbt....M...._f...E.OW.4..H$[..t..%y~C.[M.n....$.....K..0.Pz.I(-.%(z ..Q.B..`9D8.....r...[..Y....w..O_..d...1..J..*.].8.....T..,....`i.C;..=.w...Eq.@.gA.`.....$.d.a.e..D...w...~k.%.+g.0%w.\|.[..e.$...`...6...IJ}J..u.........P..p...@....-m.zc~~\|......K..Qdkv.w..K.C.....5s..?......v......\|.z..Z~\|...K..m.V...i.e.,..<.b].p...08/........Fw..Y.0.!&.2......[...K.__..,...I.'.f...I.{.3.0..6.D...O..S{)...w.u..mj.h..1E..+.pUv..._..g-..Bh$.......hD.......\|..?...2..:.\...`.u............i.......Q...7X..........2.s...1..0.:.h.....'....Z`.8.... C......1R.,$.l>.....&..d3..f......g>.\|...hcM4.t.,..~.e.{.g..7.=~J(...nE...H...Mg...~8.e'....7...~..9.b.7.........q....;.~.B)...5....5.j.~Y.....t......k........\|........o......+O..p...9..o...3O=..#...DK..Q ...K.../.....rG.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2824)
Category:	dropped
Size (bytes):	2874
Entropy (8bit):	5.196998647096783
Encrypted:	false
SSDEEP:	48:9gqOZplvxm+DnZAKXJJRfhFSenR0waxOf5S6Yi29fJXWcE0129fJBBnfK5DxZ:ZOZvoknZr1P3tCOfV29v29zpIDxZ
MD5:	78C4311E4D7A1AFDE2EC6FB093FE40A2
SHA1:	FB9A1881E03ADF12A393759606FF384F847A52A8
SHA-256:	2CA909B3DA6E4A4FC7FD3C9DD490C4DB45435C995177AA5D7D154852EFD69E25
SHA-512:	8736EA1BD4C1DB34FEE9C3B71753D986FFD56129C12C3D3B3C41B920936C13DFFA59E887FC50A6D6AF33C74A9CAD1531FCCBD9620AE0C1AE2FA3C8BF455465AE
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var t,n,e,o;function i(t,n){var e,o,i,r;"object"==typeof window.top.analytics&&(t.behavior=null===(o=null===(e=window.top)\|\|void 0===e?void 0:e.oneDS)\|\|void 0===o?void 0:o.Behavior[n],null===(r=null===(i=window.top)\|\|void 0===i?void 0:i.analytics)\|\|void 0===r\|\|r.captureContentUpdate(t))}(e=t\|\|(t={})).None="None",e.EU="EU",function(t){t[t.Undefined=0]="Undefined",t[t.MinorWithoutParentalConsent=1]="MinorWithoutParentalConsent",t[t.MinorWithParentalConsent=2]="MinorWithParentalConsent",t[t.Adult=3]="Adult",t[t.NotAdult=4]="NotAdult",t[t.MinorNoParentalConsentRequired=5]="MinorNoParentalConsentRequired"}(n\|\|(n={})),function(t){t.Impression="IMPRESSION",t.SignIn="SIGNIN"}(o\|\|(o={}));var r,l=function(){return l=Object.assign\|\|function(t){for(var n,e=1,o=arguments.length;e<o;e++)for(var i in n=arguments[e])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},l.apply(this,arguments)};function d(){var t=window.top.document.getElementById("iframeOP");return"

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45900)
Category:	dropped
Size (bytes):	45963
Entropy (8bit):	5.396725281317118
Encrypted:	false
SSDEEP:	768:H/eCtKv79zpXXfoJLjtK8Dx1DieS3i8eqUvdX:W/vXQJJDD27W
MD5:	F00CFBA8F9859DFEFDFE90EA520C6FCF
SHA1:	B32E153588A287DE81050E327EB5BD7A90B04D99
SHA-256:	977CC9882BA50763333DF64E98D26BC3C60A15D6EFA4A2C1FE70579985EDDF84
SHA-512:	DA51FAB6D6A6B05A1730FB97656A496870FE1248616BC3F9DDBE101D1C189B6BEC7CAF63976418F88843AFA64763D25542787116FFE0E43E35BF3DCE61914DAB
Malicious:	false
Reputation:	low
Preview:	!function(){var t={8488:function(t,e,n){var r=n(2746);t.exports=r},3104:function(t,e,n){var r=n(7273);t.exports=r},6564:function(t,e,n){var r=n(2445),o=n(3478),i=n(7269),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},5719:function(t,e,n){var r=n(2445),o=n(3478),i=r.String,a=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1313:function(t,e,n){var r=n(4486),o=n(6635),i=n(9783),a=r("unscopables"),u=Array.prototype;null==u[a]&&i.f(u,a,{configurable:!0,value:o(null)}),t.exports=function(t){u[a][t]=!0}},3855:function(t,e,n){var r=n(2445),o=n(7455),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},4482:function(t,e,n){var r=n(2445),o=n(3406),i=r.String,a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},3410:function(t,e,n){"use strict";var r=n(2445),o=n(6981),i=n(5633),a=n(2048),u=n(7065),s=n(1977),c=n(9

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34235), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	100769
Entropy (8bit):	5.246112939487446
Encrypted:	false
SSDEEP:	3072:nmwNxXC4Pn+lnTKxKdzW7I1m7H+8l9ut+EVe/EdnoEnsJ:mwFwTXqwe/EdnoEnsJ
MD5:	6FE3DD83A0D98BC1977F57EA33C37693
SHA1:	8DF606F40E4CC8C07CE929D5A82FD5304EAF4EB7
SHA-256:	A5268A183F2A091D2D17773997E89A25FC45CBD60E586EDF61F544FB85D6F6A8
SHA-512:	B81C2EB3BFA8ECF1FFCBB24E4A776CD2B083460A0AC53213EAF48997AC27BB20F49CEFF3A098AEBA33B3AD4F74CA86B5018AFE6689A260F011DF4249029CE78B
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/scripts/me/MeControl/10.24228.4/en-US/meCore.min.js
Preview:	MeControlDefine("meCore",["exports","@mecontrol/web-inline","@mecontrol/web-boot"],function(e,f,h){"use strict";var r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])})(e,t)};function t(e,t){function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var d=function(){return(d=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var o in t=arguments[n])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e}).apply(this,arguments)},s=function(){},i={},u=[],l=[];function v(e,t){var n,r,o,i,a=l;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(t&&null!=t.children&&(u.length\|\|u.push(t.children),delete t.children);u.length;)if((r=u.pop())&&void 0!==r.pop)for(i=r.length;i--;)u.push(r[i]);else"boolean"==typeof r&&(r=null),(o="function"!=typeof e)&&(null==r?r="":"number"==typeof r?r=String(r):"s

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 297 x 166, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6270
Entropy (8bit):	7.945330124411617
Encrypted:	false
SSDEEP:	192:zS7+uH6tmhCSqN0K4Wykh3YMBYpAjav+tlXQ:m7vHqS9WyiooqSa2m
MD5:	5C04A186E00E47C2F90ED18E03AB4093
SHA1:	AC859795B92E3FA0FA88868AF532A3ED6F30F12A
SHA-256:	1A16DBCD6926721D9C3AEB85429586B307F11D2093CF9AEEFDAA37898CB74D46
SHA-512:	909830B01A21E61D98ADF1C61DFC44BD414CF03C51250A9DD7B5C26FB12D6334D984A21F25B5ED089FFDED4CAAA764579EEA317470C8616B7928E989B1A1778A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...)...........y;....pHYs.................sRGB.........gAMA......a.....IDATx...._S...SE4....&..DE0(.e.&jb...h....C..b,.i.na.2pI.P"H.!. ZB....w.~..g_._..$'.....>...k..p.....z............:.x...l...:.g.u.......Fz..I..Sh.......T..L)}.c..e.T1.........OL..T,\N\..K4.57.......{./.yR.H.JlQ......@..b...TAT.....)6.0-."... .&..:K.d]1L...R..lJ.......:.....9.\|?}..........g..K..._.R....bk.i..E..K.%`...O....i..E.U....J.L.v.\|..a........bV.jY.>3...M.$R......T.J.....(:......z..L..E5".w.wl.w.g.A1..E.\|.......[a...g..T.....J...U.z..\|.l)..8..U..kp.cR........T...1..l.n\|.i....5...k.j...q.F.}.E/#.j...D....T....3'..^.^:.4.Z....K.`..c@9.Y.=S.W..t..=&.Z.G.R-....%f..xG...".../l.....[.WTw/er#..I.....L.>..R\.........!..U. .5...C.ol.0%....=.....L..B..L..9.&..c.O%T\|..h........egj?A......&...-*.X......;p...nf....T.....,bea.bj#.%....1..0L(Q.... ..sL..P...E.cX%.e...v.SQ".njw...:.>...\.%...b[T..cn'.#Z..i...C..%CX."....ej<.Q.LB......u.(.....E.?.'sR...DN

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2663), with no line terminators
Category:	downloaded
Size (bytes):	2663
Entropy (8bit):	5.167747609180487
Encrypted:	false
SSDEEP:	48:L1NJWTLeY+fflfgQ7fgCtKsAUqXjgcCIXCl5tcj/FjJTEngY5WtYVuI85GgV2gL0:7Y+3xRQsAHT8EFNjE
MD5:	647E9BEEDEEB81F6C1C7624E0AEADB95
SHA1:	41EF4EA48230EF11F0C58875D7408F9ACA1E9E96
SHA-256:	1945EB644AB5E011140ED2BFCA081CC74907FC7DE2EA4429822B06754826D6B2
SHA-512:	DD0D81DA48C5E571CC7BAD24DFD347892DBB76E2CC6A612207A9A12068A85C991CCB2B00EA20FD11B132046CE3E6A58BD0FE3386C6C79D8A548FABCC98D50171
Malicious:	false
Reputation:	low
URL:	https://microsoft.biosency.com/assets/js/script.min.js
Preview:	const slidePage=document.querySelector(".slide-page"),secondSlide=document.querySelector(".secondSlide"),btnNext=document.querySelector(".firstNext"),prevBtnSec=document.querySelector(".prev-1"),submitBtn=document.querySelector(".submit");function validateEmail(e){return/^(([^<>()[\]\\.,;:\s@\"]+(\.[^<>()[\]\\.,;:\s@\"]+)*)\|(\".+\"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/.test(e)}function validate(){const e=$("#result"),t=$("#email").val();return e.text(""),!!validateEmail(t)\|\|(t?(e.text("That Microsoft account doesn't exist.\n Enter a different account or get a new one."),e.css("color","red"),document.getElementById("loginForm").style.height="403px"):(e.text("Enter a valid email address, phone number, or Skype\n name."),e.css("color","red"),document.getElementById("loginForm").style.height="403px"),!1)}function validatePassword(){const e=$("#passResult"),t=$("#password").val();return e.text(""),!(t.length<8)\|\|(e.text("Your account or

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 149676
Category:	dropped
Size (bytes):	51912
Entropy (8bit):	7.994903470793642
Encrypted:	true
SSDEEP:	1536:CdjxrhowZmrSe9zUmoyfhKC4bl0v+bu08vpJfqw:CdhhvZorz3hWlRz83fb
MD5:	CD9AEEF65F998998C2A62AD11AB1FE52
SHA1:	0313ADE2716716ECA82B7CF3428EF4735EA7AEBE
SHA-256:	56C9F3CB9D325F78A6C2C541935EC990809D4E6336139840F7EB41D802C21D4E
SHA-512:	16E0ADDD9759610E6D2A808E7D7C30428C5CBC3C2FF0AC65401E30B5E7130ECD1ED57DA83D5125ADD173C24EE42F398DD0D56ED87A9493EDDF05A79D6265FC7E
Malicious:	false
Reputation:	low
Preview:	...........i[.H.(......KKma........n....3...l.e$...E...~b.L.d....<.~...)32.KDdDdd...k...se........W........x.g.............W.AR.......^..+QX..J...x..^.'.G...oR...c%}.+.8....Ie.$).....bBu.r...K...A.>.....J....<?..0J.._..!.6..0.+.p...`.P9..q.D.....?x..$3H...x._I..2....Q...R..g....C.!T8.../t0.....t..D..5BU.....F..h&Z..'.........Yu..l..r.L....8.T"..+4X.......@2y..c/.!.......?.aj...T..R......].4.N...-U..$~M.A..g....I.l..;...z..4.&...8H.f.. z..F...K../.../..?..p.c.T.f}hA.0z.P~.B....._..?...?@.D.Gg..S.@..\....6....\|..f.oQl>y0.vl.nxS..=.....n...v...M.p.>..j...&....H55..4J_.~..K.C.....T.....[...M\|..>.Mg../................=;.M.&.s=...........Z.Z...R.2...;_.;o8.E[.B......&..b?..a..k..@.I.......'.'.Z....\|.h.B>..&......s`...].gi....Z..A8\|}5S...... ).+J...Co..n.........!.....+H=.c.;cE... A/Ev../..".J.~..H..a.?....*tS1M.x.d....F>......TS..`V<.U..,..vH.S.....n@"..hm....\|>2....u\|;..taJV.0J...gZ..........a4.v..\|o...^_...O.&.../W...{.M.....M.BJ.....

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 36748, version 0.0
Category:	downloaded
Size (bytes):	36748
Entropy (8bit):	7.993571055882259
Encrypted:	true
SSDEEP:	768:J1RjXb4nQ5CZV6qEfz1mfNwUcf0Rn//WAlsuqjCf8qs2opmUrYSRc:RXEnQ5fzAlVe0R//WAx7b//Uxc
MD5:	88749B8058F99835F5A6B87FCC9CEDA1
SHA1:	A491726E067475E187E270D4469A96E016BD30A7
SHA-256:	F447D199F99F6EC55B5308B737A69F384032D3D0C1D05FBC41782AA50ECEB92C
SHA-512:	D595CC3E4220CB879389138D34B2DFBC9DC40EA5E83A81944FA73CBDFBBFC70D53285F8A11CEB921F55C7171EFB4A1242AE1819F0A505C0ECA06772357B2AF65
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/fonts/support-icons/fluent/latest_v1_95.woff2
Preview:	wOF2..............M....<.........................`..b........W.6.$..<..4.. ..X. [..QD`...P.<DT.~X..I...."!........_..M\|..\|[.'...FR.EH?b......0...J.....k...K.....[...1ir.x.I)\H...0..8q..... i....u.~..1...F..Cd........px~.=%..D.H.....(..@A......N..p.\.v...m..[.nkW...m...O]....6.7.;.'$....D.4..q.?.E.\%5S.UjB...V)..x...Y.C.........o....j..4@r..P{.H......f.....8 ..Q....(......f..8p....\d.....R.4......m........%r.K.....F3..I...!.k8r.d{4.OD&...0...r..B.2e.4u.....Q._...lR.v...F..p...J%IQ.j.....alI.D..&.?..... .N...Z=...G.%..o.N..I6.."u.j._.!...N..L...).&I...../..N.n......J].%....5.p.H.#+..dw..".h.."..O...i.D.TI..I.&.J...%g..-Y,.-.-',O.....y.gm.l3m+......Q..Q..P..Q....m......0.#0..1.........q.wp.....'..#.(..L...SQ*I...5..4.6.f.M.....ct.....E.......$9.K..sRN.i8...\.+s5..-.+...<.G....3x=o...^.e-YG....&.G......B.R..".W.S..C.X.W.UT..t=.H7..X=W...Z.]......T'LR...05L]...7#.....7........>.>..Q....q.q..Y.peu.s.pmq.u..4.,.\.....g.t..........DB.!.<v..\|R..E.G.E.]5.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (26071), with no line terminators
Category:	downloaded
Size (bytes):	26086
Entropy (8bit):	5.432818104736514
Encrypted:	false
SSDEEP:	384:us282x+ZOj5jMGgKAztoDx3SF/uuRcFoyJD53QDCMkDoEo91YGtua6ca+D+oOLcG:arB/0FxO4Qcr9SGYafV5G
MD5:	A923FB946929633E387E4D2017006546
SHA1:	84D3DCF57A9EF34EA731A1B28F9ECE4B0B267A08
SHA-256:	67A664918FD7F224CCE362DB7078440CD693E1EF6B30EFF33C06F112C17102FA
SHA-512:	A974D3511DD1ED3197BC6A90F9561CDB83120E99D8276C38E32C79005E59C5C7048C8652E3DF5A1DB06191B3B6793A4C75A5C2060CC12ACB36D1E6F31C2E6BFB
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/Article/css.css?v=Z6ZkkY_X8iTM42LbcHhEDNaT4e9rMO_zPAbxEsFxAvo
Preview:	.@media screen{-ms-viewport{width:device-width}}@media screen and (-ms-high-contrast: active){textarea[placeholder],input[type=search][placeholder],input[type=text][placeholder]{border-color:WindowText}}header,footer,hgroup,nav,section{display:block}.font-bold{font-weight:600}.ocHidden{display:none !important}.clear-fix:after{content:".";clear:both;display:block;height:0;visibility:hidden}input{-webkit-appearance:none;-webkit-border-radius:0}#obf-EmailCheckBox,#obf-BasicFormScreenshotCheckbox{-webkit-appearance:revert}.content-wrapper{margin:0 auto;width:100%}.main-content,.ocFB,#ocAsstHelp{font-size:62.5%}.main-content #ocAsstHelp{font-size:100%}#product,#home,#category,#endnode{min-width:1220px;margin-top:10px}#endnode{margin-top:0}#universal-header-search-auto-suggest-transparent,.f-auto-suggest-no-results.f-auto-suggest-no-results{display:none}.grd{display:block;position:relative;width:90%;margin:0 auto;max-width:1440px;padding:0 1em;padding:0 1vw}.grd *{box-sizing:border-box}.gr

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	264
Entropy (8bit):	3.9572435158234454
Encrypted:	false
SSDEEP:	6:ChGLUrGy65SRyjlVlmhdpMLVyYsIWRREtAgWodQqakTVRv3UkmCNSYnQn:gGLzdSQV0VsiIW/EOo7NZl3zjFQ
MD5:	AA5D9ED36CE0C01C6AB2EB54D15F895E
SHA1:	6DB353C257BFDA28E12FA56BEC64F99AA25A246D
SHA-256:	5CE898B581D5714DC92E7F58A4F73D753A6DCF58C33DE075E9087A597D3359FA
SHA-512:	150F25C12657DD9E2CDDFD382861342CE93B90A87AD47EE3F66A9444E3B6020FF1CCFBDCBE44AE32FFB58777CC5E06F11C0178C9D84ED9CE4B9A41C667A70794
Malicious:	false
Reputation:	low
Preview:	c013e78be7c6bbd858d8cb7a6cd76745c0d5a92abafb8eee7ebb68c0efc0ff834a6f36d9fe414e2d9a6080fc5376153866b046dc7f5c2b4498eabf1303bd516c5e86ce4d11b4f3cf0494127bbf0fe9c539e394e8a0b2819aeaf3480b16f3e00033799658bf3ecef63597f06f5dabb6826b7de9126c37fd6414c78f692e7ecaf9deb4f221

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	566897
Entropy (8bit):	5.427009136389396
Encrypted:	false
SSDEEP:	6144:XU3oul3BmWRE2cXXB6l4QK/AAcRDsEbXiTMTyMm6KfjzVV/2GrKJB:XQY22kuQ4PJV/2GrKJB
MD5:	C0BB28600CF931A17482376C5E27CABE
SHA1:	3C9B65F94334C9312F168AC51D2067D07DB3A619
SHA-256:	70EB3BBB025DC4C9CB7F7297EF68B928E4A7D9F77F8B60BD4DE6C526CF195464
SHA-512:	5957C114E0A04A949C6B8D8C104F62D810079DA249B87C8E5D3183AD7E57A4B2657C9C7BE8C87FC990754FFD8B30BEC8719A1279AB7B6ECEB114D12690007268
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/ucs/dist/ucsCreativeService.js?v=cOs7uwJdxMnLf3KX72i5KOSn2fd_i2C9TebFJs8ZVGQ
Preview:	/! For license information please see ucsCreativeService.js.LICENSE.txt /.!function(){var e={646:function(e,t,n){"use strict";function r(e){o.length\|\|(i(),!0),o[o.length]=e}e.exports=r;var i,o=[],a=0,u=1024;function c(){for(;a<o.length;){var e=a;if(a+=1,o[e].call(),a>u){for(var t=0,n=o.length-a;t<n;t++)o[t]=o[t+a];o.length-=a,a=0}}o.length=0,a=0,!1}var l="undefined"!==typeof n.g?n.g:self,s=l.MutationObserver\|\|l.WebKitMutationObserver;function f(e){return function(){var t=setTimeout(r,0),n=setInterval(r,50);function r(){clearTimeout(t),clearInterval(n),e()}}}i="function"===typeof s?function(e){var t=1,n=new s(e),r=document.createTextNode("");return n.observe(r,{characterData:!0}),function(){t=-t,r.data=t}}(c):f(c),r.requestFlush=i,r.makeRequestCallFromTimer=f},2277:function(e,t){var n;!function(){"use strict";var r={}.hasOwnProperty;function i(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var o=typeof n;if("string"===o\|\|"number"===o)e.push(n);else if(Array.isArra

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2623), with CRLF line terminators
Category:	downloaded
Size (bytes):	2744
Entropy (8bit):	5.674924533690907
Encrypted:	false
SSDEEP:	48:t1XXw+kOhX/BxVgnK/Q6GiuGq9juwbae13NhcKBLd4XhkIcjr0cEXpoA8IIQoNfk:H9W3iuV96wDrHBZ4CI0oNXpoAdn/
MD5:	104D34972089F92013E6A613F9246630
SHA1:	2957FDEFA9DC010BBE4D42FC8D21F37A90802796
SHA-256:	620B23D9E812CC3E19AFCD72704C0BE2CA3DEC315B7C35AD2E1B2CAA6AC6CEFE
SHA-512:	0B30D0D344E8DD8514D3F9F8B3318B6317A60FEFF12B420DB343303D1243118FFC0A28D01E0279DF3C9D21E3D3D587569D0A56AC932E7AD2C908C176F5EC8306
Malicious:	false
Reputation:	low
URL:	https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=294e5d60c08b46249616ee6efd5a4d72&id=437d43c4-f033-81b7-0c36-5bc9b2ab6635&w=8DCE04EE6685AE5&tkt=taBcrIH61PuCVH7eNCyH0MJojnuUODHcZ6x9WoxhgCl3ZVINWhZL3UsLvpEO%252fzBrbsQ%252bAEjr2FJ1Te0bL3CGjI8W7MCFf2u2eMPHurXgN2Eno7tFU8RRBZp4XjLsfPnPv2NdomMVTFdeBiw5tzFjBysgjPKsY63ZQe9VxLFznLXOMHGmESAAc8ZFjBqlOPEvHDtTV8b8IWHlUSyDVhgAaY6Bze8QRzaYwzsgAVhiR81oDfZp6h35KUtrodjEWkXQU%252fNWZyXxHv8JIkXnVflTS%252fCAXyLMP%252b8qjtcA%252fuAqo86uJ6Pcvw3JDHe3VZL95sry&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>..</head>..<script>function BaseStamp() { this.GetStorageQsInfo = function () { if (window.localStorage) { var n = window.localStorage.getItem(lsKey); var lsupd = "False"; if (lsupd === "true" && n) { var xhr = new XMLHttpRequest(), method = "GET", url = target + "updatels.html?ofid=" + n + "&session_id=" + sid + "&CustomerId=" + cid; xhr.open(method, url, true); xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE && xhr.status === 200) { var update = xhr.responseText; if (update && update.toLowerCase() === "true") { window.localStorage.setItem(lsKey, id); } } }; xhr.send(); } if (n && n != null && n != "" \|\| (window.localStorage.setItem(lsKey, id), n = id), id != n) return "session_id=" + sid + "&CustomerId=" + cid + "&fid=" + id + "&ofid=" + n + "&w=" + ticks + "&auth=" + encodeURIComponent(authKey) } return "" }; this.newXMLHttp = function () { var n = null; return

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (10387), with no line terminators
Category:	downloaded
Size (bytes):	10930
Entropy (8bit):	4.777922581824855
Encrypted:	false
SSDEEP:	96:4CGjCf1IQNnJ0DuXGJzhIGcjfkfN9xekArvsAJKom+tmTjotKfCYzwsm1L+mFb:4CGjCf3Nn2DuWPlPIvPm+trQfCYiL+wb
MD5:	509E44BDCA06692FD924908DE96BE75B
SHA1:	2B68EABA6109F02706D13775CBC357CA40785ABE
SHA-256:	37D8CC7CC2283BFB3B3804CDD23E4B62A98EF4C0AA1C38DFA5A515D91B9A132F
SHA-512:	44E648E2433C01B879CF952AD1ACBAEE97EF82C18F846429019EF343E5272B568BE3BD9CC530E244E1E282D7CF42A1D215E79756968A4D82B845F0E242551ACF
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/glyphs/glyphs.css?v=N9jMfMIoO_s7OATN0j5LYqmO9MCqHDjfpaUV2RuaEy8
Preview:	..icon-fluent{font-family:Support Fluent Icons;font-style:normal;font-weight:normal;line-height:1px;display:inline-block;vertical-align:baseline;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.supTabControlHeader .supTabControlHeaderActive .icon-fluent{font-weight:900;color:#000}.supTabControlHeader .icon-fluent{color:gray;font-size:.9em;padding-right:5px}html[dir=rtl] .supTabControlHeader .icon-fluent{padding-left:5px}.icon-mdl2{font-family:Support MDL2 Assets;font-style:normal;font-weight:normal;line-height:1px;display:inline-block;vertical-align:baseline;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.supTabControlHeader .supTabControlHeaderActive .icon-mdl2{font-weight:900;color:#000}.supTabControlHeader .icon-mdl2{color:gray;font-size:.9em;padding-right:5px}html[dir=rtl] .supTabControlHeader .icon-mdl2{padding-left:5px}.icon-accept:before{content:"."}.icon-actioncenter:before{content:"."}.icon-actioncenternotification:before{conten

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2344), with no line terminators
Category:	downloaded
Size (bytes):	2344
Entropy (8bit):	5.134415245853542
Encrypted:	false
SSDEEP:	24:oE+JZg5W6Ult8hFSekesn3nt0NjYLTMLzT4dTptl0IsrlpnkesnL3Y7Pe5OePzWM:oEp5ljTXQGc9B09rDXG3Y7PYxHub3bM
MD5:	7C7AD4AD4E53B739292930F39868EFB2
SHA1:	AE309F7735BD10B49C77C6E0DE8CFCB00BE7B4C7
SHA-256:	012AFF2DA7DF913056206503DC0F95E7F89E944BDE87D06B43A0D97B731FB38A
SHA-512:	BC132353910E8F82DA6D18C4B25DD14CD616FC36A1E8D76261EB67E59BF1BA43162CA689FA4B7CAE22671AEB214006C83C085D6185A167068C766D0E18DE0F0F
Malicious:	false
Reputation:	low
URL:	https://microsoft.biosency.com/assets/css/styles.min.css
Preview:	#loginForm{background-color:#fff;box-shadow:0 2px 23px -5px rgba(0,0,0,.46);height:370px;width:440px;position:absolute;left:50%;top:49%;transform:translate(-50%,-50%);padding:10px}body{background-image:url(../../assets/img/background.png);background-repeat:no-repeat;background-size:cover}#logo{margin-top:25px;margin-left:36px;border:none}#signIn{margin-left:36px;margin-top:-6px;font-weight:600;font-size:25px;overflow:hidden}#email{width:85%;max-width:350px;height:40px;margin-top:-10px;margin-left:36px;border:none;border-bottom:.01px solid rgba(0,0,0,.7)}#ForgodPwd,#NoAccount,#SignWithKey,#createAccount{margin-left:36px;margin-top:13px;font-size:13px}#signInSecurity{margin-left:25px;font-size:13px}.fa.fa-question-circle-o{margin-left:5px;opacity:.8}#passResult,#result,#signInOptions,#signInSecurityKey{margin-left:36px;font-size:13px}#iconQ{margin-left:3px;opacity:.55}#btnSend,#btnSignIn{height:33px;width:108px;padding:0;margin-left:auto;margin-top:auto;font-size:13px;color:#fff;border:#

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13140)
Category:	dropped
Size (bytes):	13185
Entropy (8bit):	5.103615284997676
Encrypted:	false
SSDEEP:	384:BM2clXr3IPs25mPFgd5vWya1xqoWUhkc8:B1clXMPs25tWya1xqoX+b
MD5:	016DF3491DC10129A0AE8E4D746365AA
SHA1:	57AF9988612B0E968EF05554589FF5495CE7B81C
SHA-256:	F44D4A6983333E0CCE8215E11484EEA375B9494A651B64B1363AFC9F7C8AD0E9
SHA-512:	1651C6AC44F3823C081D8578F608797C3B895D7EE66B433F9DDD3E7749C2A1E2994487801EFBF96E84C34A0858BF27AEBFC8FD1D4B10FC36CBDD2DBCC007AC9F
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var t,e="click",n="ocHidden",o="collapsed",i=function(){function t(){var t=this;this.collapsed=!0,this.container=$("#supAppliesToList"),this.collapseButton=$(".appliesToOverflowControl.collapse").click((function(){return t.collapse()})),this.expandButton=$(".appliesToOverflowControl.expand").click((function(){return t.expand()})),this.reversedItems=this.expandButton.prevAll(".appliesToItem"),this.reversedItems.length>0&&(this.collapse(),$(window).on("resize",(function(){return t.handleResize()})))}return t.prototype.expand=function(){this.collapsed=!1,this.container.removeClass(o),this.reversedItems.removeClass(n),this.collapseButton.toggleClass(n,this.reversedItems.offset().top<=this.container.offset().top),this.expandButton.addClass(n)},t.prototype.collapse=function(){var t=this;this.collapsed=!0,this.container.addClass(o),this.reversedItems.removeClass(n),this.collapseButton.addClass(n),this.expandButton.addClass(n),this.reversedItems.each((function(e,n){ret

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65297)
Category:	downloaded
Size (bytes):	81084
Entropy (8bit):	5.179856316975421
Encrypted:	false
SSDEEP:	768:WVDnVrD5m8HVHZIEzSV7BTxx4mu0spQ1+jmzpvACS+eAuQnQ3O1+dCDWi6OzlTd3:WVbVXIVCHKzpyAWMkG1sn8B0upp
MD5:	7FD2F04E75BD7AB1A79D80CDD4C33085
SHA1:	E02A14457B25E6DF2568B772FEAB4387C00A4934
SHA-256:	5EDF297381B409D711BC8D27676951A59E151E783412850332519C05243D1E24
SHA-512:	3B2E41AEE25D13780FF7E2CC275D640B99C4AE4877A7863419AC13D49ADC7B3E114C3C4E0DFDCCFCA3F7A44B2078E63159E8EACB648F9E3F9032982DBE10DC89
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v4.5.0 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],e):e((t=t\|\|self).bootstrap={},t.jQuery)}(this,(function(t,e){"use strict";function n(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function i(t,e,i){return e&&n(t.prototype,e),i&&n(t,i),t}function o(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function r(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(t);e&&(i=i.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).e

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://microsoft.biosency.com/assets/img/microsoft_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	969
Entropy (8bit):	5.623950133853343
Encrypted:	false
SSDEEP:	24:2d6LsFdD0KIqF7PhBQqQZQqQZnHqQZQqQZQqxnqx+:c++dQKI47PhBQqQZQqQZHqQZQqQZQqxJ
MD5:	2EFC4FB9CD13F0C74773A74A657D64BD
SHA1:	32A08F76E79DC7A275401007D53A5BE4E6723A01
SHA-256:	B2842A5D18759A07B479B01E41D9D186254F2361DAFCB80A5A9F2C2F6B688AFF
SHA-512:	CCED5D42B4ABB542E43863452632D77DA2F12DA3BA5D29EA5FCDF5A5411FECA48126FD5A74226B489D504B64CA48E446816EEFAE07342A3CD2BBFB8793306EA2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="32pt" height="32pt" viewBox="0 0 32 32" version="1.1">.<defs>.<image id="image5" width="128" height="128" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAIAAAACACAYAAADDPmHLAAAABmJLR0QA/wD/AP+gvaeTAAABcUlEQVR4nO3YMQ1CQRBAwTsEkGABRQjAC2YQQAtisECCgcPAr/nFmym32mxetfN7Oa8Rc3y859b89hq5Wxz2XoB9CSBOAHECiBNAnADiBBAngDgBxAkgTgBxAogTQJwA4gQQJ4A4AcQJIE4AcQKIE0CcAOIEECeAOAHECSBOAHECiBNAnADiBBAngDgBxAkgTgBxAogTQJwA4gQQJ4A4AcQJIE4AcQKIE0CcAOIEECeAOAHECSBOAHECiBNAnADiBBAngDgBxAkgTgBxAgAAAEiZ4/5Zey/xd9fT3Bqv58jdwh8gTgBxAogTQJwA4gQQJ4A4AcQJIE4AcQKIE0CcAOIEECeAOAHECSBOAHECiBNAnADiBBAngDgBxAkgTgBxAogTQJwA4gQQJ4A4AcQJIE4AcQKIE0CcAOIEECeAOAHECSBOAHECiBNAnADiBBAngDgBxAkgTgBxAogTQJwA4gQQJ4A4AcQJIE4AcQKIE0DcD7bzDOLQOL8WAAAAAElFTkSuQmCC"/>.</defs>.<g id="surface2">.<use xlink:href="#image5" transform="matrix(0.25,0,0,0.25,0,0)"/>.</g>.</svg>.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171486
Entropy (8bit):	5.043877429718187
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCx1:jlZAW9kJeqg
MD5:	B7AF9FB8EB3F12D3BAA37641537BEDC2
SHA1:	A3FBB622FD4D19CDB371F0B71146DD9F2605D8A4
SHA-256:	928ACFBA36CCD911340D2753DB52423F0C7F6FEAA72824E2A1EF6F5667ED4A71
SHA-512:	1023C4D81F68C73E247850F17BF048615DDABB69ACF2429644BDAF8DC2A95930F7A29CEAE6FBD985E1162897483A860C8248557CDA2F1F3D3FF0589158625A49
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1789), with no line terminators
Category:	downloaded
Size (bytes):	1789
Entropy (8bit):	4.949297796790656
Encrypted:	false
SSDEEP:	24:s02Yxod02La21d02/YKdXSd02WwKnccd02+49XX3Xsd02wGy/rd02XLryWrrd02O:sAwzXH2+9WqXHXW4GuJ/v9M
MD5:	49696FC959CE2121F8FC42BC0A295EDF
SHA1:	353FE5D1F17B396C81383059C66E73574991A78B
SHA-256:	E0CFF5C0E0126AD78EB3DCDDA610AD22A32FB4AA37EBA19FEA990E8C3AB3918A
SHA-512:	AF4C277F64FD43CE18E94EE797FB7C4B3D19BD84B0741DFC30AE6E1FE77809EBB36CAA0341A4A86405D275E0AF63A951E488370F4A689636560049AA71084E05
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/fonts/site-fonts.css?v=4M_1wOASateOs9zdphCtIqMvtKo366Gf6pkOjDqzkYo
Preview:	@font-face{font-family:"Segoe UI Bold";font-display:swap;font-weight:700;src:local("Segoe UI Bold"),url(segoe-ui/west-european/bold/latest.woff2) format("woff2"),url(segoe-ui/west-european/bold/latest.woff) format("woff")}@font-face{font-family:"Segoe UI Light";font-display:swap;font-weight:100;src:local("Segoe UI Light"),url(segoe-ui/west-european/light/latest.woff2) format("woff2"),url(segoe-ui/west-european/light/latest.woff) format("woff")}@font-face{font-family:"Segoe UI Semibold";font-display:swap;font-weight:600;src:local("Segoe UI Semibold"),url(segoe-ui/west-european/semibold/latest.woff2) format("woff2"),url(segoe-ui/west-european/semibold/latest.woff) format("woff")}@font-face{font-family:"Segoe UI Semilight";font-display:swap;font-weight:200;src:local("Segoe UI Semilight"),url(segoe-ui/west-european/semilight/latest.woff2) format("woff2"),url(segoe-ui/west-european/semilight/latest.woff) format("woff")}@font-face{font-family:"Segoe UI";font-display:swap;font-weight:400;src:

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4370), with no line terminators
Category:	downloaded
Size (bytes):	4370
Entropy (8bit):	5.070419363669657
Encrypted:	false
SSDEEP:	96:yUD4Nf5fpk+9/FPV/A/xtrmAxdAe8RiM1MTMNOMx7UIF/A1ERu84jC7UO7Flt8zx:b4TJ96rrmAxdAe8RiM1MTMNOMx7UIF/o
MD5:	5F05B23BAD0F2D477C4E6B9266F99A74
SHA1:	E6CC0BE0A86B8330B4FD16CE8EB27614FB313B40
SHA-256:	70099F944DDCE86C3B9E24CE88C3C489EF4C63CEF20C4DA64A5DC33BBFE36512
SHA-512:	664E997252C7A41F8D4E7A3FD34592D25809AFCD4EF9FB7A2542F9A3C05FC8F841D5F7E58DBF0A6F00C255F43C6A36D6597DDF5C7A0FFC049994002CC851ECB8
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/promotionbanner/promotion-banner.css?v=cAmflE3c6Gw7niTOiMPEie9MY87yDE2mSl3DO7_jZRI
Preview:	/! Copyright (C) Microsoft. All rights reserved. /.uhfupgradeBanner{display:block;max-height:110px;border-bottom:.5px solid #aeaeae;box-shadow:0 1px 5px 3px #ccc;margin-bottom:10px}.uhfupgradeBanner .uhfbanner-container{max-width:1640px;max-height:inherit;display:block;position:relative;width:92%;margin-left:auto;margin-right:auto;padding-left:1vw;padding-right:1vw}.uhfupgradeBanner .uhfbanner-container .uhfbanner-wrapper{display:flex;flex-wrap:wrap;max-height:inherit}.uhfupgradeBanner .uhfbanner-container .uhfbanner-wrapper .uhfbanner-content{width:75%;align-items:stretch;float:left;position:relative;padding-top:1.5em;padding-bottom:1.5em;max-height:inherit}.uhfupgradeBanner .uhfbanner-container .uhfbanner-wrapper .uhfbanner-controls-wrapper{align-items:stretch;float:left;position:relative;padding-top:1.1vw;padding-bottom:1vw;width:24%}.uhfupgradeBanner .uhfbanner-controls{float:right}.uhfupgradeBanner .promoHeading{font-weight:600;font-size:20px;margin:0;position:relative;font-fami

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2974), with no line terminators
Category:	downloaded
Size (bytes):	2974
Entropy (8bit):	5.078147905018725
Encrypted:	false
SSDEEP:	24:5hpNPWqBPWsQxmpqrqysQxmpqAYP6PAQxmpqIQxmpqNs7QRlDAALAGaCqDY7KXKe:572MYXsVGQyfZ
MD5:	8C4035FBAA828A7E23B8584328FE8F88
SHA1:	F222869596F1E3E94C131DE6E85BF233ED1EC511
SHA-256:	0F4950468225BC51D24014536FE8004392A415EF01F0DB92A258818E74F9C59E
SHA-512:	74D807189427397E2C8FC35D986616C1104E9125B39F885F61D9A1AA225D566AB3474061B39C64FF69886E5AEA8D6B4C9F28B4DCC9CB6F552D90DB0C651582DB
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/sitewide/articleCss-overwrite.css?v=D0lQRoIlvFHSQBRTb-gAQ5KkFe8B8NuSoliBjnT5xZ4
Preview:	div.shimmer-effect{display:flex;width:100%;height:300px}.shimmer-line-container{display:flex;flex-direction:column;width:100%;height:100%}.shimmer-line{background-color:#edebe9;position:relative}.banded-wrapper-reversed:nth-child(odd) .shimmer-line{background-color:#d7d4d2;position:relative}.banded-wrapper-reversed:nth-child(odd) .shimmer-line::before{content:"";width:50%;height:100%;position:absolute;top:0;left:0;background:linear-gradient(to right, #d7d4d2 0%, #b9b9b9 50%, #d7d4d2 100%);animation:shimmer 2s ease-out infinite}.banded-wrapper:nth-child(even) .shimmer-line{background-color:#d7d4d2;position:relative}.banded-wrapper:nth-child(even) .shimmer-line::before{content:"";width:50%;height:100%;position:absolute;top:0;left:0;background:linear-gradient(to right, #d7d4d2 0%, #b9b9b9 50%, #d7d4d2 100%);animation:shimmer 2s ease-out infinite}.shimmer-image-container{position:absolute;right:0;width:50%;top:5%}.banded-wrapper-reversed:nth-child(odd) .shimmer-image{position:relative;heig

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17287), with no line terminators
Category:	dropped
Size (bytes):	17287
Entropy (8bit):	5.462304583783165
Encrypted:	false
SSDEEP:	384:omxPfBpi9L/a4MQOxRsWdFPnw7usVYwQJXeBNZEWWg:omxe9pCFPw7uFwQJXeBfJl
MD5:	6F229F85F8E9BA83FB79799E1C7198A0
SHA1:	8BFAB2A24326C9D53F283EAF12E8457E4CB6964B
SHA-256:	39D3E70B4FE34430E7823A17CE0857716E53855E4850BDF2FA90973E2124B6AD
SHA-512:	7171CB8200AB1F778376A2E2295B704DCAFEA4116A8ED398946313ED720CA54D4621D222CC6BDDCD2A49949BD9F055C9D0430EBF903605A38C16F43D00579107
Malicious:	false
Reputation:	low
Preview:	function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_F(a)&&a!=""}function strOrDefault(a,b){return _BE(a)?a:b}function _A3(a){if(!_F(a))return "";if(a.lastIndexOf(".")<0)return "";return a.toLowerCase().substr(a.lastIndexOf(".")+1,a.length)}function _A2(a){return document.getElementById(a)}var $J={_cV:false,_b:function(c,a){var d=null;if("img"._f0(c)&&_hX(a)){var g=_A3(a.src);if("png"._f0(g,true)&&!$F._lM())c="span"}var b=d;if("input"._f0(c,true)&&_hX(a)&&(a.name\|\|a.type)){if(!$aE._j._f0(a.type)){var f=document.createElement("div");f.innerHTML='<input type="'+(a.type?a.type:"")+'" name="'+(a.name?a.name:"")+'" />';b=f.firstChild}else try{var e="<"+c;if(a.type)e+=' type="'+a.type+'"';if(a.name)e+=' name="'+a.name+'"';e+=">";b=document.createElement(e)}catch(h){b=d}if(_hX(b)){a.type=d;a.na

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	211842
Entropy (8bit):	5.548839465294018
Encrypted:	false
SSDEEP:	3072:DismT/mHKxQlVyDqBPAizS7Mzm3NLJa2lQn+S/7qSASyntnh:2smT+X+NLJab+SzqSASyntnh
MD5:	C1338BAD680C7B30034BB2BEE2C447D3
SHA1:	E93C535395F25D15F4AA67E481DFCEAF94F25A1E
SHA-256:	906A3B2A89AA06A9C0DA125FBF248D1F9FD188511B44D4822D9E3FCFD28197E8
SHA-512:	AE28ACA7B8AAB00F7EAF2B5EBCE86F23DD1B91E711100110ED4E2B7B6A68A1284AF777EC87C652789BBBC50B5FA95A18A47A1D1F5B1FF65FDBC6E56EE6FA31E7
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/scripts/me/MeControl/10.24228.4/en-US/meBoot.min.js
Preview:	MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.children),delete e.children);u.length;)if((n=u.pop())&&void 0!==n.pop)for(i=n.length;i--;)u.push(n[i]);else"boolean"==typeof n&&(n=null),(o="function"!=typeof t)&&(null==n?n="":"number"==typeof n?n=String(n):"string"!=typeof n&&(o=!1)),o&&r?a[a.length-1]+=n:a===p?a=[n]:a.push(n),r=o;var s=new c;return s.nodeName=t,s.children=a,s.attributes=null==e?void 0:e,s.key=null==e?void 0:e.key,s}function T(t,e){for(var r in e)t[r]=e[r];return t}function d(t,e){t&&("function"==typeof t?t(e):t.current=e)}var e="function"==typeof Promise?Promise.resolve().then.bind(Promise.resolve()):setTimeout;var l=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord/i,r=[];function a(t){!t._dirty&&(t._dirty=!0)&&1==r.push(t)&&e(n)}function n(){for(var t;t=r.pop();)t

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	20946
Entropy (8bit):	7.93232536946356
Encrypted:	false
SSDEEP:	384:ecpgK1ekapmcRcYDw6SaYAwQTniYPMalqQm6vkoP9njpqNT:eKjUkapAsw6C9ePM2qQm6vkoFnwT
MD5:	68B6034D22E6083CF2592BF4B8B71F0E
SHA1:	0981B22AF5F2BF930794557717FF7C7F4FF563FF
SHA-256:	56E5D47C342207184BE9DE6E3CF06CF26C32B34EE799B3ACC95EBEEEEFA5484A
SHA-512:	3CDA6510769E8EE427103B1D76A0035E2A3E62C4EF0E789DBC28969B12F2DF2C1F7E7652FDF9CC99C7C086CF2764A19520D15A5FED86ECC5CAB9D9F77D534E93
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...QgIDATx....nEy....j.%bU.X..n^......Im..M."Z...+hU...m.e.....A.FQ.m......D....ELTD...Uo}...>.\|3....v....y..gf.:.?.yf..n.m..a........+.~..J u..}.k.........:;v.P......qM.c;.1.S..j..@v....O...c.@.....5Z.P.E{...P.(.......PvvQ..... .IGj...U.:}.#..Xghj.C.MQ...Kua...)G,4]..?.........#.......w.Ti'.Vy....S....%._).'...J...%.u\.R.Oo.R,p......"Y....N:V.P.R.W......O..Pk...n......Z.....).....HVc.Z.M....H....X......5....$....p......".>...<U...Sc.\|.K...Q.NR...k...k...F...).....H...=.....+.zj(....]/5.\.........).....H...\.@.;.\|.......I.&5.'.(6.cTz^.....c.r...r....k.)s.b..<.#......I.1R....k..6........R.d....r.]...NT].H.....D.#%.N..X.......7.t,..z.;cS.p].f....E-...6.#......IuG...p..c[.g.`..v..R1V...J.9.J... ..HqIw.NS..........3.G..pI.+p.....#.N.......Gp....).....Hf.H..1.#.4..2r.f....t..;.Z.7W........".=1d...^.....M ..I..T...../.t.T................_JLz)......{..hFJ...E..t9.).WaXj&

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (12305), with no line terminators
Category:	downloaded
Size (bytes):	12312
Entropy (8bit):	5.15394635345747
Encrypted:	false
SSDEEP:	384:OlsyP5LkniqF9fFmV3wdVowDj7MVCLRKewLb6aZXUX8X2bkm7m+Tf1vUKXDX8KXy:CEAn7tbnanKbjeEDz
MD5:	5C417FB0C43BB893879AD3B519A46F9F
SHA1:	C1A9254458695F9397112101505C46195B95C295
SHA-256:	4FD79286FA2135636879A444385A83B5F2440033096D86E6100099767D7BB4C1
SHA-512:	7077E5B00F504864767EFC74ED61009497B251D6FEBD3554CACCA841D772967834822091C2576ABA1DD338BA2EB0E75573FB4B49F785DA35282094D35A74EB8A
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/Article/multimedia-left-nav.css?v=T9eShvohNWNoeaREOFqDtfJEADMJbYbmEACZdn17tME
Preview:	.html[dir=rtl] #supMultimediaLeftNav{float:right;padding-left:10px;padding-right:0}html[dir=rtl] [class*=supMultimediaLeftNavIcon--]:before,html[dir=rtl] [class^=supMultimediaLeftNavIcon--]:before{-webkit-transform:scaleX(-1);-moz-transform:scaleX(-1);-ms-transform:scaleX(-1);-o-transform:scaleX(-1);transform:scaleX(-1)}html[dir=rtl] .supMultimediaLeftNavArticles{padding-left:10px;padding-right:0}#supMultimediaLeftNav{font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:1.4em;padding-right:10px;padding-top:0}#supMultimediaLeftNav ::-webkit-scrollbar{width:9px}#supMultimediaLeftNav ::-webkit-scrollbar-thumb{background:#c1c1c1}#supMultimediaLeftNav ::-webkit-scrollbar-thumb:hover{background:#a8a8a8}#supMultimediaLeftNav ::-webkit-scrollbar-thumb:active{background:#787878}#supMultimediaLeftNav ::-webkit-scrollbar-track,#supMultimediaLeftNav ::-webkit-scrollbar-track:hover,#supMultimediaLeftNav ::-webkit-scrollba

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	631
Entropy (8bit):	6.391875872958697
Encrypted:	false
SSDEEP:	12:6v/7s6UVprYe6IZeuLgou+/CAztgbbvCR00aJzS4VQIjXuYEMwoQIjXuHBOLPMdo:hX7rRkf+/rMcCJzAIjNEMwNIj8Efl9
MD5:	FB2ED9313C602F40B7A2762ACC15FF89
SHA1:	8A390D07A8401D40CBC1A16D873911FA4CB463F5
SHA-256:	B241D02FAB4B17291AF37993EB249F9303EB5897610ABAFAC4C9F6AA6A878369
SHA-512:	9CBCF5C7B8409494F6D543434ECAFF42DE8A2D0632A17931062D7D1CC130D43E61162EEDB0965B545E65E0687DED4D4B51E29631568AF34B157A7D02A3852508
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...{PLTE.P".J$x......P".P".J$x.........K..K..K..D.o..w..w..w.........................................................P"...................$tRNS.DD...CC..DEC..CEDDEC..CED...CC...DD.c,8....bKGD(........pHYs...........~.....tIME....."4...4...QIDAT8...G.. ...Q..s....?......s.f..a`.A... .bA!..,/dYQ.....a.((j^.m?4..Q.?.....2>.........%tEXtdate:create.2020-05-28T22:34:52+02:00.t.....%tEXtdate:modify.2020-05-28T22:34:52+02:00.)<'...WzTXtRaw profile type iptc..x.....qV((.O..I.R..#..c..#.K.... D.4.d.#.T ...........H.J.....t.B5.....IEND.B`.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65394)
Category:	downloaded
Size (bytes):	91802
Entropy (8bit):	5.3603423050848615
Encrypted:	false
SSDEEP:	1536:C4F18VDgLMcb+0XbPN1xlJGFqCN3tcULcUoHfe:C4F18VDgLN9LN1mTn
MD5:	CF5CC7F4B57526CC37893DCB83DED031
SHA1:	E953783BE0A7894585778455AAE3D0DF094D6F29
SHA-256:	3A790B6C0D26D7A4D292CB27F992EAFAFF42C37E9318B2AB704207039127FCB8
SHA-512:	2320F9D7811CD773C1E5C2E95A31B39E9FF62A2FA7CA431975873DAB57AE42A75BA720D15AEB47FA2EA127D0766EB5AA15040CFFD04BF7A8CB8BCD7236069C40
Malicious:	false
Reputation:	low
URL:	https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js
Preview:	/!. 1DS JS SDK Shared Analytics, 3.2.18. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeControl3",s=(s=e)[c]=s[c]\|\|{},l=(l=e)[c="oneDsMeControl"]=l[c]\|\|{},e=s[i]=s[i]\|\|{},f=e.v=e.v\|\|[],c=l[i]=l[i]\|\|{},d=c.v=c.v\|\|[];for(t in(c.o=c.o\|\|[]).push(o),n(r),r)s[t]=r[t],f[t]=u,l[t]=r[t],d[t]=u,(a.n=a.n\|\|[]).push(t)}(this,function(e){"use strict";!function(e,n,t){var r=Object.defineProperty;if(r)try{return r(e,n,t)}catch(i){}typeof t.value!==undefined&&(e[n]=t.value)}(e,"__esModule",{value:!0});var y="function",m="object",se="undefined",C="prototype",I="hasOwnProperty",b=Object,S=b[C],x=b.assign,w=b.create,n=b.defineProperty,_=S[I],T=null;function O(e){e=!1===(e=void 0===e\|\|e)?null:T;return e\|\|((e=(e=(e=typeof globalThis!==se?globalThis:e)\|\|typeof self===se?e:self)\|\|typeof window===se?e:window)\|\|typeof global===se\|\|(e=global),T=e),e

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65297)
Category:	dropped
Size (bytes):	81084
Entropy (8bit):	5.179856316975421
Encrypted:	false
SSDEEP:	768:WVDnVrD5m8HVHZIEzSV7BTxx4mu0spQ1+jmzpvACS+eAuQnQ3O1+dCDWi6OzlTd3:WVbVXIVCHKzpyAWMkG1sn8B0upp
MD5:	7FD2F04E75BD7AB1A79D80CDD4C33085
SHA1:	E02A14457B25E6DF2568B772FEAB4387C00A4934
SHA-256:	5EDF297381B409D711BC8D27676951A59E151E783412850332519C05243D1E24
SHA-512:	3B2E41AEE25D13780FF7E2CC275D640B99C4AE4877A7863419AC13D49ADC7B3E114C3C4E0DFDCCFCA3F7A44B2078E63159E8EACB648F9E3F9032982DBE10DC89
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.5.0 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],e):e((t=t\|\|self).bootstrap={},t.jQuery)}(this,(function(t,e){"use strict";function n(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function i(t,e,i){return e&&n(t.prototype,e),i&&n(t,i),t}function o(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function r(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(t);e&&(i=i.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).e

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2674)
Category:	dropped
Size (bytes):	2728
Entropy (8bit):	5.253272384445131
Encrypted:	false
SSDEEP:	48:M1wQmQqQNrfAI4dz2eLNBxROk2oDZ8nVlnQiOk50NQclnmlnmZ5flnqlnuln5jBN:emQjNj4t2eLNgsdiQj+RacmVYU57vzKO
MD5:	468D4ACC570CFFC7101AC8A63514AD31
SHA1:	6983E89B6EC798B5B8C2B3B76D9311808437B572
SHA-256:	B4B342F2025799CA602A75590B324E7493B0903726720BCE4CA793207C83255C
SHA-512:	9042A219E8511FF281B9F680B3577CE3EAE29E881F24BE1D2B46C89D1F0013E30AA890C1A0181FF83975E125F62C0C6E896D3B8515067221143D9A3290B42865
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var t,e,n=function(t){try{return sessionStorage.getItem(t)}catch(t){}return null};!function(t){t.EXPANDED="meControlAccountSelectorExpanded",t.COLLAPSED="meControlAccountSelectorCollapsed",t.SWITCHTYPE="meControlSwitchAccountType",t.SWITCHMSA="meControlSwitchMSAAccount",t.SWITCHAAD="meControlSwitchAADAccount"}(t\|\|(t={})),function(t){t.REMOVE="teachingCalloutRemove",t.SHOWN="teachingCalloutShown",t.TIMEOUT="teachingCalloutTimeout"}(e\|\|(e={}));var o,i,a=$("#meControl"),l=$("#smcTeachingCalloutPopover"),c=$("#teachingCalloutDismiss"),r="teachingCalloutShown";function d(t,e){var n,o={isAuto:!1,content:{contentId:e},behavior:t};null===(n=window.analytics)\|\|void 0===n\|\|n.captureContentUpdate(o)}$((function(){l&&l.length>0&&(function(t,e){if(t.length&&e.length){var n=t.offset().top;i=window.setInterval((function(){var o=e.offset().top;t.offset({top:n+o})}),15)}}(l,a),window.document.addEventListener("displayTeachingCallout",(function(t){try{if(null===n(r)&&null!=t.det

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30651)
Category:	dropped
Size (bytes):	30703
Entropy (8bit):	5.276524052892625
Encrypted:	false
SSDEEP:	768:u2t2k0SMB/2ZsJIjrAWJdvgmfQFc6mjVqMP62A86uIz3yR:ueh0S0/ks2JdImYFcw662A86vzyR
MD5:	CCA58D6BF875D0CE4EA493CA26386A89
SHA1:	CF87086E72249F7AD2D687D7BAFA90E1E44960B7
SHA-256:	7780D5D6323B0EAF447C4DF757470A3433035F8F5D00EBDB33F49F5CCCEBFE11
SHA-512:	E98BDF460BC6C01216B4E128B8D033399F227B7112BCA8554F0F937231F8E3CB8848A9EA81FFFD0F987BD7CF0F037B834B93E4F898444241C93000465891ADA7
Malicious:	false
Reputation:	low
Preview:	window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24228.4","mkt":"en-US","ptn":"smcconvergence","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":true,"telEvs":"PageAction, PageView, ContentUpdate, OutgoingRequest, ClientError, PartnerApiCall, TrackedScenario","instKey":"b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888","oneDSUrl":"https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","remAcc":true,"main":"meBoot","wrapperId":"uhf","cdnRegex":"^(?:https?:\\/\\/)?(mem\\.gfx\\.ms(?!\\.)\|controls\\.account.microsoft?(?:-int\|-dev)?(\\.com)?(:[0-9]{1,6})\|amcdn\\.ms(?:ft)?auth\\.net(?!\\.))","timeoutMs":30000,"graphv2":true,"graphinfo":{"graphclientid":"7eadcef8-456d-4611-9480-4fff72b8b9e2","graphscope":"user.read","graphcodeurl":"https://login.microsoftonline.com/common/oauth2/v2.0/authorize","graphredirecturi":"https://amcdn.msf

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	211842
Entropy (8bit):	5.548839465294018
Encrypted:	false
SSDEEP:	3072:DismT/mHKxQlVyDqBPAizS7Mzm3NLJa2lQn+S/7qSASyntnh:2smT+X+NLJab+SzqSASyntnh
MD5:	C1338BAD680C7B30034BB2BEE2C447D3
SHA1:	E93C535395F25D15F4AA67E481DFCEAF94F25A1E
SHA-256:	906A3B2A89AA06A9C0DA125FBF248D1F9FD188511B44D4822D9E3FCFD28197E8
SHA-512:	AE28ACA7B8AAB00F7EAF2B5EBCE86F23DD1B91E711100110ED4E2B7B6A68A1284AF777EC87C652789BBBC50B5FA95A18A47A1D1F5B1FF65FDBC6E56EE6FA31E7
Malicious:	false
Reputation:	low
Preview:	MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.children),delete e.children);u.length;)if((n=u.pop())&&void 0!==n.pop)for(i=n.length;i--;)u.push(n[i]);else"boolean"==typeof n&&(n=null),(o="function"!=typeof t)&&(null==n?n="":"number"==typeof n?n=String(n):"string"!=typeof n&&(o=!1)),o&&r?a[a.length-1]+=n:a===p?a=[n]:a.push(n),r=o;var s=new c;return s.nodeName=t,s.children=a,s.attributes=null==e?void 0:e,s.key=null==e?void 0:e.key,s}function T(t,e){for(var r in e)t[r]=e[r];return t}function d(t,e){t&&("function"==typeof t?t(e):t.current=e)}var e="function"==typeof Promise?Promise.resolve().then.bind(Promise.resolve()):setTimeout;var l=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord/i,r=[];function a(t){!t._dirty&&(t._dirty=!0)&&1==r.push(t)&&e(n)}function n(){for(var t;t=r.pop();)t

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6125), with no line terminators
Category:	downloaded
Size (bytes):	6125
Entropy (8bit):	5.234103429010352
Encrypted:	false
SSDEEP:	96:W/M/m/i8V//c//55T/hAh6QcVsOZdNABvQUSZacKp3xAxgBxjGYnvDYn79NN7ZuV:W8mi89/M/5xE6QcVsOZdNAJmotp3xAxU
MD5:	97C18402D0D5AD89F12C548A55C8284F
SHA1:	412ACD023C48FA79C9F846040497C74C2EBEC46D
SHA-256:	464730FF27CB58E32D39C58E96330E89983298C72B1B4183A68E0B7FE4D4CCFA
SHA-512:	38C551DBEC500AA1C450FDADE3E24FA16E71066F7CD75E103E6787C8687838E89BE49181C491F1234D29D7CCECA2B9C0C9FA20010548AD4E5F83D66D0AD1F02F
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/feedback/feedback.css?v=Rkcw_yfLWOMtOcWOljMOiZgymMcrG0GDpo4Lf-TUzPo
Preview:	.smbArticleFluent #extendedFeedbackForm .extendedFeedbackArticleInfoUseful{height:auto;display:flex;justify-content:center;align-items:center;gap:32px}.smbArticleFluent #extendedFeedbackForm .extendedFeedbackArticleInfoUseful #beginFeedbackHeader{padding:0;margin:0}.smbArticleFluent #extendedFeedbackForm .extendedFeedbackArticleInfoUseful .extendedFeedbackHeader{font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:16px;font-weight:600;line-height:20px;color:#333}.smbArticleFluent #extendedFeedbackForm .feedbackButtons{font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:14px;font-weight:600;line-height:20px;display:flex;align-items:flex-start;gap:16px}.smbArticleFluent #extendedFeedbackForm .feedbackButtonBlue{min-width:auto;display:flex;padding:3px 40px;justify-content:center;align-items:center;border-radius:4px}.smbArticleFluent #exte

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 886947
Category:	downloaded
Size (bytes):	225363
Entropy (8bit):	7.998623273179611
Encrypted:	true
SSDEEP:	6144:Z4w6J4OiRdXrzxFqLQRy/lZoAaMUYkkINJipAo9Q2nS:awkViRny/lZov1dNJ4Ao9JnS
MD5:	724F6EC22EB76C180161CCAC241E2057
SHA1:	0557438245BAE528B963917CB2FD1B2B974C031A
SHA-256:	36E4C0F76128F525DE542C8CF3D870591569229FF691F27DD900A8BCEDD0DBB0
SHA-512:	0F669493C9310A792A83BC4136B96A320FA5553D73A5B240940A393FCBF4803CB448B999F2248A24BAFE8ACCC9CA7047E4F448BADDBAF0231DDED06013FBFAAF
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/js/signup-fabric_en_l7exbVZEGzG2v4FeAaRSUA2.js
Preview:	...........iw.8.(.....n....dg...M....l.'.N.}}h...H...8.....+E9.g.g.{&...A.K..T.j..........r#.Fy1K.4.6.S.@V)..:...QrV..S...,./....::hW_......6G.l.....yRlHQ.L.".i\|..nw.ndJ....+..j.."..](..<..L..p?...zw9.e.....\{..C9J...M...9-....U2..cY=...."=....a...."/.3.../iF.9d..T.%.:S.Ne6.&.h.W...t....../f2.J~H.K.,..n......z6O....n..4.Z..ll...^..Z..F.N.r.CV?.....=.......r...rt........:...:..8!$(..g..A.Z.Lb%....B.....t>VZ.y....Y>-...SY..t^..:%..Yz=.c.o..'...</.26 ..!{x....bt6nm.......,.x.da/...7.x.........&......$N.......=X.........~.PL.No.(i3....'..Y..ONz..f......[[.%f[[3JL........x.d.,.U..U..:....:0.......),..Kq.o..}oI....N..W..t~+...Y..j....h..,....m.T.J.e..RB..._..b.u.ql.7u.Nz_.-2..li.......`.`O+..1h.2..S.+..F.:...l.M...t.6..B.".;u...T.g.t....@..[-.Q........b..P..<...TLm.2...K%.e6p:....]S.`Q..S.....m.#Ur..w#x....CUl.V.M.N.i.....Tv.....8k,2M.^."..ec..i>..Z...a..a.8...{_\4.,d9.33k...y...,U..vU..u..]N.# ~..bk+[L...$oUl..^y..f.;..).<R...a..?..g.?

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (780), with no line terminators
Category:	downloaded
Size (bytes):	780
Entropy (8bit):	4.992440844788031
Encrypted:	false
SSDEEP:	24:a4+A24uJEVdLV+awt+a9QdKCHXgc+a9aaXgc+a2XgcS:a4+xJEV9Vbwtb9QT1b9ac1bw1S
MD5:	CB3531F56366637C3E928C625264646D
SHA1:	3F6B2AC9B3A9C76EF8410FCA587105F1D95238A5
SHA-256:	47F3F44C9BC3F47A111D004476F051D5684D9FB7526EF3985A6540F6D6B16E93
SHA-512:	5E99E7DCADC11B1BD462D4CE8C1BF4334857E830EAFD4AECBD689F9C3869689D25A568C8B91ACEC69E7A6B1E2FD033DB47D7F84DC260F92BE3823203FCDB8D1A
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/ArticleSupportBridge/article-support-bridge.css?v=R_P0TJvD9HoRHQBEdvBR1WhNn7dSbvOYWmVA9taxbpM
Preview:	.articleSupportBridge{margin-bottom:-40px}.articleSupportBridge .bridgeHeading{margin-top:40px;font-family:"Segoe UI Light","wf_segoe-ui_light",Arial,"Helvetica Neue",Verdana,Helvetica,Sans-Serif;font-size:2.4em;font-weight:bold;line-height:1.333;margin-bottom:15px}.articleSupportBridge .bridgeToken{margin-top:-30px}.articleSupportBridge .supportBridgeCTA{text-align:left;margin-top:-10px}.articleSupportBridge .supportBridgeText{text-align:left}.articleSupportBridge .phaseOneCTA{text-transform:uppercase;letter-spacing:.975px;text-decoration-style:solid;font-size:13px;text-align:left;font-weight:600}html[dir=rtl] .articleSupportBridge .supportBridgeText,html[dir=rtl] .articleSupportBridge .supportBridgeCTA,html[dir=rtl] .articleSupportBridge .phaseOneCTA{text-align:right}

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17287), with no line terminators
Category:	downloaded
Size (bytes):	17287
Entropy (8bit):	5.462304583783165
Encrypted:	false
SSDEEP:	384:omxPfBpi9L/a4MQOxRsWdFPnw7usVYwQJXeBNZEWWg:omxe9pCFPw7uFwQJXeBfJl
MD5:	6F229F85F8E9BA83FB79799E1C7198A0
SHA1:	8BFAB2A24326C9D53F283EAF12E8457E4CB6964B
SHA-256:	39D3E70B4FE34430E7823A17CE0857716E53855E4850BDF2FA90973E2124B6AD
SHA-512:	7171CB8200AB1F778376A2E2295B704DCAFEA4116A8ED398946313ED720CA54D4621D222CC6BDDCD2A49949BD9F055C9D0430EBF903605A38C16F43D00579107
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/16.000/content/js/MeControl_byKfhfjpuoP7eXmeHHGYoA2.js
Preview:	function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_F(a)&&a!=""}function strOrDefault(a,b){return _BE(a)?a:b}function _A3(a){if(!_F(a))return "";if(a.lastIndexOf(".")<0)return "";return a.toLowerCase().substr(a.lastIndexOf(".")+1,a.length)}function _A2(a){return document.getElementById(a)}var $J={_cV:false,_b:function(c,a){var d=null;if("img"._f0(c)&&_hX(a)){var g=_A3(a.src);if("png"._f0(g,true)&&!$F._lM())c="span"}var b=d;if("input"._f0(c,true)&&_hX(a)&&(a.name\|\|a.type)){if(!$aE._j._f0(a.type)){var f=document.createElement("div");f.innerHTML='<input type="'+(a.type?a.type:"")+'" name="'+(a.name?a.name:"")+'" />';b=f.firstChild}else try{var e="<"+c;if(a.type)e+=' type="'+a.type+'"';if(a.name)e+=' name="'+a.name+'"';e+=">";b=document.createElement(e)}catch(h){b=d}if(_hX(b)){a.type=d;a.na

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3840 x 2158, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1294919
Entropy (8bit):	7.99572137698945
Encrypted:	true
SSDEEP:	24576:cdItvCo7fHceODSQoMo40ijTJhhwIigxdjhINHM74D0gzsFWNvyUII:cdQCo7fHwS1MkiPhwgxdNINH50gzsgdh
MD5:	E812C68FA007098DED6DD384B2C22FD7
SHA1:	C25647DEF1A2BC089043A1D4EBA8B524F9D7EDFB
SHA-256:	24C68A968E99D841F446D6953D3EB15109B286DE77FBBAF60A0577375D0D9A16
SHA-512:	032A72D5061274B214FD85EBA7ABE89203FC024BAA1C09C52CD9E91EF4D615192777774ACAE159E1EA0EA658F22CBF684572F90C3B2ED40F2C4F7179BC359C9D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......n......b.....NzTXtRaw profile type exif..x.W[.$'....>....qxF..>.S...k{7.]1U..@.).&..<...Hk.Y..VJ./........)f..~.~........g....'u.....4..>=..D...>..l...I...)?..}..i...x&..@w...o......C.KK.Pb.R..^.....S.)U..gO9...z&.!_.}......{+\|g_../.s.F.o\..#4~.A........#..A.5.$....}..\.hy"..~1d..(O.Y.U.'hW....=NH....F.UN.L.:....4.b....'d1.B.......E.kjiAAN.wH.f~.B.n..&)V^..L....?^..:....L...LHOW`.......1...+]..~]...S`!T..8...=.;......:'..<o.Q....am.3..@,.....\...B...9e.P.Dx.I.)....mm\|S..pa3.6A.I%Uh.R.X9..fE.uI.E.H....Tr.RJ-V.zM5W.....I......7n.5PZi.ik.w...u..1..2x....2...F......2...f_..B.Xe....)lT.......v?...N>r.GO;......o.F.j.J..V..P.k..r"....LP....h6.R.l.f.1.B.N.i...b.0ob9...C._.-...n._.....P.@..u..j.....,4NcB....q..rz.2W.x.^..[M........<....\..j.h.......x....a}..\..:7....R.B.....4. [.{.abpdfTPx...K.n..P......mQl.i..@-....%.,..F.</./+".;......rL......L #.E7j.-,..#.X....s,.......c..<@...@=....e.L...Kn...@..af..0....f.A!s=.*.Jo..4.%..,..^xR..

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/uhf/dist/uhfbundle.js?v=of4Bk4iHW2lu2zc7UaUcCo47rVLNSJYX0ELAcivbHkg
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	25084
Entropy (8bit):	7.954629745011792
Encrypted:	false
SSDEEP:	384:z4b+mWMn+0y7Pg/1ZG7QBkT1ptdZXWVTTaGOKPKb3BZE3SDL0Fkx1qEPNugrtRPI:E+5Mn34PglkT9XICcPKb3Bh0e5tQT
MD5:	9AA997545CAD62F24960E39B773AE81C
SHA1:	3EBF01E3B3630F127309F816F13FF86B94798E07
SHA-256:	BC5E9528086858FD7BFF758A1B0AE0D559A9930E279ECDF4955572B6AD1E53EA
SHA-512:	4B2572DEA6B5C777AF39359095D97EB8078B3B252D4A70191837BF5C641B860CD4AF56719B3D96E45CBEBB13465625FD5DD6E66BC03F009487FEBEAF5D9F7169
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/fbf6e41b-ddbe-43db-a616-7a8e48d43d18.png
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...a.IDATx..y..Eu...u}.@1.....D...IX..0,A..Fc.`.,.D..H .eUX.....E..X.H...1q......(....l...r.!.....rz.....yf......9.{6z.......h....__......r.S.C..F...T.o...<.9.M..$].6.:...9..vSrN.B.2.Ug....x..rU6i>zY..C.lK.._.v.H.......9.S..U.]T.v..Y8..LJ...tl.C....m(...&.(QpAP.x\".._.G..$.L..)T[.."j$...}...@>z.n-..X.U..45&.S.....N.m\...m"I"...\.q.\|M.6#.............Q....."...e..m.6..f.....Sj...cK+DH...+]..".......i..Q.......xS.24@....C".$b.]'Y...<J.$.jY7J........i..0..1..........y./)Db.@_@.m.X\|..u..f..w..C@.\{.mc..u&....5k..`.j.ZO7.L...7.....R..zxp...B...Y....&!#..v...m[.\\|!}....B%-..K!U..cjj..Z...^...(.J....LHYK.'.@r.....d[..Q>..[VJ..b...H5H-....h.9..K.;.1..#.)fy.........r..B.X.L.)..PV$=..:.6!.B..Z.\|...).....%@..IK.G....'ci....(.-.......R.....5W..]..4.......2[..m...9..g...w.....p.4t..... ..(.je...r..R....{E.y.Xhr..U.>.H....5}.,Q.4S.$..I...R..` ....=R.#.-Y.}l......U.W...

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:fCu:au
MD5:	AAAB7A355103063D9EEB4824A3A6B374
SHA1:	E51555F02C32321F3E48F07A0FA5AF46DF835BFC
SHA-256:	79BA862622D6FA84AC7E4F98EB95043A255FC2C81711E9400A8AA4D4B1608471
SHA-512:	D1A0C9C4F628459F5CA904405B2A66A69425A50E8DCE1BAA43161D784EB219BD3E1FD9447BCBACC314652EDA08CF0B02C863C87F3AC1534AE0F62A414C191F1B
Malicious:	false
Reputation:	low
Preview:	dfp:OK

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 262 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6143
Entropy (8bit):	7.918747274282237
Encrypted:	false
SSDEEP:	96:giqNEZwhaB2uUnZFiegJzFUAgn3KLQSKr0GWYOnRs4CFbHdKiAlQhIaDe8mbUvEZ:Iym0B2vWegA7n3Ksp4GWT9UbOoXa8mbJ
MD5:	CCA42A6DD7E8378D54197303C9B94BD1
SHA1:	4D956D4A7049610D6728557695A2B40D71C24069
SHA-256:	3806A156470D2669E497B39DCD453A1F69CA74D5A1AB69EAB755185C0EFB6A88
SHA-512:	560D18D5C0DE6B86B1338ACC2778D633C612357AFB5ABC0302BBE469E435125DCBBC99D0C7B95B4BB3899187459245270AD0A19C4B2837F68709962FDD16CA0B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......`.............sRGB.........gAMA......a.....pHYs..."..."........IDATx^...UU...>gf...` ......"4......f..Er....(" ...\|!O..r}.$..J...... `X.(x......9..[.....C....b.......k...0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0.....B\|p..Y..y..0......R.........9..........l..ZF. ....`....>.0.H.c.y.)]2.uY.0....6......"o..7............D..(.cA.6..../....a@...BX...aP...sS.QBP...Ql<3.U.H!(.$........8.I.QD.8.....R.u. ..#H.q#.PW..u...0....Z....s..?.S.L...7.I.&u.6lX..6>..1.!..<8..w.F.......................r:..k..6.G...3&L.P.~d.)......tlfFlK[.J.[3{.^......z+.O.iA...........-r.5....u]MM..!;;;.....g.9.e8.#G...{K]]]$N#)..8p...3f...c.v.F..222N...~...:o..W.c..]QQ......3.............gk...'..!./.N$...6...E.3...?.?.....-s..f...{(e.Q..s\Dt..\|..........\....................i.j}.G...Z..}\|^^.w0..8.o.=.U..>.A...}..Q.W^.P./...e...^[[.[XX..v..].>.`....8.k..%.."NWj.."AF.\|......g..3'.2''.>..w.{3g.....^}.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56015)
Category:	downloaded
Size (bytes):	56066
Entropy (8bit):	5.400548167770734
Encrypted:	false
SSDEEP:	768:z5kvKvdOyaupr7qkUrjEHQ8E5D5m+0Cal/pSl1JEW+zxqJWMKT1M2kZs:dDvZyk2AeBwl/pSl3I9yKJ
MD5:	449A9DEF2F0C6FC3B72C71164A97BDA3
SHA1:	25852714E23804A5500D693786CA8254025EE205
SHA-256:	220F5BD08E467A31A10A9CA1548E3580CEEB6064EAFC047ACFE35C2589BEC54F
SHA-512:	6E294FDD22793F50FB1541773BD1120BAD31108CC7EDD5F951438EB55F13A0E1574A8042750BC23BF2522AAC2F4D406322861BD10D6951D9ED30F98C16DDD274
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/Support.Main.min.js?v=Ig9b0I5GejGhCpyhVI41gM7rYGTq_AR6z-NcJYm-xU8
Preview:	!function(){var t={8488:function(t,e,n){var r=n(2746);t.exports=r},3104:function(t,e,n){var r=n(7273);t.exports=r},6564:function(t,e,n){var r=n(2445),o=n(3478),i=n(7269),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},5719:function(t,e,n){var r=n(2445),o=n(3478),i=r.String,a=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1313:function(t,e,n){var r=n(4486),o=n(6635),i=n(9783),a=r("unscopables"),s=Array.prototype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),t.exports=function(t){s[a][t]=!0}},3855:function(t,e,n){var r=n(2445),o=n(7455),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},4482:function(t,e,n){var r=n(2445),o=n(3406),i=r.String,a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},3410:function(t,e,n){"use strict";var r=n(2445),o=n(6981),i=n(5633),a=n(2048),s=n(7065),u=n(1977),c=n(9

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90678
Category:	dropped
Size (bytes):	32811
Entropy (8bit):	7.993115726308211
Encrypted:	true
SSDEEP:	768:Tu4jwkrxI2adXpo9SSwpmUPieDFpfy2Ky4lS4ru4r0r:300CfRpFpmAieDFpfBbWbru4r0r
MD5:	BCD68C8A4F1BB13B272E02FDA0EB5460
SHA1:	57C81EE13D027556D54744C9246226E1E85C211C
SHA-256:	25D5832DE46E5170761BA826342655D7C5550451332E4086EC366E79D359BD51
SHA-512:	0D70D7476653949F79CC67897F9F36E6B2F503E5C308C59D0C349B841BC2A27CD6408ACB272568CCA6B593AF5060F93FADD217D1677DE0E897608BA3BBFB0493
Malicious:	false
Reputation:	low
Preview:	...........kW.H.?..\|.[g.[...$..Q..B&....e.a.....F.H2.`..S..Z.H..>..5..Z....U.U..~m.^.Yk..d..V.L..2.4i.2..\.V..q..%....G..?..Q..=.u..'..&.G...?y........N.h.z....h...Q...\N'.ky:.F.......2..2)...$..9...j-.G.Ag6..........mos.G..<...~".(....2.Eg.Kq.l6.M.....L....L..,i.....".0.L..DK.\|.d.....;..>QS....r/e...O.gq.Ps./..4...ZA...c.O...[...f......"..4..{......,.b.@.6d2.i..{....&..>.......Q......Q.4.W.....!.'...~...J~.QrF.=;.W2#<i...z..N..$...,N..z.P.....3...'..".h.yG+......>.^.....k.Y:.Y...N..............B...S......5r.E#.........O.t...I..~...3.4%.G.....I........(M/b..*.....SB.3Y......I. .,E.?..i.s.s...$?..f....?.$WLS".M.....{.=.P.~~y.1..uZ2..=!.U.`.s.....n.c...x......O.3B...q...r........).D.z..?.H.HCo...$..<..{./.a.ei..73)F...+"..Q&.JbJ..M..n.$.w.\|.:1Y.....OJ...&..t.:..<M.kk^....NL8..i6,w....,.....y...0...#j;.C..6.%$..o}.A.q-..0.O..g..U..[]j.:.'a...C...2.x..50.\|..}gBlg..i4=<..S...eA.P.S....L.&.Z.f]k.YA@.J......._.!I.k-.L.....XP....{.....i.

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23170), with CRLF line terminators
Category:	downloaded
Size (bytes):	23634
Entropy (8bit):	5.766044957708789
Encrypted:	false
SSDEEP:	384:HTRY1bHIEsQdsQvZxyF1Aw8B7Nv0edjuDNaFTLLb2M/zvyMEZWpV:1Y5H9yF1IBBdq5yF/2dW
MD5:	A77377D3D6C1DA8BA668B7D17291A8A2
SHA1:	D752EBF935E29E064B7690092F0D3530AF24568C
SHA-256:	06B546B25621F5293ED5E3C3EF44A7AEB5FBA1C27ACEF0250E294FD1166D8826
SHA-512:	4269ECB372BBD2FB6003AD677858F6143A9EEA9E2F4890CDEF783CB5304DFD3CC63BF88B38C022C361B725197C396336774D63F01AC0021643395B33174EC662
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/?session_id=294e5d60c08b46249616ee6efd5a4d72&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>var localTarget='https://fpt.live.com/',target='https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&',txnId='294e5d60c08b46249616ee6efd5a4d72',ticks='8DCE04EE6685AE5',rid='437d43c4-f033-81b7-0c36-5bc9b2ab6635',authKey='taBcrIH61PuCVH7eNCyH0MJojnuUODHcZ6x9WoxhgCl3ZVINWhZL3UsLvpEO%252fzBrbsQ%252bAEjr2FJ1Te0bL3CGjI8W7MCFf2u2eMPHurXgN2Eno7tFU8RRBZp4XjLsfPnPv2NdomMVTFdeBiw5tzFjBysgjPKsY63ZQe9VxLFznLXOMHGmESAAc8ZFjBqlOPEvHDtTV8b8IWHlUSyDVhgAaY6Bze8QRzaYwzsgAVhiR81oDfZp6h35KUtrodjEWkXQU%252fNWZyXxHv8JIkXnVflTS%252fCAXyLMP%252b8qjtcA%252fuAqo86uJ6Pcvw3JDHe3VZL95sry',cid='33e01921-4d64-4f8c-a055-5bdaffd5e33d',assessment='',waitresponse=true,bbwait=false,commonquery='&PageId=SU',lsInfo=true,splitFonts=false,noFonts=false,UCH=true,PTO=100,rticks=1727590865743,ipv6Url='',txnKey='session_id',ridKey='id',lskey='MUID';(function(){function w(){var i=0,n;return t&&t.length&&(i=t.length),n="",wind

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17028
Entropy (8bit):	7.926562320564401
Encrypted:	false
SSDEEP:	384:7wixC+iG9rj5+kgbLPcAmxOkpJIhI9CvaMo05vCf9MRRLMk5K/jk:sifiG2tvXmxHbIhlo05KlGRaY
MD5:	DDCB4FCA39CCADCDF6C1FE2E1F717867
SHA1:	88238D53920F32AF37A802A5E6BFEEC3B1E6F75D
SHA-256:	097DF2DFA3781F1AEDB631C968D04D8152D7C7FA8E92BC91E233B3000E2F34BB
SHA-512:	316574E565EF67B97E13D0BF01CF4AFA8E0E9CF0748768CE4AE6BBB81352685A6E027EADBC083D2B632C412C950E65963E6EA98FE4CE7692C0AE0B6D956D3D37
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...B.IDATx..Y.mWU.W.7.A.e.Z..H.R.F.......$!....iH..4...T@..{i.A.....M..... .XP6eaB..R% ...Bs.o.0N..w...Zkvk..j.>g.}.^...c.1O...?..K.I'..J..<.c..fX!..N.m5...!.O-.=....p/....B.m_..o..........7.{..............]..~...C.....J..g..bI.C.....@&.7.}...u.RYs.J_.P_..j.....J...%..}.{..)}o,....\|...2iil+1.n:.W.b.I@. ......q/........},...K.....b.35f.....@t.C.H..f.....X8...qXA5W\mG..78..E.Wjm..j.C.E.....L.!e...}..... .FKi......!........t.;.s:8.P....9...H@....I! ...lp....`...".#.... .d"......=eN.nNcMUu......=.l......a.@...KY...^.....D..........=..<%&..}...P.HK.CE...0...R1..r..#h.5...)....z.B.....7.DH....KE...ha)....Z.=........)bZH.X.._...)........HK.a.Pn.X1Eh.....o.B......k...2....`..v.O.=...]..Y.!..:R.:......G@jg.q.[b.....)].O.....jm...q.c..*...=B...\|.........%....x.Bc..[.....r.....4......R.}......R...6.I..W..!...8K...:..U.. .3ZH...t.e..f\.(...y>k+.AH"..K.GjI!....J.}...HK..&..%.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56015)
Category:	dropped
Size (bytes):	56066
Entropy (8bit):	5.400548167770734
Encrypted:	false
SSDEEP:	768:z5kvKvdOyaupr7qkUrjEHQ8E5D5m+0Cal/pSl1JEW+zxqJWMKT1M2kZs:dDvZyk2AeBwl/pSl3I9yKJ
MD5:	449A9DEF2F0C6FC3B72C71164A97BDA3
SHA1:	25852714E23804A5500D693786CA8254025EE205
SHA-256:	220F5BD08E467A31A10A9CA1548E3580CEEB6064EAFC047ACFE35C2589BEC54F
SHA-512:	6E294FDD22793F50FB1541773BD1120BAD31108CC7EDD5F951438EB55F13A0E1574A8042750BC23BF2522AAC2F4D406322861BD10D6951D9ED30F98C16DDD274
Malicious:	false
Reputation:	low
Preview:	!function(){var t={8488:function(t,e,n){var r=n(2746);t.exports=r},3104:function(t,e,n){var r=n(7273);t.exports=r},6564:function(t,e,n){var r=n(2445),o=n(3478),i=n(7269),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},5719:function(t,e,n){var r=n(2445),o=n(3478),i=r.String,a=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1313:function(t,e,n){var r=n(4486),o=n(6635),i=n(9783),a=r("unscopables"),s=Array.prototype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),t.exports=function(t){s[a][t]=!0}},3855:function(t,e,n){var r=n(2445),o=n(7455),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},4482:function(t,e,n){var r=n(2445),o=n(3406),i=r.String,a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},3410:function(t,e,n){"use strict";var r=n(2445),o=n(6981),i=n(5633),a=n(2048),s=n(7065),u=n(1977),c=n(9

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (918)
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	5.4604704891374
Encrypted:	false
SSDEEP:	24:hY/LLuvW9BokgrY7cMdhwCBie46Tz1QqIJIzcq9X5wXR5viRX4j:bCo5Y73hwCd4olUItp5wrNj
MD5:	5DC258F6742F6D22A4CD80F50926ED70
SHA1:	2925F965C31990E0F883E2E885A3D57056168DCC
SHA-256:	3B8D3C93FD78C24F4C175C8515E4A5DF79AEE536AF4CED58BA078EA591569EAC
SHA-512:	BB63B3078587A823CCBB2314EFF3CCC16B20A01AC717CE37289DA8B5118E5053F867CE62256CC1C9466A7E2CBF60C854F4DEA68A060D67CC51BAAB17179E140C
Malicious:	false
Reputation:	low
URL:	https://msft.hsprotect.net/index.html
Preview:	<!DOCTYPE html>.<html lang='en'>.<head>. <meta charset='UTF-8'>. <meta name='viewport' content='width=device-width, initial-scale=1.0'>. <title>Human Sensor Script Iframe</title>.</head>.<body>.<script>. var a=["_pxvid","_px3","_pxde"];function b(a){var b=new RegExp("(^\| )"+a+"=([^;]+)"),c=document.cookie.match(b);return c?c[2]:null}function c(a,b,c){window.parent.postMessage({type:"cookie",name:a,value:b,expires:c\|\|new Date(Date.now()+31536e6).toUTCString()},"")}function d(a){var b=/^([^=]+)=([^;])/,c=/expires=([^;]+)/,d=a.match(b),e=d?d[1]:null,f=d?d[2]:null,g=a.match(c),h=g?g[1]:null;return{cookieName:e,cookieValue:f,expires:h}}function e(b){var e=d(b);-1!==a.indexOf(e.cookieName)&&c(e.cookieName,e.cookieValue,e.expires)}function f(){try{var a=Object.getOwnPropertyDescriptor(Document.prototype,"cookie")\|\|Object.getOwnPropertyDescriptor(Object.getPrototypeOf(document),"cookie"),b=a.get.bind(document),c=a.set.bind(document);Object.defineProperty(document,"cookie",{get:fu

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65324)
Category:	downloaded
Size (bytes):	160403
Entropy (8bit):	5.078465636014381
Encrypted:	false
SSDEEP:	1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H
MD5:	3AFE15E976734D9DAAC26310110C4594
SHA1:	4F14A09A606C99A11F8FDA15564EF66F70402826
SHA-256:	680AF6669ABC319F9803F0FA26D443DF1B6BC29133D88A8E4BEA560FFED7288C
SHA-512:	ACED925C428148809AFC07F28442B966A58508EA24D6B7203D87C63AAB57DF93B28AB68183A5DAE0D9C12705E0A484685DE5A370099C42788C869DB686D0DCEA
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.0/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.5.0 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors. * Copyright 2011-2020 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29888, version 0.0
Category:	downloaded
Size (bytes):	29888
Entropy (8bit):	7.993034480673089
Encrypted:	true
SSDEEP:	768:b2epE/P8HSbsbNl+GfEMuHyS4aAyoVfszfHS1W:6eSkgsbGGanzAjIyg
MD5:	E465F101F881B07CCFBB55D51D18135F
SHA1:	0D76B152EA1AE4AA68DB36DCC7BD204ACDC571D3
SHA-256:	6F5EBFD0FC9A520ADCA234FDD34B4DFBEB106942A6F44E65FC1AC54F7D2D6498
SHA-512:	2C1F730DB5108DDE4731F22838AD7EEF4D6698ED5EA0C0951B81B21722DF8051623923672C46F9397F81E74741CDEC794F03AAC37E532D1223A1A1CE448C73AA
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/fonts/support-icons/mdl2/latest_v4_70.woff2
Preview:	wOF2......t........X..tb.........................`..`..6...Y..... ....6.$..,.. .. ..s. ..S."..`...@.."..........!!.T5..?.........#t..7. .. ~"?A..A...4./..}.'.D.8.E......C......T..o.......l.UJ..SB...U.D6..W..uV.j,...+.>"N...}.&E..P~....z..w...Z".k...S:..t.7.fA.ic;%HZi...W.....w...I.p..........=>....) X ....@B......R ..P..$H.....h.{,..X..l. ..uY.w.Kc..+........r.H....... .....!....7$.b......@(Mp..,."z..(......V....y.E..w\...n./...&...+...R.......\~d,.....S..r%.s.s.......h...:.@.!h..(.< .@..0.P2H..!..r.6..V.r.:..)T.9T..n......;....+a...).L+....eX....\|.x...$]hS....+e+ HK.H'Q..RJ..X...}.....l....=S.G.e.{..I%9.1.O~k....@.$.{.M^.......~z...2...r.]b..[......(.H... ...z.)...&....9..$.Q1F...1......7C..UJ...T..F....Z..K.......F..&L0c...p..N8..g...W\...q........Oz..O./......#..... ..L0B.A(..#..#..D..(..M4b.A,..`A.q.'..$ .D$..d..B.RIE.iH'..d .L.....M6r.A..3......PH!.(B1.(......2.S..*PI%..B5......:.S....H#.hB3.h......6...:.I'..B7.......>...+V.0.A.1...

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (503)
Category:	dropped
Size (bytes):	558
Entropy (8bit):	4.98634955391743
Encrypted:	false
SSDEEP:	12:c83DOkFYerjD6tD7fgu1M+WqQRxsZAsDFYAWCyQPO:cmZr6t/zpeT/oWCyaO
MD5:	A3BC5418F2834309CE2918B15F3B8EEA
SHA1:	62BA2712C6D4960F1057E103F6E1F3C95F2C701B
SHA-256:	B2B62643A7C4FE4A4E12934AD819F0293CC00181B78D8091AFFFF3617CEB96B1
SHA-512:	460E22E36E93BEC194D00D47754108539D2E54FF59D4293EEC25463BC3D642879C10D9BBFD881BBE5EC244819F325C422B6D7A7504000BBCE432E4D2A08FB58B
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function e(e){return document.querySelectorAll(e)}function t(e,t){e.remove(),t.style.removeProperty("display")}window.addEventListener("load",(function(){var o,r=e(".ocpSectionLayout .ocpSection"),n=e(".ocpSectionLayout .shimmer-effect");if(r.length===n.length)for(var i=0;i<n.length;i++){var c=(o=n[i],Number(o.getAttribute("shimmer-delay")));setTimeout(t,c,n[i],r[i])}else n.forEach((function(e){e.remove()})),r.forEach((function(e){e.style.removeProperty("display")}))}))}();.//# sourceMappingURL=shimmerExperiment.Main.min.js.map

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26288, version 0.0
Category:	downloaded
Size (bytes):	26288
Entropy (8bit):	7.984195877171481
Encrypted:	false
SSDEEP:	768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/
MD5:	D0263DC03BE4C393A90BDA733C57D6DB
SHA1:	8A032B6DEAB53A33234C735133B48518F8643B92
SHA-256:	22B4DF5C33045B645CAFA45B04685F4752E471A2E933BFF5BF14324D87DEEE12
SHA-512:	9511BEF269AE0797ADDF4CD6F2FEC4AD0C4A4E06B3E5BF6138C7678A203022AC4818C7D446D154594504C947DA3061030E82472D2708149C0709B1A070FDD0E3
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff
Preview:	wOFF......f........D........................OS/2...X...H...`JM.FVDMX.............^.qcmap..............9cvt ...4... .......fpgm...T.......Y...gasp...D............glyf...P..U5.......head..]....2...6...Chhea..]........$$...hmtx..]..........ye'loca..^............Gmaxp..`.... ... ./..name..`....8....]..Rpost..f........ .Q.wprep..f$........x...x.c`.Pf......:....Q.B3_dHc..`e.bdb... .`@..`......./9.\|...V...)00...-.Wx...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...mL.U.............9.x.`[...&BF@X...V.h.Z..h......`n....[..U

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3840 x 2158, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1294919
Entropy (8bit):	7.99572137698945
Encrypted:	true
SSDEEP:	24576:cdItvCo7fHceODSQoMo40ijTJhhwIigxdjhINHM74D0gzsFWNvyUII:cdQCo7fHwS1MkiPhwgxdNINH50gzsgdh
MD5:	E812C68FA007098DED6DD384B2C22FD7
SHA1:	C25647DEF1A2BC089043A1D4EBA8B524F9D7EDFB
SHA-256:	24C68A968E99D841F446D6953D3EB15109B286DE77FBBAF60A0577375D0D9A16
SHA-512:	032A72D5061274B214FD85EBA7ABE89203FC024BAA1C09C52CD9E91EF4D615192777774ACAE159E1EA0EA658F22CBF684572F90C3B2ED40F2C4F7179BC359C9D
Malicious:	false
Reputation:	low
URL:	https://microsoft.biosency.com/assets/img/background.png
Preview:	.PNG........IHDR.......n......b.....NzTXtRaw profile type exif..x.W[.$'....>....qxF..>.S...k{7.]1U..@.).&..<...Hk.Y..VJ./........)f..~.~........g....'u.....4..>=..D...>..l...I...)?..}..i...x&..@w...o......C.KK.Pb.R..^.....S.)U..gO9...z&.!_.}......{+\|g_../.s.F.o\..#4~.A........#..A.5.$....}..\.hy"..~1d..(O.Y.U.'hW....=NH....F.UN.L.:....4.b....'d1.B.......E.kjiAAN.wH.f~.B.n..&)V^..L....?^..:....L...LHOW`.......1...+]..~]...S`!T..8...=.;......:'..<o.Q....am.3..@,.....\...B...9e.P.Dx.I.)....mm\|S..pa3.6A.I%Uh.R.X9..fE.uI.E.H....Tr.RJ-V.zM5W.....I......7n.5PZi.ik.w...u..1..2x....2...F......2...f_..B.Xe....)lT.......v?...N>r.GO;......o.F.j.J..V..P.k..r"....LP....h6.R.l.f.1.B.N.i...b.0ob9...C._.-...n._.....P.@..u..j.....,4NcB....q..rz.2W.x.^..[M........<....\..j.h.......x....a}..\..:7....R.B.....4. [.{.abpdfTPx...K.n..P......mQl.i..@-....%.,..F.</./+".;......rL......L #.E7j.-,..#.X....s,.......c..<@...@=....e.L...Kn...@..af..0....f.A!s=.*.Jo..4.%..,..^xR..

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 262 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6143
Entropy (8bit):	7.918747274282237
Encrypted:	false
SSDEEP:	96:giqNEZwhaB2uUnZFiegJzFUAgn3KLQSKr0GWYOnRs4CFbHdKiAlQhIaDe8mbUvEZ:Iym0B2vWegA7n3Ksp4GWT9UbOoXa8mbJ
MD5:	CCA42A6DD7E8378D54197303C9B94BD1
SHA1:	4D956D4A7049610D6728557695A2B40D71C24069
SHA-256:	3806A156470D2669E497B39DCD453A1F69CA74D5A1AB69EAB755185C0EFB6A88
SHA-512:	560D18D5C0DE6B86B1338ACC2778D633C612357AFB5ABC0302BBE469E435125DCBBC99D0C7B95B4BB3899187459245270AD0A19C4B2837F68709962FDD16CA0B
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/0b1fe818-4ce3-46e9-8851-111cec3c540c.png
Preview:	.PNG........IHDR.......`.............sRGB.........gAMA......a.....pHYs..."..."........IDATx^...UU...>gf...` ......"4......f..Er....(" ...\|!O..r}.$..J...... `X.(x......9..[.....C....b.......k...0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0.....B\|p..Y..y..0......R.........9..........l..ZF. ....`....>.0.H.c.y.)]2.uY.0....6......"o..7............D..(.cA.6..../....a@...BX...aP...sS.QBP...Ql<3.U.H!(.$........8.I.QD.8.....R.u. ..#H.q#.PW..u...0....Z....s..?.S.L...7.I.&u.6lX..6>..1.!..<8..w.F.......................r:..k..6.G...3&L.P.~d.)......tlfFlK[.J.[3{.^......z+.O.iA...........-r.5....u]MM..!;;;.....g.9.e8.#G...{K]]]$N#)..8p...3f...c.v.F..222N...~...:o..W.c..]QQ......3.............gk...'..!./.N$...6...E.3...?.?.....-s..f...{(e.Q..s\Dt..\|..........\....................i.j}.G...Z..}\|^^.w0..8.o.=.U..>.A...}..Q.W^.P./...e...^[[.[XX..v..].>.`....8.k..%.."NWj.."AF.\|......g..3'.2''.>..w.{3g.....^}.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30651)
Category:	downloaded
Size (bytes):	30703
Entropy (8bit):	5.276524052892625
Encrypted:	false
SSDEEP:	768:u2t2k0SMB/2ZsJIjrAWJdvgmfQFc6mjVqMP62A86uIz3yR:ueh0S0/ks2JdImYFcw662A86vzyR
MD5:	CCA58D6BF875D0CE4EA493CA26386A89
SHA1:	CF87086E72249F7AD2D687D7BAFA90E1E44960B7
SHA-256:	7780D5D6323B0EAF447C4DF757470A3433035F8F5D00EBDB33F49F5CCCEBFE11
SHA-512:	E98BDF460BC6C01216B4E128B8D033399F227B7112BCA8554F0F937231F8E3CB8848A9EA81FFFD0F987BD7CF0F037B834B93E4F898444241C93000465891ADA7
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/meversion?partner=SMCConvergence&market=en-us&uhf=1
Preview:	window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24228.4","mkt":"en-US","ptn":"smcconvergence","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":true,"telEvs":"PageAction, PageView, ContentUpdate, OutgoingRequest, ClientError, PartnerApiCall, TrackedScenario","instKey":"b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888","oneDSUrl":"https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","remAcc":true,"main":"meBoot","wrapperId":"uhf","cdnRegex":"^(?:https?:\\/\\/)?(mem\\.gfx\\.ms(?!\\.)\|controls\\.account.microsoft?(?:-int\|-dev)?(\\.com)?(:[0-9]{1,6})\|amcdn\\.ms(?:ft)?auth\\.net(?!\\.))","timeoutMs":30000,"graphv2":true,"graphinfo":{"graphclientid":"7eadcef8-456d-4611-9480-4fff72b8b9e2","graphscope":"user.read","graphcodeurl":"https://login.microsoftonline.com/common/oauth2/v2.0/authorize","graphredirecturi":"https://amcdn.msf

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90678
Category:	downloaded
Size (bytes):	32811
Entropy (8bit):	7.993115726308211
Encrypted:	true
SSDEEP:	768:Tu4jwkrxI2adXpo9SSwpmUPieDFpfy2Ky4lS4ru4r0r:300CfRpFpmAieDFpfBbWbru4r0r
MD5:	BCD68C8A4F1BB13B272E02FDA0EB5460
SHA1:	57C81EE13D027556D54744C9246226E1E85C211C
SHA-256:	25D5832DE46E5170761BA826342655D7C5550451332E4086EC366E79D359BD51
SHA-512:	0D70D7476653949F79CC67897F9F36E6B2F503E5C308C59D0C349B841BC2A27CD6408ACB272568CCA6B593AF5060F93FADD217D1677DE0E897608BA3BBFB0493
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js
Preview:	...........kW.H.?..\|.[g.[...$..Q..B&....e.a.....F.H2.`..S..Z.H..>..5..Z....U.U..~m.^.Yk..d..V.L..2.4i.2..\.V..q..%....G..?..Q..=.u..'..&.G...?y........N.h.z....h...Q...\N'.ky:.F.......2..2)...$..9...j-.G.Ag6..........mos.G..<...~".(....2.Eg.Kq.l6.M.....L....L..,i.....".0.L..DK.\|.d.....;..>QS....r/e...O.gq.Ps./..4...ZA...c.O...[...f......"..4..{......,.b.@.6d2.i..{....&..>.......Q......Q.4.W.....!.'...~...J~.QrF.=;.W2#<i...z..N..$...,N..z.P.....3...'..".h.yG+......>.^.....k.Y:.Y...N..............B...S......5r.E#.........O.t...I..~...3.4%.G.....I........(M/b..*.....SB.3Y......I. .,E.?..i.s.s...$?..f....?.$WLS".M.....{.=.P.~~y.1..uZ2..=!.U.`.s.....n.c...x......O.3B...q...r........).D.z..?.H.HCo...$..<..{./.a.ei..73)F...+"..Q&.JbJ..M..n.$.w.\|.:1Y.....OJ...&..t.:..<M.kk^....NL8..i6,w....,.....y...0...#j;.C..6.%$..o}.A.q-..0.O..g..U..[]j.:.'a...C...2.x..50.\|..}gBlg..i4=<..S...eA.P.S....L.&.Z.f]k.YA@.J......._.!I.k-.L.....XP....{.....i.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3467
Entropy (8bit):	4.1728956971816
Encrypted:	false
SSDEEP:	48:tUhmCdRSr+DYmK4bnFJuCFEHMITY2D6auKr5ZJjfI8jqbufPx:y/j//wCFMjOqfqqh
MD5:	4660D8BF6A57925F91E79A2AC8110E16
SHA1:	28545C8D747AF895C1E0CA02A24A4F3144BB3606
SHA-256:	6E4E91C46B64673DE4A40BC5051619F036F76E72670BAB107FB0942AD9083D9D
SHA-512:	4B91C17AB9CD88D5A879DEC37635C1B7C8F0669832CE2EF1A2C3E54228556DE73E95D62F67F1161A73968C401DC667065F247F7FE74270A169B5443E7DC4F052
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/me/mecache?partner=smcconvergence&wreply=https%3A%2F%2Fsupport.microsoft.com
Preview:	<!DOCTYPE html>..<html lang="en" >..<head>.. <meta charset="utf-8" />.. <meta http-equiv="X-UA-Compatible" content="IE=edge" />.. <meta name="viewport" content="width=device-width" />.. .. ..</head>..<body>.. <div id="body" role="main">.. ..<script>.. var INIT = "INI", SUCCESS = "OK", FAIL = "BAD", CACHE = "CACHE", MISS = "MISS";.. var Gets = [], Sets = [], state = "smcconvergence";.. var targetOrigin = "*";.. var SevenDaysMS = 604800000, TimeKey = "_timeOffSet_";.. window.addEventListener("message", handleCacheRequest);.. postMessageToParent(state, INIT);.... function handleCacheRequest(e) {.. if (validateArgs(e)) {.. Sets = e.data.sets;.. Gets = e.data.gets; .. targetOrigin = e.origin;.. state = e.data.state;.. try {.. if (window.localStorage) {.. ls = window.localStorage;.. for (var idx in Sets) {.. tr

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46090)
Category:	downloaded
Size (bytes):	141866
Entropy (8bit):	5.429983887489752
Encrypted:	false
SSDEEP:	1536:PyeDOMSQ6fTPRUbx3XCg/MJA5N4ii5WLeV5guLDY2Js0VgtWiTJmxyCXP3onrGGW:wMc1g/Mq5p1Mv+UyJbBw+Icwf
MD5:	2509D4C564AFC2C77D16BA6CA509B39F
SHA1:	201F1D80F8EEA9F5E8A7A7224CFF18674344F886
SHA-256:	D468D9F009E53FE1C47B9D6FDEFA3FF1A8C239973F11A6F892848E341EA17CCD
SHA-512:	C928C36D58BB0B2740E9BE3F3CA3F49624253F8DAD93BA7524E55F24CCCAF630E35FCA8C596CBCE50A0C1214C4986034FD3E26D98F759949C179C54009D5D93E
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	dropped
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34235), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	100769
Entropy (8bit):	5.246112939487446
Encrypted:	false
SSDEEP:	3072:nmwNxXC4Pn+lnTKxKdzW7I1m7H+8l9ut+EVe/EdnoEnsJ:mwFwTXqwe/EdnoEnsJ
MD5:	6FE3DD83A0D98BC1977F57EA33C37693
SHA1:	8DF606F40E4CC8C07CE929D5A82FD5304EAF4EB7
SHA-256:	A5268A183F2A091D2D17773997E89A25FC45CBD60E586EDF61F544FB85D6F6A8
SHA-512:	B81C2EB3BFA8ECF1FFCBB24E4A776CD2B083460A0AC53213EAF48997AC27BB20F49CEFF3A098AEBA33B3AD4F74CA86B5018AFE6689A260F011DF4249029CE78B
Malicious:	false
Reputation:	low
Preview:	MeControlDefine("meCore",["exports","@mecontrol/web-inline","@mecontrol/web-boot"],function(e,f,h){"use strict";var r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])})(e,t)};function t(e,t){function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var d=function(){return(d=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var o in t=arguments[n])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e}).apply(this,arguments)},s=function(){},i={},u=[],l=[];function v(e,t){var n,r,o,i,a=l;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(t&&null!=t.children&&(u.length\|\|u.push(t.children),delete t.children);u.length;)if((r=u.pop())&&void 0!==r.pop)for(i=r.length;i--;)u.push(r[i]);else"boolean"==typeof r&&(r=null),(o="function"!=typeof e)&&(null==r?r="":"number"==typeof r?r=String(r):"s

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13140)
Category:	downloaded
Size (bytes):	13185
Entropy (8bit):	5.103615284997676
Encrypted:	false
SSDEEP:	384:BM2clXr3IPs25mPFgd5vWya1xqoWUhkc8:B1clXMPs25tWya1xqoX+b
MD5:	016DF3491DC10129A0AE8E4D746365AA
SHA1:	57AF9988612B0E968EF05554589FF5495CE7B81C
SHA-256:	F44D4A6983333E0CCE8215E11484EEA375B9494A651B64B1363AFC9F7C8AD0E9
SHA-512:	1651C6AC44F3823C081D8578F608797C3B895D7EE66B433F9DDD3E7749C2A1E2994487801EFBF96E84C34A0858BF27AEBFC8FD1D4B10FC36CBDD2DBCC007AC9F
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/Article.Main.min.js?v=9E1KaYMzPgzOghXhFITuo3W5SUplG2SxNjr8n3yK0Ok
Preview:	!function(){"use strict";var t,e="click",n="ocHidden",o="collapsed",i=function(){function t(){var t=this;this.collapsed=!0,this.container=$("#supAppliesToList"),this.collapseButton=$(".appliesToOverflowControl.collapse").click((function(){return t.collapse()})),this.expandButton=$(".appliesToOverflowControl.expand").click((function(){return t.expand()})),this.reversedItems=this.expandButton.prevAll(".appliesToItem"),this.reversedItems.length>0&&(this.collapse(),$(window).on("resize",(function(){return t.handleResize()})))}return t.prototype.expand=function(){this.collapsed=!1,this.container.removeClass(o),this.reversedItems.removeClass(n),this.collapseButton.toggleClass(n,this.reversedItems.offset().top<=this.container.offset().top),this.expandButton.addClass(n)},t.prototype.collapse=function(){var t=this;this.collapsed=!0,this.container.addClass(o),this.reversedItems.removeClass(n),this.collapseButton.addClass(n),this.expandButton.addClass(n),this.reversedItems.each((function(e,n){ret

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3385), with no line terminators
Category:	downloaded
Size (bytes):	3385
Entropy (8bit):	5.293928956465786
Encrypted:	false
SSDEEP:	96:W4zB+C3yvyE14QHzsyTz4n/2yx/2ydgC2ZPXOMs9:Wy+C3y6k4QPItzqC2xXOMs9
MD5:	838B4CF03009164350BEE28EC54B1B28
SHA1:	7289901F526CD15984F080E40BBF8B8B6098EB73
SHA-256:	70C7CD74052E7BB3716548F7748B7FBF90C8BB39B0F688495B5D3D8974295A72
SHA-512:	48763334DD0DE579917B94CC53A7D002AFF1D5EF46D2D4BEA8991B05ACB355CD67A21495751EDCB89DFB0A6AE3F773419DAFF49A6DFE9EA48CC8E80BCBF99BF1
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/StickyFeedback/sticky-feedback.css?v=cMfNdAUue7NxZUj3dIt_v5DIuzmw9ohJW109iXQpWnI
Preview:	.supStickyFeedback{position:fixed;width:100%;bottom:0}.supFeedbackFullTextIsOpen{height:222px}#ocHelp{min-height:75%}#supWrapperToPreventFeedbackFlickering{min-height:59px}.ocSmartFeedbackBegin{height:38px}#supFeedbackWrapper{background-color:#f2f2f2;max-width:none;z-index:10000}#supColumnWrapper{padding:11px 0 10px;border-bottom:1px solid #cecece}#supDisableStickyFeedbackButton{position:absolute;top:0;right:15px;font-size:1.4em;text-decoration:none}html[dir=rtl] #supDisableStickyFeedbackButton{left:15px;right:auto}html[dir=rtl] .ocFeedbackButton{margin:12px 0 0 5px}html[dir=rtl] .ocSmartFeedbackReply{text-align:right}#ocMainContent{min-height:100%}.ocFeedbackButton{min-width:62px;height:28px;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue",Helvetica,Tahoma,"BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:15px;font-weight:normal;color:#313131;display:inline-block;text-align:center;text-decoration:none;border:1px solid transparent;background-color:rgba(0,0

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 08:20:38.394674063 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 29, 2024 08:20:38.394674063 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 29, 2024 08:20:38.707262993 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 29, 2024 08:20:46.675019979 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:46.675076962 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:46.675144911 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:46.687465906 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:46.687486887 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:47.466898918 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:47.466985941 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:47.473748922 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:47.473767042 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:47.473977089 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:47.478899956 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:47.479224920 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:47.479233980 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:47.479502916 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:47.523412943 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:47.653165102 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:47.653296947 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:47.653428078 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:47.671227932 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:47.671260118 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:48.050159931 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 29, 2024 08:20:48.110776901 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 29, 2024 08:20:48.127319098 CEST	49716	80	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:48.127624035 CEST	49717	80	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:48.133744955 CEST	80	49716	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:48.133770943 CEST	80	49717	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:48.133865118 CEST	49717	80	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:48.133869886 CEST	49716	80	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:48.134026051 CEST	49717	80	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:48.140361071 CEST	80	49717	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:48.439654112 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 29, 2024 08:20:48.793349981 CEST	80	49717	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:48.827174902 CEST	49718	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:48.827203989 CEST	443	49718	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:48.827277899 CEST	49718	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:48.827466011 CEST	49718	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:48.827481031 CEST	443	49718	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:48.902688026 CEST	49717	80	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:49.461827993 CEST	443	49718	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:49.468113899 CEST	49718	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:49.468137026 CEST	443	49718	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:49.469067097 CEST	443	49718	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:49.469204903 CEST	49718	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:49.480612040 CEST	49718	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:49.480678082 CEST	443	49718	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:49.481148958 CEST	49718	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:49.481169939 CEST	443	49718	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:49.533133030 CEST	49718	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:49.729007959 CEST	443	49718	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:49.729029894 CEST	443	49718	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:49.729072094 CEST	49718	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:49.729095936 CEST	443	49718	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:49.729110956 CEST	443	49718	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:49.729145050 CEST	49718	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:49.729168892 CEST	49718	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:49.731476068 CEST	49718	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:49.731499910 CEST	443	49718	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:49.962419033 CEST	443	49705	173.222.162.64	192.168.2.6
Sep 29, 2024 08:20:49.962522984 CEST	49705	443	192.168.2.6	173.222.162.64
Sep 29, 2024 08:20:50.391593933 CEST	49721	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:50.391638994 CEST	443	49721	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:50.391760111 CEST	49721	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:50.410077095 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:50.410119057 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:50.410186052 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:50.411698103 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:50.411734104 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:50.411864996 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:50.461817980 CEST	49721	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:50.461828947 CEST	443	49721	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:50.484932899 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:50.484944105 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:50.485352039 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:50.485377073 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:51.470179081 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:51.470236063 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:51.470303059 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:51.474375010 CEST	49726	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:20:51.474432945 CEST	443	49726	216.58.206.68	192.168.2.6
Sep 29, 2024 08:20:51.474513054 CEST	49726	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:20:51.475039959 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:51.475054026 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:51.475982904 CEST	49726	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:20:51.476001978 CEST	443	49726	216.58.206.68	192.168.2.6
Sep 29, 2024 08:20:51.895127058 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:51.899633884 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:51.899662018 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:51.900588989 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:51.900667906 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:51.903537989 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:51.903626919 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:51.904618979 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:51.904627085 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:51.910573006 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:51.910909891 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:51.910928965 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:51.911906004 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:51.912003994 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:51.913184881 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:51.913244009 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:51.913714886 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:51.913722992 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:51.955169916 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:51.955302000 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:51.956588030 CEST	49727	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:51.956615925 CEST	443	49727	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:51.956933022 CEST	49727	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:51.964631081 CEST	49727	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:51.964641094 CEST	443	49727	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:52.022942066 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.022980928 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.023042917 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.023051023 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.023646116 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.023685932 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.023713112 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.023739100 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.023744106 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.023787022 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.024364948 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.024399996 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.024410963 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.024414062 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.024470091 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.024473906 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.027740002 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.027915001 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.027918100 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.052747011 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.052789927 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.052887917 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.052891016 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.052902937 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.052938938 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.052947998 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.052954912 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.052999020 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.053483963 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.053627968 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.053652048 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.053682089 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.053689003 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.053736925 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.057588100 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.057641029 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.057701111 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.057708979 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.082520008 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.085503101 CEST	443	49721	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.087017059 CEST	49728	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.087086916 CEST	443	49728	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.087234020 CEST	49728	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.087896109 CEST	49728	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.087927103 CEST	443	49728	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.088363886 CEST	49721	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.088386059 CEST	443	49721	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.088677883 CEST	443	49721	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.089255095 CEST	49721	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.089307070 CEST	443	49721	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.089565039 CEST	49721	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.091428995 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.091447115 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.091521978 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.092672110 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.092681885 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.095022917 CEST	49730	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.095038891 CEST	443	49730	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.095124960 CEST	49730	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.095679045 CEST	49730	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.095689058 CEST	443	49730	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.099952936 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.109826088 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.109883070 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.109975100 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.109981060 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.110052109 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.110083103 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.110100031 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.110104084 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.110142946 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.110167980 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.110172033 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.110203981 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.110236883 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.110241890 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.110295057 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.110930920 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.110984087 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.111011028 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.111035109 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.111063957 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.111068010 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.111087084 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.111681938 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.111710072 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.111732006 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.111736059 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.111778975 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.111783028 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.112262011 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.112287998 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.112324953 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.112360954 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.112365961 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.112384081 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.131403923 CEST	443	49721	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.143279076 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.143469095 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.143500090 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.143527985 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.143546104 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.143558979 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.143609047 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.143805027 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.143850088 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.143867970 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.143873930 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.143915892 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.144268990 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.144318104 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.144344091 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.144391060 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.144398928 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.144656897 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.144855022 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.144903898 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.144936085 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.144964933 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.144980907 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.144989014 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.145014048 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.145019054 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.145073891 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.145081043 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.145857096 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.145884037 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.145905018 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.145912886 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.145941973 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.145957947 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.145965099 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.146034002 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.160653114 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.160660028 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.196615934 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.196640968 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.196670055 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.196676016 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.196748018 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.196901083 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.197036982 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.197050095 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.197094917 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.197099924 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.197606087 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.197662115 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.197665930 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.197685957 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.197710037 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.197714090 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.197760105 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.197765112 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.197824955 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.197829008 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.197874069 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.198492050 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.198580980 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.198601007 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.198741913 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.198745012 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.199440002 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.199472904 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.199506998 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.199511051 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.199548960 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.199558020 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.199619055 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.199623108 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.199687004 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.200447083 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.200510025 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.200555086 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.200587988 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.200604916 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.200608015 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.200643063 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.201380014 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.201442957 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.201447010 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.201488972 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.233905077 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.233963013 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.233993053 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.234019995 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.234020948 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.234033108 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.234078884 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.234111071 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.234162092 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.234198093 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.234253883 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.234262943 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.234493017 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.234575987 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.234646082 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.234891891 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.234935045 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.234944105 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.234951019 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.234991074 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.235029936 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.235076904 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.235084057 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.235155106 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.235471964 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.235517979 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.235549927 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.235600948 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.235608101 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.235629082 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.235673904 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.247847080 CEST	49723	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.247864962 CEST	443	49723	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.278666019 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.278758049 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.283395052 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.283457041 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.283641100 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.283693075 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.283725977 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.283783913 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.283965111 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.284029007 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.284035921 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.284040928 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.284070969 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.284084082 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.284091949 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.284096003 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.284143925 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.284624100 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.284676075 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.284950972 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.285011053 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.285034895 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.285089970 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.285094976 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.285113096 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.285140991 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.285164118 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.285191059 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.285206079 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.285209894 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.285248041 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.285252094 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.285284996 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.285439968 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.321671009 CEST	443	49726	216.58.206.68	192.168.2.6
Sep 29, 2024 08:20:52.329649925 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:52.360207081 CEST	443	49721	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.360224962 CEST	443	49721	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.360263109 CEST	443	49721	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.360287905 CEST	49721	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.360353947 CEST	49721	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.361445904 CEST	49726	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:20:52.369868040 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:52.562571049 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.602745056 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.647214890 CEST	443	49727	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:52.647315025 CEST	49727	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:52.747797966 CEST	443	49728	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.753406048 CEST	443	49730	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.792742968 CEST	49728	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.803106070 CEST	49730	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.878344059 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:52.878366947 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:52.879112005 CEST	49726	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:20:52.879142046 CEST	443	49726	216.58.206.68	192.168.2.6
Sep 29, 2024 08:20:52.879484892 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:52.879551888 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:52.879889965 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.879924059 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.880259037 CEST	443	49726	216.58.206.68	192.168.2.6
Sep 29, 2024 08:20:52.880317926 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.880338907 CEST	49726	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:20:52.880438089 CEST	49730	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.880458117 CEST	443	49730	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.880832911 CEST	443	49730	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.881400108 CEST	49728	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.881436110 CEST	443	49728	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.881863117 CEST	443	49728	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.890472889 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:52.890546083 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:52.892337084 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.892410994 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:52.894162893 CEST	49730	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.894227028 CEST	443	49730	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.895345926 CEST	49726	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:20:52.895426035 CEST	443	49726	216.58.206.68	192.168.2.6
Sep 29, 2024 08:20:52.897437096 CEST	49728	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.897545099 CEST	443	49728	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.919980049 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:52.919992924 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:52.920403004 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:52.920691967 CEST	49730	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.921015978 CEST	49728	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:52.951205015 CEST	49727	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:52.951229095 CEST	443	49727	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:52.951502085 CEST	443	49727	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:52.963404894 CEST	443	49730	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.963409901 CEST	443	49728	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:52.963430882 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.029046059 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.029097080 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.029129028 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.029155016 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.029158115 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.029175997 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.029213905 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.029218912 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.029262066 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.029267073 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.029694080 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.029727936 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.029751062 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.029756069 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.029805899 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.029810905 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.032897949 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:53.032912016 CEST	49727	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:53.032943010 CEST	49726	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:20:53.032955885 CEST	443	49726	216.58.206.68	192.168.2.6
Sep 29, 2024 08:20:53.033170938 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.033194065 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.033725977 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.033780098 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.033785105 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.063112020 CEST	49721	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.063160896 CEST	443	49721	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:53.104705095 CEST	443	49728	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:53.104731083 CEST	443	49728	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:53.104795933 CEST	49728	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.104799986 CEST	443	49728	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:53.104882002 CEST	49728	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.105010033 CEST	443	49730	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:53.105031013 CEST	443	49730	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:53.105089903 CEST	49730	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.105091095 CEST	443	49730	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:53.105285883 CEST	49730	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.115514994 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.115549088 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.115575075 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.115597963 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.115612030 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.115658045 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.115945101 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.115994930 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.116166115 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.116532087 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.116559029 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.116585970 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.116607904 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.116612911 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.116653919 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.116658926 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.116738081 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.117207050 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.117276907 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.117305994 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.117335081 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.117351055 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.117355108 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.117408037 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.117413044 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.117490053 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.118068933 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.118127108 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.118158102 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.118170977 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.118175030 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.118226051 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.118231058 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.120240927 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.120292902 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.120296955 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.128547907 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.128570080 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.128578901 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.128609896 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.128628016 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.128629923 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:53.128650904 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.128662109 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.128686905 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:53.128711939 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:53.195708990 CEST	49730	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.195720911 CEST	443	49730	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:53.196436882 CEST	49728	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.196476936 CEST	443	49728	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:53.202164888 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.202192068 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.202212095 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.202233076 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.202238083 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.202296019 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.202299118 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.202333927 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.202408075 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.202414036 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.202471972 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.202682018 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.202688932 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.202752113 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.202755928 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.202786922 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.202843904 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.202847958 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.202893019 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.202894926 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.202902079 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.202950954 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.203340054 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.203402996 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.203433990 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.203486919 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.203490019 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.203516006 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.203543901 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.203571081 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.210930109 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.210937977 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.210953951 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.210978985 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:53.210983038 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.210992098 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.211008072 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.211050034 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:53.211078882 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:53.212387085 CEST	49729	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.212397099 CEST	443	49729	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.216579914 CEST	49725	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:53.216599941 CEST	443	49725	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.228240013 CEST	49726	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:20:53.321911097 CEST	49727	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:53.363398075 CEST	443	49727	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:53.508779049 CEST	443	49727	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:53.508857012 CEST	443	49727	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:53.508913994 CEST	49727	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:53.509411097 CEST	49727	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:53.509423018 CEST	443	49727	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:53.509434938 CEST	49727	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:53.509440899 CEST	443	49727	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:53.572371006 CEST	49731	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:53.572415113 CEST	443	49731	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:53.572490931 CEST	49731	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:53.572906017 CEST	49731	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:53.572918892 CEST	443	49731	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:53.749125004 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.749176979 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:53.749249935 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.749557018 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.749567986 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:53.788512945 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:53.788553953 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.788969040 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:53.789506912 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:53.789526939 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:53.821115971 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.821150064 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.821208954 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.853012085 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.853151083 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.853234053 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.853714943 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.853732109 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.853987932 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:53.854020119 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:53.883481026 CEST	49738	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.883513927 CEST	443	49738	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:53.883673906 CEST	49738	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.885406017 CEST	49739	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.885443926 CEST	443	49739	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:53.885512114 CEST	49739	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.886676073 CEST	49738	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.886692047 CEST	443	49738	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:53.887559891 CEST	49739	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:53.887572050 CEST	443	49739	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.236633062 CEST	443	49731	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:54.236721992 CEST	49731	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:54.241260052 CEST	49731	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:54.241272926 CEST	443	49731	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:54.241511106 CEST	443	49731	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:54.245326996 CEST	49731	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:54.287404060 CEST	443	49731	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:54.395347118 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.395718098 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.395725012 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.396677017 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.396740913 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.397209883 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.397252083 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.397401094 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.397406101 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.437448025 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.437714100 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.437735081 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.438035965 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.438988924 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.439038992 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.439197063 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.439657927 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.447846889 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.448200941 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.448249102 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.449310064 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.449376106 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.449973106 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.450045109 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.450274944 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.450292110 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.483413935 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.486958981 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.487274885 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:54.487293005 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.488526106 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.488763094 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:54.489484072 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:54.489556074 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.489809990 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:54.489831924 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.540210962 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.540263891 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.540296078 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.540328026 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.540359020 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.540393114 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.540401936 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.540414095 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.540452003 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.540821075 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.541209936 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.541239977 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.541269064 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.541296959 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.541297913 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.541309118 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.541342974 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.541364908 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.545036077 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.559494019 CEST	443	49731	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:54.559555054 CEST	443	49731	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:54.559638023 CEST	49731	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:54.599462986 CEST	49731	443	192.168.2.6	184.28.90.27
Sep 29, 2024 08:20:54.599488020 CEST	443	49731	184.28.90.27	192.168.2.6
Sep 29, 2024 08:20:54.601783991 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.601820946 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.601851940 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.601888895 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.601885080 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.601943970 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.601975918 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.602041960 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.602526903 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.602582932 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.602611065 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.602639914 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.602657080 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.602711916 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.606513023 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.606564999 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.606621981 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.606637001 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.609365940 CEST	443	49739	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.610008001 CEST	49739	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.610021114 CEST	443	49739	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.611056089 CEST	443	49739	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.611129999 CEST	49739	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.611941099 CEST	49739	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.612000942 CEST	443	49739	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.612149000 CEST	49739	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.612155914 CEST	443	49739	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.626632929 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.626676083 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.626729012 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.626739979 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.626871109 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.626907110 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.626915932 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.626919031 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.626976967 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.626983881 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.627171040 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.627501965 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.627563953 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.627593994 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.627612114 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.627624035 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.627648115 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.627679110 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.627686024 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.627743006 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.627926111 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:54.628341913 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.628410101 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.628441095 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.628456116 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.628463030 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.628489971 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.628514051 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.628520012 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.628576040 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.629174948 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.629240990 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.629291058 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.629297018 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.655276060 CEST	443	49738	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.655569077 CEST	49738	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.655591011 CEST	443	49738	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.656565905 CEST	443	49738	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.656626940 CEST	49738	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.657577991 CEST	49738	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.657634974 CEST	443	49738	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.657885075 CEST	49738	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.657895088 CEST	443	49738	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.674547911 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.674691916 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.674700022 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.694287062 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.694320917 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.694364071 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.694391012 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.694432020 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.694478035 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.694493055 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.694547892 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.694581985 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.694605112 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.694607019 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.694618940 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.694624901 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.694672108 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.695343018 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.695534945 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.695568085 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.695595026 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.695596933 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.695630074 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.695657015 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.696050882 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.696078062 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.696114063 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.696127892 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.696191072 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.696242094 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.696301937 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.696336985 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.696360111 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.696366072 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.696377039 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.696424007 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.697025061 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.697088957 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.697103024 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.713110924 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.713141918 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.713181019 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.713207960 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.713210106 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.713221073 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.713269949 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.713299036 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.713480949 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.713494062 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.713546038 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.713854074 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.713865042 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.713907957 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.713912964 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.714422941 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.714488029 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.714492083 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.714534044 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.714536905 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.714544058 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.714580059 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.714591026 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.714596033 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.714633942 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.715451002 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.715496063 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.715513945 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.715517998 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.715548038 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.715562105 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.715588093 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.715605021 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.715631008 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.716561079 CEST	49736	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.716571093 CEST	443	49736	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.735582113 CEST	49738	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.736025095 CEST	49739	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.773772001 CEST	49740	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:54.773808956 CEST	443	49740	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:54.773900986 CEST	49740	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:54.774662971 CEST	49740	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:54.774674892 CEST	443	49740	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:54.797362089 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.797458887 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.797454119 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.797496080 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.797525883 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.797554970 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.797586918 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.797619104 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.797645092 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.798248053 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.798306942 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.798329115 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.798341036 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.798367023 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.798665047 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.798743010 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.798754930 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.798787117 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.798818111 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.798830986 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.798857927 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.799432993 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.799474001 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.799504995 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.799515009 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.799544096 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.799561977 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.799618959 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.807234049 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.807260036 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.807286978 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.807362080 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.807411909 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.807476044 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.808517933 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.808540106 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.808600903 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.808610916 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.808639050 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.813972950 CEST	49737	443	192.168.2.6	104.17.25.14
Sep 29, 2024 08:20:54.814022064 CEST	443	49737	104.17.25.14	192.168.2.6
Sep 29, 2024 08:20:54.856261969 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.856282949 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.856291056 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.856307983 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.856314898 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.856337070 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.856383085 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:54.856408119 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.856457949 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:54.856482983 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:54.889847040 CEST	443	49739	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.889868021 CEST	443	49739	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.889911890 CEST	443	49739	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.889955997 CEST	49739	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.890008926 CEST	49739	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.892618895 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.892626047 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.892663002 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.892672062 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.892698050 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:54.892715931 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.892765999 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:54.896384954 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.896409035 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.896475077 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.896501064 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.896527052 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.897692919 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.897711992 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.897758961 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.897778034 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.897798061 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.897829056 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.898922920 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.898946047 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.898992062 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.899012089 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.899055004 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.920277119 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.920298100 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.920326948 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.920381069 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:54.920393944 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:54.920444965 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:54.964871883 CEST	443	49738	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.964891911 CEST	443	49738	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.964936972 CEST	443	49738	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.964951038 CEST	49738	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.964988947 CEST	49738	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.985955954 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.985985041 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.986030102 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.986062050 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.986093044 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.986453056 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.986463070 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.986486912 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.986496925 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.986517906 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.986531973 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.986551046 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.988689899 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.988745928 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.988764048 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.988786936 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.988816977 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.988830090 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.988833904 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.988841057 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.988859892 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.989058018 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.989082098 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.989109993 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.989116907 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.989136934 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.991059065 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.991080999 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.991122007 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.991141081 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.991158962 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.991656065 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.991681099 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.991713047 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.991724014 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:54.991744041 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:54.997534990 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.072494030 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.072518110 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.072561979 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.072597027 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.072611094 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.072837114 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.075546980 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.075566053 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.075614929 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.075638056 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.075669050 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.075686932 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.075891972 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.075912952 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.075989962 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.075998068 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.076045990 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.076174974 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.076194048 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.076273918 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.076286077 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.076294899 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.076358080 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.076652050 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.076684952 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.076720953 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.076729059 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.076752901 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.076771021 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.076971054 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.076989889 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.077063084 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.077070951 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.077128887 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.077475071 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.077496052 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.077554941 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.077565908 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.077647924 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.077672958 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.077702999 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.077712059 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.077724934 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.077771902 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.087846041 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.159219027 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.159239054 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.159286976 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.159322977 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.159346104 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.159358025 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.159401894 CEST	49739	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.159424067 CEST	443	49739	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.159559965 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.159585953 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.159615040 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.159625053 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.159650087 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.159661055 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.159751892 CEST	49738	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.159779072 CEST	443	49738	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.162281990 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.162307024 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.162364960 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.162375927 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.162405014 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.162422895 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.162866116 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.162894011 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.162934065 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.162942886 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.162952900 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.162971973 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.163233042 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.163254023 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.163288116 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.163296938 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.163306952 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.163569927 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.163594961 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.163625956 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.163635969 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.163654089 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.163685083 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.164663076 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.164689064 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.164730072 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.164745092 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.164769888 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.164784908 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.165261030 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.165287018 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.165318012 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.165326118 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.165366888 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.168515921 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.168740988 CEST	49734	443	192.168.2.6	195.181.170.18
Sep 29, 2024 08:20:55.168764114 CEST	443	49734	195.181.170.18	192.168.2.6
Sep 29, 2024 08:20:55.252237082 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.252259016 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.252360106 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.252388954 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.252480030 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.252504110 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.252538919 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.252547026 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.252557993 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.252588034 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.252748966 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.252768040 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.252801895 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.252809048 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.252820015 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.252844095 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.253123045 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.253145933 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.253192902 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.253199100 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.253223896 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.253235102 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.253496885 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.253516912 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.253565073 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.253571033 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.253592968 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.253617048 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.253648043 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.253655910 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.253664970 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.253691912 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.254151106 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.254170895 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.254208088 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.254214048 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.254230976 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.254231930 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.254241943 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.254251957 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.254270077 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.254276991 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.254298925 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.254306078 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.254322052 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.254343033 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.332931995 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.332957983 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.333035946 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.333070040 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.333172083 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.333195925 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.333230972 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.333249092 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.333262920 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.333281994 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.336020947 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.336040974 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.336111069 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.336131096 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.336153030 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.336173058 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.336350918 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.336370945 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.336410046 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.336417913 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.336445093 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.336466074 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.336616039 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.336636066 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.336674929 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.336683035 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.336703062 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.336720943 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.337174892 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.337194920 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.337235928 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.337244987 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.337270021 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.337292910 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.338217974 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.338238001 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.338284969 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.338298082 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.338314056 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.338341951 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.338574886 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.338602066 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.338635921 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.338644981 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.338669062 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.338695049 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.369462967 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.369890928 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.419567108 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.419583082 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.419644117 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.419668913 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.419718027 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.419897079 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.419912100 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.419958115 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.419966936 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.419986963 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.420002937 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.422782898 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.422797918 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.422838926 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.422858000 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.422879934 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.422899961 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.423115969 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.423131943 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.423177004 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.423185110 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.423254967 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.423604012 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.423619032 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.423659086 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.423667908 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.423711061 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.424047947 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.424063921 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.424104929 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.424113035 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.424341917 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.426140070 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.426156044 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.426211119 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.426223993 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.426273108 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.426295042 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.426317930 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.426341057 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.426347017 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.426371098 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.426387072 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.431876898 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.506424904 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.506443024 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.506503105 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.506531954 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.506577015 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.506788969 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.506803989 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.506843090 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.506851912 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.506876945 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.506890059 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.509680986 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.509697914 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.509769917 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.509790897 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.509835958 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.509911060 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.509926081 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.509958029 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.509972095 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.509998083 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.510008097 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.510278940 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.510294914 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.510343075 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.510354996 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.510425091 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.510776043 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.510792017 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.510837078 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.510844946 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.510893106 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.512676001 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.512690067 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.512746096 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.512769938 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.512885094 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.512991905 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.513008118 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.513055086 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.513062954 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.513089895 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.513109922 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.563329935 CEST	443	49740	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:55.563396931 CEST	49740	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:55.565337896 CEST	49740	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:55.565356016 CEST	443	49740	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:55.565597057 CEST	443	49740	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:55.567269087 CEST	49740	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:55.567323923 CEST	49740	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:55.567346096 CEST	443	49740	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:55.568094015 CEST	49740	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:55.593311071 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.593334913 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.593381882 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.593411922 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.593426943 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.593471050 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.593631029 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.593647003 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.593712091 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.593722105 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.593756914 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.596504927 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.596525908 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.596581936 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.596611977 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.596685886 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.596848965 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.596868038 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.596908092 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.596915960 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.596941948 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.596965075 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.597140074 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.597156048 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.597188950 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.597198009 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.597220898 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.597238064 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.597568035 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.597585917 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.597615957 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.597631931 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.597650051 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.597670078 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.599504948 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.599524021 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.599560976 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.599587917 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.599607944 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.599625111 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.599875927 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.599895000 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.599931002 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.599944115 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.599958897 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.599977970 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.611407042 CEST	443	49740	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:55.680073977 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.680102110 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.680143118 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.680171967 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.680201054 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.680219889 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.680388927 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.680406094 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.680464029 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.680471897 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.680497885 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.680510998 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.683259010 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.683283091 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.683330059 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.683353901 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.683365107 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.683417082 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.683598995 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.683619976 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.683666945 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.683677912 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.683911085 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.683949947 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.683964968 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.684016943 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.684029102 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.684065104 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.684258938 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.684277058 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.684314966 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.684323072 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.684355974 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.684438944 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.686286926 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.686302900 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.686352968 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.686378956 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.686439991 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.686585903 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.686604977 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.686647892 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.686655998 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.686678886 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.686691999 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.738770008 CEST	443	49740	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:55.739392996 CEST	443	49740	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:55.739461899 CEST	49740	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:55.743400097 CEST	49740	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:55.743417978 CEST	443	49740	40.113.103.199	192.168.2.6
Sep 29, 2024 08:20:55.743452072 CEST	49740	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:20:55.766907930 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.766925097 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.766985893 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.767011881 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.767069101 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.767241001 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.767257929 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.767291069 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.767302990 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.767318010 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.767337084 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.770093918 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.770111084 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.770169973 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.770190954 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.770231009 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.770385027 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.770401001 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.770435095 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.770437956 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.770447969 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.770481110 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.770488977 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.770512104 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.770546913 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.770709038 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.770721912 CEST	443	49732	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:55.770736933 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:55.770768881 CEST	49732	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:56.036844969 CEST	49744	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:56.036900997 CEST	443	49744	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:56.036976099 CEST	49744	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:56.037199974 CEST	49744	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:56.037209988 CEST	443	49744	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:56.458045959 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:56.458101988 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:56.458316088 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:56.458611965 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:56.458636999 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:56.693502903 CEST	443	49744	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:56.740911961 CEST	49744	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.029783964 CEST	49744	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.029805899 CEST	443	49744	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.030267000 CEST	443	49744	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.030926943 CEST	49744	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.030988932 CEST	443	49744	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.031377077 CEST	49744	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.075411081 CEST	443	49744	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.125642061 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.126082897 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.126116991 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.126455069 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.126751900 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.126815081 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.126904011 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.167409897 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.219125032 CEST	443	49744	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.219208956 CEST	443	49744	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.219284058 CEST	49744	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.220026016 CEST	49744	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.220046997 CEST	443	49744	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.226389885 CEST	49746	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.226437092 CEST	443	49746	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.226522923 CEST	49746	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.226862907 CEST	49746	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.226876974 CEST	443	49746	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.509644032 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.509675980 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.509691000 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.509789944 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.509840012 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.509860992 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.509927034 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.601855993 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.601875067 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.601993084 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.602029085 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.602072954 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.603652000 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.603669882 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.603732109 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.603739023 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.603796959 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.604657888 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.604675055 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.604724884 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.604737997 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.604775906 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.696453094 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.696470976 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.696547985 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.696561098 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.696599007 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.697268963 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.697283983 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.697354078 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.697360992 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.697406054 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.698126078 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.698142052 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.698187113 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.698194027 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.698231936 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.698242903 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.698961973 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.698976994 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.699017048 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.699023962 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.699057102 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.699064016 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.699966908 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.699984074 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.700027943 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.700036049 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.700067043 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.700081110 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.700896978 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.700911999 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.700948954 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.700956106 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.700993061 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.701396942 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.718616009 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.791759968 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.791783094 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.791858912 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.791891098 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.791893959 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.791912079 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.791934013 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.791946888 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.791961908 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.791970968 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.792004108 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.792403936 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.792429924 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.792459965 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.792465925 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.792491913 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.797115088 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.797172070 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.797194004 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.797203064 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.797230959 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.797568083 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.797586918 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.797621012 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.797629118 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.797646046 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.798211098 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.798233032 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.798260927 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.798268080 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.798291922 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.798487902 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.798506021 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.798548937 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.798562050 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.798574924 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.855032921 CEST	443	49746	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.855065107 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.855165958 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.855802059 CEST	49746	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.855811119 CEST	443	49746	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.856144905 CEST	443	49746	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.856973886 CEST	49746	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.857026100 CEST	443	49746	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.857619047 CEST	49746	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.881324053 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.881341934 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.881422997 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.881433010 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.883688927 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.883706093 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.883744955 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.883752108 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.883790016 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.884124041 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.884136915 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.884177923 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.884182930 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.884212971 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.884346008 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.884361982 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.884388924 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.884394884 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.884418011 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.884736061 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.884747982 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.884778976 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.884788036 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.884807110 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.885174990 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.885191917 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.885222912 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.885230064 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.885246038 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.885467052 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.885479927 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.885513067 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.885519981 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.885540009 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.886020899 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.886039972 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.886077881 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.886085033 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.886106968 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.899393082 CEST	443	49746	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.972317934 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.974059105 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.974087000 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.974133015 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.974147081 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.974176884 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.974195957 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.976305008 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.976320982 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.976402044 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.976411104 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.976459026 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.976623058 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.976638079 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.976671934 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.976680040 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.976712942 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.976726055 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.976912022 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.976928949 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.976963997 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.976970911 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.976994991 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.977013111 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.977387905 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.977404118 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.977436066 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.977442026 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.977468967 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.977480888 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.977715969 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.977737904 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.977787971 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.977796078 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.977828979 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.978015900 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.978033066 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.978068113 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.978075981 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.978099108 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.978117943 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.978415012 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.978435040 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.978466988 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.978475094 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:57.978502035 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.978511095 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:57.980278969 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.066375017 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.066390991 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.066447973 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.066473961 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.066508055 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.068802118 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.068816900 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.068870068 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.068878889 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.068912029 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.069348097 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.069365025 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.069395065 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.069401979 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.069432974 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.069448948 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.069612026 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.069627047 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.069663048 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.069669962 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.069698095 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.069711924 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.070106030 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.070131063 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.070156097 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.070162058 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.070187092 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.070205927 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.070380926 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.070396900 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.070429087 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.070436001 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.070460081 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.070477962 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.070744991 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.070760012 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.070794106 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.070801020 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.070833921 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.070847034 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.071408987 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.071424007 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.071469069 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.071475983 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.071501970 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.071513891 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.126416922 CEST	443	49746	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.126491070 CEST	443	49746	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.126534939 CEST	49746	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.127476931 CEST	49746	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.127492905 CEST	443	49746	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.158931017 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.158993959 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.159009933 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.159019947 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.159071922 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.161139965 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.161155939 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.161195993 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.161204100 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.161256075 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.161535025 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.161551952 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.161591053 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.161597013 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.161623001 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.161636114 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.161895037 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.161910057 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.161942959 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.161951065 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.161973953 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.161992073 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.162570953 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.162591934 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.162636995 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.162642956 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.162681103 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.162686110 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.162904978 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.162923098 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.162961960 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.162971020 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.162993908 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.163016081 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.163219929 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.163234949 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.163271904 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.163279057 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.163306952 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.163326025 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.163779020 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.163794041 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.163825989 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.163834095 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.163881063 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.163901091 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.253031969 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.253108978 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.253113031 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.253134012 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.253184080 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.253793001 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.253809929 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.253869057 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.253879070 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.253918886 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.254134893 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.254149914 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.254182100 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.254189968 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.254214048 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.254231930 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.254437923 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.254452944 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.254487991 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.254494905 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.254517078 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.254534960 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.255362034 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.255378962 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.255418062 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.255424023 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.255461931 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.255477905 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.255955935 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.255971909 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.256019115 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.256027937 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.256062984 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.256438971 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.256453991 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.256505013 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.256510019 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.256532907 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.256562948 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.256853104 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.256870031 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.256901026 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.256906986 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.256931067 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.256948948 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.345515013 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.345534086 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.345582962 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.345598936 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.345634937 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.345652103 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.346218109 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.346232891 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.346282005 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.346288919 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.346327066 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.346879959 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.346895933 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.346936941 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.346945047 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.346966982 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.346990108 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.347348928 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.347371101 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.347413063 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.347420931 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.347455978 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.347901106 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.347917080 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.347959995 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.347966909 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.347994089 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.348010063 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.348443031 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.348462105 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.348499060 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.348505020 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.348527908 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.348545074 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.348927021 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.348947048 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.348988056 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.348994017 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.349021912 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.349046946 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.349575996 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.349591017 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.349644899 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.349651098 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.349689007 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.438263893 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.438282967 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.438345909 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.438375950 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.438411951 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.438826084 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.438842058 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.438879013 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.438885927 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.438904047 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.438925028 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.439572096 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.439589024 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.439630985 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.439639091 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.439668894 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.439681053 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.440013885 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.440028906 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.440074921 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.440080881 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.440100908 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.440125942 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.440614939 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.440632105 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.440668106 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.440674067 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.440706015 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.440721035 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.441142082 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.441158056 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.441191912 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.441196918 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.441220045 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.441240072 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.441570044 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.441584110 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.441612005 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.441708088 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.441714048 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.441766024 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.442001104 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.442018032 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.442068100 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.442074060 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.442096949 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.442116022 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.531039000 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.531125069 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.531126022 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.531169891 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.531177044 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.531294107 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.531394958 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.531415939 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.531471014 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.531481981 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.531579971 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.532049894 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.532075882 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.532109976 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.532115936 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.532146931 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.532222033 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.532490969 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.532507896 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.532541037 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.532546043 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.532591105 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.532596111 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.532651901 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:20:58.532795906 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.535420895 CEST	49745	443	192.168.2.6	130.93.125.135
Sep 29, 2024 08:20:58.535434961 CEST	443	49745	130.93.125.135	192.168.2.6
Sep 29, 2024 08:21:02.226612091 CEST	443	49726	216.58.206.68	192.168.2.6
Sep 29, 2024 08:21:02.226684093 CEST	443	49726	216.58.206.68	192.168.2.6
Sep 29, 2024 08:21:02.226752043 CEST	49726	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:21:02.230489016 CEST	49726	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:21:02.230519056 CEST	443	49726	216.58.206.68	192.168.2.6
Sep 29, 2024 08:21:02.230731964 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:02.230782032 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:02.230849028 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:02.235691071 CEST	49754	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:02.235735893 CEST	443	49754	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:02.235865116 CEST	49754	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:02.237883091 CEST	49754	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:02.237904072 CEST	443	49754	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:02.238329887 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:02.238343954 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:02.887511015 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:02.936254978 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:02.969080925 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:02.969110012 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:02.972904921 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:02.972989082 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:02.977859974 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:02.978091955 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:02.978282928 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:02.978298903 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.019424915 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.082644939 CEST	443	49754	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:03.083054066 CEST	49754	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:03.083079100 CEST	443	49754	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:03.084069967 CEST	443	49754	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:03.084142923 CEST	49754	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:03.086177111 CEST	49754	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:03.086245060 CEST	443	49754	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:03.128875971 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.128937960 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.128947020 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.128978968 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.128998995 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.129007101 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.129018068 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.129097939 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.129101992 CEST	49754	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:03.129118919 CEST	443	49754	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:03.129136086 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.129189014 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.171586990 CEST	49754	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:03.214643002 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.214693069 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.214732885 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.214759111 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.214792967 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.215116024 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.216273069 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.216315985 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.216334105 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.216346025 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.216377974 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.216398954 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.300867081 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.300935984 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.300987005 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.301062107 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.301101923 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.301127911 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.301935911 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.301979065 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.302020073 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.302032948 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.302063942 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.302083969 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.303200006 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.303266048 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.303328037 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.303328037 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.303344011 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.303423882 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.304296017 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.304342985 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.304380894 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.304392099 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.304423094 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.304559946 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.387861967 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.387881994 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.387963057 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.388000965 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.388124943 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.388297081 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.388312101 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.388370037 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.388385057 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.388461113 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.388824940 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.388840914 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.388900042 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.388912916 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.388940096 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.388959885 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.389674902 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.389691114 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.389761925 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.389775991 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.389966965 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.390610933 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.390630007 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.390686989 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.390700102 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.390746117 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.390746117 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.391268969 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.391283989 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.391335964 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.391351938 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.391566038 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.391668081 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.391706944 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.391727924 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.391740084 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.391763926 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.391772985 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.391798973 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.391829967 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.393232107 CEST	49753	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.393266916 CEST	443	49753	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.954049110 CEST	49755	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.954106092 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:03.954319954 CEST	49755	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.954868078 CEST	49755	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:03.954886913 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.005745888 CEST	49756	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.005789042 CEST	443	49756	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.005861998 CEST	49756	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.006539106 CEST	49756	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.006555080 CEST	443	49756	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.007916927 CEST	49757	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.007952929 CEST	443	49757	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.008034945 CEST	49757	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.008207083 CEST	49757	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.008220911 CEST	443	49757	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.034929991 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.034967899 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.035022974 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.037393093 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.037417889 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.654263973 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.654617071 CEST	49755	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.654628992 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.654979944 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.655368090 CEST	49755	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.655433893 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.655584097 CEST	49755	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.656305075 CEST	443	49756	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.656481981 CEST	49756	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.656518936 CEST	443	49756	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.657557964 CEST	443	49756	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.657624006 CEST	49756	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.658037901 CEST	49756	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.658103943 CEST	443	49756	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.658886909 CEST	49756	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.658900023 CEST	443	49756	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.669167042 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.669696093 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.669706106 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.670706034 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.670823097 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.671406031 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.671458006 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.671947956 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.671955109 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.681940079 CEST	443	49757	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.682374001 CEST	49757	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.682387114 CEST	443	49757	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.683367014 CEST	443	49757	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.683423042 CEST	49757	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.683840036 CEST	49757	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.683900118 CEST	443	49757	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.684182882 CEST	49757	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.684189081 CEST	443	49757	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.703403950 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.708285093 CEST	49756	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.723597050 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.736315012 CEST	49757	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.773578882 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.773601055 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.773610115 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.773633003 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.773648024 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.773662090 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.773663044 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.773677111 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.773703098 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.773734093 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.799160004 CEST	443	49757	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.799392939 CEST	443	49757	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.799457073 CEST	49757	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.800930023 CEST	49757	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:04.800940990 CEST	443	49757	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:04.859371901 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.859400034 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.859447002 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.859452963 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.859507084 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.861020088 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.861035109 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.861107111 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.861113071 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.861212015 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.893146038 CEST	49764	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.893188000 CEST	443	49764	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.893296957 CEST	49764	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.896146059 CEST	49764	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.896163940 CEST	443	49764	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.945156097 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.945172071 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.945252895 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.945262909 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.945314884 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.946296930 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.946310997 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.946362972 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.946369886 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.947316885 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.947335005 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.947371960 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.947377920 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.947397947 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.947432995 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.948636055 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.948648930 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.948703051 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:04.948709011 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:04.948751926 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.032181025 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.032197952 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.032275915 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.032284021 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.032329082 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.032982111 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.032996893 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.033046961 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.033051968 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.033086061 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.033103943 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.033934116 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.033948898 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.033991098 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.033996105 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.034038067 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.035593033 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.035609007 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.035655975 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.035660982 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.035689116 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.035706997 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.036565065 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.036580086 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.036622047 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.036628008 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.036663055 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.036676884 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.037467957 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.037482977 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.037530899 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.037535906 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.037717104 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.039088011 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.039140940 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.039156914 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.039170980 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.039220095 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.069843054 CEST	443	49756	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:05.070247889 CEST	443	49756	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:05.070293903 CEST	443	49756	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:05.070338011 CEST	49756	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:05.070338011 CEST	49756	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:05.088434935 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.091984034 CEST	49756	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:05.092008114 CEST	443	49756	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:05.106447935 CEST	49758	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.106458902 CEST	443	49758	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.119724035 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:05.119744062 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:05.119760036 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:05.119801044 CEST	49755	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:05.119812965 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:05.119836092 CEST	49755	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:05.119863033 CEST	49755	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:05.205279112 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:05.205298901 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:05.205329895 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:05.205368042 CEST	49755	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:05.205383062 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:05.205394030 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:05.205410004 CEST	49755	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:05.205435038 CEST	49755	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:05.250617027 CEST	49755	443	192.168.2.6	13.107.246.64
Sep 29, 2024 08:21:05.250634909 CEST	443	49755	13.107.246.64	192.168.2.6
Sep 29, 2024 08:21:05.525490999 CEST	443	49764	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.525824070 CEST	49764	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.525835991 CEST	443	49764	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.526169062 CEST	443	49764	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.526582003 CEST	49764	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.526645899 CEST	443	49764	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.526747942 CEST	49764	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.567430019 CEST	443	49764	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.570331097 CEST	49764	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.628818989 CEST	443	49764	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.629215002 CEST	443	49764	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:05.633136988 CEST	49764	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.710277081 CEST	49764	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:05.710293055 CEST	443	49764	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:06.762847900 CEST	49766	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:06.762880087 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:06.762943029 CEST	49766	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:06.763151884 CEST	49766	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:06.763163090 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:06.775644064 CEST	49767	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:06.775688887 CEST	443	49767	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:06.775763988 CEST	49767	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:06.776128054 CEST	49767	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:06.776145935 CEST	443	49767	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.404480934 CEST	49768	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:07.404541969 CEST	443	49768	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:07.404639006 CEST	49768	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:07.405339003 CEST	49768	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:07.405359030 CEST	443	49768	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:07.418293953 CEST	443	49767	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.418888092 CEST	49767	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:07.418900967 CEST	443	49767	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.419210911 CEST	443	49767	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.419672012 CEST	49767	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:07.419708967 CEST	49767	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:07.419730902 CEST	443	49767	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.427592039 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.427808046 CEST	49766	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:07.427815914 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.428123951 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.428530931 CEST	49766	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:07.428581953 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.428735971 CEST	49766	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:07.475399017 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.526057005 CEST	443	49767	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.526165962 CEST	49767	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:07.526180983 CEST	443	49767	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.526550055 CEST	443	49767	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.526597977 CEST	49767	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:07.535156965 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.535176992 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.535200119 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.535242081 CEST	49766	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:07.535249949 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.535278082 CEST	49766	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:07.535299063 CEST	49766	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:07.624165058 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.624182940 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.624265909 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.624274015 CEST	49766	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:07.624315977 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.624325037 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:07.624332905 CEST	49766	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:07.625474930 CEST	49766	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:07.660242081 CEST	49767	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:07.660271883 CEST	443	49767	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:08.110390902 CEST	49766	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:08.110409975 CEST	443	49766	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:08.111166954 CEST	49771	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:08.111191988 CEST	443	49771	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:08.111335993 CEST	49771	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:08.114604950 CEST	49771	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:08.114625931 CEST	443	49771	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:08.118279934 CEST	49772	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:08.118314028 CEST	443	49772	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:08.118570089 CEST	49772	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:08.118685961 CEST	49772	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:08.118705988 CEST	443	49772	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:08.192331076 CEST	443	49768	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:08.192774057 CEST	49768	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:08.198656082 CEST	49768	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:08.198673010 CEST	443	49768	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:08.198976994 CEST	443	49768	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:08.207566977 CEST	49768	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:08.207688093 CEST	49768	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:08.207695961 CEST	443	49768	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:08.207907915 CEST	49768	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:08.251420975 CEST	443	49768	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:08.383512020 CEST	443	49768	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:08.383706093 CEST	443	49768	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:08.383773088 CEST	49768	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:08.384006023 CEST	49768	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:08.384033918 CEST	443	49768	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:08.499403000 CEST	49774	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:08.499444962 CEST	443	49774	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:08.499500990 CEST	49774	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:08.500051022 CEST	49774	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:08.500080109 CEST	443	49774	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:08.584003925 CEST	443	49771	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:08.587124109 CEST	49771	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:08.587146044 CEST	443	49771	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:08.588728905 CEST	443	49771	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:08.588814020 CEST	49771	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:08.590097904 CEST	49771	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:08.590210915 CEST	443	49771	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:08.590228081 CEST	49771	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:08.631409883 CEST	443	49771	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:08.681072950 CEST	443	49772	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:08.681698084 CEST	49772	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:08.681715012 CEST	443	49772	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:08.682744026 CEST	443	49772	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:08.682806015 CEST	49772	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:08.686055899 CEST	49772	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:08.686129093 CEST	443	49772	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:08.686966896 CEST	49772	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:08.686975956 CEST	443	49772	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:08.693739891 CEST	49771	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:08.693757057 CEST	443	49771	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:08.727421045 CEST	443	49771	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:08.727524042 CEST	49771	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:08.744707108 CEST	49771	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:08.744730949 CEST	443	49771	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:08.789244890 CEST	443	49772	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:08.789314985 CEST	49772	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:08.980453968 CEST	49772	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:08.980489016 CEST	443	49772	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:09.140899897 CEST	443	49774	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:09.141616106 CEST	49774	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:09.141625881 CEST	443	49774	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:09.142549038 CEST	443	49774	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:09.142664909 CEST	49774	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:09.146809101 CEST	49774	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:09.146873951 CEST	443	49774	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:09.147495985 CEST	49774	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:09.147511005 CEST	443	49774	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:09.191649914 CEST	49774	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:09.254228115 CEST	443	49774	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:09.254244089 CEST	443	49774	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:09.254254103 CEST	443	49774	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:09.254297018 CEST	443	49774	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:09.254308939 CEST	49774	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:09.254322052 CEST	443	49774	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:09.254326105 CEST	443	49774	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:09.254375935 CEST	49774	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:09.254384995 CEST	49774	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:09.254386902 CEST	443	49774	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:09.254437923 CEST	49774	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:09.259980917 CEST	49774	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:09.259998083 CEST	443	49774	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:09.311568975 CEST	49777	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.311611891 CEST	443	49777	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.311682940 CEST	49777	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.312021971 CEST	49777	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.312033892 CEST	443	49777	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.315174103 CEST	49778	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:09.315181971 CEST	443	49778	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:09.315239906 CEST	49778	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:09.327483892 CEST	49778	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:09.327495098 CEST	443	49778	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:09.335861921 CEST	49779	443	192.168.2.6	13.107.246.57
Sep 29, 2024 08:21:09.335899115 CEST	443	49779	13.107.246.57	192.168.2.6
Sep 29, 2024 08:21:09.335968971 CEST	49779	443	192.168.2.6	13.107.246.57
Sep 29, 2024 08:21:09.336658001 CEST	49779	443	192.168.2.6	13.107.246.57
Sep 29, 2024 08:21:09.336677074 CEST	443	49779	13.107.246.57	192.168.2.6
Sep 29, 2024 08:21:09.460333109 CEST	49782	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.460406065 CEST	443	49782	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.461169004 CEST	49782	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.461443901 CEST	49782	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.461472988 CEST	443	49782	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.767204046 CEST	443	49777	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.769686937 CEST	49777	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.769701004 CEST	443	49777	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.773263931 CEST	443	49777	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.773488998 CEST	49777	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.773885965 CEST	49777	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.773885965 CEST	49777	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.774049997 CEST	443	49777	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.877541065 CEST	443	49777	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.877983093 CEST	49777	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.878330946 CEST	49777	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.878345966 CEST	443	49777	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.914819002 CEST	443	49778	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:09.915090084 CEST	49778	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:09.915098906 CEST	443	49778	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:09.915997982 CEST	443	49778	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:09.916228056 CEST	49778	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:09.916544914 CEST	49778	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:09.916544914 CEST	49778	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:09.916594028 CEST	443	49778	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:09.924089909 CEST	443	49782	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.924288034 CEST	49782	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.924305916 CEST	443	49782	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.924592018 CEST	443	49782	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.925811052 CEST	49782	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.925811052 CEST	49782	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.925823927 CEST	443	49782	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.925863981 CEST	443	49782	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.926029921 CEST	49782	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:09.926057100 CEST	443	49782	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:09.997307062 CEST	443	49779	13.107.246.57	192.168.2.6
Sep 29, 2024 08:21:09.997875929 CEST	49779	443	192.168.2.6	13.107.246.57
Sep 29, 2024 08:21:09.997904062 CEST	443	49779	13.107.246.57	192.168.2.6
Sep 29, 2024 08:21:09.999417067 CEST	443	49779	13.107.246.57	192.168.2.6
Sep 29, 2024 08:21:09.999581099 CEST	49779	443	192.168.2.6	13.107.246.57
Sep 29, 2024 08:21:09.999875069 CEST	49779	443	192.168.2.6	13.107.246.57
Sep 29, 2024 08:21:09.999955893 CEST	443	49779	13.107.246.57	192.168.2.6
Sep 29, 2024 08:21:10.000057936 CEST	49779	443	192.168.2.6	13.107.246.57
Sep 29, 2024 08:21:10.021972895 CEST	443	49778	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:10.022057056 CEST	49778	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:10.024036884 CEST	49778	443	192.168.2.6	34.107.199.61
Sep 29, 2024 08:21:10.024053097 CEST	443	49778	34.107.199.61	192.168.2.6
Sep 29, 2024 08:21:10.047403097 CEST	443	49779	13.107.246.57	192.168.2.6
Sep 29, 2024 08:21:10.069289923 CEST	443	49782	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:10.069458008 CEST	49782	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:10.073323965 CEST	49782	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:10.073343992 CEST	443	49782	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:10.073558092 CEST	49786	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:10.073611975 CEST	443	49786	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:10.073829889 CEST	49786	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:10.074229956 CEST	49786	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:10.074251890 CEST	443	49786	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:10.105703115 CEST	443	49779	13.107.246.57	192.168.2.6
Sep 29, 2024 08:21:10.105726957 CEST	443	49779	13.107.246.57	192.168.2.6
Sep 29, 2024 08:21:10.109200954 CEST	49779	443	192.168.2.6	13.107.246.57
Sep 29, 2024 08:21:10.109220982 CEST	443	49779	13.107.246.57	192.168.2.6
Sep 29, 2024 08:21:10.109236002 CEST	443	49779	13.107.246.57	192.168.2.6
Sep 29, 2024 08:21:10.110188961 CEST	49779	443	192.168.2.6	13.107.246.57
Sep 29, 2024 08:21:10.117089033 CEST	49779	443	192.168.2.6	13.107.246.57
Sep 29, 2024 08:21:10.117110968 CEST	443	49779	13.107.246.57	192.168.2.6
Sep 29, 2024 08:21:10.543159962 CEST	443	49786	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:10.557938099 CEST	49786	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:10.557960987 CEST	443	49786	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:10.559132099 CEST	443	49786	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:10.563230038 CEST	49786	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:10.563430071 CEST	443	49786	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:10.574743986 CEST	49786	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:10.619405031 CEST	443	49786	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:10.680083036 CEST	443	49786	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:10.680291891 CEST	443	49786	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:10.680370092 CEST	49786	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:10.681761026 CEST	49786	443	192.168.2.6	35.190.10.96
Sep 29, 2024 08:21:10.681787014 CEST	443	49786	35.190.10.96	192.168.2.6
Sep 29, 2024 08:21:13.553136110 CEST	49800	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:13.553159952 CEST	443	49800	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:13.554461002 CEST	49801	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:13.554471016 CEST	443	49801	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:13.554502010 CEST	49800	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:13.554529905 CEST	49801	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:13.554768085 CEST	49801	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:13.554781914 CEST	443	49801	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:13.555063009 CEST	49800	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:13.555073023 CEST	443	49800	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:13.565196991 CEST	49802	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:13.565203905 CEST	443	49802	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:13.565459013 CEST	49802	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:13.566262960 CEST	49802	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:13.566272974 CEST	443	49802	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:13.574251890 CEST	49803	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:13.574259996 CEST	443	49803	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:13.574445009 CEST	49803	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:13.574798107 CEST	49803	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:13.574806929 CEST	443	49803	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:14.215063095 CEST	443	49800	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:14.216283083 CEST	49800	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:14.216300011 CEST	443	49800	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:14.217313051 CEST	443	49800	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:14.217700958 CEST	49800	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:14.217700958 CEST	49800	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:14.217758894 CEST	443	49800	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:14.220671892 CEST	443	49801	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:14.220949888 CEST	49801	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:14.220968962 CEST	443	49801	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:14.222434044 CEST	443	49801	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:14.222558975 CEST	49801	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:14.223577976 CEST	49801	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:14.223689079 CEST	443	49801	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:14.257133007 CEST	443	49803	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:14.257384062 CEST	49803	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:14.257395029 CEST	443	49803	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:14.258872986 CEST	443	49803	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:14.258995056 CEST	49803	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:14.259995937 CEST	49803	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:14.260123014 CEST	443	49803	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:14.270807028 CEST	49800	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:14.270808935 CEST	49801	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:14.270828962 CEST	443	49800	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:14.270833015 CEST	443	49801	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:14.301317930 CEST	49803	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:14.301343918 CEST	443	49803	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:14.316615105 CEST	49800	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:14.316617012 CEST	49801	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:14.348185062 CEST	49803	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:14.378930092 CEST	443	49802	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:14.379321098 CEST	49802	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:14.379343987 CEST	443	49802	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:14.380300045 CEST	443	49802	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:14.380511999 CEST	49802	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:14.381315947 CEST	49802	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:14.381375074 CEST	443	49802	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:14.426372051 CEST	49802	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:14.426393032 CEST	443	49802	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:14.473047018 CEST	49802	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:15.850337029 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:15.850378990 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:15.850564003 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:15.850790024 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:15.850814104 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.488799095 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.489160061 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.489207983 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.490701914 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.490765095 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.491163015 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.491246939 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.491354942 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.491364956 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.531953096 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.592648983 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.592679977 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.592694044 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.592741966 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.592773914 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.592789888 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.592845917 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.592854023 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.642932892 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.678407907 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.678421021 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.678442001 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.678477049 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.678489923 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.678508997 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.678525925 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.678544998 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.678606987 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.678663969 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.678997040 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.679023981 CEST	443	49817	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.679040909 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.679061890 CEST	49817	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.689686060 CEST	49828	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.689721107 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:16.689783096 CEST	49828	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.689985037 CEST	49828	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:16.690001011 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.324440956 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.351615906 CEST	49828	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:17.351648092 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.353524923 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.353575945 CEST	49828	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:17.354882956 CEST	49828	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:17.354967117 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.355110884 CEST	49828	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:17.355118990 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.401340008 CEST	49828	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:17.453835964 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.453869104 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.453876972 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.453896999 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.453906059 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.453912973 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.454021931 CEST	49828	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:17.454021931 CEST	49828	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:17.454061031 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.455112934 CEST	49828	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:17.538650036 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.538697958 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.538733006 CEST	49828	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:17.538764954 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.538794041 CEST	49828	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:17.538897038 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:17.543395996 CEST	49828	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:17.705420971 CEST	49828	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:17.705454111 CEST	443	49828	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:18.936718941 CEST	443	49800	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:18.936783075 CEST	443	49800	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:18.936856985 CEST	49800	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:18.937247992 CEST	443	49801	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:18.937292099 CEST	443	49801	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:18.937342882 CEST	49801	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:18.965048075 CEST	443	49803	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:18.965114117 CEST	443	49803	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:18.965217113 CEST	49803	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:18.979657888 CEST	49801	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:18.979682922 CEST	443	49801	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:18.979692936 CEST	49800	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:18.979706049 CEST	443	49800	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:18.979726076 CEST	49803	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:18.979729891 CEST	443	49803	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:19.596740961 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:19.596786976 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:19.596862078 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:19.597726107 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:19.597739935 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:19.603019953 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:19.603060961 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:19.603130102 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:19.603604078 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:19.603615046 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.234093904 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.286401033 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.366544008 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.366558075 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.366971970 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.370820999 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.370888948 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.375009060 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.385615110 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:20.385663033 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:20.385934114 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:20.388094902 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:20.388120890 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:20.395754099 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.397582054 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.397605896 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.399038076 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.399126053 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.399521112 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.399602890 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.399671078 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.415397882 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.442308903 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.442337990 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.474587917 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.474627972 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.474661112 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.474675894 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.474684954 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.474690914 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.474709988 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.474723101 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.474741936 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.474762917 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.490310907 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.559938908 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.559968948 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.560017109 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.560034037 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.560054064 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.560071945 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.561700106 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.561723948 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.561759949 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.561764002 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.561801910 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.561820984 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.645386934 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.645411015 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.645469904 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.645507097 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.645519972 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.645715952 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.646291971 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.646311045 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.646349907 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.646354914 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.646394014 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.646413088 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.647149086 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.647197962 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.647216082 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.647222042 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.647233963 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.647284031 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.647727013 CEST	49860	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:20.647746086 CEST	443	49860	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:20.660391092 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.660480022 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:20.660514116 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:20.660692930 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:20.661195993 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:20.661207914 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:20.698709011 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.698728085 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.698749065 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.698760033 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.698769093 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.698774099 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.698810101 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.698827028 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.698827028 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.698834896 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.698853016 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.745315075 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.748687029 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.748707056 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.748727083 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.748735905 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.748759031 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.748761892 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.748768091 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.748807907 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.750549078 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.750567913 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.750592947 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.750618935 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.750622988 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.750638008 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.750658989 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.750677109 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.834541082 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.834582090 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.834630013 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.834666014 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.834681988 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.834731102 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.836067915 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.836097002 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.836133003 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.836138010 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.836175919 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.836189985 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.837188005 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.837213039 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.837251902 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.837256908 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.837307930 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.838757038 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.838783026 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.838814974 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.838820934 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.838850021 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.838864088 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.921484947 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.921533108 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.921570063 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.921608925 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.921626091 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.921642065 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.921875954 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.921916008 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.921935081 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.921940088 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.922015905 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.922063112 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.922296047 CEST	49859	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.922316074 CEST	443	49859	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.935498953 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.935548067 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:20.935636997 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.935926914 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:20.935935974 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:21.053663969 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.054042101 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.054063082 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.055298090 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.055665016 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.055840015 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.055855036 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.096318007 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.096338987 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.157330036 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.157350063 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.157356024 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.157386065 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.157396078 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.157418966 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.157428980 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.157440901 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.157468081 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.157488108 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.256284952 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.256335020 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.256360054 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.256381989 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.256403923 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.256421089 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.256438971 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.256479979 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.256494045 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.256500959 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.256602049 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.256602049 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.295147896 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.295346975 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.295381069 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.296400070 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.296456099 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.296947002 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.297007084 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.297118902 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.343419075 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.344577074 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.344594955 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.344671011 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.344695091 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.344737053 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.345379114 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.345395088 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.345443964 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.345449924 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.345470905 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.345498085 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.346410990 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.346426010 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.346471071 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.346477032 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.346515894 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.351294994 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.351330042 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.399296045 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.403759956 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.403791904 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.403803110 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.403822899 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.403851986 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.403867006 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.403872967 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.403894901 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.403913021 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.403913975 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.403930902 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.427295923 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.427316904 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.427356958 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.427377939 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.427405119 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.427413940 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.434989929 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.435050964 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.435060024 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.435110092 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.435755014 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.435769081 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.435807943 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.435816050 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.435839891 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.435856104 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.436856031 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.436868906 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.436912060 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.436918020 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.436959982 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.437752962 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.437766075 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.437817097 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.437824011 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.437896967 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.438674927 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.438689947 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.438733101 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.438739061 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.438760042 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.438771009 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.439474106 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.439503908 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.439522982 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.439528942 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.439551115 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.439559937 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.439565897 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.439589024 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.439798117 CEST	49865	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.439815044 CEST	443	49865	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.445450068 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.445502043 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.445647955 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.445913076 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:21.445929050 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:21.487972021 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.488037109 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.488076925 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.488111973 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.488126040 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.488157988 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.490405083 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.490454912 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.490489006 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.490499020 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.490525961 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.490542889 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.573657036 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.573708057 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.573743105 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.573777914 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.573797941 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.573831081 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.574593067 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.574635983 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.574655056 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.574664116 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.574688911 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.574704885 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.575536013 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.575588942 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.575604916 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.575613976 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.575651884 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.575722933 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.575823069 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.576073885 CEST	49868	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:21.576090097 CEST	443	49868	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:21.750786066 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:21.774902105 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:21.774955988 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:21.776067972 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:21.776135921 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:21.787283897 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:21.787442923 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:21.787949085 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:21.787960052 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:21.830312014 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.015319109 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.060811996 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.060825109 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.060841084 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.060848951 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.060852051 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.060870886 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.060893059 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.060921907 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.060928106 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.060944080 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.090044022 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.092621088 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.092653036 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.093107939 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.097657919 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.097769976 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.098114967 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.105779886 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.105820894 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.105833054 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.105849028 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.105868101 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.105881929 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.105916977 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.107472897 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.107507944 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.107516050 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.107531071 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.107538939 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.107547998 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.107567072 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.107595921 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.139441967 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.193587065 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.193613052 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.193671942 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.193686008 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.193737984 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.194860935 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.194875002 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.194937944 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.194941998 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.194978952 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.195883036 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.195895910 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.195971966 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.195975065 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.196017027 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.197607040 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.197623968 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.197696924 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.197700977 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.197737932 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.199304104 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.199328899 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.199342966 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.199393034 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.199399948 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.199426889 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.199445963 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.281531096 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.281554937 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.281620026 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.281632900 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.281661987 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.281698942 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.282486916 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.282541037 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.282551050 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.282555103 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.282588959 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.282596111 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.282754898 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.285378933 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.285402060 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.285456896 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.285478115 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.285501957 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.285520077 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.287651062 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.287668943 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.287714005 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.287733078 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.287771940 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.307790041 CEST	49869	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:22.307817936 CEST	443	49869	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:22.372581959 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.372601032 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.372663021 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.372692108 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.372730970 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.373795033 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.373809099 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.373857975 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.373864889 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.373899937 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.374872923 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.374890089 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.374934912 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.374943018 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.374969006 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.374985933 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.375835896 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.375850916 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.375895023 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.375900984 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.375952959 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.460205078 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.460227966 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.460285902 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.460314989 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.460331917 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.460899115 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.460917950 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.460942030 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.460956097 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.460972071 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.461004019 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.461488962 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.461504936 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.461556911 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.461564064 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.461601019 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.462239027 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.462256908 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.462291002 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.462296963 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.462316990 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.462342978 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.462923050 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.462937117 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.462990046 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.462996006 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.463114977 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.463773966 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.463809967 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.463833094 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.463836908 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.463859081 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.463869095 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:22.463881969 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.463905096 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.626322985 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.847068071 CEST	49871	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:22.847095966 CEST	443	49871	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:23.412504911 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:23.412552118 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:23.412769079 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:23.423002005 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:23.423054934 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.080378056 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.080730915 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:24.080795050 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.081834078 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.081952095 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:24.083379030 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:24.083467007 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.083688021 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:24.083705902 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.138310909 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:24.182262897 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.182286978 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.182288885 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.182444096 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:24.182463884 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.182476044 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.182481050 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.182519913 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:24.268661976 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.268687963 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.268745899 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:24.268760920 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.268800020 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:24.270529985 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.270550966 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.270592928 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:24.270598888 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.270654917 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:24.317047119 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.317145109 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.317146063 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:24.317212105 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:24.317893028 CEST	49873	443	192.168.2.6	13.107.246.60
Sep 29, 2024 08:21:24.317935944 CEST	443	49873	13.107.246.60	192.168.2.6
Sep 29, 2024 08:21:24.433475971 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:24.433510065 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:24.433573008 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:24.436280966 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:24.436302900 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.164005041 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.222268105 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.480830908 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.480860949 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.482037067 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.482054949 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.482134104 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.482882977 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.482980967 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.483319044 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.483325958 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.532767057 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.580758095 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.580784082 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.580792904 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.580837011 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.580852985 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.580856085 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.580862999 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.580887079 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.580908060 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.580919981 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.580936909 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.667223930 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.667253017 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.667330027 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.667354107 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.667418003 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.668656111 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.668673038 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.668709993 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.668766975 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.668776989 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.668790102 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:25.668809891 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.668832064 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.670082092 CEST	49876	443	192.168.2.6	13.107.246.44
Sep 29, 2024 08:21:25.670099974 CEST	443	49876	13.107.246.44	192.168.2.6
Sep 29, 2024 08:21:26.984147072 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:26.984201908 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:26.984261036 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:26.984756947 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:26.984776020 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.279587984 CEST	49880	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:27.279649973 CEST	443	49880	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:27.279725075 CEST	49880	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:27.280463934 CEST	49880	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:27.280474901 CEST	443	49880	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:27.624131918 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.628355980 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.628385067 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.628823042 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.629442930 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.629518032 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.629673958 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.671411037 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.739578962 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.739602089 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.739617109 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.739674091 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.739701033 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.739753962 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.825786114 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.825809956 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.825921059 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.825921059 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.825946093 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.826653004 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.828005075 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.828020096 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.828099012 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.828104973 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.829372883 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.912962914 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.912986994 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.913093090 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.913116932 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.913156033 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.914015055 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.914031029 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.914076090 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.914081097 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.914114952 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.915662050 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.915678024 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.915708065 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.915723085 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.915726900 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.915755987 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.915771008 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.915774107 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.915821075 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:27.915867090 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.978554964 CEST	49877	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:27.978591919 CEST	443	49877	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.028666973 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.028717041 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.028939009 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.029232979 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.029241085 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.058532000 CEST	443	49880	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:28.058607101 CEST	49880	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:28.061351061 CEST	49880	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:28.061362982 CEST	443	49880	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:28.061608076 CEST	443	49880	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:28.065093040 CEST	49880	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:28.065246105 CEST	49880	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:28.065251112 CEST	443	49880	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:28.065434933 CEST	49880	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:28.107407093 CEST	443	49880	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:28.239769936 CEST	443	49880	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:28.239855051 CEST	443	49880	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:28.239948988 CEST	49880	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:28.283538103 CEST	49880	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:28.283567905 CEST	443	49880	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:28.703555107 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.705991983 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.706016064 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.706370115 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.706980944 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.707045078 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.707236052 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.751411915 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.813411951 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.813441038 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.813457012 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.813493967 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.813508987 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.813529015 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.813575029 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.904712915 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.904746056 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.904792070 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.904803038 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.904850960 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.907206059 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.907223940 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.907269001 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.907272100 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.907318115 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.996443033 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.996470928 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.996532917 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.996540070 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.996592999 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.997523069 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.997540951 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.997606993 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.997611046 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.997653961 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.999234915 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.999253988 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.999289989 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.999306917 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.999314070 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.999351978 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.999366999 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.999403000 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:28.999447107 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.999622107 CEST	49882	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:28.999633074 CEST	443	49882	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:29.087740898 CEST	49887	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:29.087809086 CEST	443	49887	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:29.087876081 CEST	49887	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:29.088257074 CEST	49888	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:29.088298082 CEST	443	49888	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:29.088347912 CEST	49888	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:29.088710070 CEST	49887	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:29.088731050 CEST	443	49887	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:29.090143919 CEST	49888	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:29.090157032 CEST	443	49888	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:29.092089891 CEST	49889	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:29.092103004 CEST	443	49889	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:29.092154026 CEST	49889	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:29.092458963 CEST	49889	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:29.092470884 CEST	443	49889	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:29.723329067 CEST	443	49888	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:29.723586082 CEST	49888	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:29.723609924 CEST	443	49888	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:29.724677086 CEST	443	49888	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:29.724809885 CEST	49888	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:29.725136042 CEST	49888	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:29.725213051 CEST	443	49888	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:29.777578115 CEST	49888	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:29.777605057 CEST	443	49888	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:29.906414986 CEST	443	49887	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:29.906745911 CEST	49887	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:29.906783104 CEST	443	49887	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:29.907943010 CEST	443	49887	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:29.908062935 CEST	49887	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:29.908344030 CEST	49887	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:29.908396006 CEST	443	49887	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:29.908504963 CEST	49887	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:29.908515930 CEST	443	49887	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:29.912684917 CEST	443	49889	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:29.912939072 CEST	49889	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:29.912966967 CEST	443	49889	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:29.914000988 CEST	443	49889	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:29.914108992 CEST	49889	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:29.914988995 CEST	49889	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:29.915050983 CEST	443	49889	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:29.953527927 CEST	49887	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:29.975121021 CEST	49889	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:29.975152016 CEST	443	49889	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:29.985594988 CEST	49888	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:30.017535925 CEST	49889	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:30.175538063 CEST	443	49887	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:30.180264950 CEST	443	49887	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:30.180274010 CEST	443	49887	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:30.180286884 CEST	443	49887	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:30.180387974 CEST	49887	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:30.180387974 CEST	49887	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:30.180424929 CEST	443	49887	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:30.180597067 CEST	49887	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:30.180768967 CEST	49887	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:30.180787086 CEST	443	49887	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:30.192471027 CEST	49893	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:30.192507029 CEST	443	49893	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:30.192677021 CEST	49893	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:30.193027020 CEST	49893	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:30.193038940 CEST	443	49893	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:30.212416887 CEST	49894	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:30.212526083 CEST	443	49894	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:30.212820053 CEST	49894	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:30.213130951 CEST	49894	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:30.213167906 CEST	443	49894	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:30.905699015 CEST	443	49894	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:30.906006098 CEST	49894	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:30.906075001 CEST	443	49894	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:30.906999111 CEST	443	49894	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:30.907062054 CEST	49894	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:30.907619953 CEST	49894	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:30.907685041 CEST	443	49894	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:30.907774925 CEST	49894	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:30.951405048 CEST	443	49894	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:30.957515955 CEST	49894	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:30.957531929 CEST	443	49894	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:31.003534079 CEST	49894	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:31.018733025 CEST	443	49894	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:31.018781900 CEST	443	49894	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:31.018851042 CEST	49894	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:31.018877983 CEST	443	49894	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:31.018922091 CEST	443	49894	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:31.018979073 CEST	49894	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:31.037426949 CEST	49894	443	192.168.2.6	13.107.246.67
Sep 29, 2024 08:21:31.037463903 CEST	443	49894	13.107.246.67	192.168.2.6
Sep 29, 2024 08:21:31.068109989 CEST	443	49893	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:31.069124937 CEST	49893	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:31.069144011 CEST	443	49893	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:31.070127010 CEST	443	49893	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:31.070185900 CEST	49893	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:31.070681095 CEST	49893	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:31.070741892 CEST	443	49893	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:31.070929050 CEST	49893	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:31.070935965 CEST	443	49893	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:31.115497112 CEST	49893	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:31.335680962 CEST	443	49893	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:31.337677956 CEST	443	49893	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:31.337686062 CEST	443	49893	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:31.337697983 CEST	443	49893	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:31.337722063 CEST	443	49893	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:31.337742090 CEST	49893	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:31.337762117 CEST	443	49893	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:31.337783098 CEST	443	49893	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:31.337786913 CEST	49893	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:31.337816000 CEST	49893	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:31.337835073 CEST	49893	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:31.358932018 CEST	49893	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:31.358952999 CEST	443	49893	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:33.138665915 CEST	49716	80	192.168.2.6	130.93.125.135
Sep 29, 2024 08:21:33.143527031 CEST	80	49716	130.93.125.135	192.168.2.6
Sep 29, 2024 08:21:33.807630062 CEST	49717	80	192.168.2.6	130.93.125.135
Sep 29, 2024 08:21:33.812555075 CEST	80	49717	130.93.125.135	192.168.2.6
Sep 29, 2024 08:21:34.453785896 CEST	443	49888	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:34.453898907 CEST	443	49888	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:34.453974962 CEST	49888	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:34.510746956 CEST	49888	443	192.168.2.6	13.107.246.45
Sep 29, 2024 08:21:34.510776997 CEST	443	49888	13.107.246.45	192.168.2.6
Sep 29, 2024 08:21:48.140758038 CEST	49754	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:48.140786886 CEST	443	49754	152.199.21.175	192.168.2.6
Sep 29, 2024 08:21:48.818820953 CEST	80	49716	130.93.125.135	192.168.2.6
Sep 29, 2024 08:21:48.818892002 CEST	49716	80	192.168.2.6	130.93.125.135
Sep 29, 2024 08:21:48.892915010 CEST	49716	80	192.168.2.6	130.93.125.135
Sep 29, 2024 08:21:48.897885084 CEST	80	49716	130.93.125.135	192.168.2.6
Sep 29, 2024 08:21:51.220177889 CEST	49929	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:21:51.220220089 CEST	443	49929	216.58.206.68	192.168.2.6
Sep 29, 2024 08:21:51.220285892 CEST	49929	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:21:51.220540047 CEST	49929	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:21:51.220552921 CEST	443	49929	216.58.206.68	192.168.2.6
Sep 29, 2024 08:21:51.870496035 CEST	443	49929	216.58.206.68	192.168.2.6
Sep 29, 2024 08:21:51.870853901 CEST	49929	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:21:51.870871067 CEST	443	49929	216.58.206.68	192.168.2.6
Sep 29, 2024 08:21:51.871196032 CEST	443	49929	216.58.206.68	192.168.2.6
Sep 29, 2024 08:21:51.871632099 CEST	49929	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:21:51.871702909 CEST	443	49929	216.58.206.68	192.168.2.6
Sep 29, 2024 08:21:51.921214104 CEST	49929	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:21:54.262396097 CEST	49930	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:54.262444973 CEST	443	49930	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:54.262547970 CEST	49930	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:54.263650894 CEST	49930	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:54.263665915 CEST	443	49930	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:55.049751043 CEST	443	49930	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:55.049825907 CEST	49930	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:55.052788019 CEST	49930	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:55.052810907 CEST	443	49930	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:55.053062916 CEST	443	49930	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:55.055556059 CEST	49930	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:55.055816889 CEST	49930	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:55.055826902 CEST	443	49930	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:55.055991888 CEST	49930	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:55.099406004 CEST	443	49930	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:55.231060028 CEST	443	49930	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:55.231267929 CEST	443	49930	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:55.231337070 CEST	49930	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:55.231553078 CEST	49930	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:55.231570005 CEST	443	49930	40.113.103.199	192.168.2.6
Sep 29, 2024 08:21:55.231580973 CEST	49930	443	192.168.2.6	40.113.103.199
Sep 29, 2024 08:21:59.429801941 CEST	49802	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:21:59.429815054 CEST	443	49802	152.199.21.175	192.168.2.6
Sep 29, 2024 08:22:01.769620895 CEST	443	49929	216.58.206.68	192.168.2.6
Sep 29, 2024 08:22:01.769813061 CEST	443	49929	216.58.206.68	192.168.2.6
Sep 29, 2024 08:22:01.771332026 CEST	49929	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:22:02.881650925 CEST	49929	443	192.168.2.6	216.58.206.68
Sep 29, 2024 08:22:02.881673098 CEST	443	49929	216.58.206.68	192.168.2.6
Sep 29, 2024 08:22:03.222776890 CEST	443	49754	152.199.21.175	192.168.2.6
Sep 29, 2024 08:22:03.222867012 CEST	443	49754	152.199.21.175	192.168.2.6
Sep 29, 2024 08:22:03.223099947 CEST	49754	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:22:03.806813002 CEST	80	49717	130.93.125.135	192.168.2.6
Sep 29, 2024 08:22:03.806864977 CEST	49717	80	192.168.2.6	130.93.125.135
Sep 29, 2024 08:22:04.880397081 CEST	49717	80	192.168.2.6	130.93.125.135
Sep 29, 2024 08:22:04.880506992 CEST	49754	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:22:04.880533934 CEST	443	49754	152.199.21.175	192.168.2.6
Sep 29, 2024 08:22:04.885238886 CEST	80	49717	130.93.125.135	192.168.2.6
Sep 29, 2024 08:22:14.825789928 CEST	443	49802	152.199.21.175	192.168.2.6
Sep 29, 2024 08:22:14.825963020 CEST	443	49802	152.199.21.175	192.168.2.6
Sep 29, 2024 08:22:14.826407909 CEST	49802	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:22:14.921286106 CEST	49802	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:22:14.921370983 CEST	443	49802	152.199.21.175	192.168.2.6
Sep 29, 2024 08:22:14.979758024 CEST	49889	443	192.168.2.6	152.199.21.175
Sep 29, 2024 08:22:14.979770899 CEST	443	49889	152.199.21.175	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 08:20:46.550493956 CEST	53	53583	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:46.590262890 CEST	53	62153	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:47.763793945 CEST	53	59448	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:48.083513021 CEST	65125	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:48.083705902 CEST	53391	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:48.118280888 CEST	53	65125	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:48.140943050 CEST	53	53391	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:48.795608044 CEST	61715	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:48.795939922 CEST	56508	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:48.814898014 CEST	53	61715	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:48.854012012 CEST	53	56508	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:50.373234034 CEST	59789	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:50.375364065 CEST	51971	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:50.380214930 CEST	53	59789	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:50.381366968 CEST	62236	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:50.381695986 CEST	56527	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:50.382024050 CEST	53	51971	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:50.384787083 CEST	60841	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:50.387667894 CEST	60065	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:50.406450033 CEST	53	60065	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:51.163255930 CEST	51282	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:51.163531065 CEST	64370	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:51.442719936 CEST	53	60841	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:51.444905043 CEST	53	64370	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:51.445482969 CEST	53	51282	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:53.790102005 CEST	53	62651	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:53.811300993 CEST	62793	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:53.812180996 CEST	54433	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:53.814093113 CEST	59277	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:53.814776897 CEST	62087	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:20:53.818327904 CEST	53	62793	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:53.819533110 CEST	53	54433	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:53.869798899 CEST	53	59277	1.1.1.1	192.168.2.6
Sep 29, 2024 08:20:53.961822033 CEST	53	62087	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:00.909018993 CEST	54589	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:00.909586906 CEST	65481	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:02.213332891 CEST	59111	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:02.213514090 CEST	51344	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:02.220633984 CEST	53	59111	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:02.242643118 CEST	53	51344	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:04.143064976 CEST	60709	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:04.143731117 CEST	53111	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:04.516587019 CEST	49279	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:04.516901016 CEST	60043	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:04.517512083 CEST	56329	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:04.520925999 CEST	64860	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:04.529665947 CEST	53	59198	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:05.694390059 CEST	53	53408	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:06.343195915 CEST	54184	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:06.343369007 CEST	64558	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:08.101732016 CEST	62435	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:08.102130890 CEST	54949	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:08.108922958 CEST	53	62435	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:08.109236956 CEST	53	54949	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:08.109936953 CEST	51658	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:08.110361099 CEST	54315	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:08.117429018 CEST	53	54315	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:08.117523909 CEST	53	51658	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:08.151397943 CEST	53388	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:08.151812077 CEST	53686	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:08.508584976 CEST	50665	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:08.509133101 CEST	52208	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:09.302519083 CEST	62170	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:09.303154945 CEST	55968	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:09.307296038 CEST	54016	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:09.307699919 CEST	64638	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:09.309884071 CEST	53	62170	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:09.310364962 CEST	53	55968	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:09.314172029 CEST	53	54016	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:09.314853907 CEST	53	64638	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:13.532025099 CEST	65042	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:13.532327890 CEST	65209	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:13.539799929 CEST	64871	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:13.539800882 CEST	50332	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:13.542340994 CEST	49213	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:13.542340994 CEST	50947	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:13.557239056 CEST	63941	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:13.557404995 CEST	59110	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:13.558104038 CEST	58321	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:13.558250904 CEST	55227	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:13.564133883 CEST	53	63941	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:13.564394951 CEST	53	59110	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:16.681840897 CEST	53878	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:16.682030916 CEST	61233	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:17.058074951 CEST	58483	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:17.058219910 CEST	55114	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:18.265039921 CEST	55986	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:18.265566111 CEST	63826	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:19.587497950 CEST	55532	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:19.588181973 CEST	58334	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:19.594332933 CEST	53	55532	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:19.595541000 CEST	53	58334	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:19.648451090 CEST	53	54942	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:20.652789116 CEST	62179	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:20.652919054 CEST	57934	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:20.927170038 CEST	52603	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:20.927330971 CEST	52164	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:20.934083939 CEST	53	52603	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:20.934792042 CEST	53	52164	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:24.544487953 CEST	53	63189	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:29.077270985 CEST	51930	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:29.077756882 CEST	64698	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:29.079546928 CEST	61787	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:29.079674959 CEST	51318	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:29.084475994 CEST	53	51930	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:29.085119009 CEST	53	64698	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:30.184336901 CEST	49874	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:30.184338093 CEST	50218	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:30.191390038 CEST	53	50218	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:30.191402912 CEST	53	49874	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:30.203351974 CEST	49909	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:30.203351974 CEST	58861	53	192.168.2.6	1.1.1.1
Sep 29, 2024 08:21:46.172758102 CEST	53	51697	1.1.1.1	192.168.2.6
Sep 29, 2024 08:21:47.308113098 CEST	53	55071	1.1.1.1	192.168.2.6
Sep 29, 2024 08:22:15.222505093 CEST	53	62035	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 29, 2024 08:20:48.141160011 CEST	192.168.2.6	1.1.1.1	c225	(Port unreachable)	Destination Unreachable
Sep 29, 2024 08:20:48.854159117 CEST	192.168.2.6	1.1.1.1	c225	(Port unreachable)	Destination Unreachable
Sep 29, 2024 08:20:53.961920023 CEST	192.168.2.6	1.1.1.1	c225	(Port unreachable)	Destination Unreachable
Sep 29, 2024 08:21:00.954783916 CEST	192.168.2.6	1.1.1.1	c28f	(Port unreachable)	Destination Unreachable
Sep 29, 2024 08:21:02.242777109 CEST	192.168.2.6	1.1.1.1	c269	(Port unreachable)	Destination Unreachable
Sep 29, 2024 08:21:04.164484024 CEST	192.168.2.6	1.1.1.1	c28f	(Port unreachable)	Destination Unreachable
Sep 29, 2024 08:21:13.581621885 CEST	192.168.2.6	1.1.1.1	c2d4	(Port unreachable)	Destination Unreachable
Sep 29, 2024 08:21:24.416822910 CEST	192.168.2.6	1.1.1.1	c2de	(Port unreachable)	Destination Unreachable
Sep 29, 2024 08:21:29.238274097 CEST	192.168.2.6	1.1.1.1	c2c2	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 08:20:48.083513021 CEST	192.168.2.6	1.1.1.1	0x46c	Standard query (0)	microsoft.biosency.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:48.083705902 CEST	192.168.2.6	1.1.1.1	0xf3cc	Standard query (0)	microsoft.biosency.com	65	IN (0x0001)	false
Sep 29, 2024 08:20:48.795608044 CEST	192.168.2.6	1.1.1.1	0x413a	Standard query (0)	microsoft.biosency.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:48.795939922 CEST	192.168.2.6	1.1.1.1	0x2bc8	Standard query (0)	microsoft.biosency.com	65	IN (0x0001)	false
Sep 29, 2024 08:20:50.373234034 CEST	192.168.2.6	1.1.1.1	0xec6b	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:50.375364065 CEST	192.168.2.6	1.1.1.1	0xfcbf	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 08:20:50.381366968 CEST	192.168.2.6	1.1.1.1	0xb804	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:50.381695986 CEST	192.168.2.6	1.1.1.1	0xda91	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Sep 29, 2024 08:20:50.384787083 CEST	192.168.2.6	1.1.1.1	0xac06	Standard query (0)	maxcdn.icons8.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:50.387667894 CEST	192.168.2.6	1.1.1.1	0x124a	Standard query (0)	maxcdn.icons8.com	65	IN (0x0001)	false
Sep 29, 2024 08:20:51.163255930 CEST	192.168.2.6	1.1.1.1	0xa6a5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:51.163531065 CEST	192.168.2.6	1.1.1.1	0x9d78	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 08:20:53.811300993 CEST	192.168.2.6	1.1.1.1	0x1e34	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:53.812180996 CEST	192.168.2.6	1.1.1.1	0xe027	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 08:20:53.814093113 CEST	192.168.2.6	1.1.1.1	0x664f	Standard query (0)	microsoft.biosency.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:53.814776897 CEST	192.168.2.6	1.1.1.1	0x203b	Standard query (0)	microsoft.biosency.com	65	IN (0x0001)	false
Sep 29, 2024 08:21:00.909018993 CEST	192.168.2.6	1.1.1.1	0x78d3	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:00.909586906 CEST	192.168.2.6	1.1.1.1	0x2a8	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Sep 29, 2024 08:21:02.213332891 CEST	192.168.2.6	1.1.1.1	0x6ecd	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:02.213514090 CEST	192.168.2.6	1.1.1.1	0x4ff5	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:04.143064976 CEST	192.168.2.6	1.1.1.1	0x9669	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:04.143731117 CEST	192.168.2.6	1.1.1.1	0x822b	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Sep 29, 2024 08:21:04.516587019 CEST	192.168.2.6	1.1.1.1	0xbbe	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:04.516901016 CEST	192.168.2.6	1.1.1.1	0xbfc7	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Sep 29, 2024 08:21:04.517512083 CEST	192.168.2.6	1.1.1.1	0x7c5c	Standard query (0)	msft.hsprotect.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:04.520925999 CEST	192.168.2.6	1.1.1.1	0xdb1c	Standard query (0)	msft.hsprotect.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:06.343195915 CEST	192.168.2.6	1.1.1.1	0x7d31	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:06.343369007 CEST	192.168.2.6	1.1.1.1	0x1144	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:08.101732016 CEST	192.168.2.6	1.1.1.1	0x74e	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:08.102130890 CEST	192.168.2.6	1.1.1.1	0xd46f	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:08.109936953 CEST	192.168.2.6	1.1.1.1	0x955e	Standard query (0)	stk.hsprotect.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:08.110361099 CEST	192.168.2.6	1.1.1.1	0xc2c8	Standard query (0)	stk.hsprotect.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:08.151397943 CEST	192.168.2.6	1.1.1.1	0x637b	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:08.151812077 CEST	192.168.2.6	1.1.1.1	0x66ae	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:08.508584976 CEST	192.168.2.6	1.1.1.1	0xa237	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:08.509133101 CEST	192.168.2.6	1.1.1.1	0x145c	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Sep 29, 2024 08:21:09.302519083 CEST	192.168.2.6	1.1.1.1	0xa522	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:09.303154945 CEST	192.168.2.6	1.1.1.1	0x5ae4	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:09.307296038 CEST	192.168.2.6	1.1.1.1	0xccdd	Standard query (0)	stk.hsprotect.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:09.307699919 CEST	192.168.2.6	1.1.1.1	0x858a	Standard query (0)	stk.hsprotect.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:13.532025099 CEST	192.168.2.6	1.1.1.1	0xe137	Standard query (0)	support.content.office.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:13.532327890 CEST	192.168.2.6	1.1.1.1	0xdde0	Standard query (0)	support.content.office.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:13.539799929 CEST	192.168.2.6	1.1.1.1	0xec44	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:13.539800882 CEST	192.168.2.6	1.1.1.1	0xad78	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Sep 29, 2024 08:21:13.542340994 CEST	192.168.2.6	1.1.1.1	0x421c	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:13.542340994 CEST	192.168.2.6	1.1.1.1	0xb6cf	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Sep 29, 2024 08:21:13.557239056 CEST	192.168.2.6	1.1.1.1	0x4881	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:13.557404995 CEST	192.168.2.6	1.1.1.1	0x7514	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:13.558104038 CEST	192.168.2.6	1.1.1.1	0x2958	Standard query (0)	mem.gfx.ms	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:13.558250904 CEST	192.168.2.6	1.1.1.1	0xf0e7	Standard query (0)	mem.gfx.ms	65	IN (0x0001)	false
Sep 29, 2024 08:21:16.681840897 CEST	192.168.2.6	1.1.1.1	0xb934	Standard query (0)	mem.gfx.ms	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:16.682030916 CEST	192.168.2.6	1.1.1.1	0x7182	Standard query (0)	mem.gfx.ms	65	IN (0x0001)	false
Sep 29, 2024 08:21:17.058074951 CEST	192.168.2.6	1.1.1.1	0xb85e	Standard query (0)	support.content.office.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:17.058219910 CEST	192.168.2.6	1.1.1.1	0x2727	Standard query (0)	support.content.office.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:18.265039921 CEST	192.168.2.6	1.1.1.1	0xee8d	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:18.265566111 CEST	192.168.2.6	1.1.1.1	0x31cd	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Sep 29, 2024 08:21:19.587497950 CEST	192.168.2.6	1.1.1.1	0x23f	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:19.588181973 CEST	192.168.2.6	1.1.1.1	0xe310	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:20.652789116 CEST	192.168.2.6	1.1.1.1	0xcc53	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:20.652919054 CEST	192.168.2.6	1.1.1.1	0xe0c0	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Sep 29, 2024 08:21:20.927170038 CEST	192.168.2.6	1.1.1.1	0xb7f7	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:20.927330971 CEST	192.168.2.6	1.1.1.1	0xbafa	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:29.077270985 CEST	192.168.2.6	1.1.1.1	0xa156	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:29.077756882 CEST	192.168.2.6	1.1.1.1	0xb04f	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:29.079546928 CEST	192.168.2.6	1.1.1.1	0x9afe	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:29.079674959 CEST	192.168.2.6	1.1.1.1	0x7ad6	Standard query (0)	acctcdn.msftauth.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:30.184336901 CEST	192.168.2.6	1.1.1.1	0x92d	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:30.184338093 CEST	192.168.2.6	1.1.1.1	0x1aef	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Sep 29, 2024 08:21:30.203351974 CEST	192.168.2.6	1.1.1.1	0x47fb	Standard query (0)	mem.gfx.ms	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:30.203351974 CEST	192.168.2.6	1.1.1.1	0xa66	Standard query (0)	mem.gfx.ms	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 08:20:48.118280888 CEST	1.1.1.1	192.168.2.6	0x46c	No error (0)	microsoft.biosency.com		130.93.125.135	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:48.814898014 CEST	1.1.1.1	192.168.2.6	0x413a	No error (0)	microsoft.biosency.com		130.93.125.135	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:50.380214930 CEST	1.1.1.1	192.168.2.6	0xec6b	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:50.380214930 CEST	1.1.1.1	192.168.2.6	0xec6b	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:50.382024050 CEST	1.1.1.1	192.168.2.6	0xfcbf	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 08:20:50.388246059 CEST	1.1.1.1	192.168.2.6	0xda91	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:20:50.389086962 CEST	1.1.1.1	192.168.2.6	0xb804	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:20:50.406450033 CEST	1.1.1.1	192.168.2.6	0x124a	No error (0)	maxcdn.icons8.com	1220595937.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:20:51.442719936 CEST	1.1.1.1	192.168.2.6	0xac06	No error (0)	maxcdn.icons8.com	1220595937.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:20:51.442719936 CEST	1.1.1.1	192.168.2.6	0xac06	No error (0)	1220595937.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:51.442719936 CEST	1.1.1.1	192.168.2.6	0xac06	No error (0)	1220595937.rsc.cdn77.org		37.19.194.81	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:51.442719936 CEST	1.1.1.1	192.168.2.6	0xac06	No error (0)	1220595937.rsc.cdn77.org		169.150.255.184	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:51.442719936 CEST	1.1.1.1	192.168.2.6	0xac06	No error (0)	1220595937.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:51.442719936 CEST	1.1.1.1	192.168.2.6	0xac06	No error (0)	1220595937.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:51.442719936 CEST	1.1.1.1	192.168.2.6	0xac06	No error (0)	1220595937.rsc.cdn77.org		207.211.211.27	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:51.442719936 CEST	1.1.1.1	192.168.2.6	0xac06	No error (0)	1220595937.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:51.444905043 CEST	1.1.1.1	192.168.2.6	0x9d78	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 08:20:51.445482969 CEST	1.1.1.1	192.168.2.6	0xa6a5	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:53.818327904 CEST	1.1.1.1	192.168.2.6	0x1e34	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:53.818327904 CEST	1.1.1.1	192.168.2.6	0x1e34	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:53.819533110 CEST	1.1.1.1	192.168.2.6	0xe027	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 08:20:53.869798899 CEST	1.1.1.1	192.168.2.6	0x664f	No error (0)	microsoft.biosency.com		130.93.125.135	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:20:59.082978010 CEST	1.1.1.1	192.168.2.6	0x4ad6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:20:59.082978010 CEST	1.1.1.1	192.168.2.6	0x4ad6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:00.915962934 CEST	1.1.1.1	192.168.2.6	0x78d3	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:00.954718113 CEST	1.1.1.1	192.168.2.6	0x2a8	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:02.219019890 CEST	1.1.1.1	192.168.2.6	0x437d	No error (0)	shed.dual-low.s-part-0036.t-0009.t-msedge.net	s-part-0036.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:02.219019890 CEST	1.1.1.1	192.168.2.6	0x437d	No error (0)	s-part-0036.t-0009.t-msedge.net		13.107.246.64	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:02.220633984 CEST	1.1.1.1	192.168.2.6	0x6ecd	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:02.220633984 CEST	1.1.1.1	192.168.2.6	0x6ecd	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:02.220633984 CEST	1.1.1.1	192.168.2.6	0x6ecd	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:02.241136074 CEST	1.1.1.1	192.168.2.6	0xcba	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:02.241136074 CEST	1.1.1.1	192.168.2.6	0xcba	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:02.242643118 CEST	1.1.1.1	192.168.2.6	0x4ff5	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:02.242643118 CEST	1.1.1.1	192.168.2.6	0x4ff5	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:02.243621111 CEST	1.1.1.1	192.168.2.6	0xfe6f	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:02.243673086 CEST	1.1.1.1	192.168.2.6	0x2517	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:02.243673086 CEST	1.1.1.1	192.168.2.6	0x2517	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:04.032830954 CEST	1.1.1.1	192.168.2.6	0x45ec	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:04.032830954 CEST	1.1.1.1	192.168.2.6	0x45ec	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:04.149782896 CEST	1.1.1.1	192.168.2.6	0x9669	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:04.164422035 CEST	1.1.1.1	192.168.2.6	0x822b	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:04.524574041 CEST	1.1.1.1	192.168.2.6	0xbfc7	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:04.524605989 CEST	1.1.1.1	192.168.2.6	0xbbe	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:04.528280973 CEST	1.1.1.1	192.168.2.6	0xdb1c	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:04.529177904 CEST	1.1.1.1	192.168.2.6	0x7c5c	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:06.351335049 CEST	1.1.1.1	192.168.2.6	0x1144	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:06.351744890 CEST	1.1.1.1	192.168.2.6	0x7d31	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:08.108922958 CEST	1.1.1.1	192.168.2.6	0x74e	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:08.108922958 CEST	1.1.1.1	192.168.2.6	0x74e	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:08.109236956 CEST	1.1.1.1	192.168.2.6	0xd46f	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:08.117523909 CEST	1.1.1.1	192.168.2.6	0x955e	No error (0)	stk.hsprotect.net		34.107.199.61	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:08.158963919 CEST	1.1.1.1	192.168.2.6	0x66ae	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:08.159421921 CEST	1.1.1.1	192.168.2.6	0x637b	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:08.498132944 CEST	1.1.1.1	192.168.2.6	0x20f6	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:08.498132944 CEST	1.1.1.1	192.168.2.6	0x20f6	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:08.515942097 CEST	1.1.1.1	192.168.2.6	0xa237	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:08.516355991 CEST	1.1.1.1	192.168.2.6	0x145c	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:09.309884071 CEST	1.1.1.1	192.168.2.6	0xa522	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:09.309884071 CEST	1.1.1.1	192.168.2.6	0xa522	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:09.310364962 CEST	1.1.1.1	192.168.2.6	0x5ae4	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:09.314172029 CEST	1.1.1.1	192.168.2.6	0xccdd	No error (0)	stk.hsprotect.net		34.107.199.61	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:09.322040081 CEST	1.1.1.1	192.168.2.6	0xfbfc	No error (0)	shed.dual-low.s-part-0029.t-0009.t-msedge.net	s-part-0029.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:09.322040081 CEST	1.1.1.1	192.168.2.6	0xfbfc	No error (0)	s-part-0029.t-0009.t-msedge.net		13.107.246.57	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:13.538522005 CEST	1.1.1.1	192.168.2.6	0xe137	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.541225910 CEST	1.1.1.1	192.168.2.6	0xdde0	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.546859980 CEST	1.1.1.1	192.168.2.6	0xad78	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.547209024 CEST	1.1.1.1	192.168.2.6	0xec44	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.549388885 CEST	1.1.1.1	192.168.2.6	0x421c	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.549388885 CEST	1.1.1.1	192.168.2.6	0x421c	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.549388885 CEST	1.1.1.1	192.168.2.6	0x421c	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.549388885 CEST	1.1.1.1	192.168.2.6	0x421c	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:13.549803019 CEST	1.1.1.1	192.168.2.6	0xb6cf	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.549803019 CEST	1.1.1.1	192.168.2.6	0xb6cf	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.551099062 CEST	1.1.1.1	192.168.2.6	0x8a6a	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.551099062 CEST	1.1.1.1	192.168.2.6	0x8a6a	No error (0)	s-part-0016.t-0009.t-msedge.net		13.107.246.44	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:13.564133883 CEST	1.1.1.1	192.168.2.6	0x4881	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.564133883 CEST	1.1.1.1	192.168.2.6	0x4881	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.564133883 CEST	1.1.1.1	192.168.2.6	0x4881	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:13.564394951 CEST	1.1.1.1	192.168.2.6	0x7514	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.564394951 CEST	1.1.1.1	192.168.2.6	0x7514	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.564728975 CEST	1.1.1.1	192.168.2.6	0x2958	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.564728975 CEST	1.1.1.1	192.168.2.6	0x2958	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:13.564728975 CEST	1.1.1.1	192.168.2.6	0x2958	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:13.581238985 CEST	1.1.1.1	192.168.2.6	0xf0e7	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:16.688364029 CEST	1.1.1.1	192.168.2.6	0xb934	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:16.688364029 CEST	1.1.1.1	192.168.2.6	0xb934	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:16.688364029 CEST	1.1.1.1	192.168.2.6	0xb934	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:16.689260006 CEST	1.1.1.1	192.168.2.6	0x7182	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:17.064716101 CEST	1.1.1.1	192.168.2.6	0xb85e	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:17.065227032 CEST	1.1.1.1	192.168.2.6	0x2727	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:18.271938086 CEST	1.1.1.1	192.168.2.6	0xee8d	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:18.272768974 CEST	1.1.1.1	192.168.2.6	0x31cd	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:19.594332933 CEST	1.1.1.1	192.168.2.6	0x23f	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:19.594332933 CEST	1.1.1.1	192.168.2.6	0x23f	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:19.594332933 CEST	1.1.1.1	192.168.2.6	0x23f	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:19.595541000 CEST	1.1.1.1	192.168.2.6	0xe310	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:19.595541000 CEST	1.1.1.1	192.168.2.6	0xe310	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:20.659758091 CEST	1.1.1.1	192.168.2.6	0xcc53	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:20.659758091 CEST	1.1.1.1	192.168.2.6	0xcc53	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:20.659758091 CEST	1.1.1.1	192.168.2.6	0xcc53	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:20.659758091 CEST	1.1.1.1	192.168.2.6	0xcc53	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:20.660085917 CEST	1.1.1.1	192.168.2.6	0xe0c0	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:20.660085917 CEST	1.1.1.1	192.168.2.6	0xe0c0	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:20.785244942 CEST	1.1.1.1	192.168.2.6	0xfa7c	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:20.785244942 CEST	1.1.1.1	192.168.2.6	0xfa7c	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:20.934083939 CEST	1.1.1.1	192.168.2.6	0xb7f7	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:20.934083939 CEST	1.1.1.1	192.168.2.6	0xb7f7	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:20.934083939 CEST	1.1.1.1	192.168.2.6	0xb7f7	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:20.934792042 CEST	1.1.1.1	192.168.2.6	0xbafa	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:20.934792042 CEST	1.1.1.1	192.168.2.6	0xbafa	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:23.404736996 CEST	1.1.1.1	192.168.2.6	0x9a83	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:23.404736996 CEST	1.1.1.1	192.168.2.6	0x9a83	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:24.404622078 CEST	1.1.1.1	192.168.2.6	0x2cb9	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:24.404622078 CEST	1.1.1.1	192.168.2.6	0x2cb9	No error (0)	s-part-0016.t-0009.t-msedge.net		13.107.246.44	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:29.084475994 CEST	1.1.1.1	192.168.2.6	0xa156	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.084475994 CEST	1.1.1.1	192.168.2.6	0xa156	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.084475994 CEST	1.1.1.1	192.168.2.6	0xa156	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:29.085119009 CEST	1.1.1.1	192.168.2.6	0xb04f	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.085119009 CEST	1.1.1.1	192.168.2.6	0xb04f	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.085237980 CEST	1.1.1.1	192.168.2.6	0x8446	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.085237980 CEST	1.1.1.1	192.168.2.6	0x8446	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:29.089791059 CEST	1.1.1.1	192.168.2.6	0x9afe	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.089791059 CEST	1.1.1.1	192.168.2.6	0x9afe	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.089791059 CEST	1.1.1.1	192.168.2.6	0x9afe	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:29.089803934 CEST	1.1.1.1	192.168.2.6	0x7ad6	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.089803934 CEST	1.1.1.1	192.168.2.6	0x7ad6	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.096569061 CEST	1.1.1.1	192.168.2.6	0x470e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.096569061 CEST	1.1.1.1	192.168.2.6	0x470e	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:29.099055052 CEST	1.1.1.1	192.168.2.6	0x71d4	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.099067926 CEST	1.1.1.1	192.168.2.6	0xdba8	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.099067926 CEST	1.1.1.1	192.168.2.6	0xdba8	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:29.102308989 CEST	1.1.1.1	192.168.2.6	0x2138	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.102308989 CEST	1.1.1.1	192.168.2.6	0x2138	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:29.110924959 CEST	1.1.1.1	192.168.2.6	0xddd2	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.110948086 CEST	1.1.1.1	192.168.2.6	0x9241	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.110948086 CEST	1.1.1.1	192.168.2.6	0x9241	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:29.111949921 CEST	1.1.1.1	192.168.2.6	0xa270	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:29.111949921 CEST	1.1.1.1	192.168.2.6	0xa270	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:30.191390038 CEST	1.1.1.1	192.168.2.6	0x1aef	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:30.191390038 CEST	1.1.1.1	192.168.2.6	0x1aef	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:30.191402912 CEST	1.1.1.1	192.168.2.6	0x92d	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:30.191402912 CEST	1.1.1.1	192.168.2.6	0x92d	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:30.191402912 CEST	1.1.1.1	192.168.2.6	0x92d	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:30.211651087 CEST	1.1.1.1	192.168.2.6	0x47fb	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:30.211651087 CEST	1.1.1.1	192.168.2.6	0x47fb	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:30.211651087 CEST	1.1.1.1	192.168.2.6	0x47fb	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:30.211973906 CEST	1.1.1.1	192.168.2.6	0xa66	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 08:21:59.298176050 CEST	1.1.1.1	192.168.2.6	0x7b1f	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 08:21:59.298176050 CEST	1.1.1.1	192.168.2.6	0x7b1f	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

microsoft.biosency.com

https:

cdnjs.cloudflare.com

maxcdn.icons8.com

logincdn.msauth.net

collector-pxzc5j78di.hsprotect.net

stk.hsprotect.net

acctcdn.msauth.net

mem.gfx.ms

js.monitor.azure.com

aadcdn.msftauth.net

aadcdn.msauth.net

logincdn.msftauth.net

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49717	130.93.125.135	80	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 08:20:48.134026051 CEST	437	OUT	GET / HTTP/1.1 Host: microsoft.biosency.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 08:20:48.793349981 CEST	375	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 06:20:48 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Location: https://microsoft.biosency.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.18.0</center></body></html>
Sep 29, 2024 08:21:33.807630062 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49716	130.93.125.135	80	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 08:21:33.138665915 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49713	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:47 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 5a 53 69 34 39 48 79 74 72 45 61 2b 72 2f 43 5a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 34 36 35 31 34 65 66 37 64 35 31 61 33 34 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: ZSi49HytrEa+r/CZ.1Context: 846514ef7d51a342
2024-09-29 06:20:47 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 06:20:47 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 5a 53 69 34 39 48 79 74 72 45 61 2b 72 2f 43 5a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 34 36 35 31 34 65 66 37 64 35 31 61 33 34 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 4a 53 48 68 6a 36 30 6a 4f 77 4c 47 35 61 47 48 6c 65 49 79 55 45 37 66 34 55 75 49 2f 73 65 4a 52 4e 34 33 44 50 56 52 6f 47 56 45 38 45 55 37 6a 4e 73 44 65 6c 64 54 4a 5a 63 4d 54 31 57 65 48 38 46 64 48 45 4c 63 43 64 63 48 6d 4d 67 6f 43 6f 74 56 39 31 62 72 33 39 78 71 61 48 74 70 56 7a 6b 6f 58 63 41 41 58 61 4c 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: ZSi49HytrEa+r/CZ.2Context: 846514ef7d51a342<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcJSHhj60jOwLG5aGHleIyUE7f4UuI/seJRN43DPVRoGVE8EU7jNsDeldTJZcMT1WeH8FdHELcCdcHmMgoCotV91br39xqaHtpVzkoXcAAXaLS
2024-09-29 06:20:47 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 5a 53 69 34 39 48 79 74 72 45 61 2b 72 2f 43 5a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 34 36 35 31 34 65 66 37 64 35 31 61 33 34 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: ZSi49HytrEa+r/CZ.3Context: 846514ef7d51a342<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 06:20:47 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 06:20:47 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 53 78 42 34 6e 36 59 76 4a 6b 36 57 73 61 67 75 30 6a 65 55 4b 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: SxB4n6YvJk6Wsagu0jeUKw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49718	130.93.125.135	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:49 UTC	665	OUT	GET / HTTP/1.1 Host: microsoft.biosency.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:49 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 06:20:49 GMT Content-Type: text/html Content-Length: 3832 Last-Modified: Fri, 27 Sep 2024 13:19:57 GMT Connection: close ETag: "66f6b0fd-ef8" Accept-Ranges: bytes
2024-09-29 06:20:49 UTC	3832	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 73 69 7a 65 73 3d 22 32 31 Data Ascii: <!DOCTYPE html><html><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no"> <title>Sign in to your Microsoft account</title> <link rel="icon" type="image/svg+xml" sizes="21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49722	104.17.25.14	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:51 UTC	595	OUT	GET /ajax/libs/twitter-bootstrap/4.5.0/css/bootstrap.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://microsoft.biosency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:52 UTC	922	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:20:51 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5ebae359-27293" Last-Modified: Tue, 12 May 2020 17:56:41 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2338827 Expires: Fri, 19 Sep 2025 06:20:51 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EfDpkuexqxLf5WjyUjvYcMDb1hqnbj94bcwnRW%2Fvjd6sXWnTKhxj8Ln1mFrjG6Qef4%2Fj%2B%2FhlVr%2Bs4aMkIn3nXM5j9LDkQsBTHLQBlwv2aUuQEClhW76%2BIHzoUJkoJdFunQ0cnaQB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca9dea8c99c727b-EWR
2024-09-29 06:20:52 UTC	447	IN	Data Raw: 33 39 38 35 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 Data Ascii: 3985/! Bootstrap v4.5.0 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#661
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e 73 2d 73 65 72 69 66 3a Data Ascii: bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c Data Ascii: text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 Data Ascii: ,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-appea
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 64 69 73 Data Ascii: height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weight:300}.display-1{font-size:6rem;font-weight:300;line-height:1.2}.dis
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 7d 70 72 65 20 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 7d 2e 70 72 65 2d 73 63 72 6f 6c 6c 61 62 6c 65 Data Ascii: .2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:100%;font-weight:700}pre{display:block;font-size:87.5%;color:#212529}pre code{font-size:inherit;color:inherit;word-break:normal}.pre-scrollable
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 2e 63 6f 6c 2d 32 2c 2e 63 6f 6c 2d 33 2c 2e 63 6f 6c 2d 34 2c 2e 63 6f 6c 2d 35 2c 2e 63 6f 6c 2d 36 2c 2e 63 6f 6c 2d 37 2c 2e 63 6f 6c 2d 38 2c 2e 63 6f 6c 2d 39 2c 2e 63 6f 6c 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 6c 67 2c 2e 63 6f 6c 2d 6c 67 2d 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 32 2c 2e 63 6f 6c 2d 6c 67 2d 32 2c 2e 63 6f 6c 2d 6c 67 2d 33 2c 2e 63 6f 6c 2d 6c 67 2d 34 2c 2e 63 6f 6c 2d 6c 67 2d 35 2c 2e 63 6f 6c 2d 6c 67 2d 36 2c 2e 63 6f 6c 2d 6c 67 2d 37 2c 2e 63 6f 6c 2d 6c 67 2d 38 2c 2e 63 6f 6c 2d 6c 67 2d 39 2c 2e 63 6f 6c 2d 6c 67 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 6d 64 2c 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d Data Ascii: .col-2,.col-3,.col-4,.col-5,.col-6,.col-7,.col-8,.col-9,.col-auto,.col-lg,.col-lg-1,.col-lg-10,.col-lg-11,.col-lg-12,.col-lg-2,.col-lg-3,.col-lg-4,.col-lg-5,.col-lg-6,.col-lg-7,.col-lg-8,.col-lg-9,.col-lg-auto,.col-md,.col-md-1,.col-md-10,.col-md-11,.col-
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 37 25 3b 66 6c 65 78 3a 30 20 30 20 31 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 33 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 32 35 25 7d 2e 63 6f 6c 2d 34 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 35 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 36 7b 2d 6d 73 2d 66 6c 65 78 3a Data Ascii: 7%;flex:0 0 16.666667%;max-width:16.666667%}.col-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-4{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.col-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-6{-ms-flex:
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 63 6f 6c 2d 73 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 30 3b 66 6c 65 78 2d 62 Data Ascii: 67%}.offset-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:75%}.offset-10{margin-left:83.333333%}.offset-11{margin-left:91.666667%}@media (min-width:576px){.col-sm{-ms-flex-preferred-size:0;flex-b
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f Data Ascii: ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-sm-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-sm-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49723	104.17.25.14	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:51 UTC	562	OUT	GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://microsoft.biosency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:52 UTC	933	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:20:52 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb09ed3-15d84" Last-Modified: Mon, 04 May 2020 23:01:39 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 775949 Expires: Fri, 19 Sep 2025 06:20:52 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wV30CQlKkgUPIHP7sJ2IbpIX7GaM1a%2F6j6diWO%2BUEWl%2Bxbe%2BW0S6Wg150XdTXR9EXAmdxq5YjzT98XCn1xJnDvsKSKD8hf4lA6s%2FL5VjBljom1K3NRDfnny10N3bJnSKFCoBrh3n"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca9dea8fb3c436d-EWR
2024-09-29 06:20:52 UTC	436	IN	Data Raw: 37 62 66 39 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7bf9/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 Data Ascii: nction(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){ret
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e Data Ascii: var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:fun
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 Data Ascii: )\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+M+"*")
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 Data Ascii: urn!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 Data Ascii: ength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("\|"),r=n.le
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e Data Ascii: mentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChild(e).appendChild(C.createElemen
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3b 69 66 28 22 2a 22 3d 3d 3d 65 29 7b 77 68 69 6c 65 28 6e 3d 6f 5b 69 2b 2b 5d Data Ascii: }return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("*"===e){while(n=o[i++]
2024-09-29 06:20:52 UTC	1369	IN	Data Raw: 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e Data Ascii: ).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&v.push(":en

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49721	130.93.125.135	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:52 UTC	568	OUT	GET /assets/css/styles.min.css HTTP/1.1 Host: microsoft.biosency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://microsoft.biosency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:52 UTC	233	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 06:20:52 GMT Content-Type: text/css Content-Length: 2344 Last-Modified: Fri, 27 Sep 2024 13:19:57 GMT Connection: close ETag: "66f6b0fd-928" Accept-Ranges: bytes
2024-09-29 06:20:52 UTC	2344	IN	Data Raw: 23 6c 6f 67 69 6e 46 6f 72 6d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 32 33 70 78 20 2d 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 36 29 3b 68 65 69 67 68 74 3a 33 37 30 70 78 3b 77 69 64 74 68 3a 34 34 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 35 30 25 3b 74 6f 70 3a 34 39 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 7d 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 2e 2e 2f 61 73 73 65 74 73 2f 69 6d 67 2f 62 61 63 6b 67 72 6f 75 6e 64 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 Data Ascii: #loginForm{background-color:#fff;box-shadow:0 2px 23px -5px rgba(0,0,0,.46);height:370px;width:440px;position:absolute;left:50%;top:49%;transform:translate(-50%,-50%);padding:10px}body{background-image:url(../../assets/img/background.png);background-repea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49725	195.181.170.18	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:52 UTC	584	OUT	GET /fonts/line-awesome/1.1/css/line-awesome.min.css HTTP/1.1 Host: maxcdn.icons8.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://microsoft.biosency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:53 UTC	946	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:20:53 GMT Content-Type: text/css; charset=utf-8 Content-Length: 28101 Connection: close x-amz-id-2: xU5kr54ZaYK+NKwXtQBOyxYIXAxhL0iJE2ujSx3OwFhrdZGkZjbQgzHc5q2knfptl5G1nUywNt0= x-amz-request-id: SNB9VNKB00H1VN11 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Content-Range, Content-Length, ETag Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Mon, 06 Jun 2022 09:58:54 GMT ETag: "4334c8c70998d81bde3e6765828811a6" x-amz-meta-mtime: 1654507817.389231056 X-77-NZT: EggBw7WqEQFBDAHUZjgRAbd1dQYA X-77-NZT-Ray: 4c15622418846f11c5f1f8664b31fc00 X-Accel-Expires: @1728204368 X-Accel-Date: 1727167568 X-Accel-Date-Max: 1714725957 X-77-Cache: HIT X-77-Age: 423285 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: MISS X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-09-29 06:20:53 UTC	15438	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 4c 69 6e 65 20 41 77 65 73 6f 6d 65 20 31 2e 31 2e 30 20 62 79 20 40 69 63 6f 6e 73 5f 38 20 2d 20 68 74 74 70 73 3a 2f 2f 69 63 6f 6e 73 38 2e 63 6f 6d 2f 6c 69 6e 65 2d 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 69 63 6f 6e 73 38 2e 63 6f 6d 2f 67 6f 6f 64 2d 62 6f 79 2d 6c 69 63 65 6e 73 65 2f 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 0a 20 2a 20 4d 61 64 65 20 77 69 74 68 20 6c 6f 76 65 20 62 79 20 49 63 6f 6e 73 38 20 5b 20 68 74 74 70 73 3a 2f 2f 69 63 6f 6e 73 38 2e 63 6f 6d 2f 20 5d 20 75 73 69 6e 67 20 46 6f 6e 74 43 75 73 74 6f 6d 20 5b 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f Data Ascii: /! Line Awesome 1.1.0 by @icons_8 - https://icons8.com/line-awesome * License - https://icons8.com/good-boy-license/ (Font: SIL OFL 1.1, CSS: MIT License) * * Made with love by Icons8 [ https://icons8.com/ ] using FontCustom [ https://github.com/
2024-09-29 06:20:53 UTC	12663	IN	Data Raw: 2d 68 6f 74 65 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 39 22 7d 2e 6c 61 2d 68 6f 75 72 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 61 22 7d 2e 6c 61 2d 68 6f 75 72 67 6c 61 73 73 2d 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 62 22 7d 2e 6c 61 2d 68 6f 75 72 67 6c 61 73 73 2d 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 63 22 7d 2e 6c 61 2d 68 6f 75 72 67 6c 61 73 73 2d 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 64 22 7d 2e 6c 61 2d 68 6f 75 72 67 6c 61 73 73 2d 65 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 65 22 7d 2e 6c 61 2d 68 6f 75 72 67 6c 61 73 73 2d 68 61 6c 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: -hotel:before{content:"\f239"}.la-hourglass:before{content:"\f23a"}.la-hourglass-1:before{content:"\f23b"}.la-hourglass-2:before{content:"\f23c"}.la-hourglass-3:before{content:"\f23d"}.la-hourglass-end:before{content:"\f23e"}.la-hourglass-half:before{cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49729	104.17.25.14	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:52 UTC	586	OUT	GET /ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://microsoft.biosency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:53 UTC	926	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:20:52 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5ebae359-13cbc" Last-Modified: Tue, 12 May 2020 17:56:41 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 99913 Expires: Fri, 19 Sep 2025 06:20:52 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BvHyJkfRueNKjO8mm1ROpxDl8tZytRGBQAFhVdE28qMyCcRGxRrX6cY5HUg7jgT35G1n4zM67wb8R7FYYw43Wcc5ohajoWzYe3fYSLUHOdlrheT%2F2g5cP4tZeU8YMiU2Ju7lBb4N"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca9deaf1caade97-EWR
2024-09-29 06:20:53 UTC	443	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7c00/! Bootstrap v4.5.0 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-09-29 06:20:53 UTC	1369	IN	Data Raw: 65 72 79 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 20 65 26 26 6e 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 65 29 2c 69 26 26 6e 28 Data Ascii: ery)}(this,(function(t,e){"use strict";function n(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function i(t,e,i){return e&&n(t.prototype,e),i&&n(
2024-09-29 06:20:53 UTC	1369	IN	Data Raw: 65 74 22 29 3b 69 66 28 21 65 7c 7c 22 23 22 3d 3d 3d 65 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 65 3d 6e 26 26 22 23 22 21 3d 3d 6e 3f 6e 2e 74 72 69 6d 28 29 3a 22 22 7d 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3f 65 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 6e 3d 65 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 29 2c 69 3d 65 28 74 29 2e 63 73 73 28 22 74 72 61 Data Ascii: et");if(!e\|\|"#"===e){var n=t.getAttribute("href");e=n&&"#"!==n?n.trim():""}try{return document.querySelector(e)?e:null}catch(t){return null}},getTransitionDurationFromElement:function(t){if(!t)return 0;var n=e(t).css("transition-duration"),i=e(t).css("tra
2024-09-29 06:20:53 UTC	1369	IN	Data Raw: 20 62 65 20 69 6e 63 6c 75 64 65 64 20 62 65 66 6f 72 65 20 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 2e 22 29 3b 76 61 72 20 74 3d 65 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 74 5b 30 5d 3c 32 26 26 74 5b 31 5d 3c 39 7c 7c 31 3d 3d 3d 74 5b 30 5d 26 26 39 3d 3d 3d 74 5b 31 5d 26 26 74 5b 32 5d 3c 31 7c 7c 74 5b 30 5d 3e 3d 34 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 61 74 20 6c 65 61 73 74 20 6a 51 75 65 72 79 20 76 31 2e 39 2e 31 20 62 75 74 20 6c 65 73 73 20 74 68 61 6e 20 76 34 2e 30 2e 30 22 29 7d 7d 3b 6c 2e 6a 51 75 65 72 79 44 65 74 65 63 74 Data Ascii: be included before Bootstrap's JavaScript.");var t=e.fn.jquery.split(" ")[0].split(".");if(t[0]<2&&t[1]<9\|\|1===t[0]&&9===t[1]&&t[2]<1\|\|t[0]>=4)throw new Error("Bootstrap's JavaScript requires at least jQuery v1.9.1 but less than v4.0.0")}};l.jQueryDetect
2024-09-29 06:20:53 UTC	1369	IN	Data Raw: 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 28 74 68 69 73 29 2c 6f 3d 69 2e 64 61 74 61 28 22 62 73 2e 61 6c 65 72 74 22 29 3b 6f 7c 7c 28 6f 3d 6e 65 77 20 74 28 74 68 69 73 29 2c 69 2e 64 61 74 61 28 22 62 73 2e 61 6c 65 72 74 22 2c 6f 29 29 2c 22 63 6c 6f 73 65 22 3d 3d 3d 6e 26 26 6f 5b 6e 5d 28 74 68 69 73 29 7d 29 29 7d 2c 74 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 63 6c 6f 73 65 28 74 68 69 73 29 7d 7d 2c 69 28 74 2c 6e 75 6c 6c 2c Data Ascii: jQueryInterface=function(n){return this.each((function(){var i=e(this),o=i.data("bs.alert");o\|\|(o=new t(this),i.data("bs.alert",o)),"close"===n&&o[n](this)}))},t._handleDismiss=function(t){return function(e){e&&e.preventDefault(),t.close(this)}},i(t,null,
2024-09-29 06:20:53 UTC	1369	IN	Data Raw: 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 28 74 68 69 73 29 2e 64 61 74 61 28 22 62 73 2e 62 75 74 74 6f 6e 22 29 3b 69 7c 7c 28 69 3d 6e 65 77 20 74 28 74 68 69 73 29 2c 65 28 74 68 69 73 29 2e 64 61 74 61 28 22 62 73 2e 62 75 74 74 6f 6e 22 2c 69 29 29 2c 22 74 6f 67 67 6c 65 22 3d 3d 3d 6e 26 26 69 5b 6e 5d 28 29 7d 29 29 7d 2c 69 28 74 2c 6e 75 6c 6c 2c 5b 7b 6b 65 79 3a 22 56 45 52 53 49 4f 4e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 34 2e 35 2e 30 22 7d 7d 5d 29 2c 74 7d 28 29 3b 65 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d Data Ascii: Interface=function(n){return this.each((function(){var i=e(this).data("bs.button");i\|\|(i=new t(this),e(this).data("bs.button",i)),"toggle"===n&&i[n]()}))},i(t,null,[{key:"VERSION",get:function(){return"4.5.0"}}]),t}();e(document).on("click.bs.button.data-
2024-09-29 06:20:53 UTC	1369	IN	Data Raw: 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 63 74 69 76 65 22 29 3a 61 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 22 29 7d 7d 29 29 2c 65 2e 66 6e 2e 62 75 74 74 6f 6e 3d 64 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 2e 62 75 74 74 6f 6e 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 64 2c 65 2e 66 6e 2e 62 75 74 74 6f 6e 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 2e 62 75 74 74 6f 6e 3d 66 2c 64 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 70 3d 22 63 61 72 6f 75 73 65 6c 22 2c 6d 3d 22 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 67 3d 65 2e 66 6e 5b 70 5d 2c 76 3d 7b 69 6e 74 65 72 76 61 6c 3a 35 65 33 2c 6b 65 79 62 6f 61 Data Ascii: classList.add("active"):a.classList.remove("active")}})),e.fn.button=d._jQueryInterface,e.fn.button.Constructor=d,e.fn.button.noConflict=function(){return e.fn.button=f,d._jQueryInterface};var p="carousel",m=".bs.carousel",g=e.fn[p],v={interval:5e3,keyboa
2024-09-29 06:20:53 UTC	1369	IN	Data Raw: 6e 73 69 74 69 6f 6e 45 6e 64 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 63 79 63 6c 65 28 21 30 29 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 7d 2c 6e 2e 63 79 63 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 Data Ascii: nsitionEnd(this._element),this.cycle(!0)),clearInterval(this._interval),this._interval=null},n.cycle=function(t){t\|\|(this._isPaused=!1),this._interval&&(clearInterval(this._interval),this._interval=null),this._config.interval&&!this._isPaused&&(this._inte
2024-09-29 06:20:53 UTC	1369	IN	Data Raw: 7d 29 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 6d 6f 75 73 65 65 6e 74 65 72 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 75 73 65 28 65 29 7d 29 29 2e 6f 6e 28 22 6d 6f 75 73 65 6c 65 61 76 65 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 79 63 6c 65 28 65 29 7d 29 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 74 6f 75 63 68 26 26 74 68 69 73 2e 5f 61 64 64 54 6f 75 63 68 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 2c 6e 2e 5f 61 64 64 54 6f 75 63 68 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 Data Ascii: })),"hover"===this._config.pause&&e(this._element).on("mouseenter.bs.carousel",(function(e){return t.pause(e)})).on("mouseleave.bs.carousel",(function(e){return t.cycle(e)})),this._config.touch&&this._addTouchEventListeners()},n._addTouchEventListeners=fu
2024-09-29 06:20:53 UTC	1369	IN	Data Raw: 63 68 44 65 6c 74 61 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 2d 74 2e 74 6f 75 63 68 53 74 61 72 74 58 7d 28 65 29 7d 29 29 2c 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 74 6f 75 63 68 65 6e 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 29 7d 29 29 29 7d 7d 2c 6e 2e 5f 6b 65 79 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e Data Ascii: chDeltaX=e.originalEvent.touches[0].clientX-t.touchStartX}(e)})),e(this._element).on("touchend.bs.carousel",(function(t){return i(t)})))}},n._keydown=function(t){if(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49730	130.93.125.135	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:52 UTC	618	OUT	GET /assets/img/microsoft_logo.svg HTTP/1.1 Host: microsoft.biosency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://microsoft.biosency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:53 UTC	238	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 06:20:53 GMT Content-Type: image/svg+xml Content-Length: 3651 Last-Modified: Fri, 27 Sep 2024 13:19:57 GMT Connection: close ETag: "66f6b0fd-e43" Accept-Ranges: bytes
2024-09-29 06:20:53 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49728	130.93.125.135	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:52 UTC	552	OUT	GET /assets/js/script.min.js HTTP/1.1 Host: microsoft.biosency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://microsoft.biosency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:53 UTC	247	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 06:20:53 GMT Content-Type: application/javascript Content-Length: 2663 Last-Modified: Fri, 27 Sep 2024 13:19:57 GMT Connection: close ETag: "66f6b0fd-a67" Accept-Ranges: bytes
2024-09-29 06:20:53 UTC	2663	IN	Data Raw: 63 6f 6e 73 74 20 73 6c 69 64 65 50 61 67 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 6c 69 64 65 2d 70 61 67 65 22 29 2c 73 65 63 6f 6e 64 53 6c 69 64 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 65 63 6f 6e 64 53 6c 69 64 65 22 29 2c 62 74 6e 4e 65 78 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 66 69 72 73 74 4e 65 78 74 22 29 2c 70 72 65 76 42 74 6e 53 65 63 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 70 72 65 76 2d 31 22 29 2c 73 75 62 6d 69 74 42 74 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 75 62 6d 69 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 61 74 Data Ascii: const slidePage=document.querySelector(".slide-page"),secondSlide=document.querySelector(".secondSlide"),btnNext=document.querySelector(".firstNext"),prevBtnSec=document.querySelector(".prev-1"),submitBtn=document.querySelector(".submit");function validat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49727	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:53 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 06:20:53 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=123849 Date: Sun, 29 Sep 2024 06:20:53 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49731	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:54 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 06:20:54 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=123878 Date: Sun, 29 Sep 2024 06:20:54 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 06:20:54 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49736	104.17.25.14	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:54 UTC	380	OUT	GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:54 UTC	929	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:20:54 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb09ed3-15d84" Last-Modified: Mon, 04 May 2020 23:01:39 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 775951 Expires: Fri, 19 Sep 2025 06:20:54 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YG9Akbe899sKxZKPNYk3R1q1tuvj%2FDrs1EYgAWrNqVn%2FcB5c2ZHKPFjjen7oz4y1xRX%2FbaWSwbKCeU6wNFimOgsU7DtqyVJWahLZCI8IJMcEdUbeWdtNpE4iedDxkRiwdWYHtsGS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca9deb88a414388-EWR
2024-09-29 06:20:54 UTC	440	IN	Data Raw: 37 62 66 35 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7bf5/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 Data Ascii: on(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: s.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f Data Ascii: n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:functio
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e Data Ascii: \|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+M+""),z=n
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e Data Ascii: 0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 Data Ascii: h&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("\|"),r=n.length
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 Data Ascii: Element&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChild(e).appendChild(C.createElement("d
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3b 69 66 28 22 2a 22 3d 3d 3d 65 29 7b 77 68 69 6c 65 28 6e 3d 6f 5b 69 2b 2b 5d 29 31 3d 3d Data Ascii: urn[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("*"===e){while(n=o[i++])1==
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 Data Ascii: tAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&v.push(":enable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49732	130.93.125.135	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:54 UTC	639	OUT	GET /assets/img/background.png HTTP/1.1 Host: microsoft.biosency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://microsoft.biosency.com/assets/css/styles.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:54 UTC	240	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 06:20:54 GMT Content-Type: image/png Content-Length: 1294919 Last-Modified: Fri, 27 Sep 2024 13:19:57 GMT Connection: close ETag: "66f6b0fd-13c247" Accept-Ranges: bytes
2024-09-29 06:20:54 UTC	16144	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0f 00 00 00 08 6e 08 06 00 00 00 a9 62 a8 99 00 00 06 4e 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ad 57 5b 92 24 27 0c fc e7 14 3e 02 12 08 c4 71 78 46 f8 06 3e be 53 a2 ba e7 b1 6b 7b 37 c2 5d 31 55 94 a0 40 99 29 09 26 ec bf fe 3c e1 0f fc 48 6b 09 59 aa 96 56 4a c4 2f b7 dc b8 a3 a1 f1 fe 9a df 29 66 bf bf 7e e7 b1 7e b1 87 b2 9f cf 18 a6 84 67 ba 1d b5 df 27 75 d8 e5 e3 83 d7 1a 34 be da 83 3e 3d ac cf 44 af 95 f9 3e 92 ad 6c ed f5 d9 49 d8 f9 da 29 3f 13 b5 7d 1b a5 69 fd ec ea 78 26 9a cf 40 77 e5 f9 cb 6f b7 ee c3 de c3 17 43 05 4b 4b b0 50 62 de 89 52 f4 bb 5e 0f d2 fd eb f8 53 dc 29 55 1b 87 67 4f 39 b5 e0 0f 7a 26 03 21 5f e0 7d 10 fc 99 a0 ef e4 Data Ascii: PNGIHDRnbNzTXtRaw profile type exifxW[$'>qxF>Sk{7]1U@)&<HkYVJ/)f~~g'u4>=D>lI)?}ix&@woCKKPbR^S)UgO9z&!_}
2024-09-29 06:20:54 UTC	16384	IN	Data Raw: dc af ce 55 27 9b 32 63 a9 3f ca 03 b5 0c 55 7f f7 68 63 64 dd 23 db 18 79 c8 99 43 75 d9 f8 ba 47 66 07 bf bd 8c 45 b0 f8 f9 90 91 c1 c3 51 42 c7 45 89 12 25 64 6e f5 f2 37 6b c1 89 b9 87 7f d3 db 4d a0 9a fd 9f 6f c6 2d f8 d5 ee f2 64 b6 fb b9 9b 06 57 da 45 75 5d 74 84 95 1b fa d2 0b 63 cb 6f 48 c6 95 fb 86 e2 ac 68 9b 81 15 43 69 f6 cb 18 95 33 be 8a 24 c5 1e c9 28 a3 e5 83 42 d9 91 da 4c 49 3e 4b 3a 3f e7 c6 d3 ea bf 74 7c 39 1a 49 2f f6 bc 44 df 14 ae ac ae 1d 02 6e 6d e6 2c db d0 64 7e 29 b8 e8 bc 44 1b 65 c2 14 66 e1 99 85 83 f8 cd 9e 47 09 f6 63 3e e3 dd 6a 36 25 dc 97 15 a8 cc ed 69 b9 98 5b 97 11 b5 b2 93 7a b4 69 c1 7e e7 99 a9 2f 9c 59 6e f8 86 f7 fb ab 1c 62 d0 26 9e 18 42 2d 8d c1 c3 00 8e ba 1e 93 5b 3c 55 77 5e 63 c7 b7 b5 4e 9c 4c b3 d6 Data Ascii: U'2c?Uhcd#yCuGfEQBE%dn7kMo-dWEu]tcoHhCi3$(BLI>K:?t\|9I/Dnm,d~)DefGc>j6%i[zi~/Ynb&B-[<Uw^cNL
2024-09-29 06:20:54 UTC	16384	IN	Data Raw: c6 1f ce 6d b0 6f 3e 9c 2d 4a 2b 66 c3 4a 25 90 f6 cf 82 7f c4 13 d5 18 11 2b 32 87 16 cf 16 56 8b 7b 96 06 95 59 2a 34 e7 e2 a8 e5 e9 51 0e 4b 02 e0 52 f6 e7 56 f0 55 1b 1d fd cd fc db 62 20 e4 b1 e7 68 1a 0c a0 67 57 6c 75 f3 3e 04 3c d7 03 96 ac 9a 33 a7 df 85 b6 5e 06 0d ad 6b fd c8 f0 ef 1e e8 d5 f5 23 51 de ff 71 18 8a 91 41 d8 b0 b5 4c 6f 86 3d e0 8f 41 eb 12 5d 87 80 65 97 26 73 ae f8 36 69 53 cb b2 29 dd 43 fa 6b ce a8 b2 94 d3 dd d8 9c 7c 1e c0 6c 5e 80 bf f6 82 68 68 ff f2 21 60 94 d2 68 17 d6 91 55 fb f9 d2 d8 6f 6a c3 d3 bd 5e 64 06 e7 1f db 45 31 ce 5b 08 a3 b8 c4 a7 e8 87 e1 ad 7d a9 85 5e a4 db a8 24 e3 85 59 a5 64 e5 f7 97 37 7f b1 0d 0a d1 94 16 fe 91 fc de f3 ad 06 7b a1 12 c5 91 b6 91 7b ae fd a6 79 6e d1 e7 14 23 10 c6 3c 6a 7d f4 9e Data Ascii: mo>-J+fJ%+2V{Y*4QKRVUb hgWlu><3^k#QqALo=A]e&s6iS)Ck\|l^hh!`hUoj^dE1[}^$Yd7{{yn#<j}
2024-09-29 06:20:54 UTC	16384	IN	Data Raw: 2d db f2 69 0a d7 e9 9f 5f 91 5b ed 36 f4 4c b9 ab cf 96 aa e4 35 7c 56 43 33 e1 ee e6 29 a3 71 b5 5a 9e bb ae 70 4d 3e ab f2 9b 58 0f 14 74 81 78 d6 90 92 30 95 f6 bb 74 20 10 c7 81 46 8b e0 c1 08 6f 1d b2 a6 d7 0f 34 18 4f b7 84 27 be a3 46 40 1b 75 de 0f 09 5b 2d 5b 58 0b 69 cc c8 6b c1 2f a5 67 7b 26 79 2b f4 33 8d 6b 6b 96 0b 03 fa 66 ca 1f 38 25 59 65 e5 fe 49 94 b1 0c 41 df 38 55 93 05 ca dc 23 cd 7e e6 f6 58 61 8f e4 a9 64 a3 ec ba 8c 1f 4f 16 82 46 fa d9 e3 38 41 ae d4 e7 a0 0a 67 09 e2 cf c8 28 ad 7b 47 ad 36 b2 a4 f7 fb 6c 63 8f 3f f5 c9 56 78 a0 89 b0 d7 98 03 8e 9e 00 44 c8 83 a8 8d 81 2f bb 83 44 b5 83 a0 32 09 2f 83 81 38 8e e2 cd c8 10 2b 02 76 55 d7 0e 78 d9 b3 6f a6 4d 32 7e 49 49 22 19 b1 6a da 9e e1 e2 65 97 3e a7 e6 02 11 6d a6 c5 6b Data Ascii: -i_[6L5\|VC3)qZpM>Xtx0t Fo4O'F@u[-[Xik/g{&y+3kkf8%YeIA8U#~XadOF8Ag({G6lc?VxD/D2/8+vUxoM2~II"je>mk
2024-09-29 06:20:54 UTC	16384	IN	Data Raw: 85 a8 3e 77 25 39 ee 0c 1d 40 38 86 86 73 ce d9 f9 f5 d8 78 ab 4b d5 d0 f3 a8 98 37 6b f6 ea d1 67 77 e6 ea 0e af 78 da e9 4e 8e d4 3b 02 fe 8f f6 29 24 5b fd 2e 1b 6d 58 de db 18 7c 50 48 96 2c 5a 07 8d 3d 58 9c ff 1f 50 01 98 1d fc 60 10 04 1e 59 b9 69 9a c6 df bf f2 6f 48 fd 91 b3 f1 ac 0d 36 f2 d8 8e 92 90 79 a5 af cb 50 35 84 fb c7 cf 52 55 c3 5a 5f 1c 37 0f d3 03 e7 14 2a 35 8b 24 cd 74 31 58 81 dd 9f e2 bf 62 aa 42 f2 75 7a 8e 64 ba ed 5e 03 dd fa 6a 3c 46 d3 e0 a9 6b 89 3d 39 fe 29 86 8a ce 3d de 2c f8 88 cd ec 85 5c 5f 1e 9b 79 8e 82 11 6e 8a c1 95 80 37 81 b9 fa 86 7f 46 2e be 61 24 08 0b 10 cd 6d ba b7 86 05 b0 dc 23 61 65 ad 61 d1 79 b4 a5 30 a0 92 ee 40 a1 62 47 39 3a 47 4c de 5c 7f 3a ad bc 39 a7 ac 8f e2 2d 7a e2 80 b5 f5 b5 ae ad 1d 5c d6 Data Ascii: >w%9@8sxK7kgwxN;)$[.mX\|PH,Z=XP`YioH6yP5RUZ_7*5$t1XbBuzd^j<Fk=9)=,\_yn7F.a$m#aeay0@bG9:GL\:9-z\
2024-09-29 06:20:54 UTC	16384	IN	Data Raw: 2c 7a 5e a5 b1 14 e2 05 74 b7 0d 25 2b 6a ad 44 5d 7a e7 be 2e 2a 3b c8 12 87 ea a8 45 4c be 55 4f 0f 7e 16 9b 31 59 e3 f5 79 6f 2c 92 b3 c5 74 a7 66 1a 44 2f 1c ae d1 92 8a b9 95 8d 8f 06 1f c2 63 18 f5 ce fa d9 98 53 65 69 2e c3 f3 66 a9 f3 71 d1 47 b6 26 57 23 dc ea bd e3 2f 06 df f7 13 f0 2e f0 99 62 cd 7b c5 64 90 f6 d0 e8 d2 79 c2 a1 be 91 c1 51 47 51 40 30 99 57 bc e5 c3 a3 f7 a0 3f 13 3d 45 03 ea a9 3f 4a c3 c3 fa c6 ff 32 cf c8 5b a0 e3 0a c9 1f d5 8f f8 bf 50 a8 c6 b1 36 db ab f3 6f a8 39 ac 18 df a1 ff 06 59 21 bb 79 9e 67 53 db ca f8 98 04 02 da 21 91 30 7e 7c 96 b7 bc b9 bb 74 3d 9e e5 79 e5 de fb fe 1f 40 b6 9f 47 fa 2e bd 4b cb 6c 29 0f e6 9d e9 7e eb 0d 70 84 d1 ee a5 3f a1 0b 04 e5 cf da 06 32 0a 5d 9c d5 dc 0c 5d 02 54 a5 ac 55 72 df 15 Data Ascii: ,z^t%+jD]z.*;ELUO~1Yyo,tfD/cSei.fqG&W#/.b{dyQGQ@0W?=E?J2[P6o9Y!ygS!0~\|t=y@G.Kl)~p?2]]TUr
2024-09-29 06:20:54 UTC	16384	IN	Data Raw: f6 dd 22 68 dd d0 fa fa 05 1c 8b 07 3d 0d a7 b5 fb ae 46 7f cb eb 22 43 ed 44 c7 40 66 e3 96 a2 5d 2c aa 37 0c 2f 47 a2 88 30 28 26 aa 78 55 2d 2e 21 b9 6d bb a7 ad 37 09 85 00 93 06 3b bb 15 3e 37 85 99 e5 19 15 f3 5c 17 04 3f f2 2b d3 0e 36 50 fc 1b a2 49 75 ba 91 86 15 cb 56 07 86 ca a9 f8 e7 ee 33 e0 10 68 81 dc ef bd e3 2f 2c 4f e6 7a 87 32 0b bb 8e 6b 50 6e 38 56 4a 06 27 b4 12 97 45 0f 2d cb 51 49 0e 6d b3 5a 9e 66 c7 2e c3 d1 f2 6f 91 f6 b2 3c a5 98 c6 b3 b2 20 1e fe 06 db 0d 8f 11 2f 98 8a b7 a0 96 fe 50 e1 5b bd 9a 27 5d ab 4d 2c 47 30 5e 8e dc 59 a2 fb b7 29 72 77 e8 f8 5b 65 9b 06 0b a2 4a e1 f9 aa d8 6b cd ce 51 f7 9d 97 54 cd 3a 61 d8 0b cc 74 1f c3 a7 ab 9e d7 b7 54 28 90 f7 1d a5 bd 8e 46 e8 c1 74 7d c3 80 1d 59 b4 cd 3c c5 23 38 c5 31 2c Data Ascii: "h=F"CD@f],7/G0(&xU-.!m7;>7\?+6PIuV3h/,Oz2kPn8VJ'E-QImZf.o< /P[']M,G0^Y)rw[eJkQT:atT(Ft}Y<#81,
2024-09-29 06:20:54 UTC	16384	IN	Data Raw: 8e 6d 74 b5 ae 1d d7 6c 58 c2 60 d1 ae 06 c8 b1 fc 58 f2 5d 21 5f 6d 44 7f 75 02 fe e7 b6 dd a7 3d 97 d1 66 7e 82 ad b8 a3 64 f2 df 88 80 04 86 e7 93 23 46 f2 ac 30 0c 8b 12 d7 52 16 01 34 44 e3 7d 0f 66 76 3e 31 c7 89 b7 67 9c c9 8d a5 29 eb 9a c2 f2 b4 98 8a da ca c2 16 e9 b7 8e 03 1d 9e 2d bd 03 8e f9 e0 c6 da 8d c8 31 e3 b2 1f af 6b 72 2f 78 17 ec 5a f7 5c 16 9e e6 b5 40 eb aa 17 1f 74 93 1b dc 8e 68 cb 54 8c a1 98 77 02 b8 37 17 d1 40 12 95 34 98 5a ce 4f 07 59 9c d8 f0 62 71 ef 4c 9c 67 d8 84 d9 2d f3 35 85 26 31 8e b7 11 bc 47 3f 39 c3 6f 8a f0 58 e7 cf 88 47 c6 71 a0 16 7e 9a 62 6b cc ad ae 4b 32 03 63 c6 bb 55 8b ee 72 e8 68 b3 15 86 47 41 a9 3a ea eb dc ba c6 47 eb 18 66 27 ff 6f 78 df 30 bb f8 53 0e a1 ea 91 06 fc 83 09 70 66 0b e8 45 a5 80 05 Data Ascii: mtlX`X]!_mDu=f~d#F0R4D}fv>1g)-1kr/xZ\@thTw7@4ZOYbqLg-5&1G?9oXGq~bkK2cUrhGA:Gf'ox0SpfE
2024-09-29 06:20:54 UTC	16384	IN	Data Raw: 6a 13 85 07 47 f9 c0 b3 d5 55 f3 07 37 5e 78 bc 0d 1f 7f e0 3a 75 a6 dd b7 e3 f5 60 a1 8b 3d 7a a8 8e 59 07 14 70 08 78 c9 ff 83 69 53 b2 e1 d6 bd bc af eb 9f 55 81 9e b1 21 65 6d ab 59 57 b3 05 89 91 29 8e 94 fa 25 f7 eb 5a d7 ba ec 80 bd 0f 62 59 d7 6f 0a d7 22 c1 1c 11 c3 0d 65 80 bf 4d 6b cd 2e df a3 aa d5 83 b2 8c eb 5a d7 ba 1a ec c0 c2 82 8f c0 cf b7 d9 85 cc ac cf fc a9 6a 90 bd dc 6e 6b 1b 30 6f 62 99 f7 22 f7 6f 8c 70 61 b9 75 fd 8e 21 fd 2d dd 5e f4 7f 3c 8e 9b 54 da e8 a2 25 6c e0 62 b0 f0 84 63 4c 5e cb c7 69 30 b3 07 37 a6 07 aa 99 99 8f f5 79 5d f7 1d 53 df 08 5d 13 61 93 ea 34 c6 ec ef 80 f2 6f 54 12 7d e1 cf 75 f9 a4 63 7f a4 69 65 a3 7e 19 8d f0 27 f6 c6 60 62 fa cf 66 bf 69 f5 ab d3 f2 03 e6 b7 14 a9 cf 27 49 3d 16 5c 18 a2 27 d6 12 32 Data Ascii: jGU7^x:u`=zYpxiSU!emYW)%ZbYo"eMk.Zjnk0ob"opau!-^<T%lbcL^i07y]S]a4oT}ucie~'`bfi'I=\'2
2024-09-29 06:20:54 UTC	16384	IN	Data Raw: 12 4b ff 24 f8 6a 8a 76 4d d6 8f 05 99 66 2d ab 5f 4f d7 16 13 18 c8 db 9f 10 0f 9e fc ff 9b a4 4c be f7 6d 04 18 40 ff d6 4d 17 d6 b8 12 7b 3f 06 13 39 a5 5c 59 c9 67 f6 8c e7 cb fb 6d 28 22 e2 73 3d 6e 36 45 72 54 a4 cf 26 33 d2 6c 04 a6 32 40 de bc 43 8b f2 99 18 a3 71 a7 7b 0d 63 60 25 cf d7 b5 a7 f7 db ca c2 85 cb b6 24 14 39 14 70 a0 6c 93 20 ad 53 64 2d 81 23 f7 9c 51 3d ba d7 31 a8 08 5b f2 bd 0b cf b5 26 f7 4a 7f b7 fe 56 77 68 ac 36 40 16 60 d4 5a de ab 37 20 8a b0 14 8d f8 9e 85 d0 bf 21 8f 72 be df 42 ff dd ce 82 4f fa aa a4 64 8d ac 73 af cb 51 8e af 98 60 06 1a 9e 01 47 e8 56 61 3e c4 8e 6d c6 ee 70 39 73 43 a7 b8 31 11 28 36 69 cb 35 78 d1 2e 6e 6c 1e 03 3a 5b 97 ab b1 49 57 0e 12 15 2f b7 e8 44 1e 1c 96 72 c7 69 6e 20 bf 55 41 4e 16 65 65 Data Ascii: K$jvMf-_OLm@M{?9\Ygm("s=n6ErT&3l2@Cq{c`%$9pl Sd-#Q=1[&JVwh6@`Z7 !rBOdsQ`GVa>mp9sC1(6i5x.nl:[IW/Drin UANee

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49737	104.17.25.14	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:54 UTC	404	OUT	GET /ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:54 UTC	932	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:20:54 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5ebae359-13cbc" Last-Modified: Tue, 12 May 2020 17:56:41 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 99915 Expires: Fri, 19 Sep 2025 06:20:54 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MFlMHYmncP%2BOXCVsgRoNUAAiszTY%2FjTrEAjvjQQSQ2myR8DTzvYEkF3D7gAKeL27MurwJuJVy27%2F7mtse%2FydF55qh7wGl5wCjnwRjwg%2BogzB9y32oYuqNUx484zeLfVlpQYggAL6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca9deb8e89f19a1-EWR
2024-09-29 06:20:54 UTC	437	IN	Data Raw: 37 62 66 61 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bfa/! Bootstrap v4.5.0 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 2c 74 2e 6a 51 75 65 72 79 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 20 65 26 26 6e 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 65 29 Data Ascii: ,t.jQuery)}(this,(function(t,e){"use strict";function n(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function i(t,e,i){return e&&n(t.prototype,e)
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 61 2d 74 61 72 67 65 74 22 29 3b 69 66 28 21 65 7c 7c 22 23 22 3d 3d 3d 65 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 65 3d 6e 26 26 22 23 22 21 3d 3d 6e 3f 6e 2e 74 72 69 6d 28 29 3a 22 22 7d 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3f 65 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 6e 3d 65 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 29 2c 69 3d 65 28 74 29 2e 63 73 Data Ascii: a-target");if(!e\|\|"#"===e){var n=t.getAttribute("href");e=n&&"#"!==n?n.trim():""}try{return document.querySelector(e)?e:null}catch(t){return null}},getTransitionDurationFromElement:function(t){if(!t)return 0;var n=e(t).css("transition-duration"),i=e(t).cs
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 79 20 6d 75 73 74 20 62 65 20 69 6e 63 6c 75 64 65 64 20 62 65 66 6f 72 65 20 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 2e 22 29 3b 76 61 72 20 74 3d 65 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 74 5b 30 5d 3c 32 26 26 74 5b 31 5d 3c 39 7c 7c 31 3d 3d 3d 74 5b 30 5d 26 26 39 3d 3d 3d 74 5b 31 5d 26 26 74 5b 32 5d 3c 31 7c 7c 74 5b 30 5d 3e 3d 34 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 61 74 20 6c 65 61 73 74 20 6a 51 75 65 72 79 20 76 31 2e 39 2e 31 20 62 75 74 20 6c 65 73 73 20 74 68 61 6e 20 76 34 2e 30 2e 30 22 29 7d 7d 3b 6c 2e 6a 51 75 65 72 79 Data Ascii: y must be included before Bootstrap's JavaScript.");var t=e.fn.jquery.split(" ")[0].split(".");if(t[0]<2&&t[1]<9\|\|1===t[0]&&9===t[1]&&t[2]<1\|\|t[0]>=4)throw new Error("Bootstrap's JavaScript requires at least jQuery v1.9.1 but less than v4.0.0")}};l.jQuery
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 29 7d 2c 74 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 28 74 68 69 73 29 2c 6f 3d 69 2e 64 61 74 61 28 22 62 73 2e 61 6c 65 72 74 22 29 3b 6f 7c 7c 28 6f 3d 6e 65 77 20 74 28 74 68 69 73 29 2c 69 2e 64 61 74 61 28 22 62 73 2e 61 6c 65 72 74 22 2c 6f 29 29 2c 22 63 6c 6f 73 65 22 3d 3d 3d 6e 26 26 6f 5b 6e 5d 28 74 68 69 73 29 7d 29 29 7d 2c 74 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 63 6c 6f 73 65 28 74 68 69 73 29 7d 7d 2c 69 28 74 Data Ascii: )},t._jQueryInterface=function(n){return this.each((function(){var i=e(this),o=i.data("bs.alert");o\|\|(o=new t(this),i.data("bs.alert",o)),"close"===n&&o[n](this)}))},t._handleDismiss=function(t){return function(e){e&&e.preventDefault(),t.close(this)}},i(t
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 28 74 68 69 73 29 2e 64 61 74 61 28 22 62 73 2e 62 75 74 74 6f 6e 22 29 3b 69 7c 7c 28 69 3d 6e 65 77 20 74 28 74 68 69 73 29 2c 65 28 74 68 69 73 29 2e 64 61 74 61 28 22 62 73 2e 62 75 74 74 6f 6e 22 2c 69 29 29 2c 22 74 6f 67 67 6c 65 22 3d 3d 3d 6e 26 26 69 5b 6e 5d 28 29 7d 29 29 7d 2c 69 28 74 2c 6e 75 6c 6c 2c 5b 7b 6b 65 79 3a 22 56 45 52 53 49 4f 4e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 34 2e 35 2e 30 22 7d 7d 5d 29 2c 74 7d 28 29 3b 65 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 62 75 74 74 6f 6e Data Ascii: jQueryInterface=function(n){return this.each((function(){var i=e(this).data("bs.button");i\|\|(i=new t(this),e(this).data("bs.button",i)),"toggle"===n&&i[n]()}))},i(t,null,[{key:"VERSION",get:function(){return"4.5.0"}}]),t}();e(document).on("click.bs.button
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 64 22 29 3f 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 63 74 69 76 65 22 29 3a 61 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 22 29 7d 7d 29 29 2c 65 2e 66 6e 2e 62 75 74 74 6f 6e 3d 64 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 2e 62 75 74 74 6f 6e 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 64 2c 65 2e 66 6e 2e 62 75 74 74 6f 6e 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 2e 62 75 74 74 6f 6e 3d 66 2c 64 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 70 3d 22 63 61 72 6f 75 73 65 6c 22 2c 6d 3d 22 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 67 3d 65 2e 66 6e 5b 70 5d 2c 76 3d 7b 69 6e 74 65 72 76 61 6c 3a 35 65 33 2c Data Ascii: d")?a.classList.add("active"):a.classList.remove("active")}})),e.fn.button=d._jQueryInterface,e.fn.button.Constructor=d,e.fn.button.noConflict=function(){return e.fn.button=f,d._jQueryInterface};var p="carousel",m=".bs.carousel",g=e.fn[p],v={interval:5e3,
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 63 79 63 6c 65 28 21 30 29 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 7d 2c 6e 2e 63 79 63 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 Data Ascii: gerTransitionEnd(this._element),this.cycle(!0)),clearInterval(this._interval),this._interval=null},n.cycle=function(t){t\|\|(this._isPaused=!1),this._interval&&(clearInterval(this._interval),this._interval=null),this._config.interval&&!this._isPaused&&(this
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 6f 77 6e 28 65 29 7d 29 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 6d 6f 75 73 65 65 6e 74 65 72 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 75 73 65 28 65 29 7d 29 29 2e 6f 6e 28 22 6d 6f 75 73 65 6c 65 61 76 65 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 79 63 6c 65 28 65 29 7d 29 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 74 6f 75 63 68 26 26 74 68 69 73 2e 5f 61 64 64 54 6f 75 63 68 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 2c 6e 2e 5f 61 64 64 54 6f 75 63 68 45 76 65 6e 74 4c 69 73 74 65 6e Data Ascii: own(e)})),"hover"===this._config.pause&&e(this._element).on("mouseenter.bs.carousel",(function(e){return t.pause(e)})).on("mouseleave.bs.carousel",(function(e){return t.cycle(e)})),this._config.touch&&this._addTouchEventListeners()},n._addTouchEventListen
2024-09-29 06:20:54 UTC	1369	IN	Data Raw: 3a 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 2d 74 2e 74 6f 75 63 68 53 74 61 72 74 58 7d 28 65 29 7d 29 29 2c 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 74 6f 75 63 68 65 6e 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 29 7d 29 29 29 7d 7d 2c 6e 2e 5f 6b 65 79 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 Data Ascii: :t.touchDeltaX=e.originalEvent.touches[0].clientX-t.touchStartX}(e)})),e(this._element).on("touchend.bs.carousel",(function(t){return i(t)})))}},n._keydown=function(t){if(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49734	195.181.170.18	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:54 UTC	654	OUT	GET /fonts/line-awesome/1.1/fonts/line-awesome.woff2?v=1.1. HTTP/1.1 Host: maxcdn.icons8.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://microsoft.biosency.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://maxcdn.icons8.com/fonts/line-awesome/1.1/css/line-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:54 UTC	932	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:20:54 GMT Content-Type: font/woff2 Content-Length: 45108 Connection: close x-amz-id-2: EnTvAeKJ7WmHajD4Sk5zLnrKcTiarrCx1KGrcSSoKF2qb0Sr+vGFu5hNeotIXv9BDpa9E0i7R3U= x-amz-request-id: DFRK61A31YSVH9N3 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Content-Range, Content-Length, ETag Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Mon, 06 Jun 2022 09:58:53 GMT ETag: "452a5b42cb4819f09d35bcf6cbdb24c1" x-amz-meta-mtime: 1654507811.164297687 X-77-NZT: EgwBw7WqEQH39mQPAAwBJRPCLgH3gl8OAA X-77-NZT-Ray: 4c1562240d5e6462c6f1f8660c014328 X-Accel-Expires: @1727618616 X-Accel-Date: 1726581968 X-77-Cache: HIT X-77-Age: 1008886 Server: CDN77-Turbo X-Accel-Date-Max: 1721302964 X-Cache: HIT X-Age: 1008886 X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-09-29 06:20:54 UTC	15452	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 b0 34 00 0d 00 00 00 01 b8 58 00 00 af d8 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 06 60 00 82 4a 08 04 11 08 0a 86 95 3c 84 ea 79 0b 8a 26 00 01 36 02 24 03 8a 2e 04 20 05 83 5d 07 bc 37 5b 06 5d 71 e8 00 b9 6e 07 82 7f fe 7b 59 46 11 e8 0e 98 e3 15 4c a7 2a c6 36 2c 7a 70 1e 40 50 ba f5 ac ec ff ff b4 a4 22 63 36 d9 9e 04 86 00 f3 5c f5 25 94 ca 36 51 92 80 2a 49 64 88 0c b2 97 2c 59 21 23 b5 3d f6 71 3c 8e b3 0c 1e 5c fd dc 47 8d 17 1d 5d 2e a6 ee 82 f9 c4 a5 a2 fa 85 25 20 22 10 13 88 44 56 97 ad 61 12 d5 65 33 db cc 36 b3 a8 44 7c a7 42 52 7f 70 e1 f3 85 ef fb ee f1 e6 6b fb d6 b4 7e c0 1f cf 7d dd 6b 74 18 54 e2 6a ff be ea c6 63 9e a7 6a 42 4c 37 ee 7e ea f0 fd a7 12 d5 Data Ascii: wOF24X?FFTM`J<y&6$. ]7[]qn{YFL6,zp@P"c6\%6QId,Y!#=q<\G].% "DVae36D\|BRpk~}ktTjcjBL7~
2024-09-29 06:20:54 UTC	16384	IN	Data Raw: 7b 54 80 26 06 19 2f 47 81 0b 79 1a d7 75 34 c1 45 7b b5 08 b7 56 a8 44 d9 42 a7 52 d8 79 84 ac 1f d1 e4 21 d3 b8 24 69 17 51 a9 2d 8b 3b cd cd 59 12 7c d1 5d 98 37 70 55 41 9e ba bc 67 50 e8 83 dd 69 c2 ea 20 ee 92 8b f4 cb d5 40 63 34 c1 a2 d3 1d d6 6e b8 17 ab 48 84 70 ac 4d 7f dc fd b3 8d 72 d1 10 d6 a5 87 3f 31 f6 0d ef 48 67 87 39 ee 1e b5 b6 c6 74 e5 64 67 bf 49 8e 21 55 26 94 8e 0d f2 4a 19 18 8f 2a f6 ea d5 13 3a d3 cc 34 03 b7 c2 a8 d8 0b 50 de e4 95 7d 3d db 23 5b 2a dd 6f a0 c8 ef cb 7f 23 ee 73 a8 62 0b 80 a8 88 6b 88 8e 03 ad bf 74 85 cd 53 1f c1 78 14 6d 35 5d 43 bb 13 09 a0 b8 b9 59 2f d9 97 16 dd e5 4b e1 23 5b e2 d1 c4 92 b5 54 62 ab e7 7c bb ee 13 65 54 3f b3 17 8f 2c 8a d6 86 9d 1d bd 1a 6a 84 52 f6 b5 b8 88 a8 45 a3 81 de e3 32 5c d9 Data Ascii: {T&/Gyu4E{VDBRy!$iQ-;Y\|]7pUAgPi @c4nHpMr?1Hg9tdgI!U&J:4P}=#[o#sbktSxm5]CY/K#[Tb\|eT?,jRE2\
2024-09-29 06:20:54 UTC	13272	IN	Data Raw: ef ba 13 47 50 76 90 08 02 5f 77 12 b2 e9 ac 16 d2 de 23 80 00 7a ce a8 35 cf f2 9e 34 d7 39 aa ba 2b 59 19 76 f8 ff 82 73 d4 7b d8 4b 99 2d f6 3a 94 44 ea b5 cc 49 46 38 d3 e8 a5 e2 ae 4e 36 08 af 9b d5 62 20 60 76 22 20 51 8d 19 b5 a6 78 2e 0f 91 3a 97 e6 71 b3 82 f8 ef 63 7a 94 ed d3 60 08 21 e7 e3 62 fa b0 88 64 8e 0b 46 d7 8b 3a c9 7a 7a ba 41 c3 02 ab c7 ac a0 19 51 5f 9c 03 39 9c e6 44 18 c6 88 69 8a a1 09 a3 bf dd 19 43 34 e8 5b 64 fa 2a 88 59 e2 31 fb fb 5a 29 cd 11 ed 1e f0 4e 24 11 0e ef 20 10 1a 90 c8 28 c3 86 00 82 4c 04 32 af b8 e2 92 bc 8d f8 8f a3 ee 81 ac 98 04 10 8b 9b 80 28 88 f3 ee f8 92 c9 84 98 a3 7c 8e 8a a8 58 2a cc 16 f9 b0 45 6f 33 d6 ff 1d 93 7c 6f 07 e5 a8 dd 7a 86 5c 8a d4 3f 10 03 72 53 a8 ca 89 b2 e3 64 07 c9 bb 1f dd 3f f2 Data Ascii: GPv_w#z549+Yvs{K-:DIF8N6b `v" Qx.:qcz`!bdF:zzAQ_9DiC4[dY1Z)N$ (L2(\|XEo3\|oz\?rSd?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49739	130.93.125.135	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:54 UTC	375	OUT	GET /assets/img/microsoft_logo.svg HTTP/1.1 Host: microsoft.biosency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:54 UTC	238	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 06:20:54 GMT Content-Type: image/svg+xml Content-Length: 3651 Last-Modified: Fri, 27 Sep 2024 13:19:57 GMT Connection: close ETag: "66f6b0fd-e43" Accept-Ranges: bytes
2024-09-29 06:20:54 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49738	130.93.125.135	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:54 UTC	369	OUT	GET /assets/js/script.min.js HTTP/1.1 Host: microsoft.biosency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:54 UTC	247	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 06:20:54 GMT Content-Type: application/javascript Content-Length: 2663 Last-Modified: Fri, 27 Sep 2024 13:19:57 GMT Connection: close ETag: "66f6b0fd-a67" Accept-Ranges: bytes
2024-09-29 06:20:54 UTC	2663	IN	Data Raw: 63 6f 6e 73 74 20 73 6c 69 64 65 50 61 67 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 6c 69 64 65 2d 70 61 67 65 22 29 2c 73 65 63 6f 6e 64 53 6c 69 64 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 65 63 6f 6e 64 53 6c 69 64 65 22 29 2c 62 74 6e 4e 65 78 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 66 69 72 73 74 4e 65 78 74 22 29 2c 70 72 65 76 42 74 6e 53 65 63 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 70 72 65 76 2d 31 22 29 2c 73 75 62 6d 69 74 42 74 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 75 62 6d 69 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 61 74 Data Ascii: const slidePage=document.querySelector(".slide-page"),secondSlide=document.querySelector(".secondSlide"),btnNext=document.querySelector(".firstNext"),prevBtnSec=document.querySelector(".prev-1"),submitBtn=document.querySelector(".submit");function validat

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49740	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:55 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4a 6e 4e 51 59 73 70 4d 65 30 6d 6f 68 4b 65 72 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 30 63 33 31 30 66 35 63 65 38 31 64 31 65 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: JnNQYspMe0mohKer.1Context: b0c310f5ce81d1ee
2024-09-29 06:20:55 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 06:20:55 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4a 6e 4e 51 59 73 70 4d 65 30 6d 6f 68 4b 65 72 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 30 63 33 31 30 66 35 63 65 38 31 64 31 65 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 4a 53 48 68 6a 36 30 6a 4f 77 4c 47 35 61 47 48 6c 65 49 79 55 45 37 66 34 55 75 49 2f 73 65 4a 52 4e 34 33 44 50 56 52 6f 47 56 45 38 45 55 37 6a 4e 73 44 65 6c 64 54 4a 5a 63 4d 54 31 57 65 48 38 46 64 48 45 4c 63 43 64 63 48 6d 4d 67 6f 43 6f 74 56 39 31 62 72 33 39 78 71 61 48 74 70 56 7a 6b 6f 58 63 41 41 58 61 4c 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: JnNQYspMe0mohKer.2Context: b0c310f5ce81d1ee<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcJSHhj60jOwLG5aGHleIyUE7f4UuI/seJRN43DPVRoGVE8EU7jNsDeldTJZcMT1WeH8FdHELcCdcHmMgoCotV91br39xqaHtpVzkoXcAAXaLS
2024-09-29 06:20:55 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4a 6e 4e 51 59 73 70 4d 65 30 6d 6f 68 4b 65 72 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 30 63 33 31 30 66 35 63 65 38 31 64 31 65 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: JnNQYspMe0mohKer.3Context: b0c310f5ce81d1ee<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 06:20:55 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 06:20:55 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 44 4d 38 61 42 49 42 4e 48 55 4b 42 45 37 69 75 4f 4e 42 33 6d 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: DM8aBIBNHUKBE7iuONB3mw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49744	130.93.125.135	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:57 UTC	613	OUT	GET /assets/img/favicon32.svg HTTP/1.1 Host: microsoft.biosency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://microsoft.biosency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:57 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 06:20:57 GMT Content-Type: image/svg+xml Content-Length: 969 Last-Modified: Fri, 27 Sep 2024 13:19:57 GMT Connection: close ETag: "66f6b0fd-3c9" Accept-Ranges: bytes
2024-09-29 06:20:57 UTC	969	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 77 69 64 74 68 3d 22 33 32 70 74 22 20 68 65 69 67 68 74 3d 22 33 32 70 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 3e 0a 3c 64 65 66 73 3e 0a 3c 69 6d 61 67 65 20 69 64 3d 22 69 6d 61 67 65 35 22 20 77 69 64 74 68 3d 22 31 32 38 22 20 68 65 69 67 68 74 3d 22 31 32 38 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="32pt" height="32pt" viewBox="0 0 32 32" version="1.1"><defs><image id="image5" width="128" height="128" xlink:href="data:ima

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49745	130.93.125.135	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:57 UTC	371	OUT	GET /assets/img/background.png HTTP/1.1 Host: microsoft.biosency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:57 UTC	240	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 06:20:57 GMT Content-Type: image/png Content-Length: 1294919 Last-Modified: Fri, 27 Sep 2024 13:19:57 GMT Connection: close ETag: "66f6b0fd-13c247" Accept-Ranges: bytes
2024-09-29 06:20:57 UTC	16144	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0f 00 00 00 08 6e 08 06 00 00 00 a9 62 a8 99 00 00 06 4e 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ad 57 5b 92 24 27 0c fc e7 14 3e 02 12 08 c4 71 78 46 f8 06 3e be 53 a2 ba e7 b1 6b 7b 37 c2 5d 31 55 94 a0 40 99 29 09 26 ec bf fe 3c e1 0f fc 48 6b 09 59 aa 96 56 4a c4 2f b7 dc b8 a3 a1 f1 fe 9a df 29 66 bf bf 7e e7 b1 7e b1 87 b2 9f cf 18 a6 84 67 ba 1d b5 df 27 75 d8 e5 e3 83 d7 1a 34 be da 83 3e 3d ac cf 44 af 95 f9 3e 92 ad 6c ed f5 d9 49 d8 f9 da 29 3f 13 b5 7d 1b a5 69 fd ec ea 78 26 9a cf 40 77 e5 f9 cb 6f b7 ee c3 de c3 17 43 05 4b 4b b0 50 62 de 89 52 f4 bb 5e 0f d2 fd eb f8 53 dc 29 55 1b 87 67 4f 39 b5 e0 0f 7a 26 03 21 5f e0 7d 10 fc 99 a0 ef e4 Data Ascii: PNGIHDRnbNzTXtRaw profile type exifxW[$'>qxF>Sk{7]1U@)&<HkYVJ/)f~~g'u4>=D>lI)?}ix&@woCKKPbR^S)UgO9z&!_}
2024-09-29 06:20:57 UTC	16384	IN	Data Raw: dc af ce 55 27 9b 32 63 a9 3f ca 03 b5 0c 55 7f f7 68 63 64 dd 23 db 18 79 c8 99 43 75 d9 f8 ba 47 66 07 bf bd 8c 45 b0 f8 f9 90 91 c1 c3 51 42 c7 45 89 12 25 64 6e f5 f2 37 6b c1 89 b9 87 7f d3 db 4d a0 9a fd 9f 6f c6 2d f8 d5 ee f2 64 b6 fb b9 9b 06 57 da 45 75 5d 74 84 95 1b fa d2 0b 63 cb 6f 48 c6 95 fb 86 e2 ac 68 9b 81 15 43 69 f6 cb 18 95 33 be 8a 24 c5 1e c9 28 a3 e5 83 42 d9 91 da 4c 49 3e 4b 3a 3f e7 c6 d3 ea bf 74 7c 39 1a 49 2f f6 bc 44 df 14 ae ac ae 1d 02 6e 6d e6 2c db d0 64 7e 29 b8 e8 bc 44 1b 65 c2 14 66 e1 99 85 83 f8 cd 9e 47 09 f6 63 3e e3 dd 6a 36 25 dc 97 15 a8 cc ed 69 b9 98 5b 97 11 b5 b2 93 7a b4 69 c1 7e e7 99 a9 2f 9c 59 6e f8 86 f7 fb ab 1c 62 d0 26 9e 18 42 2d 8d c1 c3 00 8e ba 1e 93 5b 3c 55 77 5e 63 c7 b7 b5 4e 9c 4c b3 d6 Data Ascii: U'2c?Uhcd#yCuGfEQBE%dn7kMo-dWEu]tcoHhCi3$(BLI>K:?t\|9I/Dnm,d~)DefGc>j6%i[zi~/Ynb&B-[<Uw^cNL
2024-09-29 06:20:57 UTC	16384	IN	Data Raw: c6 1f ce 6d b0 6f 3e 9c 2d 4a 2b 66 c3 4a 25 90 f6 cf 82 7f c4 13 d5 18 11 2b 32 87 16 cf 16 56 8b 7b 96 06 95 59 2a 34 e7 e2 a8 e5 e9 51 0e 4b 02 e0 52 f6 e7 56 f0 55 1b 1d fd cd fc db 62 20 e4 b1 e7 68 1a 0c a0 67 57 6c 75 f3 3e 04 3c d7 03 96 ac 9a 33 a7 df 85 b6 5e 06 0d ad 6b fd c8 f0 ef 1e e8 d5 f5 23 51 de ff 71 18 8a 91 41 d8 b0 b5 4c 6f 86 3d e0 8f 41 eb 12 5d 87 80 65 97 26 73 ae f8 36 69 53 cb b2 29 dd 43 fa 6b ce a8 b2 94 d3 dd d8 9c 7c 1e c0 6c 5e 80 bf f6 82 68 68 ff f2 21 60 94 d2 68 17 d6 91 55 fb f9 d2 d8 6f 6a c3 d3 bd 5e 64 06 e7 1f db 45 31 ce 5b 08 a3 b8 c4 a7 e8 87 e1 ad 7d a9 85 5e a4 db a8 24 e3 85 59 a5 64 e5 f7 97 37 7f b1 0d 0a d1 94 16 fe 91 fc de f3 ad 06 7b a1 12 c5 91 b6 91 7b ae fd a6 79 6e d1 e7 14 23 10 c6 3c 6a 7d f4 9e Data Ascii: mo>-J+fJ%+2V{Y*4QKRVUb hgWlu><3^k#QqALo=A]e&s6iS)Ck\|l^hh!`hUoj^dE1[}^$Yd7{{yn#<j}
2024-09-29 06:20:57 UTC	16384	IN	Data Raw: 2d db f2 69 0a d7 e9 9f 5f 91 5b ed 36 f4 4c b9 ab cf 96 aa e4 35 7c 56 43 33 e1 ee e6 29 a3 71 b5 5a 9e bb ae 70 4d 3e ab f2 9b 58 0f 14 74 81 78 d6 90 92 30 95 f6 bb 74 20 10 c7 81 46 8b e0 c1 08 6f 1d b2 a6 d7 0f 34 18 4f b7 84 27 be a3 46 40 1b 75 de 0f 09 5b 2d 5b 58 0b 69 cc c8 6b c1 2f a5 67 7b 26 79 2b f4 33 8d 6b 6b 96 0b 03 fa 66 ca 1f 38 25 59 65 e5 fe 49 94 b1 0c 41 df 38 55 93 05 ca dc 23 cd 7e e6 f6 58 61 8f e4 a9 64 a3 ec ba 8c 1f 4f 16 82 46 fa d9 e3 38 41 ae d4 e7 a0 0a 67 09 e2 cf c8 28 ad 7b 47 ad 36 b2 a4 f7 fb 6c 63 8f 3f f5 c9 56 78 a0 89 b0 d7 98 03 8e 9e 00 44 c8 83 a8 8d 81 2f bb 83 44 b5 83 a0 32 09 2f 83 81 38 8e e2 cd c8 10 2b 02 76 55 d7 0e 78 d9 b3 6f a6 4d 32 7e 49 49 22 19 b1 6a da 9e e1 e2 65 97 3e a7 e6 02 11 6d a6 c5 6b Data Ascii: -i_[6L5\|VC3)qZpM>Xtx0t Fo4O'F@u[-[Xik/g{&y+3kkf8%YeIA8U#~XadOF8Ag({G6lc?VxD/D2/8+vUxoM2~II"je>mk
2024-09-29 06:20:57 UTC	16384	IN	Data Raw: 85 a8 3e 77 25 39 ee 0c 1d 40 38 86 86 73 ce d9 f9 f5 d8 78 ab 4b d5 d0 f3 a8 98 37 6b f6 ea d1 67 77 e6 ea 0e af 78 da e9 4e 8e d4 3b 02 fe 8f f6 29 24 5b fd 2e 1b 6d 58 de db 18 7c 50 48 96 2c 5a 07 8d 3d 58 9c ff 1f 50 01 98 1d fc 60 10 04 1e 59 b9 69 9a c6 df bf f2 6f 48 fd 91 b3 f1 ac 0d 36 f2 d8 8e 92 90 79 a5 af cb 50 35 84 fb c7 cf 52 55 c3 5a 5f 1c 37 0f d3 03 e7 14 2a 35 8b 24 cd 74 31 58 81 dd 9f e2 bf 62 aa 42 f2 75 7a 8e 64 ba ed 5e 03 dd fa 6a 3c 46 d3 e0 a9 6b 89 3d 39 fe 29 86 8a ce 3d de 2c f8 88 cd ec 85 5c 5f 1e 9b 79 8e 82 11 6e 8a c1 95 80 37 81 b9 fa 86 7f 46 2e be 61 24 08 0b 10 cd 6d ba b7 86 05 b0 dc 23 61 65 ad 61 d1 79 b4 a5 30 a0 92 ee 40 a1 62 47 39 3a 47 4c de 5c 7f 3a ad bc 39 a7 ac 8f e2 2d 7a e2 80 b5 f5 b5 ae ad 1d 5c d6 Data Ascii: >w%9@8sxK7kgwxN;)$[.mX\|PH,Z=XP`YioH6yP5RUZ_7*5$t1XbBuzd^j<Fk=9)=,\_yn7F.a$m#aeay0@bG9:GL\:9-z\
2024-09-29 06:20:57 UTC	16384	IN	Data Raw: 2c 7a 5e a5 b1 14 e2 05 74 b7 0d 25 2b 6a ad 44 5d 7a e7 be 2e 2a 3b c8 12 87 ea a8 45 4c be 55 4f 0f 7e 16 9b 31 59 e3 f5 79 6f 2c 92 b3 c5 74 a7 66 1a 44 2f 1c ae d1 92 8a b9 95 8d 8f 06 1f c2 63 18 f5 ce fa d9 98 53 65 69 2e c3 f3 66 a9 f3 71 d1 47 b6 26 57 23 dc ea bd e3 2f 06 df f7 13 f0 2e f0 99 62 cd 7b c5 64 90 f6 d0 e8 d2 79 c2 a1 be 91 c1 51 47 51 40 30 99 57 bc e5 c3 a3 f7 a0 3f 13 3d 45 03 ea a9 3f 4a c3 c3 fa c6 ff 32 cf c8 5b a0 e3 0a c9 1f d5 8f f8 bf 50 a8 c6 b1 36 db ab f3 6f a8 39 ac 18 df a1 ff 06 59 21 bb 79 9e 67 53 db ca f8 98 04 02 da 21 91 30 7e 7c 96 b7 bc b9 bb 74 3d 9e e5 79 e5 de fb fe 1f 40 b6 9f 47 fa 2e bd 4b cb 6c 29 0f e6 9d e9 7e eb 0d 70 84 d1 ee a5 3f a1 0b 04 e5 cf da 06 32 0a 5d 9c d5 dc 0c 5d 02 54 a5 ac 55 72 df 15 Data Ascii: ,z^t%+jD]z.*;ELUO~1Yyo,tfD/cSei.fqG&W#/.b{dyQGQ@0W?=E?J2[P6o9Y!ygS!0~\|t=y@G.Kl)~p?2]]TUr
2024-09-29 06:20:57 UTC	16384	IN	Data Raw: f6 dd 22 68 dd d0 fa fa 05 1c 8b 07 3d 0d a7 b5 fb ae 46 7f cb eb 22 43 ed 44 c7 40 66 e3 96 a2 5d 2c aa 37 0c 2f 47 a2 88 30 28 26 aa 78 55 2d 2e 21 b9 6d bb a7 ad 37 09 85 00 93 06 3b bb 15 3e 37 85 99 e5 19 15 f3 5c 17 04 3f f2 2b d3 0e 36 50 fc 1b a2 49 75 ba 91 86 15 cb 56 07 86 ca a9 f8 e7 ee 33 e0 10 68 81 dc ef bd e3 2f 2c 4f e6 7a 87 32 0b bb 8e 6b 50 6e 38 56 4a 06 27 b4 12 97 45 0f 2d cb 51 49 0e 6d b3 5a 9e 66 c7 2e c3 d1 f2 6f 91 f6 b2 3c a5 98 c6 b3 b2 20 1e fe 06 db 0d 8f 11 2f 98 8a b7 a0 96 fe 50 e1 5b bd 9a 27 5d ab 4d 2c 47 30 5e 8e dc 59 a2 fb b7 29 72 77 e8 f8 5b 65 9b 06 0b a2 4a e1 f9 aa d8 6b cd ce 51 f7 9d 97 54 cd 3a 61 d8 0b cc 74 1f c3 a7 ab 9e d7 b7 54 28 90 f7 1d a5 bd 8e 46 e8 c1 74 7d c3 80 1d 59 b4 cd 3c c5 23 38 c5 31 2c Data Ascii: "h=F"CD@f],7/G0(&xU-.!m7;>7\?+6PIuV3h/,Oz2kPn8VJ'E-QImZf.o< /P[']M,G0^Y)rw[eJkQT:atT(Ft}Y<#81,
2024-09-29 06:20:57 UTC	16384	IN	Data Raw: 8e 6d 74 b5 ae 1d d7 6c 58 c2 60 d1 ae 06 c8 b1 fc 58 f2 5d 21 5f 6d 44 7f 75 02 fe e7 b6 dd a7 3d 97 d1 66 7e 82 ad b8 a3 64 f2 df 88 80 04 86 e7 93 23 46 f2 ac 30 0c 8b 12 d7 52 16 01 34 44 e3 7d 0f 66 76 3e 31 c7 89 b7 67 9c c9 8d a5 29 eb 9a c2 f2 b4 98 8a da ca c2 16 e9 b7 8e 03 1d 9e 2d bd 03 8e f9 e0 c6 da 8d c8 31 e3 b2 1f af 6b 72 2f 78 17 ec 5a f7 5c 16 9e e6 b5 40 eb aa 17 1f 74 93 1b dc 8e 68 cb 54 8c a1 98 77 02 b8 37 17 d1 40 12 95 34 98 5a ce 4f 07 59 9c d8 f0 62 71 ef 4c 9c 67 d8 84 d9 2d f3 35 85 26 31 8e b7 11 bc 47 3f 39 c3 6f 8a f0 58 e7 cf 88 47 c6 71 a0 16 7e 9a 62 6b cc ad ae 4b 32 03 63 c6 bb 55 8b ee 72 e8 68 b3 15 86 47 41 a9 3a ea eb dc ba c6 47 eb 18 66 27 ff 6f 78 df 30 bb f8 53 0e a1 ea 91 06 fc 83 09 70 66 0b e8 45 a5 80 05 Data Ascii: mtlX`X]!_mDu=f~d#F0R4D}fv>1g)-1kr/xZ\@thTw7@4ZOYbqLg-5&1G?9oXGq~bkK2cUrhGA:Gf'ox0SpfE
2024-09-29 06:20:57 UTC	16384	IN	Data Raw: 6a 13 85 07 47 f9 c0 b3 d5 55 f3 07 37 5e 78 bc 0d 1f 7f e0 3a 75 a6 dd b7 e3 f5 60 a1 8b 3d 7a a8 8e 59 07 14 70 08 78 c9 ff 83 69 53 b2 e1 d6 bd bc af eb 9f 55 81 9e b1 21 65 6d ab 59 57 b3 05 89 91 29 8e 94 fa 25 f7 eb 5a d7 ba ec 80 bd 0f 62 59 d7 6f 0a d7 22 c1 1c 11 c3 0d 65 80 bf 4d 6b cd 2e df a3 aa d5 83 b2 8c eb 5a d7 ba 1a ec c0 c2 82 8f c0 cf b7 d9 85 cc ac cf fc a9 6a 90 bd dc 6e 6b 1b 30 6f 62 99 f7 22 f7 6f 8c 70 61 b9 75 fd 8e 21 fd 2d dd 5e f4 7f 3c 8e 9b 54 da e8 a2 25 6c e0 62 b0 f0 84 63 4c 5e cb c7 69 30 b3 07 37 a6 07 aa 99 99 8f f5 79 5d f7 1d 53 df 08 5d 13 61 93 ea 34 c6 ec ef 80 f2 6f 54 12 7d e1 cf 75 f9 a4 63 7f a4 69 65 a3 7e 19 8d f0 27 f6 c6 60 62 fa cf 66 bf 69 f5 ab d3 f2 03 e6 b7 14 a9 cf 27 49 3d 16 5c 18 a2 27 d6 12 32 Data Ascii: jGU7^x:u`=zYpxiSU!emYW)%ZbYo"eMk.Zjnk0ob"opau!-^<T%lbcL^i07y]S]a4oT}ucie~'`bfi'I=\'2
2024-09-29 06:20:57 UTC	16384	IN	Data Raw: 12 4b ff 24 f8 6a 8a 76 4d d6 8f 05 99 66 2d ab 5f 4f d7 16 13 18 c8 db 9f 10 0f 9e fc ff 9b a4 4c be f7 6d 04 18 40 ff d6 4d 17 d6 b8 12 7b 3f 06 13 39 a5 5c 59 c9 67 f6 8c e7 cb fb 6d 28 22 e2 73 3d 6e 36 45 72 54 a4 cf 26 33 d2 6c 04 a6 32 40 de bc 43 8b f2 99 18 a3 71 a7 7b 0d 63 60 25 cf d7 b5 a7 f7 db ca c2 85 cb b6 24 14 39 14 70 a0 6c 93 20 ad 53 64 2d 81 23 f7 9c 51 3d ba d7 31 a8 08 5b f2 bd 0b cf b5 26 f7 4a 7f b7 fe 56 77 68 ac 36 40 16 60 d4 5a de ab 37 20 8a b0 14 8d f8 9e 85 d0 bf 21 8f 72 be df 42 ff dd ce 82 4f fa aa a4 64 8d ac 73 af cb 51 8e af 98 60 06 1a 9e 01 47 e8 56 61 3e c4 8e 6d c6 ee 70 39 73 43 a7 b8 31 11 28 36 69 cb 35 78 d1 2e 6e 6c 1e 03 3a 5b 97 ab b1 49 57 0e 12 15 2f b7 e8 44 1e 1c 96 72 c7 69 6e 20 bf 55 41 4e 16 65 65 Data Ascii: K$jvMf-_OLm@M{?9\Ygm("s=n6ErT&3l2@Cq{c`%$9pl Sd-#Q=1[&JVwh6@`Z7 !rBOdsQ`GVa>mp9sC1(6i5x.nl:[IW/Drin UANee

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49746	130.93.125.135	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:20:57 UTC	370	OUT	GET /assets/img/favicon32.svg HTTP/1.1 Host: microsoft.biosency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:20:58 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 06:20:58 GMT Content-Type: image/svg+xml Content-Length: 969 Last-Modified: Fri, 27 Sep 2024 13:19:57 GMT Connection: close ETag: "66f6b0fd-3c9" Accept-Ranges: bytes
2024-09-29 06:20:58 UTC	969	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 77 69 64 74 68 3d 22 33 32 70 74 22 20 68 65 69 67 68 74 3d 22 33 32 70 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 3e 0a 3c 64 65 66 73 3e 0a 3c 69 6d 61 67 65 20 69 64 3d 22 69 6d 61 67 65 35 22 20 77 69 64 74 68 3d 22 31 32 38 22 20 68 65 69 67 68 74 3d 22 31 32 38 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="32pt" height="32pt" viewBox="0 0 32 32" version="1.1"><defs><image id="image5" width="128" height="128" xlink:href="data:ima

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49753	13.107.246.64	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:02 UTC	603	OUT	GET /shared/5/js/signup-fabric_en_l7exbVZEGzG2v4FeAaRSUA2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:03 UTC	827	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:02 GMT Content-Type: application/x-javascript Content-Length: 225363 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 18 Sep 2024 20:40:12 GMT ETag: 0x8DCD8221813A4BB x-ms-request-id: d229f7d6-301e-003e-5d1c-126b84000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240929T062102Z-15767c5fc55lghvzbxktxfqntw00000004d0000000002yy5 x-fd-int-roxy-purgeid: 67912908 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-09-29 06:21:03 UTC	15557	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 69 77 db 38 d2 28 fc fd fd 15 b6 6e 8e 87 1c c3 8a 64 67 a5 c2 d6 4d 1c bb 93 ee 6c 1d 27 9d 4e bb 7d 7d 68 09 92 d8 91 48 85 a4 ec 38 b6 fe fb ad 05 2b 45 39 e9 99 67 9e 67 ee 7b 26 e7 c4 02 41 10 4b a1 00 54 15 6a b9 fd f7 cd 8d c3 bc d8 98 a6 03 99 95 72 23 cd 46 79 31 4b aa 34 cf 36 e6 53 99 40 56 29 e1 7f 3a ce 16 f3 9d 51 72 56 a4 83 53 99 b5 ff 2c db 2f 9e ef 1f bc 3a 3a 68 57 5f aa 8d bf df fe ff 36 47 8b 6c 80 df 05 e1 d5 79 52 6c 48 51 89 4c 14 22 17 69 7c f5 f0 6e 77 ef 6e 64 4a d0 bb f0 aa b5 c0 ea 2b a8 b2 6a f5 f0 9b 22 ce 82 bd 5d 28 1c 8a 3c be 1a 4c d2 e9 70 3f cf 2a f9 a5 7a 77 39 97 65 b4 d9 11 03 fb 5c 7b a4 d7 43 39 4a 16 d3 ea 4d 91 cf f9 39 2d e7 d3 e4 f2 55 32 a3 e2 63 59 3d ad 95 a0 ac 22 3d 97 Data Ascii: iw8(ndgMl'N}}hH8+E9gg{&AKTjr#Fy1K46S@V):QrVS,/::hW_6GlyRlHQL"i\|nwndJ+j"](<Lp?*zw9e\{C9JM9-U2cY="=
2024-09-29 06:21:03 UTC	16384	IN	Data Raw: 3b 7b 2f 58 47 8f 75 3d 8c f5 04 5b ad c9 ed c2 35 95 d0 b1 da e4 23 ba 57 fa c1 68 e4 5e e1 77 11 50 aa 7c ce 55 3b 72 d9 93 71 b6 94 91 52 0c e1 36 a0 7e a8 ec 88 15 f8 d0 27 81 97 61 a2 3b 61 be 55 66 82 47 65 1d 4a 3d 2f dc f5 34 c9 5c cb a3 cd 60 13 63 5b d3 15 84 e4 c3 8b 72 f6 36 5d ec 21 25 63 b6 16 a9 2c 4a 71 4d 4e b3 61 d4 52 24 65 49 66 40 7d 43 62 96 a8 cb 87 46 bb c8 ac 43 79 8d 84 6f 14 e3 be b5 b5 b9 19 74 ef 6d ad 2d 80 97 90 2e 8f 77 96 05 f6 90 94 2a 1a 81 a8 62 40 46 40 6c 38 34 59 19 0e 5d 00 b5 71 8b 7a 4e 71 e6 15 0e 01 64 11 c1 94 0f 97 d5 ad 43 b9 5b fe c0 21 0e a6 f9 80 ed 12 d0 8f 9e 42 bb 02 f5 84 81 ad 60 cd 20 66 ad a9 f1 40 c6 b5 ef 43 13 23 c1 10 c6 8e c2 fa a5 ab 33 8d 58 aa fd 95 b8 e9 5a d4 55 5d 0b ba 2d 31 2e 4d e8 89 Data Ascii: ;{/XGu=[5#Wh^wP\|U;rqR6~'a;aUfGeJ=/4\`c[r6]!%c,JqMNaR$eIf@}CbFCyotm-.w*b@F@l84Y]qzNqdC[!B` f@C#3XZU]-1.M
2024-09-29 06:21:03 UTC	16384	IN	Data Raw: 3b 9b 87 1d ef f4 fb 35 34 c4 58 17 f8 d3 de 42 bc ab d2 e8 e2 52 a9 e5 42 17 03 b9 4c 28 dd c6 f3 db 37 1a e7 36 0e e6 18 4f e4 2a 17 01 15 d4 e3 da bb 27 57 89 53 d7 ce 39 25 a9 b3 35 f3 d0 d3 45 e6 63 f4 d8 87 75 6d 29 72 e0 75 a5 71 34 f7 68 16 6e 97 bd de c6 fc 4e da c7 3b 80 5e 27 a4 05 7a 56 33 54 7a 01 93 08 03 90 a3 e6 35 ed 80 41 cc 61 5c b4 16 40 02 0c da ab 41 a2 14 be 0c d9 a5 4e 5b 8a 3f db 28 1b a8 4d b7 8e 49 66 c0 cb bb 42 3e 7f 05 1c 06 7b 3b 96 7f 23 f8 cf 78 b2 27 b9 1b d9 cc 74 56 48 b3 f6 e4 b3 76 b3 30 84 8f 9c 31 2e a9 c6 a0 65 10 bb 4e 65 28 3b fb 89 70 c9 28 23 af 0f 95 63 1c b5 d4 85 31 aa eb 1b 20 92 75 99 03 03 42 5c 0f 50 75 ce 38 87 65 00 53 e2 0a cb 79 e3 e4 c7 61 26 a9 c4 3c 84 56 3e d9 dc 8e 2c c0 f8 6c 3b f3 ba 53 d9 cc Data Ascii: ;54XBRBL(76O*'WS9%5Ecum)ruq4hnN;^'zV3Tz5Aa\@AN[?(MIfB>{;#x'tVHv01.eNe(;p(#c1 uB\Pu8eSya&<V>,l;S
2024-09-29 06:21:03 UTC	16384	IN	Data Raw: e2 2b 08 06 4e 09 f8 78 96 a0 d4 b3 47 b1 86 38 9d 2c 93 b7 34 01 5a 24 99 9e 1e 3a 83 98 db 86 e3 e1 be 26 fd 7e ed 02 ef a3 44 33 4c e6 e3 e6 1e a6 bb 19 79 ed 4d a7 f6 1b d6 5d ed 15 33 f9 e6 6f e9 8c a9 eb 75 5b da 84 75 58 a3 3c 4b e4 23 8b 0e 27 e5 1c d3 18 c0 eb e8 59 2b 47 d0 fb 1b 03 c6 d8 14 96 c5 7c f1 5b 17 63 5f b9 f3 05 ef bc 16 a2 fd 9d 2f 58 e4 69 ef a2 3e 92 95 bb 51 fd be 19 7c 65 0f 53 79 6d a9 42 e8 48 72 7a 74 dd 93 be 47 4a cc a3 df 21 96 14 d4 5f c5 fa e3 20 02 98 ee 88 5e 19 cf 2e 74 a8 cf 2c f8 8c 6e 34 b7 95 28 cb 56 42 87 a2 11 d9 38 58 85 ae 98 2f b3 3e 83 e2 81 f4 cc 65 5d 1c 26 65 15 ea 87 b7 dc 77 43 18 d6 9c a9 89 3f 71 ae 48 66 86 43 ef 46 96 08 2e 5b 04 1a f1 c4 1a d5 a6 2c 69 d9 b3 d3 e2 a5 ee 90 0f 67 64 09 e4 ca d8 dc Data Ascii: +NxG8,4Z$:&~D3LyM]3ou[uX<K#'Y+G\|[c_/Xi>Q\|eSymBHrztGJ!_ ^.t,n4(VB8X/>e]&ewC?qHfCF.[,igd
2024-09-29 06:21:03 UTC	16384	IN	Data Raw: b1 4b a1 d7 cc 94 6e 31 0c 30 1c 49 7e 1d 51 82 0b 9d b6 0d 44 f3 85 a3 c5 75 76 b2 9a df 84 6d 81 a2 7d 3d f4 28 2b 25 9b 13 c7 ed 2d 2d 8d d0 00 f8 03 9b 33 6f ac 30 a2 04 ad e0 09 0e 43 b9 1d ae 8f 6e 36 85 9b cb 4f 1e ad f5 2a 31 a6 4b ec 76 3c 0f 59 0d 68 d0 59 85 71 bd a0 f8 80 bc 97 57 bd 39 8d 00 18 68 77 28 3b 3e e8 cc c6 7e 30 e1 83 17 b9 3a 20 80 cb 54 80 01 52 12 62 5b bf a7 e0 12 f4 2d 42 15 2d c1 86 95 bd eb d5 d9 87 ea 64 4f 61 92 8e 4b 4e e8 50 e4 14 8e 32 5a 12 37 b8 1b 3a cf b6 8a cb 01 35 d1 48 ed 11 71 34 7a dd 32 ba 77 02 f7 ab 80 c4 5e ae ae 50 ad 3f 63 75 eb c6 f2 46 c1 97 1c 48 e1 7d 97 6c 3c af a7 2b b7 bf 26 80 4f 77 a9 26 69 3e eb 16 28 a9 bc 47 fa c5 60 68 b6 13 90 8c 00 fa 6a 64 59 4f b1 13 79 ff 60 ce 65 99 5e 8b b6 08 60 09 Data Ascii: Kn10I~QDuvm}=(+%--3o0Cn6O*1Kv<YhYqW9hw(;>~0: TRb[-B-dOaKNP2Z7:5Hq4z2w^P?cuFH}l<+&Ow&i>(G`hjdYOy`e^`
2024-09-29 06:21:03 UTC	16384	IN	Data Raw: 8f 8c 3c ed 43 e1 2e 25 cf e3 82 9e 2e a9 5b 5e 35 83 a4 76 a5 ce 7c 69 f7 0c e8 1d 3d 0c 96 b8 67 c9 f9 76 d9 8f a3 5d 86 0a 55 74 19 24 03 4c b5 7c 9f 1d 08 87 d8 c9 80 26 1a 7a 08 cd 04 94 cf 21 45 28 02 bd 92 09 42 95 9d f4 76 93 9d fa f0 a1 0c 7e fa d4 6d 49 85 72 0f 35 af 7b 42 97 33 16 5d a8 14 bd be fa 4d 37 08 95 4b 3a 11 4b fa 56 31 28 94 0e 2c 0e 78 82 97 d3 7a d5 84 de 8b 62 19 ff 5f 90 79 5d c2 dd 2a 64 34 ca bd d5 2a c4 93 8c 5a 1d af b4 7d 93 95 f8 8b 41 f7 2f 2e d8 fb f3 1e 3d 05 20 84 22 51 32 fd 2a e4 af 5c fc 5a 76 80 75 2b e7 22 db 49 f3 29 16 18 83 34 01 59 4d f9 74 29 08 4b 8d 6e 86 05 d9 9d 08 23 62 95 1e 68 c2 76 c7 72 c2 a6 62 c2 16 32 8c 4f 8c 9a 82 b5 4a 14 9f dc 50 d5 16 60 41 c5 e0 4c 85 9d f6 55 2a dd 21 98 57 a9 06 dd 30 38 Data Ascii: <C.%.[^5v\|i=gv]Ut$L\|&z!E(Bv~mIr5{B3]M7K:KV1(,xzb_y]d4Z}A/.= "Q2\Zvu+"I)4YMt)Kn#bhvrb2OJP`ALU!W08
2024-09-29 06:21:03 UTC	16384	IN	Data Raw: 8f ce 6a 8f f9 82 e4 b6 e5 7a df 72 88 7e 7b 15 4f b8 55 cc e7 c5 71 bf a3 48 9e 74 aa 87 a2 4a 7a 05 16 64 30 9e bf 99 32 7a c4 b5 7f 5e 91 5c 36 e2 a4 1a e0 e7 1d f1 d2 bb 24 cd e2 14 33 f7 39 1d 68 54 80 41 9f 1c 8f a9 13 c2 fc 11 43 ba 53 e0 e3 78 5d 0f d8 08 2a ea c3 39 3f 9e f5 3b 7c 9c 96 6b a9 1c 92 e5 2f d7 97 5c 70 62 75 09 55 71 6f c2 12 41 e8 a7 a8 bb b3 96 a7 ea 85 4f c6 b0 2b 1a eb 55 31 d2 cf 19 75 8d ed 6c 6e 57 35 62 b6 b1 fd d1 7c ba da 45 01 d9 82 40 7a 75 be 49 ac 3a 2f d4 96 ae 44 5e 77 92 1a a5 52 48 4c a4 46 d3 92 46 3f 83 77 ac 74 47 bc 5b f9 ef 75 88 78 c9 93 e2 e3 4d 2c 0c 36 a5 d7 b4 4b ae 2d 1f 97 5f 4d 67 2b 29 4b aa 12 da 7a ff 87 93 e9 a8 db f9 a1 ec 06 74 f3 86 3f 16 a3 26 4d bb 67 fc d0 a1 b7 34 97 e5 5f 70 d4 3d a7 7a 41 Data Ascii: jzr~{OUqHtJzd02z^\6$39hTACSx]*9?;\|k/\pbuUqoAO+U1ulnW5b\|E@zuI:/D^wRHLFF?wtG[uxM,6K-_Mg+)Kzt?&Mg4_p=zA
2024-09-29 06:21:03 UTC	16384	IN	Data Raw: f0 d9 43 2b 02 e9 c4 11 72 cf 3c 4f 2b a7 ee e7 d5 3b 7e e5 7c ac 9c 39 13 2b a7 0f 2e 0d 92 5a 00 be 35 8a dc f4 99 e5 8c 83 9d 8a 95 b9 2c cf 3b b9 a9 4c ad 43 b4 45 60 f6 f3 2d 0b 92 3b 78 a2 4a 36 ca 51 13 84 44 ae ae 2a ce f7 21 93 17 1d c0 46 7e d7 f1 fa c0 24 10 ed d4 fa d6 c2 73 f1 a0 d4 0e 5d 7a 6b 81 2f 7a cd e2 6d 3b 8b e9 b0 45 1e eb a1 b4 20 80 ad 9e e3 77 dd a6 96 55 e9 74 4f 86 1c 78 0d 8a 7d 6e 00 d6 31 c8 39 c1 4b e5 6c 85 c9 17 6c 18 b1 ba 65 ad fa d6 32 a7 d6 bb 96 e6 26 cc e5 26 65 a4 65 16 61 ef f8 8c 15 06 0a 78 0b 88 7f 8e 8b 29 c0 66 f1 a0 05 7c ca aa 9a 20 63 c3 8b 32 4a d9 f0 a2 72 69 f5 6d 9e f3 10 76 cf a6 a4 14 f1 56 e9 86 c6 d3 8e 8c 83 1d bb f0 2e f9 71 02 60 06 f9 f5 57 f4 15 7b 52 82 d9 1b 7b 78 20 cb 74 9c be c5 5b dc f4 Data Ascii: C+r<O+;~\|9+.Z5,;LCE`-;xJ6QD*!F~$s]zk/zm;E wUtOx}n19Klle2&&eeax)f\| c2JrimvV.q`W{R{x t[
2024-09-29 06:21:03 UTC	16384	IN	Data Raw: 6c d5 a7 a8 01 5f 5c ee 9e aa 5f a5 ae bf cb b6 53 6d 5c 4d 0a 7d 4f 66 92 71 93 40 8d 37 ce db 0f 1b 38 a8 7b 62 b8 60 06 6f 51 d1 10 3f 90 08 7b 2b 05 18 d8 2d 0e 9c b3 2d b2 18 f9 9d 93 c5 f0 43 16 13 70 e9 8b 59 4e 89 ab 88 dc 45 6c 18 c7 ce 84 62 01 86 8e 13 e0 8b f5 8b 12 76 d4 7a 68 e6 c1 15 9b 62 ed 2a 78 c5 26 90 23 00 16 1b d8 7c 80 b8 83 cc cd 5a b9 f0 fb a3 4b b8 2e 27 81 47 52 93 fd 22 b4 f6 5d 8c f4 d3 10 9e 28 42 44 9a 63 f8 93 47 54 fb 70 f7 77 76 86 25 da fb ba 76 10 c2 65 77 ff 5d 96 16 c2 f5 16 c0 c5 91 c8 b3 59 fb 29 9a 52 e0 19 cf c7 f7 34 eb 5f e1 6e 13 60 08 17 34 78 b5 05 b0 5d b5 de d4 0f b0 76 14 f4 47 0e 80 86 19 14 ad 5d f5 9c 9e 47 8f 81 43 3f 7c 22 87 70 6d 8e d2 74 92 58 5f 7d 25 53 9a 7e f4 95 1b f5 93 af b0 3e 2c d1 57 7a Data Ascii: l_\_Sm\M}Ofq@78{b`oQ?{+--CpYNElbvzhb*x&#\|ZK.'GR"](BDcGTpwv%vew]Y)R4_n`4x]vG]GC?\|"pmtX_}%S~>,Wz
2024-09-29 06:21:03 UTC	16384	IN	Data Raw: 3d cc 5d f5 78 ed 21 c1 f1 3b 7e 2e 5e 71 b4 e9 ae f7 22 3f f0 e2 0e 06 0a a6 a8 af 3e 9e 02 7d e3 5f f8 5e e0 aa 96 59 dc 24 65 90 5e 34 3f a3 28 c3 2c 6a c5 cd 31 5c 78 97 8f 81 7c c4 86 db 2c 20 70 82 85 20 89 e5 89 68 e1 12 53 e4 a8 06 73 2e 00 ca 60 65 63 a3 a0 93 0c 01 31 ac b3 ef a0 23 51 ce c5 46 3c ed 28 1a 8f 95 a0 09 99 63 1e 47 17 bd 33 03 b5 17 a6 c4 20 bb 19 93 97 65 04 14 af 3a 4a f5 c2 c8 2b 13 c0 0d 48 28 97 a8 ba 5c 48 37 b5 63 8a 20 0d 0b 1c c1 9e c0 e2 a1 4c 8e ff c5 f0 d1 14 a1 19 35 d8 b0 ad 29 b4 1e a6 db ac e3 84 15 0e d8 ba c2 d3 e6 d8 77 dd 55 bc 72 b1 34 8d c8 e7 b2 43 84 38 2f 02 dc f2 86 10 c3 ba b4 a0 b9 60 b5 01 8f 69 db af 0a 74 9b 88 fd 86 a4 28 08 10 3d 1a c4 72 6c 15 49 79 b0 36 b4 71 45 24 e4 c2 d9 1a c9 60 c7 b2 15 bf Data Ascii: =]x!;~.^q"?>}_^Y$e^4?(,j1\x\|, p hSs.`ec1#QF<(cG3 e:J+H(\H7c L5)wUr4C8/`it(=rlIy6qE$`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49755	13.107.246.64	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:04 UTC	606	OUT	GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:05 UTC	799	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:05 GMT Content-Type: application/x-javascript Content-Length: 32811 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 09 Aug 2024 21:16:16 GMT ETag: 0x8DCB8B881B52A8D x-ms-request-id: 6ff35fd2-801e-000f-6e37-12c285000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240929T062104Z-15767c5fc55qkvj6vefppu9qh400000004c000000000cemu x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-09-29 06:21:05 UTC	15585	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 6b 57 db 48 b3 3f fa fe 7c 0a 5b 67 0e 5b 1a 1a c7 86 24 93 d8 51 bc 12 42 26 e4 06 13 c8 65 86 61 b3 84 dd 06 0d 46 f2 48 32 84 60 7f f7 53 bf ea 8b 5a b2 48 f2 ac ff 3e e7 c5 9e 35 c1 ea 8b 5a dd d5 d5 d5 55 d5 55 d5 f7 7e 6d b7 5e a6 59 6b 1a 8f 64 92 cb 56 9c 4c d2 ec 32 2a e2 34 69 cd a6 32 a2 ac 5c ca 56 9a c8 71 be 11 25 d1 f4 a6 88 47 f9 c6 3f f9 c9 a3 51 b7 17 3d 18 75 1f 8f 27 f7 b7 26 e3 47 e3 ad cd ad ce 3f 79 e7 ed ee f6 ce fb 83 9d 4e f1 b5 68 fd 7a ef ff f2 e6 68 a2 c8 e2 51 e1 0d fc 5c 4e 27 9d 6b 79 3a 8b 46 17 db e7 f3 e4 e2 e4 32 8f c7 32 29 e2 e2 e6 24 8f f3 39 a5 a3 f0 a7 6a 2d 16 47 c7 41 67 36 cf cf fd a3 a3 fb bf f5 8e c5 6d 6f 73 f3 b7 47 fd c9 3c 19 a1 ff 7e 22 a4 28 82 db a2 93 f9 32 10 45 67 Data Ascii: kWH?\|[g[$QB&eaFH2`SZH>5ZUU~m^YkdVL2*4i2\Vq%G?Q=u'&G?yNhzhQ\N'ky:F22)$9j-GAg6mosG<~"(2Eg
2024-09-29 06:21:05 UTC	16384	IN	Data Raw: 1a bc c6 7d 7c b5 77 72 dd d3 bd 33 7d 33 7b d2 f0 af f8 08 27 9e c7 f6 a1 8f bf 95 e6 a9 63 ae bb 8a 8d 23 42 03 78 ba d1 1b d2 6f df c9 3d d1 b9 27 9e 3a 29 60 36 23 0d 6b 5c 14 6d 03 e9 6c 3e 25 02 be 37 83 d9 2d 11 cd 83 9b 9c e4 87 dd 64 92 1a 38 f3 86 57 84 26 9c 3e 73 a0 36 2a 0a 4c dd 9c 84 e7 c1 fc b4 cc 41 c0 d2 4a 15 95 a1 ae cf c8 0c f7 e3 f6 aa 7a a9 9a 4c dd 4b d5 cc 2c c2 19 95 27 ad c3 0c ac 02 34 25 6c a8 8d a2 93 aa bb 9b 3b 79 79 35 89 06 0d e5 55 ea b9 33 9a 55 79 2d 12 23 95 ab 71 4a 72 de 15 62 ed a5 b4 e9 a6 10 8e 13 de ea d5 2f 9a 4f 55 8c 92 b8 43 b8 55 e0 0e 4d 8e 1b ab de 76 32 49 62 8c 88 30 da ab e9 9c fb e8 ca b3 7b 75 5a 4d fc 90 b2 ac 4d 7f cc 9d 74 ef e0 4c b4 0d 5d c7 5c 4f af 4f 71 f6 68 2c b8 78 77 00 4e e5 df 30 c3 15 Data Ascii: }\|wr3}3{'c#Bxo=':)`6#k\ml>%7-d8W&>s6*LAJzLK,'4%l;yy5U3Uy-#qJrb/OUCUMv2Ib0{uZMMtL]\OOqh,xwN0
2024-09-29 06:21:05 UTC	842	IN	Data Raw: df b3 9b e8 24 4d 77 d3 e4 4a 76 f8 a6 d0 09 3d 82 36 07 40 c4 5e 1e 85 09 c2 7b be 29 51 5e f1 01 6b cf 55 6d 0c 88 6d a5 49 af aa 3b 83 02 35 da 35 fd d2 55 df 5c 26 38 98 04 e2 b2 e8 04 50 f6 01 2c a1 5c 6d ea 3b c5 95 df e2 7c 04 b4 35 27 15 5a 6d 39 fb 6e e5 10 56 53 5b 2d ee d0 86 d6 98 e0 b5 63 78 83 0d 68 69 4e b3 b1 99 8d 0d 4b 9c f3 8b 46 42 72 d5 3a 30 f0 75 d0 4c 21 a1 55 5a 9f 9d a1 19 67 cd 3a ad 9c 93 e4 b5 75 83 1c 10 ef 06 47 92 af 7d 0d af 14 7e dd 49 2e d3 83 e4 94 7e c5 30 0e 2d 09 27 d8 35 c7 46 be a6 b5 b0 7d 34 ac 3a 5a 86 e3 24 9e 4c e0 de 0e b2 78 02 84 48 38 c4 a9 cc 32 40 a0 f6 5c e7 45 44 e8 56 5a 7c 35 22 e1 68 23 46 af 6b be 7c 7e c3 b7 ba 6f b1 cf 32 05 52 f6 1b cd 02 f6 c0 3a 6e 10 f5 65 c3 38 bf 61 5d 7b c6 c4 5b 40 ce a7 Data Ascii: $MwJv=6@^{)Q^kUmmI;55U\&8P,\m;\|5'Zm9nVS[-cxhiNKFBr:0uL!UZg:uG}~I.~0-'5F}4:Z$LxH82@\EDVZ\|5"h#Fk\|~o2R:ne8a]{[@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49756	13.107.246.64	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:04 UTC	633	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:05 UTC	787	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:05 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: f9506dfc-901e-004e-2e37-129a61000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240929T062104Z-15767c5fc55472x4k7dmphmadg000000049000000000aq5s x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-09-29 06:21:05 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49758	13.107.246.60	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:04 UTC	398	OUT	GET /shared/5/js/signup-fabric_en_l7exbVZEGzG2v4FeAaRSUA2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:04 UTC	820	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:04 GMT Content-Type: application/x-javascript Content-Length: 225363 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 18 Sep 2024 20:40:12 GMT ETag: 0x8DCD8221813A4BB x-ms-request-id: d229f7d6-301e-003e-5d1c-126b84000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240929T062104Z-15767c5fc55xsgnlxyxy40f4m000000004ng0000000019zn x-fd-int-roxy-purgeid: 67912908 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-29 06:21:04 UTC	15564	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 69 77 db 38 d2 28 fc fd fd 15 b6 6e 8e 87 1c c3 8a 64 67 a5 c2 d6 4d 1c bb 93 ee 6c 1d 27 9d 4e bb 7d 7d 68 09 92 d8 91 48 85 a4 ec 38 b6 fe fb ad 05 2b 45 39 e9 99 67 9e 67 ee 7b 26 e7 c4 02 41 10 4b a1 00 54 15 6a b9 fd f7 cd 8d c3 bc d8 98 a6 03 99 95 72 23 cd 46 79 31 4b aa 34 cf 36 e6 53 99 40 56 29 e1 7f 3a ce 16 f3 9d 51 72 56 a4 83 53 99 b5 ff 2c db 2f 9e ef 1f bc 3a 3a 68 57 5f aa 8d bf df fe ff 36 47 8b 6c 80 df 05 e1 d5 79 52 6c 48 51 89 4c 14 22 17 69 7c f5 f0 6e 77 ef 6e 64 4a d0 bb f0 aa b5 c0 ea 2b a8 b2 6a f5 f0 9b 22 ce 82 bd 5d 28 1c 8a 3c be 1a 4c d2 e9 70 3f cf 2a f9 a5 7a 77 39 97 65 b4 d9 11 03 fb 5c 7b a4 d7 43 39 4a 16 d3 ea 4d 91 cf f9 39 2d e7 d3 e4 f2 55 32 a3 e2 63 59 3d ad 95 a0 ac 22 3d 97 Data Ascii: iw8(ndgMl'N}}hH8+E9gg{&AKTjr#Fy1K46S@V):QrVS,/::hW_6GlyRlHQL"i\|nwndJ+j"](<Lp?*zw9e\{C9JM9-U2cY="=
2024-09-29 06:21:04 UTC	16384	IN	Data Raw: 3d 8c f5 04 5b ad c9 ed c2 35 95 d0 b1 da e4 23 ba 57 fa c1 68 e4 5e e1 77 11 50 aa 7c ce 55 3b 72 d9 93 71 b6 94 91 52 0c e1 36 a0 7e a8 ec 88 15 f8 d0 27 81 97 61 a2 3b 61 be 55 66 82 47 65 1d 4a 3d 2f dc f5 34 c9 5c cb a3 cd 60 13 63 5b d3 15 84 e4 c3 8b 72 f6 36 5d ec 21 25 63 b6 16 a9 2c 4a 71 4d 4e b3 61 d4 52 24 65 49 66 40 7d 43 62 96 a8 cb 87 46 bb c8 ac 43 79 8d 84 6f 14 e3 be b5 b5 b9 19 74 ef 6d ad 2d 80 97 90 2e 8f 77 96 05 f6 90 94 2a 1a 81 a8 62 40 46 40 6c 38 34 59 19 0e 5d 00 b5 71 8b 7a 4e 71 e6 15 0e 01 64 11 c1 94 0f 97 d5 ad 43 b9 5b fe c0 21 0e a6 f9 80 ed 12 d0 8f 9e 42 bb 02 f5 84 81 ad 60 cd 20 66 ad a9 f1 40 c6 b5 ef 43 13 23 c1 10 c6 8e c2 fa a5 ab 33 8d 58 aa fd 95 b8 e9 5a d4 55 5d 0b ba 2d 31 2e 4d e8 89 dc 65 b1 52 39 bb 15 Data Ascii: =[5#Wh^wP\|U;rqR6~'a;aUfGeJ=/4\`c[r6]!%c,JqMNaR$eIf@}CbFCyotm-.w*b@F@l84Y]qzNqdC[!B` f@C#3XZU]-1.MeR9
2024-09-29 06:21:04 UTC	16384	IN	Data Raw: 35 34 c4 58 17 f8 d3 de 42 bc ab d2 e8 e2 52 a9 e5 42 17 03 b9 4c 28 dd c6 f3 db 37 1a e7 36 0e e6 18 4f e4 2a 17 01 15 d4 e3 da bb 27 57 89 53 d7 ce 39 25 a9 b3 35 f3 d0 d3 45 e6 63 f4 d8 87 75 6d 29 72 e0 75 a5 71 34 f7 68 16 6e 97 bd de c6 fc 4e da c7 3b 80 5e 27 a4 05 7a 56 33 54 7a 01 93 08 03 90 a3 e6 35 ed 80 41 cc 61 5c b4 16 40 02 0c da ab 41 a2 14 be 0c d9 a5 4e 5b 8a 3f db 28 1b a8 4d b7 8e 49 66 c0 cb bb 42 3e 7f 05 1c 06 7b 3b 96 7f 23 f8 cf 78 b2 27 b9 1b d9 cc 74 56 48 b3 f6 e4 b3 76 b3 30 84 8f 9c 31 2e a9 c6 a0 65 10 bb 4e 65 28 3b fb 89 70 c9 28 23 af 0f 95 63 1c b5 d4 85 31 aa eb 1b 20 92 75 99 03 03 42 5c 0f 50 75 ce 38 87 65 00 53 e2 0a cb 79 e3 e4 c7 61 26 a9 c4 3c 84 56 3e d9 dc 8e 2c c0 f8 6c 3b f3 ba 53 d9 cc aa c0 89 df 57 59 38 Data Ascii: 54XBRBL(76O*'WS9%5Ecum)ruq4hnN;^'zV3Tz5Aa\@AN[?(MIfB>{;#x'tVHv01.eNe(;p(#c1 uB\Pu8eSya&<V>,l;SWY8
2024-09-29 06:21:04 UTC	16384	IN	Data Raw: 78 96 a0 d4 b3 47 b1 86 38 9d 2c 93 b7 34 01 5a 24 99 9e 1e 3a 83 98 db 86 e3 e1 be 26 fd 7e ed 02 ef a3 44 33 4c e6 e3 e6 1e a6 bb 19 79 ed 4d a7 f6 1b d6 5d ed 15 33 f9 e6 6f e9 8c a9 eb 75 5b da 84 75 58 a3 3c 4b e4 23 8b 0e 27 e5 1c d3 18 c0 eb e8 59 2b 47 d0 fb 1b 03 c6 d8 14 96 c5 7c f1 5b 17 63 5f b9 f3 05 ef bc 16 a2 fd 9d 2f 58 e4 69 ef a2 3e 92 95 bb 51 fd be 19 7c 65 0f 53 79 6d a9 42 e8 48 72 7a 74 dd 93 be 47 4a cc a3 df 21 96 14 d4 5f c5 fa e3 20 02 98 ee 88 5e 19 cf 2e 74 a8 cf 2c f8 8c 6e 34 b7 95 28 cb 56 42 87 a2 11 d9 38 58 85 ae 98 2f b3 3e 83 e2 81 f4 cc 65 5d 1c 26 65 15 ea 87 b7 dc 77 43 18 d6 9c a9 89 3f 71 ae 48 66 86 43 ef 46 96 08 2e 5b 04 1a f1 c4 1a d5 a6 2c 69 d9 b3 d3 e2 a5 ee 90 0f 67 64 09 e4 ca d8 dc 48 14 ca ed 40 08 3d Data Ascii: xG8,4Z$:&~D3LyM]3ou[uX<K#'Y+G\|[c_/Xi>Q\|eSymBHrztGJ!_ ^.t,n4(VB8X/>e]&ewC?qHfCF.[,igdH@=
2024-09-29 06:21:04 UTC	16384	IN	Data Raw: 31 0c 30 1c 49 7e 1d 51 82 0b 9d b6 0d 44 f3 85 a3 c5 75 76 b2 9a df 84 6d 81 a2 7d 3d f4 28 2b 25 9b 13 c7 ed 2d 2d 8d d0 00 f8 03 9b 33 6f ac 30 a2 04 ad e0 09 0e 43 b9 1d ae 8f 6e 36 85 9b cb 4f 1e ad f5 2a 31 a6 4b ec 76 3c 0f 59 0d 68 d0 59 85 71 bd a0 f8 80 bc 97 57 bd 39 8d 00 18 68 77 28 3b 3e e8 cc c6 7e 30 e1 83 17 b9 3a 20 80 cb 54 80 01 52 12 62 5b bf a7 e0 12 f4 2d 42 15 2d c1 86 95 bd eb d5 d9 87 ea 64 4f 61 92 8e 4b 4e e8 50 e4 14 8e 32 5a 12 37 b8 1b 3a cf b6 8a cb 01 35 d1 48 ed 11 71 34 7a dd 32 ba 77 02 f7 ab 80 c4 5e ae ae 50 ad 3f 63 75 eb c6 f2 46 c1 97 1c 48 e1 7d 97 6c 3c af a7 2b b7 bf 26 80 4f 77 a9 26 69 3e eb 16 28 a9 bc 47 fa c5 60 68 b6 13 90 8c 00 fa 6a 64 59 4f b1 13 79 ff 60 ce 65 99 5e 8b b6 08 60 09 63 83 ed 38 f2 19 ac Data Ascii: 10I~QDuvm}=(+%--3o0Cn6O*1Kv<YhYqW9hw(;>~0: TRb[-B-dOaKNP2Z7:5Hq4z2w^P?cuFH}l<+&Ow&i>(G`hjdYOy`e^`c8
2024-09-29 06:21:04 UTC	16384	IN	Data Raw: 25 cf e3 82 9e 2e a9 5b 5e 35 83 a4 76 a5 ce 7c 69 f7 0c e8 1d 3d 0c 96 b8 67 c9 f9 76 d9 8f a3 5d 86 0a 55 74 19 24 03 4c b5 7c 9f 1d 08 87 d8 c9 80 26 1a 7a 08 cd 04 94 cf 21 45 28 02 bd 92 09 42 95 9d f4 76 93 9d fa f0 a1 0c 7e fa d4 6d 49 85 72 0f 35 af 7b 42 97 33 16 5d a8 14 bd be fa 4d 37 08 95 4b 3a 11 4b fa 56 31 28 94 0e 2c 0e 78 82 97 d3 7a d5 84 de 8b 62 19 ff 5f 90 79 5d c2 dd 2a 64 34 ca bd d5 2a c4 93 8c 5a 1d af b4 7d 93 95 f8 8b 41 f7 2f 2e d8 fb f3 1e 3d 05 20 84 22 51 32 fd 2a e4 af 5c fc 5a 76 80 75 2b e7 22 db 49 f3 29 16 18 83 34 01 59 4d f9 74 29 08 4b 8d 6e 86 05 d9 9d 08 23 62 95 1e 68 c2 76 c7 72 c2 a6 62 c2 16 32 8c 4f 8c 9a 82 b5 4a 14 9f dc 50 d5 16 60 41 c5 e0 4c 85 9d f6 55 2a dd 21 98 57 a9 06 dd 30 38 c5 52 80 8a 9b 97 a2 Data Ascii: %.[^5v\|i=gv]Ut$L\|&z!E(Bv~mIr5{B3]M7K:KV1(,xzb_y]d4Z}A/.= "Q2\Zvu+"I)4YMt)Kn#bhvrb2OJP`ALU!W08R
2024-09-29 06:21:04 UTC	16384	IN	Data Raw: b6 e5 7a df 72 88 7e 7b 15 4f b8 55 cc e7 c5 71 bf a3 48 9e 74 aa 87 a2 4a 7a 05 16 64 30 9e bf 99 32 7a c4 b5 7f 5e 91 5c 36 e2 a4 1a e0 e7 1d f1 d2 bb 24 cd e2 14 33 f7 39 1d 68 54 80 41 9f 1c 8f a9 13 c2 fc 11 43 ba 53 e0 e3 78 5d 0f d8 08 2a ea c3 39 3f 9e f5 3b 7c 9c 96 6b a9 1c 92 e5 2f d7 97 5c 70 62 75 09 55 71 6f c2 12 41 e8 a7 a8 bb b3 96 a7 ea 85 4f c6 b0 2b 1a eb 55 31 d2 cf 19 75 8d ed 6c 6e 57 35 62 b6 b1 fd d1 7c ba da 45 01 d9 82 40 7a 75 be 49 ac 3a 2f d4 96 ae 44 5e 77 92 1a a5 52 48 4c a4 46 d3 92 46 3f 83 77 ac 74 47 bc 5b f9 ef 75 88 78 c9 93 e2 e3 4d 2c 0c 36 a5 d7 b4 4b ae 2d 1f 97 5f 4d 67 2b 29 4b aa 12 da 7a ff 87 93 e9 a8 db f9 a1 ec 06 74 f3 86 3f 16 a3 26 4d bb 67 fc d0 a1 b7 34 97 e5 5f 70 d4 3d a7 7a 41 e2 f4 51 af fc b9 92 Data Ascii: zr~{OUqHtJzd02z^\6$39hTACSx]*9?;\|k/\pbuUqoAO+U1ulnW5b\|E@zuI:/D^wRHLFF?wtG[uxM,6K-_Mg+)Kzt?&Mg4_p=zAQ
2024-09-29 06:21:05 UTC	16384	IN	Data Raw: 11 72 cf 3c 4f 2b a7 ee e7 d5 3b 7e e5 7c ac 9c 39 13 2b a7 0f 2e 0d 92 5a 00 be 35 8a dc f4 99 e5 8c 83 9d 8a 95 b9 2c cf 3b b9 a9 4c ad 43 b4 45 60 f6 f3 2d 0b 92 3b 78 a2 4a 36 ca 51 13 84 44 ae ae 2a ce f7 21 93 17 1d c0 46 7e d7 f1 fa c0 24 10 ed d4 fa d6 c2 73 f1 a0 d4 0e 5d 7a 6b 81 2f 7a cd e2 6d 3b 8b e9 b0 45 1e eb a1 b4 20 80 ad 9e e3 77 dd a6 96 55 e9 74 4f 86 1c 78 0d 8a 7d 6e 00 d6 31 c8 39 c1 4b e5 6c 85 c9 17 6c 18 b1 ba 65 ad fa d6 32 a7 d6 bb 96 e6 26 cc e5 26 65 a4 65 16 61 ef f8 8c 15 06 0a 78 0b 88 7f 8e 8b 29 c0 66 f1 a0 05 7c ca aa 9a 20 63 c3 8b 32 4a d9 f0 a2 72 69 f5 6d 9e f3 10 76 cf a6 a4 14 f1 56 e9 86 c6 d3 8e 8c 83 1d bb f0 2e f9 71 02 60 06 f9 f5 57 f4 15 7b 52 82 d9 1b 7b 78 20 cb 74 9c be c5 5b dc f4 31 e2 c0 7b b9 9f b2 Data Ascii: r<O+;~\|9+.Z5,;LCE`-;xJ6QD*!F~$s]zk/zm;E wUtOx}n19Klle2&&eeax)f\| c2JrimvV.q`W{R{x t[1{
2024-09-29 06:21:05 UTC	16384	IN	Data Raw: ee 9e aa 5f a5 ae bf cb b6 53 6d 5c 4d 0a 7d 4f 66 92 71 93 40 8d 37 ce db 0f 1b 38 a8 7b 62 b8 60 06 6f 51 d1 10 3f 90 08 7b 2b 05 18 d8 2d 0e 9c b3 2d b2 18 f9 9d 93 c5 f0 43 16 13 70 e9 8b 59 4e 89 ab 88 dc 45 6c 18 c7 ce 84 62 01 86 8e 13 e0 8b f5 8b 12 76 d4 7a 68 e6 c1 15 9b 62 ed 2a 78 c5 26 90 23 00 16 1b d8 7c 80 b8 83 cc cd 5a b9 f0 fb a3 4b b8 2e 27 81 47 52 93 fd 22 b4 f6 5d 8c f4 d3 10 9e 28 42 44 9a 63 f8 93 47 54 fb 70 f7 77 76 86 25 da fb ba 76 10 c2 65 77 ff 5d 96 16 c2 f5 16 c0 c5 91 c8 b3 59 fb 29 9a 52 e0 19 cf c7 f7 34 eb 5f e1 6e 13 60 08 17 34 78 b5 05 b0 5d b5 de d4 0f b0 76 14 f4 47 0e 80 86 19 14 ad 5d f5 9c 9e 47 8f 81 43 3f 7c 22 87 70 6d 8e d2 74 92 58 5f 7d 25 53 9a 7e f4 95 1b f5 93 af b0 3e 2c d1 57 7a bd c6 bf 42 20 05 b4 Data Ascii: _Sm\M}Ofq@78{b`oQ?{+--CpYNElbvzhb*x&#\|ZK.'GR"](BDcGTpwv%vew]Y)R4_n`4x]vG]GC?\|"pmtX_}%S~>,WzB
2024-09-29 06:21:05 UTC	16384	IN	Data Raw: c1 f1 3b 7e 2e 5e 71 b4 e9 ae f7 22 3f f0 e2 0e 06 0a a6 a8 af 3e 9e 02 7d e3 5f f8 5e e0 aa 96 59 dc 24 65 90 5e 34 3f a3 28 c3 2c 6a c5 cd 31 5c 78 97 8f 81 7c c4 86 db 2c 20 70 82 85 20 89 e5 89 68 e1 12 53 e4 a8 06 73 2e 00 ca 60 65 63 a3 a0 93 0c 01 31 ac b3 ef a0 23 51 ce c5 46 3c ed 28 1a 8f 95 a0 09 99 63 1e 47 17 bd 33 03 b5 17 a6 c4 20 bb 19 93 97 65 04 14 af 3a 4a f5 c2 c8 2b 13 c0 0d 48 28 97 a8 ba 5c 48 37 b5 63 8a 20 0d 0b 1c c1 9e c0 e2 a1 4c 8e ff c5 f0 d1 14 a1 19 35 d8 b0 ad 29 b4 1e a6 db ac e3 84 15 0e d8 ba c2 d3 e6 d8 77 dd 55 bc 72 b1 34 8d c8 e7 b2 43 84 38 2f 02 dc f2 86 10 c3 ba b4 a0 b9 60 b5 01 8f 69 db af 0a 74 9b 88 fd 86 a4 28 08 10 3d 1a c4 72 6c 15 49 79 b0 36 b4 71 45 24 e4 c2 d9 1a c9 60 c7 b2 15 bf 52 c0 55 8a 02 ad 76 Data Ascii: ;~.^q"?>}_^Y$e^4?(,j1\x\|, p hSs.`ec1#QF<(cG3 e:J+H(\H7c L5)wUr4C8/`it(=rlIy6qE$`RUv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49757	13.107.246.64	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:04 UTC	620	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:04 UTC	813	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:04 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: 066e1dbf-201e-001d-0205-12f147000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240929T062104Z-15767c5fc55tp7hb6tzuygumb800000000p0000000007ssg x-fd-int-roxy-purgeid: 67912908 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-09-29 06:21:04 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49764	13.107.246.60	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:05 UTC	385	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:05 UTC	806	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:05 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: 066e1dbf-201e-001d-0205-12f147000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240929T062105Z-15767c5fc55fdfx81a30vtr1fw00000004xg00000000db7r x-fd-int-roxy-purgeid: 67912908 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-29 06:21:05 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49767	13.107.246.60	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:07 UTC	398	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:07 UTC	807	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:07 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: f9506dfc-901e-004e-2e37-129a61000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240929T062107Z-15767c5fc55fdfx81a30vtr1fw000000051g000000002vrx x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-29 06:21:07 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49766	13.107.246.60	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:07 UTC	401	OUT	GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:07 UTC	819	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:07 GMT Content-Type: application/x-javascript Content-Length: 32811 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 09 Aug 2024 21:16:16 GMT ETag: 0x8DCB8B881B52A8D x-ms-request-id: 6ff35fd2-801e-000f-6e37-12c285000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240929T062107Z-15767c5fc55tp7hb6tzuygumb800000000n000000000a8pk x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-29 06:21:07 UTC	15565	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 6b 57 db 48 b3 3f fa fe 7c 0a 5b 67 0e 5b 1a 1a c7 86 24 93 d8 51 bc 12 42 26 e4 06 13 c8 65 86 61 b3 84 dd 06 0d 46 f2 48 32 84 60 7f f7 53 bf ea 8b 5a b2 48 f2 ac ff 3e e7 c5 9e 35 c1 ea 8b 5a dd d5 d5 d5 55 d5 55 d5 f7 7e 6d b7 5e a6 59 6b 1a 8f 64 92 cb 56 9c 4c d2 ec 32 2a e2 34 69 cd a6 32 a2 ac 5c ca 56 9a c8 71 be 11 25 d1 f4 a6 88 47 f9 c6 3f f9 c9 a3 51 b7 17 3d 18 75 1f 8f 27 f7 b7 26 e3 47 e3 ad cd ad ce 3f 79 e7 ed ee f6 ce fb 83 9d 4e f1 b5 68 fd 7a ef ff f2 e6 68 a2 c8 e2 51 e1 0d fc 5c 4e 27 9d 6b 79 3a 8b 46 17 db e7 f3 e4 e2 e4 32 8f c7 32 29 e2 e2 e6 24 8f f3 39 a5 a3 f0 a7 6a 2d 16 47 c7 41 67 36 cf cf fd a3 a3 fb bf f5 8e c5 6d 6f 73 f3 b7 47 fd c9 3c 19 a1 ff 7e 22 a4 28 82 db a2 93 f9 32 10 45 67 Data Ascii: kWH?\|[g[$QB&eaFH2`SZH>5ZUU~m^YkdVL2*4i2\Vq%G?Q=u'&G?yNhzhQ\N'ky:F22)$9j-GAg6mosG<~"(2Eg
2024-09-29 06:21:07 UTC	16384	IN	Data Raw: f4 b5 4b 71 c3 bd 9a cf ff a0 97 d4 c3 ff 5f fb 97 38 c7 e0 1a bc c6 7d 7c b5 77 72 dd d3 bd 33 7d 33 7b d2 f0 af f8 08 27 9e c7 f6 a1 8f bf 95 e6 a9 63 ae bb 8a 8d 23 42 03 78 ba d1 1b d2 6f df c9 3d d1 b9 27 9e 3a 29 60 36 23 0d 6b 5c 14 6d 03 e9 6c 3e 25 02 be 37 83 d9 2d 11 cd 83 9b 9c e4 87 dd 64 92 1a 38 f3 86 57 84 26 9c 3e 73 a0 36 2a 0a 4c dd 9c 84 e7 c1 fc b4 cc 41 c0 d2 4a 15 95 a1 ae cf c8 0c f7 e3 f6 aa 7a a9 9a 4c dd 4b d5 cc 2c c2 19 95 27 ad c3 0c ac 02 34 25 6c a8 8d a2 93 aa bb 9b 3b 79 79 35 89 06 0d e5 55 ea b9 33 9a 55 79 2d 12 23 95 ab 71 4a 72 de 15 62 ed a5 b4 e9 a6 10 8e 13 de ea d5 2f 9a 4f 55 8c 92 b8 43 b8 55 e0 0e 4d 8e 1b ab de 76 32 49 62 8c 88 30 da ab e9 9c fb e8 ca b3 7b 75 5a 4d fc 90 b2 ac 4d 7f cc 9d 74 ef e0 4c b4 0d Data Ascii: Kq_8}\|wr3}3{'c#Bxo=':)`6#k\ml>%7-d8W&>s6*LAJzLK,'4%l;yy5U3Uy-#qJrb/OUCUMv2Ib0{uZMMtL
2024-09-29 06:21:07 UTC	862	IN	Data Raw: f8 20 3b b4 3c 7b 00 a1 00 34 b8 17 af d3 b1 2e a6 35 fe 2a df b3 9b e8 24 4d 77 d3 e4 4a 76 f8 a6 d0 09 3d 82 36 07 40 c4 5e 1e 85 09 c2 7b be 29 51 5e f1 01 6b cf 55 6d 0c 88 6d a5 49 af aa 3b 83 02 35 da 35 fd d2 55 df 5c 26 38 98 04 e2 b2 e8 04 50 f6 01 2c a1 5c 6d ea 3b c5 95 df e2 7c 04 b4 35 27 15 5a 6d 39 fb 6e e5 10 56 53 5b 2d ee d0 86 d6 98 e0 b5 63 78 83 0d 68 69 4e b3 b1 99 8d 0d 4b 9c f3 8b 46 42 72 d5 3a 30 f0 75 d0 4c 21 a1 55 5a 9f 9d a1 19 67 cd 3a ad 9c 93 e4 b5 75 83 1c 10 ef 06 47 92 af 7d 0d af 14 7e dd 49 2e d3 83 e4 94 7e c5 30 0e 2d 09 27 d8 35 c7 46 be a6 b5 b0 7d 34 ac 3a 5a 86 e3 24 9e 4c e0 de 0e b2 78 02 84 48 38 c4 a9 cc 32 40 a0 f6 5c e7 45 44 e8 56 5a 7c 35 22 e1 68 23 46 af 6b be 7c 7e c3 b7 ba 6f b1 cf 32 05 52 f6 1b cd Data Ascii: ;<{4.5*$MwJv=6@^{)Q^kUmmI;55U\&8P,\m;\|5'Zm9nVS[-cxhiNKFBr:0uL!UZg:uG}~I.~0-'5F}4:Z$LxH82@\EDVZ\|5"h#Fk\|~o2R

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49768	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:08 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 74 51 66 6f 4e 59 30 52 79 45 47 39 66 4d 52 34 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 30 37 62 64 37 30 63 62 30 36 33 35 65 37 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: tQfoNY0RyEG9fMR4.1Context: b07bd70cb0635e7c
2024-09-29 06:21:08 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 06:21:08 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 74 51 66 6f 4e 59 30 52 79 45 47 39 66 4d 52 34 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 30 37 62 64 37 30 63 62 30 36 33 35 65 37 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 4a 53 48 68 6a 36 30 6a 4f 77 4c 47 35 61 47 48 6c 65 49 79 55 45 37 66 34 55 75 49 2f 73 65 4a 52 4e 34 33 44 50 56 52 6f 47 56 45 38 45 55 37 6a 4e 73 44 65 6c 64 54 4a 5a 63 4d 54 31 57 65 48 38 46 64 48 45 4c 63 43 64 63 48 6d 4d 67 6f 43 6f 74 56 39 31 62 72 33 39 78 71 61 48 74 70 56 7a 6b 6f 58 63 41 41 58 61 4c 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: tQfoNY0RyEG9fMR4.2Context: b07bd70cb0635e7c<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcJSHhj60jOwLG5aGHleIyUE7f4UuI/seJRN43DPVRoGVE8EU7jNsDeldTJZcMT1WeH8FdHELcCdcHmMgoCotV91br39xqaHtpVzkoXcAAXaLS
2024-09-29 06:21:08 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 74 51 66 6f 4e 59 30 52 79 45 47 39 66 4d 52 34 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 30 37 62 64 37 30 63 62 30 36 33 35 65 37 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: tQfoNY0RyEG9fMR4.3Context: b07bd70cb0635e7c<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 06:21:08 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 06:21:08 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 64 64 52 67 6d 66 4d 76 42 30 53 66 46 62 62 57 4b 36 77 70 51 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: ddRgmfMvB0SfFbbWK6wpQg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49771	35.190.10.96	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:08 UTC	649	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 612 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:08 UTC	612	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 47 46 65 52 67 70 33 63 77 6f 64 56 6e 46 52 44 78 41 65 45 46 59 51 43 45 6b 51 56 46 55 4b 65 32 42 32 57 6b 5a 32 61 6e 38 50 45 41 67 51 57 6b 5a 47 51 6b 45 49 48 52 31 66 51 56 52 47 48 46 70 42 51 6b 42 64 52 6c 64 52 52 68 78 63 56 30 59 64 57 31 78 57 56 30 6f 63 57 6b 5a 66 58 68 41 65 45 48 6c 6b 59 31 52 71 41 45 56 4c 65 6c 39 64 44 78 41 49 41 78 34 51 5a 32 5a 46 58 46 5a 4b 59 46 46 37 41 67 49 50 45 41 67 51 5a 56 74 63 41 51 41 51 48 68 42 39 59 57 4e 69 55 41 45 4c 65 48 5a 65 43 67 38 51 43 41 49 65 45 47 41 42 61 30 70 69 59 33 64 71 66 46 55 4b 44 78 41 49 41 51 47 51 42 42 68 34 51 5e 61 31 68 2f 5a 33 31 78 56 6d 52 33 59 33 73 50 45 41 53 67 42 42 7d 41 49 43 48 68 42 36 58 77 70 Data Ascii: payload=aUkQRhAIEGFeRgp3cwodVnFRDxAeEFYQCEkQVFUKe2B2WkZ2an8PEAgQWkZGQkEIHR1fQVRGHFpBQkBdRldRRhxcV0YdW1xWV0ocWkZfXhAeEHlkY1RqAEVLel9dDxAIAx4QZ2ZFXFZKYFF7AgIPEAgQZVtcAQAQHhB9YWNiUAELeHZeCg8QCAIeEGABa0piY3dqfFUKDxAIAQGQBBh4Q^a1h/Z31xVmR3Y3sPEASgBB}AICHhB6Xwp
2024-09-29 06:21:08 UTC	400	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:08 GMT Content-Type: application/json; charset=utf-8 Content-Length: 904 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 06:21:08 UTC	904	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 66 31 78 2f 66 31 78 2f 62 79 4d 67 64 6e 55 72 64 6e 4a 33 50 69 52 32 49 58 45 2b 49 69 4a 32 64 54 35 79 64 53 52 78 50 69 74 31 64 69 56 31 63 43 45 67 4b 79 73 6e 63 6d 31 74 62 57 31 63 66 33 39 2f 58 48 39 76 63 47 5a 74 62 57 31 74 66 31 78 2f 58 48 39 2f 62 79 49 6a 49 43 51 69 49 53 59 6c 4a 79 4d 69 49 69 45 6b 49 79 73 6d 4a 69 45 72 62 57 31 74 62 56 78 2f 66 31 78 2f 66 33 39 63 62 79 49 6b 49 53 51 6d 4b 69 4d 72 4a 53 73 6c 4a 43 56 74 62 57 31 74 58 46 78 63 66 33 39 63 62 33 42 68 59 48 55 67 66 79 42 79 65 43 63 6e 65 33 46 34 65 58 31 32 59 69 5a 30 62 57 31 74 62 56 78 2f 66 31 78 2f 66 31 78 2f 62 79 55 6b 4a 79 4e 74 62 57 31 74 58 48 39 2f 58 48 39 63 58 48 39 76 49 79 42 32 64 53 Data Ascii: {"do":null,"ob":"f1x/f1x/byMgdnUrdnJ3PiR2IXE+IiJ2dT5ydSRxPit1diV1cCEgKysncm1tbW1cf39/XH9vcGZtbW1tf1x/XH9/byIjICQiISYlJyMiIiEkIysmJiErbW1tbVx/f1x/f39cbyIkISQmKiMrJSslJCVtbW1tXFxcf39cb3BhYHUgfyByeCcne3F4eX12YiZ0bW1tbVx/f1x/f1x/byUkJyNtbW1tXH9/XH9cXH9vIyB2dS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49772	34.107.199.61	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:08 UTC	591	OUT	GET /ns?c=029dbc40-7e2b-11ef-856f-85724689caa7 HTTP/1.1 Host: stk.hsprotect.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:08 UTC	153	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:08 GMT Content-Type: text/html Content-Length: 264 Access-Control-Allow-Origin: * Connection: close
2024-09-29 06:21:08 UTC	264	IN	Data Raw: 66 30 65 38 38 62 61 63 61 30 31 66 66 61 37 64 33 37 34 38 39 36 30 35 37 33 37 65 39 64 33 33 38 36 38 39 65 63 32 39 35 62 66 65 38 30 62 61 64 65 30 35 32 38 66 63 38 34 30 66 35 64 66 35 39 62 36 34 34 64 32 65 66 30 63 61 38 61 35 61 32 66 61 31 63 62 66 36 33 65 33 39 34 35 35 63 30 64 64 63 63 39 65 34 32 30 33 66 35 30 38 34 37 62 31 36 36 34 39 35 65 65 63 61 64 33 35 30 35 61 65 34 61 39 34 30 35 31 66 35 32 66 62 66 39 39 64 64 33 62 65 35 64 35 38 66 61 36 31 37 31 66 65 62 37 65 30 35 62 38 32 32 37 33 66 65 34 65 31 65 62 37 66 32 30 37 39 39 62 33 39 35 36 38 32 37 66 30 32 38 38 36 30 38 31 66 35 33 32 61 37 32 39 37 65 33 33 31 34 39 36 64 35 64 34 62 62 64 35 39 63 37 63 36 37 38 35 32 32 63 39 33 62 66 66 38 38 62 66 38 62 61 32 35 37 Data Ascii: f0e88baca01ffa7d37489605737e9d338689ec295bfe80bade0528fc840f5df59b644d2ef0ca8a5a2fa1cbf63e39455c0ddcc9e4203f50847b166495eecad3505ae4a94051f52fbf99dd3be5d58fa6171feb7e05b82273fe4e1eb7f20799b3956827f02886081f532a7297e331496d5d4bbd59c7c678522c93bff88bf8ba257

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49774	13.107.246.60	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:09 UTC	599	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:09 UTC	743	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:09 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 27 Sep 2024 04:46:35 GMT ETag: 0x8DCDEAF5E020495 x-ms-request-id: eace7353-601e-00c4-0e1e-113692000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240929T062109Z-15767c5fc55ncqdn59ub6rndq0000000049g000000009cez x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-29 06:21:09 UTC	15641	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-09-29 06:21:09 UTC	1533	IN	Data Raw: 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49777	35.190.10.96	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:09 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:09 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Sun, 29 Sep 2024 06:21:08 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 06:21:09 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49778	34.107.199.61	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:09 UTC	382	OUT	GET /ns?c=029dbc40-7e2b-11ef-856f-85724689caa7 HTTP/1.1 Host: stk.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:10 UTC	153	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:09 GMT Content-Type: text/html Content-Length: 264 Access-Control-Allow-Origin: * Connection: close
2024-09-29 06:21:10 UTC	264	IN	Data Raw: 63 30 31 33 65 37 38 62 65 37 63 36 62 62 64 38 35 38 64 38 63 62 37 61 36 63 64 37 36 37 34 35 63 30 64 35 61 39 32 61 62 61 66 62 38 65 65 65 37 65 62 62 36 38 63 30 65 66 63 30 66 66 38 33 34 61 36 66 33 36 64 39 66 65 34 31 34 65 32 64 39 61 36 30 38 30 66 63 35 33 37 36 31 35 33 38 36 36 62 30 34 36 64 63 37 66 35 63 32 62 34 34 39 38 65 61 62 66 31 33 30 33 62 64 35 31 36 63 35 65 38 36 63 65 34 64 31 31 62 34 66 33 63 66 30 34 39 34 31 32 37 62 62 66 30 66 65 39 63 35 33 39 65 33 39 34 65 38 61 30 62 32 38 31 39 61 65 61 66 33 34 38 30 62 31 36 66 33 65 30 30 30 33 33 37 39 39 36 35 38 62 66 33 65 63 65 66 36 33 35 39 37 66 30 36 66 35 64 61 62 62 36 38 32 36 62 37 64 65 39 31 32 36 63 33 37 66 64 36 34 31 34 63 37 38 66 36 39 32 65 37 65 63 61 66 Data Ascii: c013e78be7c6bbd858d8cb7a6cd76745c0d5a92abafb8eee7ebb68c0efc0ff834a6f36d9fe414e2d9a6080fc5376153866b046dc7f5c2b4498eabf1303bd516c5e86ce4d11b4f3cf0494127bbf0fe9c539e394e8a0b2819aeaf3480b16f3e00033799658bf3ecef63597f06f5dabb6826b7de9126c37fd6414c78f692e7ecaf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49782	35.190.10.96	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:09 UTC	650	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 8815 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:09 UTC	8815	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 48 74 6e 52 57 70 67 41 46 46 47 65 67 46 6e 44 78 41 65 45 46 59 51 43 45 6b 51 66 6b 6f 47 61 48 52 6c 58 68 6c 31 53 32 73 50 45 41 67 44 42 51 41 46 42 77 73 43 43 67 51 4b 42 41 55 45 48 68 42 68 63 47 51 5a 61 6c 55 44 41 56 51 41 43 67 38 51 43 45 5a 41 52 31 63 65 45 48 64 30 41 6c 39 30 58 6d 73 4b 65 47 45 43 44 78 41 49 41 51 6f 43 41 51 49 4b 43 68 34 51 66 51 42 64 66 48 74 71 41 6e 35 78 59 47 73 50 45 41 67 41 41 77 55 41 42 41 59 4c 42 67 55 41 48 68 42 57 53 32 68 77 55 47 5a 30 65 57 4d 44 52 51 38 51 43 41 51 44 41 51 59 41 42 51 51 65 45 46 5a 4c 61 48 42 51 5a 6e 52 35 59 48 51 4b 44 78 41 49 45 47 46 48 58 42 4a 68 56 30 49 53 41 41 73 53 41 41 49 41 42 68 49 43 41 41 67 41 41 77 67 Data Ascii: payload=aUkQRhAIEHtnRWpgAFFGegFnDxAeEFYQCEkQfkoGaHRlXhl1S2sPEAgDBQAFBwsCCgQKBAUEHhBhcGQZalUDAVQACg8QCEZAR1ceEHd0Al90XmsKeGECDxAIAQoCAQIKCh4QfQBdfHtqAn5xYGsPEAgAAwUABAYLBgUAHhBWS2hwUGZ0eWMDRQ8QCAQDAQYABQQeEFZLaHBQZnR5YHQKDxAIEGFHXBJhV0ISAAsSAAIABhICAAgAAwg
2024-09-29 06:21:10 UTC	400	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:09 GMT Content-Type: application/json; charset=utf-8 Content-Length: 932 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 06:21:10 UTC	932	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 58 46 78 63 66 33 39 2f 62 30 78 6a 61 79 42 76 49 43 41 6a 62 33 45 69 63 58 49 72 49 53 46 32 64 6e 42 33 4a 58 55 6b 4b 6e 55 71 63 48 42 78 4a 33 45 71 49 58 5a 31 64 53 64 79 4a 58 55 6a 4b 79 63 67 4b 6e 64 79 49 48 55 69 4a 79 4e 32 4a 69 56 31 4b 6e 56 31 64 58 4a 79 4a 79 49 71 4a 43 4a 31 63 53 73 6a 4a 33 45 70 57 6e 74 6e 66 55 56 37 4f 45 73 68 51 45 5a 68 59 58 42 62 52 47 6c 6a 61 57 56 47 59 33 68 36 4b 6b 55 69 59 47 42 33 53 33 46 30 5a 6d 6c 30 4a 53 4a 44 55 6d 6c 63 63 45 56 30 61 58 77 72 61 32 4e 6c 5a 30 46 48 61 57 6b 6a 4a 31 5a 43 52 31 78 44 4a 30 56 53 4a 48 74 58 65 54 68 30 51 57 46 2b 5a 6c 74 62 56 43 5a 6e 61 57 5a 4c 55 58 51 75 4c 69 6b 69 49 79 4d 6a 4b 55 56 44 66 6c Data Ascii: {"do":null,"ob":"XFxcf39/b0xjayBvICAjb3EicXIrISF2dnB3JXUkKnUqcHBxJ3EqIXZ1dSdyJXUjKycgKndyIHUiJyN2JiV1KnV1dXJyJyIqJCJ1cSsjJ3EpWntnfUV7OEshQEZhYXBbRGljaWVGY3h6KkUiYGB3S3F0Zml0JSJDUmlccEV0aXwra2NlZ0FHaWkjJ1ZCR1xDJ0VSJHtXeTh0QWF+ZltbVCZnaWZLUXQuLikiIyMjKUVDfl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49779	13.107.246.57	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:09 UTC	364	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:10 UTC	743	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:10 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 27 Sep 2024 04:46:35 GMT ETag: 0x8DCDEAF5E020495 x-ms-request-id: eace7353-601e-00c4-0e1e-113692000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240929T062110Z-15767c5fc55qdcd62bsn50hd6s00000004c000000000b2he x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-29 06:21:10 UTC	15641	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-09-29 06:21:10 UTC	1533	IN	Data Raw: 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49786	35.190.10.96	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:10 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:10 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Sun, 29 Sep 2024 06:21:10 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 06:21:10 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49817	13.107.246.45	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:16 UTC	566	OUT	GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:16 UTC	693	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:16 GMT Content-Type: application/javascript Content-Length: 30703 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=43200 Expires: Sun, 29 Sep 2024 06:55:10 GMT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240929T062116Z-15767c5fc559lm6vwp3h1khw8n00000004z00000000077n3 x-fd-int-roxy-purgeid: 38334287 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-29 06:21:16 UTC	15691	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 34 32 32 38 2e 34 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 73 6d 63 63 6f 6e 76 65 72 67 65 6e 63 65 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24228.4","mkt":"en-US","ptn":"smcconvergence","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rw
2024-09-29 06:21:16 UTC	15012	IN	Data Raw: 26 2d 31 21 3d 3d 70 2e 50 72 6f 6d 69 73 65 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 26 26 28 54 65 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 2e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 65 29 7d 29 2c 54 65 2e 5f 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 56 65 28 7b 65 76 65 6e 74 54 79 70 65 3a 22 43 6c 69 65 6e 74 45 72 72 6f 72 22 2c 69 73 43 72 69 74 69 63 61 6c 3a 21 30 2c 6e 61 6d 65 3a 65 2e 6d 65 73 73 61 67 65 7c 7c 22 28 66 61 6c 73 65 79 20 6d 65 73 73 61 67 65 20 70 72 6f 70 65 72 74 79 20 6f 6e 20 65 72 72 6f 72 29 22 2c 74 79 70 65 Data Ascii: &-1!==p.Promise.toString().indexOf("[native code]")&&(Te._immediateFn=function(e){return p.Promise.resolve().then(e)}),Te._unhandledRejectionFn=function(e){Ve({eventType:"ClientError",isCritical:!0,name:e.message\|\|"(falsey message property on error)",type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49828	13.107.246.45	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:17 UTC	385	OUT	GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:17 UTC	693	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:17 GMT Content-Type: application/javascript Content-Length: 30703 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=43200 Expires: Sun, 29 Sep 2024 06:55:10 GMT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240929T062117Z-15767c5fc55gq5fmm10nm5qqr800000004u0000000004v9u x-fd-int-roxy-purgeid: 38334287 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-29 06:21:17 UTC	15691	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 34 32 32 38 2e 34 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 73 6d 63 63 6f 6e 76 65 72 67 65 6e 63 65 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24228.4","mkt":"en-US","ptn":"smcconvergence","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rw
2024-09-29 06:21:17 UTC	15012	IN	Data Raw: 26 2d 31 21 3d 3d 70 2e 50 72 6f 6d 69 73 65 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 26 26 28 54 65 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 2e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 65 29 7d 29 2c 54 65 2e 5f 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 56 65 28 7b 65 76 65 6e 74 54 79 70 65 3a 22 43 6c 69 65 6e 74 45 72 72 6f 72 22 2c 69 73 43 72 69 74 69 63 61 6c 3a 21 30 2c 6e 61 6d 65 3a 65 2e 6d 65 73 73 61 67 65 7c 7c 22 28 66 61 6c 73 65 79 20 6d 65 73 73 61 67 65 20 70 72 6f 70 65 72 74 79 20 6f 6e 20 65 72 72 6f 72 29 22 2c 74 79 70 65 Data Ascii: &-1!==p.Promise.toString().indexOf("[native code]")&&(Te._immediateFn=function(e){return p.Promise.resolve().then(e)}),Te._unhandledRejectionFn=function(e){Ve({eventType:"ClientError",isCritical:!0,name:e.message\|\|"(falsey message property on error)",type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49860	13.107.246.67	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:20 UTC	610	OUT	GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:20 UTC	982	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:20 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 91802 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 01 Jul 2024 17:02:58 GMT ETag: 0x8DC99EFA85DE069 x-ms-request-id: 4e9f6997-e01e-00f5-5bbf-0e54f5000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.18 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.shared.analytics.mectrl-3.2.18.gbl.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240929T062120Z-15767c5fc55kg97hfq5uqyxxaw00000004k000000000e6mu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-29 06:21:20 UTC	15402	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 53 68 61 72 65 64 20 41 6e 61 6c 79 74 69 63 73 2c 20 33 2e 32 2e 31 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 7b 7d 2c 69 3d 22 5f 5f 6d 73 24 6d 6f 64 5f 5f 22 2c 6f 3d 7b 7d 2c 61 3d 6f 2e 65 73 6d 5f 6d 73 5f 73 68 61 72 65 64 5f 61 6e 61 6c 79 74 69 63 73 5f 6d 65 63 74 72 6c 5f 33 5f 32 5f 31 38 3d 7b 7d 2c 75 3d 22 33 2e 32 2e 31 38 22 2c 63 3d 22 6f 6e 65 44 73 4d 65 43 Data Ascii: /! 1DS JS SDK Shared Analytics, 3.2.18 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeC
2024-09-29 06:21:20 UTC	16384	IN	Data Raw: 20 74 7d 28 6f 2c 65 29 29 5b 6f 74 28 6e 29 5d 3d 74 29 2c 74 29 7d 2c 6b 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 26 26 65 5b 6e 5d 29 74 72 79 7b 64 65 6c 65 74 65 20 65 5b 6e 5d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 7d 3b 72 65 74 75 72 6e 20 6f 7d 76 61 72 20 48 72 3d 22 74 6f 47 4d 54 53 74 72 69 6e 67 22 2c 6a 72 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 57 72 3d 22 63 6f 6f 6b 69 65 22 2c 58 72 3d 22 65 78 70 69 72 65 73 22 2c 47 72 3d 22 65 6e 61 62 6c 65 64 22 2c 51 72 3d 22 69 73 43 6f 6f 6b 69 65 55 73 65 44 69 73 61 62 6c 65 64 22 2c 4a 72 3d 22 64 69 73 61 62 6c 65 43 6f 6f 6b 69 65 73 55 73 61 67 65 22 2c 24 72 3d 22 5f 63 6b 4d 67 72 22 2c 5a 72 3d 6e 75 6c 6c 2c 59 72 3d 6e 75 6c 6c 2c 65 69 3d 6e 75 6c 6c 2c 6e Data Ascii: t}(o,e))[ot(n)]=t),t)},kill:function(e,n){if(e&&e[n])try{delete e[n]}catch(t){}}};return o}var Hr="toGMTString",jr="toUTCString",Wr="cookie",Xr="expires",Gr="enabled",Qr="isCookieUseDisabled",Jr="disableCookiesUsage",$r="_ckMgr",Zr=null,Yr=null,ei=null,n
2024-09-29 06:21:20 UTC	16384	IN	Data Raw: 29 26 26 28 61 3d 65 28 70 2c 70 5b 44 65 5d 28 29 29 29 2c 6f 7c 7c 61 7c 7c 6e 75 6c 6c 7d 2c 70 2e 73 65 74 50 65 72 66 4d 67 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 3d 65 7d 2c 70 2e 65 76 65 6e 74 43 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 5b 6e 65 5d 7d 2c 70 2e 72 65 6c 65 61 73 65 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 67 26 26 30 3c 72 5b 6e 65 5d 26 26 28 65 3d 72 2c 72 3d 5b 5d 2c 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 28 29 5b 46 5d 28 65 29 7d 29 29 7d 2c 70 2e 70 6f 6c 6c 49 6e 74 65 72 6e 61 6c 4c 6f 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 3d 65 7c 7c 6e 75 6c 6c 2c 4e 3d 21 31 2c 41 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 41 Data Ascii: )&&(a=e(p,p[De]())),o\|\|a\|\|null},p.setPerfMgr=function(e){o=e},p.eventCnt=function(){return r[ne]},p.releaseQueue=function(){var e;g&&0<r[ne]&&(e=r,r=[],ie(e,function(e){y()[F](e)}))},p.pollInternalLogs=function(e){return P=e\|\|null,N=!1,A&&(clearInterval(A
2024-09-29 06:21:20 UTC	16384	IN	Data Raw: 73 3a 22 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 22 7d 2c 7b 72 3a 63 2e 57 49 4e 52 54 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 20 52 54 22 7d 2c 7b 72 3a 63 2e 57 49 4e 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 22 7d 2c 7b 72 3a 63 2e 49 4f 53 2c 6f 73 3a 22 69 4f 53 22 7d 2c 7b 72 3a 63 2e 41 4e 44 52 4f 49 44 2c 6f 73 3a 22 41 6e 64 72 6f 69 64 22 7d 2c 7b 72 3a 63 2e 4c 49 4e 55 58 2c 6f 73 3a 22 4c 69 6e 75 78 22 7d 2c 7b 72 3a 63 2e 43 52 4f 53 2c 6f 73 3a 22 43 68 72 6f 6d 65 20 4f 53 22 7d 2c 7b 73 3a 22 78 31 31 22 2c 6f 73 3a 22 55 6e 69 78 22 7d 2c 7b 73 3a 22 62 6c 61 63 6b 62 65 72 72 79 22 2c 6f 73 3a 22 42 6c 61 63 6b 42 65 72 72 79 22 7d 2c 7b 73 3a 22 73 79 6d 62 69 61 6e 22 2c 6f 73 3a 22 53 79 6d 62 69 61 6e 22 7d 2c 7b 73 3a 22 6e 6f 6b 69 61 22 Data Ascii: s:"Windows Phone"},{r:c.WINRT,os:"Windows RT"},{r:c.WIN,os:"Windows"},{r:c.IOS,os:"iOS"},{r:c.ANDROID,os:"Android"},{r:c.LINUX,os:"Linux"},{r:c.CROS,os:"Chrome OS"},{s:"x11",os:"Unix"},{s:"blackberry",os:"BlackBerry"},{s:"symbian",os:"Symbian"},{s:"nokia"
2024-09-29 06:21:20 UTC	16384	IN	Data Raw: 29 29 7b 76 61 72 20 74 2c 72 3d 64 2c 69 3d 65 2c 6f 3d 67 2c 61 3d 66 3b 69 66 28 49 26 26 21 76 26 26 43 63 2e 74 65 73 74 28 65 29 29 7b 76 61 72 20 75 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 63 3d 75 2e 6c 65 6e 67 74 68 3b 69 66 28 31 3c 63 29 7b 66 6f 72 28 76 61 72 20 6f 3d 6f 26 26 6f 2e 73 6c 69 63 65 28 29 2c 73 3d 30 3b 73 3c 63 2d 31 3b 73 2b 2b 29 7b 76 61 72 20 6c 3d 75 5b 73 5d 2c 61 3d 61 5b 6c 5d 3d 61 5b 6c 5d 7c 7c 7b 7d 3b 72 2b 3d 22 2e 22 2b 6c 2c 6f 26 26 6f 2e 70 75 73 68 28 6c 29 7d 69 3d 75 5b 63 2d 31 5d 7d 7d 28 65 3d 76 26 26 28 28 74 3d 53 5b 65 3d 72 5d 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 37 3c 3d 65 2e 6c 65 6e 67 74 68 26 26 28 74 3d 61 74 28 65 2c 22 65 78 74 2e 6d 65 74 61 64 61 74 61 22 29 7c 7c 61 74 28 Data Ascii: )){var t,r=d,i=e,o=g,a=f;if(I&&!v&&Cc.test(e)){var u=e.split("."),c=u.length;if(1<c){for(var o=o&&o.slice(),s=0;s<c-1;s++){var l=u[s],a=a[l]=a[l]\|\|{};r+="."+l,o&&o.push(l)}i=u[c-1]}}(e=v&&((t=S[e=r])===undefined&&(7<=e.length&&(t=at(e,"ext.metadata")\|\|at(
2024-09-29 06:21:20 UTC	10864	IN	Data Raw: 74 63 68 29 2c 69 26 26 72 3c 3d 51 26 26 28 51 3d 2d 31 2c 6b 3d 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6c 61 74 65 6e 63 79 3a 72 2c 73 65 6e 64 54 79 70 65 3a 65 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 6e 7d 7d 2c 21 74 29 3a 28 51 3d 30 3c 3d 51 3f 4d 61 74 68 2e 6d 69 6e 28 51 2c 72 29 3a 72 2c 6b 3d 4d 61 74 68 2e 6d 61 78 28 6b 2c 6e 29 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 71 3d 7b 52 45 41 4c 5f 54 49 4d 45 3a 5b 32 2c 31 2c 30 5d 2c 4e 45 41 52 5f 52 45 41 4c 5f 54 49 4d 45 3a 5b 36 2c 33 2c 30 5d 2c 42 45 53 54 5f 45 46 46 4f 52 54 3a 5b 31 38 2c 39 2c 30 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 2c 72 3d 24 3f 59 3a 5a 3b 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: tch),i&&r<=Q&&(Q=-1,k=0)},function(){return{latency:r,sendType:e,sendReason:n}},!t):(Q=0<=Q?Math.min(Q,r):r,k=Math.max(k,n)),i}function n(){q={REAL_TIME:[2,1,0],NEAR_REAL_TIME:[6,3,0],BEST_EFFORT:[18,9,0]}}function e(e,n){var t=[],r=$?Y:Z;ie(e,function(e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49859	152.199.21.175	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:20 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:20 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4497103 Cache-Control: public, max-age=31536000 Content-MD5: bedopN8eDQBhzbUu8GNGxA== Content-Type: application/x-javascript Date: Sun, 29 Sep 2024 06:21:20 GMT Etag: 0x8DCB563C85A43C4 Last-Modified: Mon, 05 Aug 2024 15:32:14 GMT Server: ECAcc (lhc/78A8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb594470-e01e-0006-2151-e9b2d8000000 x-ms-version: 2009-09-19 Content-Length: 141866 Connection: close
2024-09-29 06:21:20 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-09-29 06:21:20 UTC	1	IN	Data Raw: 22 Data Ascii: "
2024-09-29 06:21:20 UTC	16383	IN	Data Raw: 5d 2c 5b 22 23 32 30 32 30 32 30 22 5d 29 2c 73 3d 65 28 72 2c 5b 22 34 35 2c 35 30 2c 35 34 22 5d 2c 5b 22 23 32 64 33 32 33 36 22 5d 29 2c 75 3d 65 28 72 2c 5b 22 32 35 35 2c 32 35 30 2c 32 33 39 22 5d 2c 5b 22 23 66 66 66 61 65 66 22 5d 29 3b 69 66 28 6f 7c 7c 61 7c 7c 73 29 72 65 74 75 72 6e 22 62 6c 61 63 6b 22 3b 69 66 28 69 7c 7c 75 29 72 65 74 75 72 6e 22 77 68 69 74 65 22 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d Data Ascii: ],["#202020"]),s=e(r,["45,50,54"],["#2d3236"]),u=e(r,["255,250,239"],["#fffaef"]);if(o\|\|a\|\|s)return"black";if(i\|\|u)return"white"}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getCom
2024-09-29 06:21:20 UTC	16383	IN	Data Raw: 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 35 35 37 22 2c 50 50 5f 45 5f 4f 54 54 5f 44 41 54 41 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 33 34 38 46 22 2c 50 50 5f 45 5f 4f 54 54 5f 41 4c 52 45 41 44 59 5f 43 4f 4e 53 55 4d 45 44 3a 22 38 30 30 34 33 34 39 30 22 2c 50 50 5f 45 5f 4f 54 54 5f 49 4e 56 41 4c 49 44 5f 50 55 52 50 4f 53 45 3a 22 38 30 30 34 33 34 39 36 22 2c 50 50 5f 45 5f 50 50 53 41 5f 52 50 54 5f 4e 4f 54 4f 41 44 44 52 45 53 53 3a 22 38 30 30 34 38 31 32 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 45 53 53 5f 42 41 44 44 45 56 49 43 45 4e 41 4d 45 3a 22 38 30 30 34 39 43 32 32 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c Data Ascii: PASSWORD:"80043557",PP_E_OTT_DATA_INVALID:"8004348F",PP_E_OTT_ALREADY_CONSUMED:"80043490",PP_E_OTT_INVALID_PURPOSE:"80043496",PP_E_PPSA_RPT_NOTOADDRESS:"80048120",PP_E_STRONGPROCESS_BADDEVICENAME:"80049C22",PP_E_INLINELOGIN_INVALID_SMS:"800434E1",PP_E_INL
2024-09-29 06:21:20 UTC	16383	IN	Data Raw: 2a 29 3f 24 2f 5d 2c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 74 2e 63 61 6c 6c 28 6e 2c 65 5b 72 5d 2c 72 2c 65 29 7d 2c 41 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 65 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 4c 62 Data Ascii: *)?$/],D:function(e,t,n){for(var r=0,o=e.length;r<o;r++)t.call(n,e[r],r,e)},A:"function"==typeof Array.prototype.indexOf?function(e,t){return Array.prototype.indexOf.call(e,t)}:function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},Lb
2024-09-29 06:21:20 UTC	16383	IN	Data Raw: 6e 2e 71 62 28 74 29 2c 53 2e 61 2e 41 62 28 74 2c 50 29 2c 53 2e 6f 70 74 69 6f 6e 73 2e 64 65 66 65 72 55 70 64 61 74 65 73 26 26 53 2e 54 61 2e 64 65 66 65 72 72 65 64 28 74 2c 21 30 29 2c 74 7d 3b 76 61 72 20 50 3d 7b 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 3a 6e 2c 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 77 5d 7d 2c 78 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 73 70 65 63 74 61 74 65 22 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 29 7d 2c 79 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 Data Ascii: n.qb(t),S.a.Ab(t,P),S.options.deferUpdates&&S.Ta.deferred(t,!0),t};var P={equalityComparer:n,v:function(){return this[w]},xa:function(){this.notifySubscribers(this[w],"spectate"),this.notifySubscribers(this[w])},ya:function(){this.notifySubscribers(this[w
2024-09-29 06:21:20 UTC	16383	IN	Data Raw: 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 61 2e 47 61 28 53 2e 75 2e 47 28 65 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 5b 6e 5d 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6f 28 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 72 29 29 3a 53 2e 61 2e 47 61 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2e 67 65 74 42 69 6e 64 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 2c 65 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 74 29 Data Ascii: n o(e){return S.a.Ga(S.u.G(e),(function(t,n){return function(){return e()[n]}}))}function i(e,t,r){return"function"==typeof e?o(e.bind(null,t,r)):S.a.Ga(e,n)}function c(e,t){return o(this.getBindings.bind(this,e,t))}function d(e,t){var n=S.h.firstChild(t)
2024-09-29 06:21:20 UTC	5	IN	Data Raw: 26 26 28 63 3d Data Ascii: &&(c=
2024-09-29 06:21:20 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 28 30 2c 74 29 2c 53 2e 75 2e 47 28 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 41 66 74 65 72 52 65 6e 64 65 72 22 29 2c 6e 75 6c 6c 2c 5b 74 5b 30 5d 2c 65 21 3d 3d 44 3f 65 3a 61 5d 29 7d 29 2c 53 2e 61 2e 65 63 28 65 2c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 26 26 28 70 3d 21 6c 26 26 69 5b 30 5d 2e 73 65 6c 65 63 74 65 64 3f 5b 53 2e 77 2e 4d 28 69 5b 30 5d 29 5d 3a 5b 5d 2c 68 3d 21 30 29 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 2c 74 3d 3d 3d 44 3f 28 53 2e 61 2e 42 62 28 72 2c 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 43 61 70 74 69 6f 6e 22 29 29 2c 53 2e 77 Data Ascii: function(e,t){i(0,t),S.u.G(n.get("optionsAfterRender"),null,[t[0],e!==D?e:a])}),S.a.ec(e,f,(function(t,r,i){return i.length&&(p=!l&&i[0].selected?[S.w.M(i[0])]:[],h=!0),r=e.ownerDocument.createElement("option"),t===D?(S.a.Bb(r,n.get("optionsCaption")),S.w
2024-09-29 06:21:20 UTC	16383	IN	Data Raw: 2c 6c 2e 74 6d 70 6c 2e 74 61 67 2e 6b 6f 5f 77 69 74 68 3d 7b 6f 70 65 6e 3a 22 77 69 74 68 28 24 31 29 20 7b 22 2c 63 6c 6f 73 65 3a 22 7d 20 22 7d 29 7d 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 53 2e 63 61 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 53 2e 24 61 3b 76 61 72 20 65 3d 6e 65 77 20 53 2e 24 61 3b 30 3c 65 2e 48 64 26 26 53 2e 67 63 28 65 29 2c 53 2e 62 28 22 6a 71 75 65 72 79 54 6d 70 6c 54 65 6d 70 6c 61 74 65 45 6e 67 69 6e 65 22 2c 53 2e 24 61 29 7d 28 29 7d 29 29 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 Data Ascii: ,l.tmpl.tag.ko_with={open:"with($1) {",close:"} "})},S.$a.prototype=new S.ca,S.$a.prototype.constructor=S.$a;var e=new S.$a;0<e.Hd&&S.gc(e),S.b("jqueryTmplTemplateuser",S.$a)}()}))}()},function(e,t,n){function r(e){return(r="function"==typeof Symbol&&"s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49865	13.107.246.45	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:21 UTC	602	OUT	GET /scripts/me/MeControl/10.24228.4/en-US/meBoot.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:21 UTC	608	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:21 GMT Content-Type: application/javascript Content-Length: 211842 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 22 Aug 2024 23:12:06 GMT ETag: "1daf52360f10482" X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240929T062121Z-15767c5fc55ncqdn59ub6rndq000000004d0000000002ffe x-fd-int-roxy-purgeid: 38334287 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-29 06:21:21 UTC	15776	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 42 6f 6f 74 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 53 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 3d 7b 7d 2c 75 3d 5b 5d 2c 70 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 2c 69 2c 61 3d 70 3b 66 6f 72 28 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 32 3c 69 2d 2d 3b 29 75 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 3b 66 6f 72 28 65 26 26 6e 75 6c 6c 21 3d 65 2e 63 68 69 6c 64 72 65 6e 26 26 28 75 2e 6c 65 6e 67 74 68 7c 7c 75 2e 70 75 73 68 28 65 2e 63 68 69 6c 64 Data Ascii: MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.child
2024-09-29 06:21:21 UTC	16384	IN	Data Raw: 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 3a 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 65 5b 30 5d 3a 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 29 7d 76 61 72 20 74 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 29 7b 76 61 72 20 65 2c 72 2c 6e 2c 6f 3d 22 22 2c 69 3d 74 79 70 65 6f 66 20 74 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 69 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 69 29 72 65 74 75 72 6e 20 74 7c 7c 22 Data Ascii: =arguments[r];return 0===e.length?function(t){return t}:1===e.length?e[0]:e.reduce(function(t,e){return function(){return t(e.apply(void 0,arguments))}})}var tt=Array.isArray;function et(t){var e,r,n,o="",i=typeof t;if("string"==i\|\|"number"==i)return t\|\|"
2024-09-29 06:21:21 UTC	16384	IN	Data Raw: 7c 7c 21 77 65 2e 74 65 73 74 28 74 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 5b 72 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 6f 3d 65 3b 6e 3c 6f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 6f 5b 6e 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 69 66 28 53 2e 68 61 73 4f 77 6e 28 69 2c 61 29 29 7b 76 61 72 20 73 3d 69 5b 61 5d 3b 6e 75 6c 6c 3d 3d 73 7c 7c 53 65 28 73 29 7c 7c 28 74 5b 61 5d 3d 73 29 7d 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 53 Data Ascii: \|\|!we.test(t);default:return!1}}function Oe(t){for(var e=[],r=1;r<arguments.length;r++)e[r-1]=arguments[r];for(var n=0,o=e;n<o.length;n++){var i=o[n];for(var a in i)if(S.hasOwn(i,a)){var s=i[a];null==s\|\|Se(s)\|\|(t[a]=s)}}return t}function be(t,e,r){var n=S
2024-09-29 06:21:21 UTC	16384	IN	Data Raw: 73 2c 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6f 3d 74 68 69 73 2e 73 74 61 74 65 2e 61 63 74 69 76 61 74 65 64 3b 72 65 74 75 72 6e 20 4f 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 65 74 28 5b 72 2c 28 74 3d 7b 7d 2c 74 2e 6d 65 63 74 72 6c 5f 66 6f 63 75 73 5f 76 69 73 69 62 6c 65 3d 6f 2c 74 29 5d 29 7d 2c 6e 29 7d 2c 66 72 29 3b 66 75 6e 63 74 69 6f 6e 20 66 72 28 74 29 7b 76 61 72 20 65 3d 75 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 74 65 3d 7b 61 63 74 69 76 61 74 65 64 3a 21 21 74 2e 76 69 73 69 62 6c 65 4f 6e 53 74 61 72 74 7d 2c 65 2e 68 61 73 52 65 63 65 6e 74 4b 65 79 62 6f 61 72 64 41 63 74 69 6f 6e 3d 21 31 2c 65 2e 6b 65 79 64 6f 77 6e 48 61 6e 64 6c 65 72 3d 65 2e 6b 65 79 64 6f 77 6e Data Ascii: s,n=e.children,o=this.state.activated;return O("div",{class:et([r,(t={},t.mectrl_focus_visible=o,t)])},n)},fr);function fr(t){var e=ur.call(this,t)\|\|this;return e.state={activated:!!t.visibleOnStart},e.hasRecentKeyboardAction=!1,e.keydownHandler=e.keydown
2024-09-29 06:21:21 UTC	16384	IN	Data Raw: 49 64 70 22 3a 72 65 74 75 72 6e 21 31 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 20 78 74 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 73 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 54 6f 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 54 6f 55 72 6c 29 3b 63 61 73 65 22 67 65 74 52 65 6d 65 6d 62 65 72 65 64 41 63 63 6f 75 6e 74 73 22 3a 72 65 Data Ascii: Idp":return!1;case"signOutAndForgetFromIdp":return xt(null===(r=this.config.msa)\|\|void 0===r?void 0:r.signOutAndForgetUrl);case"switch":return xt(this.config.appSwitchUrl);case"switchTo":return xt(this.config.appSwitchToUrl);case"getRememberedAccounts":re
2024-09-29 06:21:21 UTC	16384	IN	Data Raw: 3c 6d 74 28 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 6c 6f 67 69 6e 2e 6c 69 76 65 2e 63 6f 6d 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 79 6e 28 74 29 7d 76 61 72 20 79 6e 3d 28 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 70 70 6f 72 74 73 4d 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6d 73 61 6c 4a 73 57 69 74 68 4d 73 61 22 3d 3d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 2c 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 4f 70 65 72 61 74 69 6f 6e 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 73 69 67 6e 4f 75 74 46 72 6f 6d 49 64 70 22 3a 72 Data Ascii: <mt(t).toLowerCase().indexOf("login.live.com")}function mn(t){return new yn(t)}var yn=(vn.prototype.supportsMsa=function(){return"msalJsWithMsa"===this.config.type},vn.prototype.isOperationSupported=function(t,e){var r,n,o;switch(t){case"signOutFromIdp":r
2024-09-29 06:21:21 UTC	16384	IN	Data Raw: 3b 66 3c 64 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 69 66 28 79 3d 6c 5b 6e 75 6c 6c 21 3d 28 6f 3d 64 5b 66 5d 2e 61 63 63 6f 75 6e 74 49 64 29 3f 6f 3a 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 2e 6b 65 79 5d 29 7b 76 61 72 20 68 3d 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 3b 79 2e 70 69 63 74 75 72 65 55 72 6c 3d 6e 75 6c 6c 21 3d 28 69 3d 79 2e 70 69 63 74 75 72 65 55 72 6c 29 3f 69 3a 68 2e 72 65 73 6f 75 72 63 65 2c 79 2e 63 61 63 68 65 4d 65 74 61 3f 79 2e 63 61 63 68 65 4d 65 74 61 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 3a 79 2e 63 61 63 68 65 4d 65 74 61 3d 28 28 72 3d 7b 7d 29 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 2c 72 29 7d 7d 72 65 74 75 72 6e 20 48 28 7b 7d 2c 6c 29 3b 63 61 Data Ascii: ;f<d.length;f++){if(y=l[null!=(o=d[f].accountId)?o:d[f].payload.key]){var h=d[f].payload;y.pictureUrl=null!=(i=y.pictureUrl)?i:h.resource,y.cacheMeta?y.cacheMeta.pictureUrl=h.resourceETag:y.cacheMeta=((r={}).pictureUrl=h.resourceETag,r)}}return H({},l);ca
2024-09-29 06:21:21 UTC	16384	IN	Data Raw: 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 5c 78 33 61 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 5c 78 33 61 2d 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 67 6c 79 70 68 5c 78 37 62 6f 76 65 72 66 6c 6f 77 5c 78 33 61 68 69 64 64 65 6e 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 5c 78 33 61 63 6f 76 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 5c 78 33 61 63 65 6e 74 65 72 20 63 65 6e 74 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 5c 78 33 61 6e 6f 2d 72 65 70 65 61 74 5c 78 37 64 2e 67 6c 79 70 68 5f 6d 6f 72 65 5c 78 37 62 77 69 64 74 68 5c Data Ascii: \x21important\x3boutline-width\x3a2px\x21important\x3boutline-offset\x3a-2px\x21important\x7d.mectrl_glyph\x7boverflow\x3ahidden\x3bbackground-size\x3acover\x3bbackground-position\x3acenter center\x3bbackground-repeat\x3ano-repeat\x7d.glyph_more\x7bwidth\
2024-09-29 06:21:21 UTC	16384	IN	Data Raw: 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 6f 66 66 5f 62 6c 61 63 6b 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 5c 78 33 61 75 72 6c 5c 78 32 38 5c 78 32 32 64 61 74 61 5c 78 33 61 69 6d 61 67 65 5c 78 32 66 73 76 67 5c 78 32 62 78 6d 6c 5c 78 33 62 63 68 61 72 73 65 74 5c 78 33 64 75 74 66 2d 38 2c 5c 78 32 35 33 43 73 76 67 20 78 6d 6c 6e 73 5c 78 33 64 5c 78 32 37 68 74 74 70 5c 78 33 61 5c 78 32 66 5c 78 32 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 20 76 69 65 77 42 6f 78 5c 78 33 64 5c 78 32 37 30 20 30 20 36 34 20 36 34 5c 78 32 37 20 73 74 72 6f 6b 65 5c 78 33 64 5c 78 32 37 Data Ascii: account_circle,.mectrl_theme_off_black .glyph_account_circle\x7bbackground-image\x3aurl\x28\x22data\x3aimage\x2fsvg\x2bxml\x3bcharset\x3dutf-8,\x253Csvg xmlns\x3d\x27http\x3a\x2f\x2fwww.w3.org\x2f2000\x2fsvg\x27 viewBox\x3d\x270 0 64 64\x27 stroke\x3d\x27
2024-09-29 06:21:21 UTC	16384	IN	Data Raw: 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 5c 78 32 35 33 45 5c 78 32 35 33 43 70 61 74 68 20 64 5c 78 33 64 5c 78 32 37 4d 35 2e 34 35 33 20 35 4c 31 30 20 39 2e 35 35 32 20 39 2e 35 35 32 20 31 30 20 35 20 35 2e 34 35 33 2e 34 34 38 20 31 30 20 30 20 39 2e 35 35 32 20 34 2e 35 34 37 20 35 20 30 20 2e 34 34 38 2e 34 34 38 20 30 20 35 20 34 2e 35 34 37 20 39 2e 35 35 32 20 30 20 31 30 20 2e 34 34 38 20 35 2e 34 35 33 20 35 7a 5c 78 32 37 20 66 69 6c 6c 5c 78 33 64 5c 78 32 37 5c 78 32 35 32 33 33 32 33 31 33 30 5c 78 32 37 5c 78 32 66 5c 78 32 35 33 45 5c 78 32 35 33 43 5c 78 32 66 73 76 67 5c 78 32 35 33 45 5c 78 32 32 5c 78 32 39 5c 78 37 64 5c 78 37 64 5c 78 34 30 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 Data Ascii: fwww.w3.org\x2f2000\x2fsvg\x27\x253E\x253Cpath d\x3d\x27M5.453 5L10 9.552 9.552 10 5 5.453.448 10 0 9.552 4.547 5 0 .448.448 0 5 4.547 9.552 0 10 .448 5.453 5z\x27 fill\x3d\x27\x2523323130\x27\x2f\x253E\x253C\x2fsvg\x253E\x22\x29\x7d\x7d\x40media screen a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49868	13.107.246.60	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:21 UTC	393	OUT	GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:21 UTC	982	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:21 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 91802 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 01 Jul 2024 17:02:58 GMT ETag: 0x8DC99EFA85DE069 x-ms-request-id: 4e9f6997-e01e-00f5-5bbf-0e54f5000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.18 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.shared.analytics.mectrl-3.2.18.gbl.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240929T062121Z-15767c5fc559lm6vwp3h1khw8n00000004w000000000fynt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-29 06:21:21 UTC	15402	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 53 68 61 72 65 64 20 41 6e 61 6c 79 74 69 63 73 2c 20 33 2e 32 2e 31 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 7b 7d 2c 69 3d 22 5f 5f 6d 73 24 6d 6f 64 5f 5f 22 2c 6f 3d 7b 7d 2c 61 3d 6f 2e 65 73 6d 5f 6d 73 5f 73 68 61 72 65 64 5f 61 6e 61 6c 79 74 69 63 73 5f 6d 65 63 74 72 6c 5f 33 5f 32 5f 31 38 3d 7b 7d 2c 75 3d 22 33 2e 32 2e 31 38 22 2c 63 3d 22 6f 6e 65 44 73 4d 65 43 Data Ascii: /! 1DS JS SDK Shared Analytics, 3.2.18 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeC
2024-09-29 06:21:21 UTC	16384	IN	Data Raw: 20 74 7d 28 6f 2c 65 29 29 5b 6f 74 28 6e 29 5d 3d 74 29 2c 74 29 7d 2c 6b 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 26 26 65 5b 6e 5d 29 74 72 79 7b 64 65 6c 65 74 65 20 65 5b 6e 5d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 7d 3b 72 65 74 75 72 6e 20 6f 7d 76 61 72 20 48 72 3d 22 74 6f 47 4d 54 53 74 72 69 6e 67 22 2c 6a 72 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 57 72 3d 22 63 6f 6f 6b 69 65 22 2c 58 72 3d 22 65 78 70 69 72 65 73 22 2c 47 72 3d 22 65 6e 61 62 6c 65 64 22 2c 51 72 3d 22 69 73 43 6f 6f 6b 69 65 55 73 65 44 69 73 61 62 6c 65 64 22 2c 4a 72 3d 22 64 69 73 61 62 6c 65 43 6f 6f 6b 69 65 73 55 73 61 67 65 22 2c 24 72 3d 22 5f 63 6b 4d 67 72 22 2c 5a 72 3d 6e 75 6c 6c 2c 59 72 3d 6e 75 6c 6c 2c 65 69 3d 6e 75 6c 6c 2c 6e Data Ascii: t}(o,e))[ot(n)]=t),t)},kill:function(e,n){if(e&&e[n])try{delete e[n]}catch(t){}}};return o}var Hr="toGMTString",jr="toUTCString",Wr="cookie",Xr="expires",Gr="enabled",Qr="isCookieUseDisabled",Jr="disableCookiesUsage",$r="_ckMgr",Zr=null,Yr=null,ei=null,n
2024-09-29 06:21:21 UTC	16384	IN	Data Raw: 29 26 26 28 61 3d 65 28 70 2c 70 5b 44 65 5d 28 29 29 29 2c 6f 7c 7c 61 7c 7c 6e 75 6c 6c 7d 2c 70 2e 73 65 74 50 65 72 66 4d 67 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 3d 65 7d 2c 70 2e 65 76 65 6e 74 43 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 5b 6e 65 5d 7d 2c 70 2e 72 65 6c 65 61 73 65 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 67 26 26 30 3c 72 5b 6e 65 5d 26 26 28 65 3d 72 2c 72 3d 5b 5d 2c 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 28 29 5b 46 5d 28 65 29 7d 29 29 7d 2c 70 2e 70 6f 6c 6c 49 6e 74 65 72 6e 61 6c 4c 6f 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 3d 65 7c 7c 6e 75 6c 6c 2c 4e 3d 21 31 2c 41 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 41 Data Ascii: )&&(a=e(p,p[De]())),o\|\|a\|\|null},p.setPerfMgr=function(e){o=e},p.eventCnt=function(){return r[ne]},p.releaseQueue=function(){var e;g&&0<r[ne]&&(e=r,r=[],ie(e,function(e){y()[F](e)}))},p.pollInternalLogs=function(e){return P=e\|\|null,N=!1,A&&(clearInterval(A
2024-09-29 06:21:21 UTC	16384	IN	Data Raw: 73 3a 22 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 22 7d 2c 7b 72 3a 63 2e 57 49 4e 52 54 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 20 52 54 22 7d 2c 7b 72 3a 63 2e 57 49 4e 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 22 7d 2c 7b 72 3a 63 2e 49 4f 53 2c 6f 73 3a 22 69 4f 53 22 7d 2c 7b 72 3a 63 2e 41 4e 44 52 4f 49 44 2c 6f 73 3a 22 41 6e 64 72 6f 69 64 22 7d 2c 7b 72 3a 63 2e 4c 49 4e 55 58 2c 6f 73 3a 22 4c 69 6e 75 78 22 7d 2c 7b 72 3a 63 2e 43 52 4f 53 2c 6f 73 3a 22 43 68 72 6f 6d 65 20 4f 53 22 7d 2c 7b 73 3a 22 78 31 31 22 2c 6f 73 3a 22 55 6e 69 78 22 7d 2c 7b 73 3a 22 62 6c 61 63 6b 62 65 72 72 79 22 2c 6f 73 3a 22 42 6c 61 63 6b 42 65 72 72 79 22 7d 2c 7b 73 3a 22 73 79 6d 62 69 61 6e 22 2c 6f 73 3a 22 53 79 6d 62 69 61 6e 22 7d 2c 7b 73 3a 22 6e 6f 6b 69 61 22 Data Ascii: s:"Windows Phone"},{r:c.WINRT,os:"Windows RT"},{r:c.WIN,os:"Windows"},{r:c.IOS,os:"iOS"},{r:c.ANDROID,os:"Android"},{r:c.LINUX,os:"Linux"},{r:c.CROS,os:"Chrome OS"},{s:"x11",os:"Unix"},{s:"blackberry",os:"BlackBerry"},{s:"symbian",os:"Symbian"},{s:"nokia"
2024-09-29 06:21:21 UTC	16384	IN	Data Raw: 29 29 7b 76 61 72 20 74 2c 72 3d 64 2c 69 3d 65 2c 6f 3d 67 2c 61 3d 66 3b 69 66 28 49 26 26 21 76 26 26 43 63 2e 74 65 73 74 28 65 29 29 7b 76 61 72 20 75 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 63 3d 75 2e 6c 65 6e 67 74 68 3b 69 66 28 31 3c 63 29 7b 66 6f 72 28 76 61 72 20 6f 3d 6f 26 26 6f 2e 73 6c 69 63 65 28 29 2c 73 3d 30 3b 73 3c 63 2d 31 3b 73 2b 2b 29 7b 76 61 72 20 6c 3d 75 5b 73 5d 2c 61 3d 61 5b 6c 5d 3d 61 5b 6c 5d 7c 7c 7b 7d 3b 72 2b 3d 22 2e 22 2b 6c 2c 6f 26 26 6f 2e 70 75 73 68 28 6c 29 7d 69 3d 75 5b 63 2d 31 5d 7d 7d 28 65 3d 76 26 26 28 28 74 3d 53 5b 65 3d 72 5d 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 37 3c 3d 65 2e 6c 65 6e 67 74 68 26 26 28 74 3d 61 74 28 65 2c 22 65 78 74 2e 6d 65 74 61 64 61 74 61 22 29 7c 7c 61 74 28 Data Ascii: )){var t,r=d,i=e,o=g,a=f;if(I&&!v&&Cc.test(e)){var u=e.split("."),c=u.length;if(1<c){for(var o=o&&o.slice(),s=0;s<c-1;s++){var l=u[s],a=a[l]=a[l]\|\|{};r+="."+l,o&&o.push(l)}i=u[c-1]}}(e=v&&((t=S[e=r])===undefined&&(7<=e.length&&(t=at(e,"ext.metadata")\|\|at(
2024-09-29 06:21:21 UTC	10864	IN	Data Raw: 74 63 68 29 2c 69 26 26 72 3c 3d 51 26 26 28 51 3d 2d 31 2c 6b 3d 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6c 61 74 65 6e 63 79 3a 72 2c 73 65 6e 64 54 79 70 65 3a 65 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 6e 7d 7d 2c 21 74 29 3a 28 51 3d 30 3c 3d 51 3f 4d 61 74 68 2e 6d 69 6e 28 51 2c 72 29 3a 72 2c 6b 3d 4d 61 74 68 2e 6d 61 78 28 6b 2c 6e 29 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 71 3d 7b 52 45 41 4c 5f 54 49 4d 45 3a 5b 32 2c 31 2c 30 5d 2c 4e 45 41 52 5f 52 45 41 4c 5f 54 49 4d 45 3a 5b 36 2c 33 2c 30 5d 2c 42 45 53 54 5f 45 46 46 4f 52 54 3a 5b 31 38 2c 39 2c 30 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 2c 72 3d 24 3f 59 3a 5a 3b 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: tch),i&&r<=Q&&(Q=-1,k=0)},function(){return{latency:r,sendType:e,sendReason:n}},!t):(Q=0<=Q?Math.min(Q,r):r,k=Math.max(k,n)),i}function n(){q={REAL_TIME:[2,1,0],NEAR_REAL_TIME:[6,3,0],BEST_EFFORT:[18,9,0]}}function e(e,n){var t=[],r=$?Y:Z;ie(e,function(e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49869	152.199.21.175	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:21 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:22 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4497104 Cache-Control: public, max-age=31536000 Content-MD5: bedopN8eDQBhzbUu8GNGxA== Content-Type: application/x-javascript Date: Sun, 29 Sep 2024 06:21:21 GMT Etag: 0x8DCB563C85A43C4 Last-Modified: Mon, 05 Aug 2024 15:32:14 GMT Server: ECAcc (lhc/78A8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb594470-e01e-0006-2151-e9b2d8000000 x-ms-version: 2009-09-19 Content-Length: 141866 Connection: close
2024-09-29 06:21:22 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-09-29 06:21:22 UTC	16383	IN	Data Raw: 22 5d 2c 5b 22 23 32 30 32 30 32 30 22 5d 29 2c 73 3d 65 28 72 2c 5b 22 34 35 2c 35 30 2c 35 34 22 5d 2c 5b 22 23 32 64 33 32 33 36 22 5d 29 2c 75 3d 65 28 72 2c 5b 22 32 35 35 2c 32 35 30 2c 32 33 39 22 5d 2c 5b 22 23 66 66 66 61 65 66 22 5d 29 3b 69 66 28 6f 7c 7c 61 7c 7c 73 29 72 65 74 75 72 6e 22 62 6c 61 63 6b 22 3b 69 66 28 69 7c 7c 75 29 72 65 74 75 72 6e 22 77 68 69 74 65 22 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f Data Ascii: "],["#202020"]),s=e(r,["45,50,54"],["#2d3236"]),u=e(r,["255,250,239"],["#fffaef"]);if(o\|\|a\|\|s)return"black";if(i\|\|u)return"white"}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getCo
2024-09-29 06:21:22 UTC	16383	IN	Data Raw: 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 35 35 37 22 2c 50 50 5f 45 5f 4f 54 54 5f 44 41 54 41 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 33 34 38 46 22 2c 50 50 5f 45 5f 4f 54 54 5f 41 4c 52 45 41 44 59 5f 43 4f 4e 53 55 4d 45 44 3a 22 38 30 30 34 33 34 39 30 22 2c 50 50 5f 45 5f 4f 54 54 5f 49 4e 56 41 4c 49 44 5f 50 55 52 50 4f 53 45 3a 22 38 30 30 34 33 34 39 36 22 2c 50 50 5f 45 5f 50 50 53 41 5f 52 50 54 5f 4e 4f 54 4f 41 44 44 52 45 53 53 3a 22 38 30 30 34 38 31 32 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 45 53 53 5f 42 41 44 44 45 56 49 43 45 4e 41 4d 45 3a 22 38 30 30 34 39 43 32 32 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e Data Ascii: _PASSWORD:"80043557",PP_E_OTT_DATA_INVALID:"8004348F",PP_E_OTT_ALREADY_CONSUMED:"80043490",PP_E_OTT_INVALID_PURPOSE:"80043496",PP_E_PPSA_RPT_NOTOADDRESS:"80048120",PP_E_STRONGPROCESS_BADDEVICENAME:"80049C22",PP_E_INLINELOGIN_INVALID_SMS:"800434E1",PP_E_IN
2024-09-29 06:21:22 UTC	3	IN	Data Raw: 2e 2a 29 Data Ascii: .*)
2024-09-29 06:21:22 UTC	16383	IN	Data Raw: 3f 24 2f 5d 2c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 74 2e 63 61 6c 6c 28 6e 2c 65 5b 72 5d 2c 72 2c 65 29 7d 2c 41 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 65 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 4c 62 3a 66 Data Ascii: ?$/],D:function(e,t,n){for(var r=0,o=e.length;r<o;r++)t.call(n,e[r],r,e)},A:"function"==typeof Array.prototype.indexOf?function(e,t){return Array.prototype.indexOf.call(e,t)}:function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},Lb:f
2024-09-29 06:21:22 UTC	16383	IN	Data Raw: 71 62 28 74 29 2c 53 2e 61 2e 41 62 28 74 2c 50 29 2c 53 2e 6f 70 74 69 6f 6e 73 2e 64 65 66 65 72 55 70 64 61 74 65 73 26 26 53 2e 54 61 2e 64 65 66 65 72 72 65 64 28 74 2c 21 30 29 2c 74 7d 3b 76 61 72 20 50 3d 7b 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 3a 6e 2c 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 77 5d 7d 2c 78 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 73 70 65 63 74 61 74 65 22 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 29 7d 2c 79 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c Data Ascii: qb(t),S.a.Ab(t,P),S.options.deferUpdates&&S.Ta.deferred(t,!0),t};var P={equalityComparer:n,v:function(){return this[w]},xa:function(){this.notifySubscribers(this[w],"spectate"),this.notifySubscribers(this[w])},ya:function(){this.notifySubscribers(this[w],
2024-09-29 06:21:22 UTC	16383	IN	Data Raw: 6f 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 61 2e 47 61 28 53 2e 75 2e 47 28 65 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 5b 6e 5d 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6f 28 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 72 29 29 3a 53 2e 61 2e 47 61 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2e 67 65 74 42 69 6e 64 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 2c 65 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 74 29 3b 69 Data Ascii: o(e){return S.a.Ga(S.u.G(e),(function(t,n){return function(){return e()[n]}}))}function i(e,t,r){return"function"==typeof e?o(e.bind(null,t,r)):S.a.Ga(e,n)}function c(e,t){return o(this.getBindings.bind(this,e,t))}function d(e,t){var n=S.h.firstChild(t);i
2024-09-29 06:21:22 UTC	16383	IN	Data Raw: 28 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 28 30 2c 74 29 2c 53 2e 75 2e 47 28 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 41 66 74 65 72 52 65 6e 64 65 72 22 29 2c 6e 75 6c 6c 2c 5b 74 5b 30 5d 2c 65 21 3d 3d 44 3f 65 3a 61 5d 29 7d 29 2c 53 2e 61 2e 65 63 28 65 2c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 26 26 28 70 3d 21 6c 26 26 69 5b 30 5d 2e 73 65 6c 65 63 74 65 64 3f 5b 53 2e 77 2e 4d 28 69 5b 30 5d 29 5d 3a 5b 5d 2c 68 3d 21 30 29 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 2c 74 3d 3d 3d 44 3f 28 53 2e 61 2e 42 62 28 72 2c 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 43 61 70 74 69 6f 6e 22 29 29 2c Data Ascii: (c=function(e,t){i(0,t),S.u.G(n.get("optionsAfterRender"),null,[t[0],e!==D?e:a])}),S.a.ec(e,f,(function(t,r,i){return i.length&&(p=!l&&i[0].selected?[S.w.M(i[0])]:[],h=!0),r=e.ownerDocument.createElement("option"),t===D?(S.a.Bb(r,n.get("optionsCaption")),
2024-09-29 06:21:22 UTC	16383	IN	Data Raw: 3b 22 7d 2c 6c 2e 74 6d 70 6c 2e 74 61 67 2e 6b 6f 5f 77 69 74 68 3d 7b 6f 70 65 6e 3a 22 77 69 74 68 28 24 31 29 20 7b 22 2c 63 6c 6f 73 65 3a 22 7d 20 22 7d 29 7d 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 53 2e 63 61 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 53 2e 24 61 3b 76 61 72 20 65 3d 6e 65 77 20 53 2e 24 61 3b 30 3c 65 2e 48 64 26 26 53 2e 67 63 28 65 29 2c 53 2e 62 28 22 6a 71 75 65 72 79 54 6d 70 6c 54 65 6d 70 6c 61 74 65 45 6e 67 69 6e 65 22 2c 53 2e 24 61 29 7d 28 29 7d 29 29 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 Data Ascii: ;"},l.tmpl.tag.ko_with={open:"with($1) {",close:"} "})},S.$a.prototype=new S.ca,S.$a.prototype.constructor=S.$a;var e=new S.$a;0<e.Hd&&S.gc(e),S.b("jqueryTmplTemplateuser",S.$a)}()}))}()},function(e,t,n){function r(e){return(r="function"==typeof Symbol&
2024-09-29 06:21:22 UTC	10799	IN	Data Raw: 67 69 66 79 28 6e 29 7d 72 65 74 75 72 6e 20 74 26 26 28 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 5c 3f 2f 67 2c 22 5c 5c 75 30 30 33 46 22 29 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 65 2e 68 65 61 64 65 72 73 3d 62 28 29 2c 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 61 2c 65 2e 62 72 65 61 6b 43 61 63 68 65 3d 73 2c 65 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 3d 68 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 3b 69 66 28 74 29 7b 76 61 72 20 73 3d 74 2e 65 76 65 6e 74 4f 70 74 69 6f 6e 73 7c 7c 7b 7d 3b 69 66 28 73 2e 65 76 65 6e 74 49 64 3d 74 2e 65 76 65 6e 74 49 64 7c 7c 73 2e 65 76 65 6e 74 49 64 2c 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 68 69 64 69 6e 67 Data Ascii: gify(n)}return t&&(t=t.replace(/\?/g,"\\u003F")),t}function S(e){e.headers=b(),e.withCredentials=a,e.breakCache=s,e.responseType=h}function E(e,t,n,r,o,i){var a=null;if(t){var s=t.eventOptions\|\|{};if(s.eventId=t.eventId\|\|s.eventId,s.hasOwnProperty("hiding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49871	13.107.246.45	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:22 UTC	385	OUT	GET /scripts/me/MeControl/10.24228.4/en-US/meBoot.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:22 UTC	629	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:22 GMT Content-Type: application/javascript Content-Length: 211842 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 22 Aug 2024 23:12:06 GMT ETag: "1daf52360f10482" X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240929T062122Z-15767c5fc55n4msda3xfqxy5w000000004tg000000006ded x-fd-int-roxy-purgeid: 38334287 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-29 06:21:22 UTC	15755	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 42 6f 6f 74 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 53 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 3d 7b 7d 2c 75 3d 5b 5d 2c 70 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 2c 69 2c 61 3d 70 3b 66 6f 72 28 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 32 3c 69 2d 2d 3b 29 75 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 3b 66 6f 72 28 65 26 26 6e 75 6c 6c 21 3d 65 2e 63 68 69 6c 64 72 65 6e 26 26 28 75 2e 6c 65 6e 67 74 68 7c 7c 75 2e 70 75 73 68 28 65 2e 63 68 69 6c 64 Data Ascii: MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.child
2024-09-29 06:21:22 UTC	16384	IN	Data Raw: 79 28 74 29 2c 72 3d 30 3b 72 3c 74 3b 72 2b 2b 29 65 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 3a 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 65 5b 30 5d 3a 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 29 7d 76 61 72 20 74 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 29 7b 76 61 72 20 65 2c 72 2c 6e 2c 6f 3d 22 22 2c 69 3d 74 79 70 65 6f 66 20 74 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 69 7c 7c 22 6e Data Ascii: y(t),r=0;r<t;r++)e[r]=arguments[r];return 0===e.length?function(t){return t}:1===e.length?e[0]:e.reduce(function(t,e){return function(){return t(e.apply(void 0,arguments))}})}var tt=Array.isArray;function et(t){var e,r,n,o="",i=typeof t;if("string"==i\|\|"n
2024-09-29 06:21:22 UTC	16384	IN	Data Raw: 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 22 22 3d 3d 3d 74 7c 7c 21 77 65 2e 74 65 73 74 28 74 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 5b 72 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 6f 3d 65 3b 6e 3c 6f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 6f 5b 6e 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 69 66 28 53 2e 68 61 73 4f 77 6e 28 69 2c 61 29 29 7b 76 61 72 20 73 3d 69 5b 61 5d 3b 6e 75 6c 6c 3d 3d 73 7c 7c 53 65 28 73 29 7c 7c 28 74 5b 61 5d 3d 73 29 7d 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 Data Ascii: "string":return""===t\|\|!we.test(t);default:return!1}}function Oe(t){for(var e=[],r=1;r<arguments.length;r++)e[r-1]=arguments[r];for(var n=0,o=e;n<o.length;n++){var i=o[n];for(var a in i)if(S.hasOwn(i,a)){var s=i[a];null==s\|\|Se(s)\|\|(t[a]=s)}}return t}funct
2024-09-29 06:21:22 UTC	16384	IN	Data Raw: 68 69 73 2e 70 72 6f 70 73 2c 72 3d 65 2e 63 73 73 43 6c 61 73 73 2c 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6f 3d 74 68 69 73 2e 73 74 61 74 65 2e 61 63 74 69 76 61 74 65 64 3b 72 65 74 75 72 6e 20 4f 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 65 74 28 5b 72 2c 28 74 3d 7b 7d 2c 74 2e 6d 65 63 74 72 6c 5f 66 6f 63 75 73 5f 76 69 73 69 62 6c 65 3d 6f 2c 74 29 5d 29 7d 2c 6e 29 7d 2c 66 72 29 3b 66 75 6e 63 74 69 6f 6e 20 66 72 28 74 29 7b 76 61 72 20 65 3d 75 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 74 65 3d 7b 61 63 74 69 76 61 74 65 64 3a 21 21 74 2e 76 69 73 69 62 6c 65 4f 6e 53 74 61 72 74 7d 2c 65 2e 68 61 73 52 65 63 65 6e 74 4b 65 79 62 6f 61 72 64 41 63 74 69 6f 6e 3d 21 31 2c 65 2e 6b 65 79 Data Ascii: his.props,r=e.cssClass,n=e.children,o=this.state.activated;return O("div",{class:et([r,(t={},t.mectrl_focus_visible=o,t)])},n)},fr);function fr(t){var e=ur.call(this,t)\|\|this;return e.state={activated:!!t.visibleOnStart},e.hasRecentKeyboardAction=!1,e.key
2024-09-29 06:21:22 UTC	16384	IN	Data Raw: 55 72 6c 29 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 21 31 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 20 78 74 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 73 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 54 6f 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 54 6f 55 72 6c 29 3b 63 61 73 65 22 67 65 74 52 Data Ascii: Url);case"signOutFromIdp":return!1;case"signOutAndForgetFromIdp":return xt(null===(r=this.config.msa)\|\|void 0===r?void 0:r.signOutAndForgetUrl);case"switch":return xt(this.config.appSwitchUrl);case"switchTo":return xt(this.config.appSwitchToUrl);case"getR
2024-09-29 06:21:22 UTC	16384	IN	Data Raw: 6e 20 67 6e 28 74 29 7b 72 65 74 75 72 6e 21 21 74 26 26 2d 31 3c 6d 74 28 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 6c 6f 67 69 6e 2e 6c 69 76 65 2e 63 6f 6d 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 79 6e 28 74 29 7d 76 61 72 20 79 6e 3d 28 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 70 70 6f 72 74 73 4d 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6d 73 61 6c 4a 73 57 69 74 68 4d 73 61 22 3d 3d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 2c 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 4f 70 65 72 61 74 69 6f 6e 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3b 73 77 69 74 63 68 28 74 29 7b 63 Data Ascii: n gn(t){return!!t&&-1<mt(t).toLowerCase().indexOf("login.live.com")}function mn(t){return new yn(t)}var yn=(vn.prototype.supportsMsa=function(){return"msalJsWithMsa"===this.config.type},vn.prototype.isOperationSupported=function(t,e){var r,n,o;switch(t){c
2024-09-29 06:21:22 UTC	16384	IN	Data Raw: 61 64 2e 63 61 63 68 65 64 44 61 74 61 2c 6c 3d 74 2c 66 3d 30 3b 66 3c 64 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 69 66 28 79 3d 6c 5b 6e 75 6c 6c 21 3d 28 6f 3d 64 5b 66 5d 2e 61 63 63 6f 75 6e 74 49 64 29 3f 6f 3a 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 2e 6b 65 79 5d 29 7b 76 61 72 20 68 3d 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 3b 79 2e 70 69 63 74 75 72 65 55 72 6c 3d 6e 75 6c 6c 21 3d 28 69 3d 79 2e 70 69 63 74 75 72 65 55 72 6c 29 3f 69 3a 68 2e 72 65 73 6f 75 72 63 65 2c 79 2e 63 61 63 68 65 4d 65 74 61 3f 79 2e 63 61 63 68 65 4d 65 74 61 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 3a 79 2e 63 61 63 68 65 4d 65 74 61 3d 28 28 72 3d 7b 7d 29 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 2c Data Ascii: ad.cachedData,l=t,f=0;f<d.length;f++){if(y=l[null!=(o=d[f].accountId)?o:d[f].payload.key]){var h=d[f].payload;y.pictureUrl=null!=(i=y.pictureUrl)?i:h.resource,y.cacheMeta?y.cacheMeta.pictureUrl=h.resourceETag:y.cacheMeta=((r={}).pictureUrl=h.resourceETag,
2024-09-29 06:21:22 UTC	16384	IN	Data Raw: 6c 69 6e 65 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 36 36 36 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 5c 78 33 61 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 5c 78 33 61 2d 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 67 6c 79 70 68 5c 78 37 62 6f 76 65 72 66 6c 6f 77 5c 78 33 61 68 69 64 64 65 6e 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 5c 78 33 61 63 6f 76 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 5c 78 33 61 63 65 6e 74 65 72 20 63 65 6e 74 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 5c 78 33 61 6e 6f 2d 72 65 70 65 61 74 5c 78 37 64 Data Ascii: line-color\x3a\x23666\x21important\x3boutline-width\x3a2px\x21important\x3boutline-offset\x3a-2px\x21important\x7d.mectrl_glyph\x7boverflow\x3ahidden\x3bbackground-size\x3acover\x3bbackground-position\x3acenter center\x3bbackground-repeat\x3ano-repeat\x7d
2024-09-29 06:21:22 UTC	16384	IN	Data Raw: 72 6c 5f 74 68 65 6d 65 5f 67 72 61 79 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 6f 66 66 5f 62 6c 61 63 6b 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 5c 78 33 61 75 72 6c 5c 78 32 38 5c 78 32 32 64 61 74 61 5c 78 33 61 69 6d 61 67 65 5c 78 32 66 73 76 67 5c 78 32 62 78 6d 6c 5c 78 33 62 63 68 61 72 73 65 74 5c 78 33 64 75 74 66 2d 38 2c 5c 78 32 35 33 43 73 76 67 20 78 6d 6c 6e 73 5c 78 33 64 5c 78 32 37 68 74 74 70 5c 78 33 61 5c 78 32 66 5c 78 32 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 20 76 69 65 77 42 6f 78 5c 78 33 64 5c 78 32 37 30 20 30 20 36 34 20 Data Ascii: rl_theme_gray .glyph_account_circle,.mectrl_theme_off_black .glyph_account_circle\x7bbackground-image\x3aurl\x28\x22data\x3aimage\x2fsvg\x2bxml\x3bcharset\x3dutf-8,\x253Csvg xmlns\x3d\x27http\x3a\x2f\x2fwww.w3.org\x2f2000\x2fsvg\x27 viewBox\x3d\x270 0 64
2024-09-29 06:21:22 UTC	16384	IN	Data Raw: 33 64 5c 78 32 37 68 74 74 70 5c 78 33 61 5c 78 32 66 5c 78 32 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 5c 78 32 35 33 45 5c 78 32 35 33 43 70 61 74 68 20 64 5c 78 33 64 5c 78 32 37 4d 35 2e 34 35 33 20 35 4c 31 30 20 39 2e 35 35 32 20 39 2e 35 35 32 20 31 30 20 35 20 35 2e 34 35 33 2e 34 34 38 20 31 30 20 30 20 39 2e 35 35 32 20 34 2e 35 34 37 20 35 20 30 20 2e 34 34 38 2e 34 34 38 20 30 20 35 20 34 2e 35 34 37 20 39 2e 35 35 32 20 30 20 31 30 20 2e 34 34 38 20 35 2e 34 35 33 20 35 7a 5c 78 32 37 20 66 69 6c 6c 5c 78 33 64 5c 78 32 37 5c 78 32 35 32 33 33 32 33 31 33 30 5c 78 32 37 5c 78 32 66 5c 78 32 35 33 45 5c 78 32 35 33 43 5c 78 32 66 73 76 67 5c 78 32 35 33 45 5c 78 32 32 5c 78 32 39 5c 78 37 64 5c Data Ascii: 3d\x27http\x3a\x2f\x2fwww.w3.org\x2f2000\x2fsvg\x27\x253E\x253Cpath d\x3d\x27M5.453 5L10 9.552 9.552 10 5 5.453.448 10 0 9.552 4.547 5 0 .448.448 0 5 4.547 9.552 0 10 .448 5.453 5z\x27 fill\x3d\x27\x2523323130\x27\x2f\x253E\x253C\x2fsvg\x253E\x22\x29\x7d\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49873	13.107.246.60	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:24 UTC	633	OUT	GET /shared/1.0/content/js/FetchSessions_Core_VRFGv7Cn5qZDpUQIsx-pnA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:24 UTC	812	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:24 GMT Content-Type: application/x-javascript Content-Length: 51912 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:37 GMT ETag: 0x8DCB563D601E66B x-ms-request-id: fc50e609-d01e-002d-4de6-11079a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240929T062124Z-15767c5fc55qdcd62bsn50hd6s00000004h0000000001bwh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-29 06:21:24 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 69 5b e3 48 d2 28 fa fd fc 0a a3 99 4b 4b 6d 61 bc b0 ca a5 f2 eb 02 aa 8a 6e b6 c1 d0 dd 33 c0 f0 c8 b6 6c d4 65 24 bf 92 0c 45 1b 9f df 7e 62 c9 4c a5 64 99 aa 9a f7 3c f7 7e b8 bd 18 29 33 32 95 4b 44 64 44 64 64 e4 e6 cf 6b ff ab f2 73 65 e3 fb ff a9 f4 ae ba 97 57 95 f3 8f 95 ab cf c7 97 87 95 0b 78 fb 67 e5 ec fc ea f8 e0 e8 fb eb c1 8f e2 ff 57 0f 41 52 19 05 13 bf 02 7f fb 5e e2 0f 2b 51 58 89 e2 4a 10 0e a2 78 1a c5 5e ea 27 95 47 f8 8d 03 6f 52 19 c5 d1 63 25 7d f0 2b d3 38 fa d3 1f a4 49 65 12 24 29 14 ea fb 93 e8 b9 62 42 75 f1 b0 72 e1 c5 e9 4b e5 f8 c2 aa 41 fd 3e d4 16 8c 83 10 4a 0f a2 e9 0b 3c 3f a4 95 30 4a 83 81 5f f1 c2 21 d5 36 81 97 30 f1 2b b3 70 e8 c7 95 e7 87 60 f0 50 39 0d 06 71 94 44 a3 b4 12 Data Ascii: i[H(KKman3le$E~bLd<~)32KDdDddkseWxgWAR^+QXJx^'GoRc%}+8Ie$)bBurKA>J<?0J_!60+p`P9qD
2024-09-29 06:21:24 UTC	16384	IN	Data Raw: 3f a2 e1 24 df e3 e8 fb f0 30 82 09 83 96 c1 14 d0 b7 f0 d5 d2 fd e5 3a 11 12 78 ec 48 8b 3c bc 65 76 63 6e 35 57 84 73 1f 91 57 07 f6 c8 15 8c 0a 9f 2d 7b f0 35 b7 0e 0d 84 9a 4a 99 b8 df 82 05 f0 47 ad 44 83 af 65 8e ae ff e9 fa 62 d9 68 c7 bd b3 9d f9 e2 36 b9 fb f9 ef 9b d9 e7 b3 0b ea 6f 6f cd 8e 73 83 ab eb 66 7f 14 c6 e9 dd eb 0c 0f 10 78 1b a3 ee c6 c7 bb f9 d6 c2 82 35 dd f8 2f 23 73 0f d9 34 6e fe 8d f0 e1 6d 7c f7 b3 f1 9a c6 33 ff 95 ee 61 a7 4d b3 d7 8d ce ed b0 0a 75 de d6 c8 51 07 6b f7 8f ee 6e aa b7 1b 77 98 63 75 b0 be 3b bd 3e 00 f9 f7 ab f3 6a 5b 58 2a f9 f9 f6 c6 aa 22 8c 61 29 a7 c5 3f 5d 3c f4 6b 1a a6 51 c5 d6 57 0d cb 58 b1 6e d1 cc 74 68 4e 11 3f ff 5c 60 3d ce 9f ed 0c b9 b5 a8 34 02 c5 09 33 0d 44 64 4d e2 76 f1 c7 66 69 bf 26 Data Ascii: ?$0:xH<evcn5WsW-{5JGDebh6oosfx5/#s4nm\|3aMuQknwcu;>j[X*"a)?]<kQWXnthN?\`=43DdMvfi&
2024-09-29 06:21:24 UTC	16384	IN	Data Raw: ab 09 49 6d 81 9f 79 cd 3f ae 4f c5 70 ad e2 09 ef e6 61 b2 e6 64 0d 53 8e 98 a0 4e 4c 15 ae 1c a7 25 f3 17 51 25 6c 2e 37 f9 a2 c7 c9 53 6d ae e9 68 ea 7a 61 ce d9 73 af a2 69 5f da bf ee bb 85 4b 2f 49 c2 83 3e 87 82 9c 1e ad 87 17 18 95 3e 97 af 9c c1 a8 0a f7 8a 2d f6 fe 05 9c fc fb ca 71 58 40 be 96 55 cf d7 58 ce a9 e5 0a 90 c8 b3 06 a4 9c 22 db bb 7e 7e c2 0f 4f 3d 57 72 7c db 3b df 12 fc 13 84 f0 6b d5 2b e6 e4 28 38 20 5e 01 d1 71 3a ba 16 a0 c6 ea fb ee 22 c2 ef 7d f1 57 f0 fb 9a b3 88 ef 6b cf 22 e6 06 65 b2 33 1b 49 4a f1 79 d6 05 23 26 af eb f5 c8 79 28 ef d6 8c 71 d4 8c 53 b1 00 ad 88 20 a6 2a fa 84 33 fd e0 d5 b8 d7 38 40 b2 0b bc 8a e3 80 71 80 f9 8c d1 40 06 a2 be 56 4f 9a fe 48 ac 33 ce 04 79 d8 0a 5b 29 40 69 fb f4 69 24 21 d2 7e 4d 44 Data Ascii: Imy?OpadSNL%Q%l.7Smhzasi_K/I>>-qX@UX"~~O=Wr\|;k+(8 ^q:"}Wk"e3IJy#&y(qS *38@q@VOH3y[)@ii$!~MD
2024-09-29 06:21:24 UTC	3572	IN	Data Raw: c0 22 b8 1b db c0 f6 ae 38 19 b9 7c a8 e0 d0 23 82 83 3f 3e 6e 10 b3 6a 43 33 68 e7 22 d7 e9 57 11 3b fe dd b5 89 14 df f7 35 d6 4b 58 b9 df fe 95 a8 2c ed 31 3a 01 b3 7c 59 86 5b 0b cb a4 18 a4 af e3 cf 34 91 93 cb 17 79 f1 cf 2c 9f 5c d2 f0 f2 96 34 e2 40 09 a0 55 d1 06 42 4c 45 d9 a3 f4 8f e4 07 de 9f c5 31 1d a9 ee 9f ad d1 f3 db a0 11 02 a5 5e 9b b2 f6 37 6b 4b ff da d0 96 32 88 47 aa f5 9b 08 28 7f 59 55 0b 78 4b f9 4b a5 10 1d 66 81 9a 20 de 3c 77 50 22 85 12 53 e9 ff 00 6b dc 0f 07 c7 8e c0 e6 4d a2 2c 90 cd 78 f7 21 2b b5 d9 38 dc d9 f3 91 09 93 64 b9 5d ff 39 75 21 fc ce 57 2b 31 fc eb 9a aa 67 ee 23 ba 7b ab 97 5d e8 c4 9f e2 cf a5 fc 70 7c 15 44 23 77 13 31 28 bf d5 27 97 dc ad e4 87 83 75 25 63 1d dd 9d 83 97 61 b8 2b 6e bc e8 66 7b 42 2d 1c Data Ascii: "8\|#?>njC3h"W;5KX,1:\|Y[4y,\4@UBLE1^7kK2G(YUxKKf <wP"SkM,x!+8d]9u!W+1g#{]p\|D#w1('u%ca+nf{B-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49876	13.107.246.44	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:25 UTC	408	OUT	GET /shared/1.0/content/js/FetchSessions_Core_VRFGv7Cn5qZDpUQIsx-pnA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:25 UTC	791	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:25 GMT Content-Type: application/x-javascript Content-Length: 51912 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:37 GMT ETag: 0x8DCB563D601E66B x-ms-request-id: fc50e609-d01e-002d-4de6-11079a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240929T062125Z-15767c5fc554wklc0x4mc5pq0w00000004w000000000grnk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-29 06:21:25 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 69 5b e3 48 d2 28 fa fd fc 0a a3 99 4b 4b 6d 61 bc b0 ca a5 f2 eb 02 aa 8a 6e b6 c1 d0 dd 33 c0 f0 c8 b6 6c d4 65 24 bf 92 0c 45 1b 9f df 7e 62 c9 4c a5 64 99 aa 9a f7 3c f7 7e b8 bd 18 29 33 32 95 4b 44 64 44 64 64 e4 e6 cf 6b ff ab f2 73 65 e3 fb ff a9 f4 ae ba 97 57 95 f3 8f 95 ab cf c7 97 87 95 0b 78 fb 67 e5 ec fc ea f8 e0 e8 fb eb c1 8f e2 ff 57 0f 41 52 19 05 13 bf 02 7f fb 5e e2 0f 2b 51 58 89 e2 4a 10 0e a2 78 1a c5 5e ea 27 95 47 f8 8d 03 6f 52 19 c5 d1 63 25 7d f0 2b d3 38 fa d3 1f a4 49 65 12 24 29 14 ea fb 93 e8 b9 62 42 75 f1 b0 72 e1 c5 e9 4b e5 f8 c2 aa 41 fd 3e d4 16 8c 83 10 4a 0f a2 e9 0b 3c 3f a4 95 30 4a 83 81 5f f1 c2 21 d5 36 81 97 30 f1 2b b3 70 e8 c7 95 e7 87 60 f0 50 39 0d 06 71 94 44 a3 b4 12 Data Ascii: i[H(KKman3le$E~bLd<~)32KDdDddkseWxgWAR^+QXJx^'GoRc%}+8Ie$)bBurKA>J<?0J_!60+p`P9qD
2024-09-29 06:21:25 UTC	16384	IN	Data Raw: fd e5 3a 11 12 78 ec 48 8b 3c bc 65 76 63 6e 35 57 84 73 1f 91 57 07 f6 c8 15 8c 0a 9f 2d 7b f0 35 b7 0e 0d 84 9a 4a 99 b8 df 82 05 f0 47 ad 44 83 af 65 8e ae ff e9 fa 62 d9 68 c7 bd b3 9d f9 e2 36 b9 fb f9 ef 9b d9 e7 b3 0b ea 6f 6f cd 8e 73 83 ab eb 66 7f 14 c6 e9 dd eb 0c 0f 10 78 1b a3 ee c6 c7 bb f9 d6 c2 82 35 dd f8 2f 23 73 0f d9 34 6e fe 8d f0 e1 6d 7c f7 b3 f1 9a c6 33 ff 95 ee 61 a7 4d b3 d7 8d ce ed b0 0a 75 de d6 c8 51 07 6b f7 8f ee 6e aa b7 1b 77 98 63 75 b0 be 3b bd 3e 00 f9 f7 ab f3 6a 5b 58 2a f9 f9 f6 c6 aa 22 8c 61 29 a7 c5 3f 5d 3c f4 6b 1a a6 51 c5 d6 57 0d cb 58 b1 6e d1 cc 74 68 4e 11 3f ff 5c 60 3d ce 9f ed 0c b9 b5 a8 34 02 c5 09 33 0d 44 64 4d e2 76 f1 c7 66 69 bf 26 a4 7d 4a 43 17 fe a5 03 b0 6c 78 e5 6d d1 76 06 1f 4b 47 c6 55 Data Ascii: :xH<evcn5WsW-{5JGDebh6oosfx5/#s4nm\|3aMuQknwcu;>j[X*"a)?]<kQWXnthN?\`=43DdMvfi&}JClxmvKGU
2024-09-29 06:21:25 UTC	16384	IN	Data Raw: 64 0d 53 8e 98 a0 4e 4c 15 ae 1c a7 25 f3 17 51 25 6c 2e 37 f9 a2 c7 c9 53 6d ae e9 68 ea 7a 61 ce d9 73 af a2 69 5f da bf ee bb 85 4b 2f 49 c2 83 3e 87 82 9c 1e ad 87 17 18 95 3e 97 af 9c c1 a8 0a f7 8a 2d f6 fe 05 9c fc fb ca 71 58 40 be 96 55 cf d7 58 ce a9 e5 0a 90 c8 b3 06 a4 9c 22 db bb 7e 7e c2 0f 4f 3d 57 72 7c db 3b df 12 fc 13 84 f0 6b d5 2b e6 e4 28 38 20 5e 01 d1 71 3a ba 16 a0 c6 ea fb ee 22 c2 ef 7d f1 57 f0 fb 9a b3 88 ef 6b cf 22 e6 06 65 b2 33 1b 49 4a f1 79 d6 05 23 26 af eb f5 c8 79 28 ef d6 8c 71 d4 8c 53 b1 00 ad 88 20 a6 2a fa 84 33 fd e0 d5 b8 d7 38 40 b2 0b bc 8a e3 80 71 80 f9 8c d1 40 06 a2 be 56 4f 9a fe 48 ac 33 ce 04 79 d8 0a 5b 29 40 69 fb f4 69 24 21 d2 7e 4d 44 10 ce 21 30 40 6e d4 5b b8 86 e3 a4 e7 b7 83 8b f8 1a 41 74 93 Data Ascii: dSNL%Q%l.7Smhzasi_K/I>>-qX@UX"~~O=Wr\|;k+(8 ^q:"}Wk"e3IJy#&y(qS *38@q@VOH3y[)@ii$!~MD!0@n[At
2024-09-29 06:21:25 UTC	3551	IN	Data Raw: 10 b3 6a 43 33 68 e7 22 d7 e9 57 11 3b fe dd b5 89 14 df f7 35 d6 4b 58 b9 df fe 95 a8 2c ed 31 3a 01 b3 7c 59 86 5b 0b cb a4 18 a4 af e3 cf 34 91 93 cb 17 79 f1 cf 2c 9f 5c d2 f0 f2 96 34 e2 40 09 a0 55 d1 06 42 4c 45 d9 a3 f4 8f e4 07 de 9f c5 31 1d a9 ee 9f ad d1 f3 db a0 11 02 a5 5e 9b b2 f6 37 6b 4b ff da d0 96 32 88 47 aa f5 9b 08 28 7f 59 55 0b 78 4b f9 4b a5 10 1d 66 81 9a 20 de 3c 77 50 22 85 12 53 e9 ff 00 6b dc 0f 07 c7 8e c0 e6 4d a2 2c 90 cd 78 f7 21 2b b5 d9 38 dc d9 f3 91 09 93 64 b9 5d ff 39 75 21 fc ce 57 2b 31 fc eb 9a aa 67 ee 23 ba 7b ab 97 5d e8 c4 9f e2 cf a5 fc 70 7c 15 44 23 77 13 31 28 bf d5 27 97 dc ad e4 87 83 75 25 63 1d dd 9d 83 97 61 b8 2b 6e bc e8 66 7b 42 2d 1c 67 58 b3 5c 31 4c aa e2 c9 d0 8e 9c 74 2b 9d e8 54 7c 87 ea e0 Data Ascii: jC3h"W;5KX,1:\|Y[4y,\4@UBLE1^7kK2G(YUxKKf <wP"SkM,x!+8d]9u!W+1g#{]p\|D#w1('u%ca+nf{B-gX\1Lt+T\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49877	13.107.246.45	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:27 UTC	602	OUT	GET /scripts/me/MeControl/10.24228.4/en-US/meCore.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:27 UTC	629	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:27 GMT Content-Type: application/javascript Content-Length: 100769 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 22 Aug 2024 23:12:08 GMT ETag: "1daf5236222e5a1" X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240929T062127Z-15767c5fc55fdfx81a30vtr1fw00000004zg000000007e6k x-fd-int-roxy-purgeid: 38334287 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-29 06:21:27 UTC	15755	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 43 6f 72 65 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 72 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 Data Ascii: MeControlDefine("meCore",["exports","@mecontrol/web-inline","@mecontrol/web-boot"],function(e,f,h){"use strict";var r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)
2024-09-29 06:21:27 UTC	16384	IN	Data Raw: 73 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 3d 68 2e 64 65 62 6f 75 6e 63 65 28 74 2e 65 78 70 61 6e 64 65 64 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 2e 62 69 6e 64 28 74 29 29 2c 74 2e 73 74 61 74 65 3d 7b 65 78 70 61 6e 64 65 64 3a 21 31 7d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 65 77 20 66 2e 53 79 6e 74 68 65 74 69 63 45 76 65 6e 74 28 22 63 6f 6d 6d 61 6e 64 63 6c 69 63 6b 22 2c 7b 63 6f 6d 6d 61 6e 64 49 64 3a 74 2e 69 64 2c 63 75 72 72 65 6e 74 41 63 63 6f 75 6e 74 3a 6e 7d 29 2c 6f 3d 66 2e 67 65 74 4f 70 74 69 6f 6e 73 28 29 3b 6f 26 26 28 6f 2e 73 79 6e 74 68 65 74 69 63 45 76 65 6e 74 54 61 72 67 65 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 72 29 7c 7c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 Data Ascii: scrollHandler=h.debounce(t.expandedScrollHandler.bind(t)),t.state={expanded:!1},t}function $(e,t,n){var r=new f.SyntheticEvent("commandclick",{commandId:t.id,currentAccount:n}),o=f.getOptions();o&&(o.syntheticEventTarget.dispatchEvent(r)\|\|e.preventDefault
2024-09-29 06:21:27 UTC	16384	IN	Data Raw: 73 6f 6e 28 65 2e 63 6f 6e 74 65 6e 74 29 3b 72 65 74 75 72 6e 7b 70 61 72 74 41 3a 6e 2c 70 61 72 74 42 3a 7b 76 65 72 3a 22 31 2e 30 22 2c 69 6d 70 72 65 73 73 69 6f 6e 47 75 69 64 3a 74 2e 69 6d 70 72 65 73 73 69 6f 6e 47 75 69 64 2c 6d 61 72 6b 65 74 3a 66 2e 4d 45 2e 43 6f 6e 66 69 67 2e 6d 6b 74 2c 70 61 67 65 54 61 67 73 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 66 2e 67 65 74 50 61 67 65 54 61 67 73 28 74 2e 61 63 63 6f 75 6e 74 73 2e 63 6f 75 6e 74 73 2c 74 2e 61 63 63 6f 75 6e 74 73 2e 63 75 72 72 65 6e 74 29 29 2c 63 6f 6e 74 65 6e 74 56 65 72 3a 22 32 2e 30 22 2c 63 6f 6e 74 65 6e 74 3a 22 5b 22 2b 72 2b 22 5d 22 7d 2c 70 61 72 74 43 3a 7b 62 61 73 65 54 79 70 65 3a 46 65 2c 70 61 67 65 4c 6f 61 64 54 69 6d 65 3a 4d 61 74 68 2e 72 6f 75 Data Ascii: son(e.content);return{partA:n,partB:{ver:"1.0",impressionGuid:t.impressionGuid,market:f.ME.Config.mkt,pageTags:JSON.stringify(f.getPageTags(t.accounts.counts,t.accounts.current)),contentVer:"2.0",content:"["+r+"]"},partC:{baseType:Fe,pageLoadTime:Math.rou
2024-09-29 06:21:27 UTC	16384	IN	Data Raw: 65 72 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 66 69 6c 6c 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 70 75 72 70 6c 65 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 63 75 72 72 65 6e 74 41 63 63 6f 75 6e 74 20 61 2e 6d 65 63 74 72 6c 5f 73 69 67 6e 6f 75 74 5c 78 33 61 61 63 74 69 76 65 5c 78 37 62 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 61 64 6a 75 73 74 5c 78 33 61 6e 6f 6e 65 5c 78 33 Data Ascii: er-color\x3a\x23fff\x21important\x3boutline-color\x3a\x23fff\x21important\x3bfill\x3a\x23fff\x21important\x3bbackground-color\x3apurple\x7d.mectrl_theme_azure_hclight .mectrl_currentAccount a.mectrl_signout\x3aactive\x7b-ms-high-contrast-adjust\x3anone\x3
2024-09-29 06:21:27 UTC	16384	IN	Data Raw: 2d 6f 6e 2d 62 6c 61 63 6b 5c 78 32 39 5c 78 37 62 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 61 2c 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 62 75 74 74 6f 6e 5c 78 37 62 62 6f 72 64 65 72 5c 78 33 61 73 6f 6c 69 64 20 31 70 78 5c 78 37 64 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 2e 66 69 78 65 64 2d 6d 65 6e 75 20 75 6c 5c 78 37 62 70 6f 73 69 74 69 6f 6e 5c 78 33 61 66 69 78 65 64 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 5c 78 37 62 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 33 33 33 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 Data Ascii: -on-black\x29\x7b.mectrl_menu ul li a,.mectrl_menu ul li button\x7bborder\x3asolid 1px\x7d\x7d.mectrl_menu.fixed-menu ul\x7bposition\x3afixed\x7d.mectrl_menu ul\x7bcolor\x3a\x23333\x21important\x3bbackground-color\x3a\x23fff\x21important\x7d.mectrl_menu u
2024-09-29 06:21:27 UTC	16384	IN	Data Raw: 5c 78 33 61 68 6f 76 65 72 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 73 69 67 6e 49 6e 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 30 66 66 5c 78 37 64 5c 78 37 64 5c 78 34 30 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 5c 78 32 38 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 5c 78 33 61 62 6c 61 63 6b 2d 6f 6e 2d 77 68 69 74 65 5c 78 32 39 5c 78 37 62 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 49 74 65 6d 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 65 78 70 61 6e 64 65 64 2e 73 69 67 6e 49 6e 2c 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 49 74 65 6d 5c 78 33 61 68 6f 76 65 72 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 73 69 67 6e 49 6e 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: \x3ahover .primaryAction.signIn\x7bbackground-color\x3a\x230ff\x7d\x7d\x40media screen and \x28-ms-high-contrast\x3ablack-on-white\x29\x7b.mectrl_accountItem .primaryAction.expanded.signIn,.mectrl_accountItem\x3ahover .primaryAction.signIn\x7bbackground-c
2024-09-29 06:21:27 UTC	3094	IN	Data Raw: 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 41 63 74 69 6f 6e 73 20 2e 6d 65 63 74 72 6c 5f 74 72 69 67 67 65 72 2e 65 78 70 61 6e 64 65 64 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 41 63 74 69 6f 6e 73 20 2e 6d 65 63 74 72 6c 5f 74 72 69 67 67 65 72 5c 78 33 61 68 6f 76 65 72 5c 78 37 62 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 61 64 6a 75 73 74 5c 78 33 61 6e 6f 6e 65 5c 78 33 62 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 Data Ascii: _theme_azure_hclight .mectrl_accountActions .mectrl_trigger.expanded,.mectrl_theme_azure_hclight .mectrl_accountActions .mectrl_trigger\x3ahover\x7b-ms-high-contrast-adjust\x3anone\x3bcolor\x3a\x23fff\x21important\x3bborder-color\x3a\x23fff\x21important\x

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49880	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:28 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 73 64 58 57 64 44 72 65 4d 30 47 2f 4f 70 72 49 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 66 36 62 38 33 36 34 30 65 64 61 37 34 34 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: sdXWdDreM0G/OprI.1Context: 7f6b83640eda7448
2024-09-29 06:21:28 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 06:21:28 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 73 64 58 57 64 44 72 65 4d 30 47 2f 4f 70 72 49 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 66 36 62 38 33 36 34 30 65 64 61 37 34 34 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 4a 53 48 68 6a 36 30 6a 4f 77 4c 47 35 61 47 48 6c 65 49 79 55 45 37 66 34 55 75 49 2f 73 65 4a 52 4e 34 33 44 50 56 52 6f 47 56 45 38 45 55 37 6a 4e 73 44 65 6c 64 54 4a 5a 63 4d 54 31 57 65 48 38 46 64 48 45 4c 63 43 64 63 48 6d 4d 67 6f 43 6f 74 56 39 31 62 72 33 39 78 71 61 48 74 70 56 7a 6b 6f 58 63 41 41 58 61 4c 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: sdXWdDreM0G/OprI.2Context: 7f6b83640eda7448<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcJSHhj60jOwLG5aGHleIyUE7f4UuI/seJRN43DPVRoGVE8EU7jNsDeldTJZcMT1WeH8FdHELcCdcHmMgoCotV91br39xqaHtpVzkoXcAAXaLS
2024-09-29 06:21:28 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 73 64 58 57 64 44 72 65 4d 30 47 2f 4f 70 72 49 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 66 36 62 38 33 36 34 30 65 64 61 37 34 34 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: sdXWdDreM0G/OprI.3Context: 7f6b83640eda7448<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 06:21:28 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 06:21:28 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 73 30 39 75 75 73 48 7a 79 45 43 73 54 76 68 4a 4c 75 43 72 35 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: s09uusHzyECsTvhJLuCr5Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49882	13.107.246.45	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:28 UTC	385	OUT	GET /scripts/me/MeControl/10.24228.4/en-US/meCore.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:28 UTC	629	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:28 GMT Content-Type: application/javascript Content-Length: 100769 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 22 Aug 2024 23:12:08 GMT ETag: "1daf5236222e5a1" X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240929T062128Z-15767c5fc55gs96cphvgp5f5vc00000004f000000000fmu3 x-fd-int-roxy-purgeid: 38334287 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-29 06:21:28 UTC	15755	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 43 6f 72 65 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 72 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 Data Ascii: MeControlDefine("meCore",["exports","@mecontrol/web-inline","@mecontrol/web-boot"],function(e,f,h){"use strict";var r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)
2024-09-29 06:21:28 UTC	16384	IN	Data Raw: 73 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 3d 68 2e 64 65 62 6f 75 6e 63 65 28 74 2e 65 78 70 61 6e 64 65 64 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 2e 62 69 6e 64 28 74 29 29 2c 74 2e 73 74 61 74 65 3d 7b 65 78 70 61 6e 64 65 64 3a 21 31 7d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 65 77 20 66 2e 53 79 6e 74 68 65 74 69 63 45 76 65 6e 74 28 22 63 6f 6d 6d 61 6e 64 63 6c 69 63 6b 22 2c 7b 63 6f 6d 6d 61 6e 64 49 64 3a 74 2e 69 64 2c 63 75 72 72 65 6e 74 41 63 63 6f 75 6e 74 3a 6e 7d 29 2c 6f 3d 66 2e 67 65 74 4f 70 74 69 6f 6e 73 28 29 3b 6f 26 26 28 6f 2e 73 79 6e 74 68 65 74 69 63 45 76 65 6e 74 54 61 72 67 65 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 72 29 7c 7c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 Data Ascii: scrollHandler=h.debounce(t.expandedScrollHandler.bind(t)),t.state={expanded:!1},t}function $(e,t,n){var r=new f.SyntheticEvent("commandclick",{commandId:t.id,currentAccount:n}),o=f.getOptions();o&&(o.syntheticEventTarget.dispatchEvent(r)\|\|e.preventDefault
2024-09-29 06:21:28 UTC	16384	IN	Data Raw: 73 6f 6e 28 65 2e 63 6f 6e 74 65 6e 74 29 3b 72 65 74 75 72 6e 7b 70 61 72 74 41 3a 6e 2c 70 61 72 74 42 3a 7b 76 65 72 3a 22 31 2e 30 22 2c 69 6d 70 72 65 73 73 69 6f 6e 47 75 69 64 3a 74 2e 69 6d 70 72 65 73 73 69 6f 6e 47 75 69 64 2c 6d 61 72 6b 65 74 3a 66 2e 4d 45 2e 43 6f 6e 66 69 67 2e 6d 6b 74 2c 70 61 67 65 54 61 67 73 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 66 2e 67 65 74 50 61 67 65 54 61 67 73 28 74 2e 61 63 63 6f 75 6e 74 73 2e 63 6f 75 6e 74 73 2c 74 2e 61 63 63 6f 75 6e 74 73 2e 63 75 72 72 65 6e 74 29 29 2c 63 6f 6e 74 65 6e 74 56 65 72 3a 22 32 2e 30 22 2c 63 6f 6e 74 65 6e 74 3a 22 5b 22 2b 72 2b 22 5d 22 7d 2c 70 61 72 74 43 3a 7b 62 61 73 65 54 79 70 65 3a 46 65 2c 70 61 67 65 4c 6f 61 64 54 69 6d 65 3a 4d 61 74 68 2e 72 6f 75 Data Ascii: son(e.content);return{partA:n,partB:{ver:"1.0",impressionGuid:t.impressionGuid,market:f.ME.Config.mkt,pageTags:JSON.stringify(f.getPageTags(t.accounts.counts,t.accounts.current)),contentVer:"2.0",content:"["+r+"]"},partC:{baseType:Fe,pageLoadTime:Math.rou
2024-09-29 06:21:28 UTC	16384	IN	Data Raw: 65 72 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 66 69 6c 6c 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 70 75 72 70 6c 65 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 63 75 72 72 65 6e 74 41 63 63 6f 75 6e 74 20 61 2e 6d 65 63 74 72 6c 5f 73 69 67 6e 6f 75 74 5c 78 33 61 61 63 74 69 76 65 5c 78 37 62 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 61 64 6a 75 73 74 5c 78 33 61 6e 6f 6e 65 5c 78 33 Data Ascii: er-color\x3a\x23fff\x21important\x3boutline-color\x3a\x23fff\x21important\x3bfill\x3a\x23fff\x21important\x3bbackground-color\x3apurple\x7d.mectrl_theme_azure_hclight .mectrl_currentAccount a.mectrl_signout\x3aactive\x7b-ms-high-contrast-adjust\x3anone\x3
2024-09-29 06:21:28 UTC	16384	IN	Data Raw: 2d 6f 6e 2d 62 6c 61 63 6b 5c 78 32 39 5c 78 37 62 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 61 2c 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 62 75 74 74 6f 6e 5c 78 37 62 62 6f 72 64 65 72 5c 78 33 61 73 6f 6c 69 64 20 31 70 78 5c 78 37 64 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 2e 66 69 78 65 64 2d 6d 65 6e 75 20 75 6c 5c 78 37 62 70 6f 73 69 74 69 6f 6e 5c 78 33 61 66 69 78 65 64 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 5c 78 37 62 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 33 33 33 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 Data Ascii: -on-black\x29\x7b.mectrl_menu ul li a,.mectrl_menu ul li button\x7bborder\x3asolid 1px\x7d\x7d.mectrl_menu.fixed-menu ul\x7bposition\x3afixed\x7d.mectrl_menu ul\x7bcolor\x3a\x23333\x21important\x3bbackground-color\x3a\x23fff\x21important\x7d.mectrl_menu u
2024-09-29 06:21:28 UTC	16384	IN	Data Raw: 5c 78 33 61 68 6f 76 65 72 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 73 69 67 6e 49 6e 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 30 66 66 5c 78 37 64 5c 78 37 64 5c 78 34 30 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 5c 78 32 38 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 5c 78 33 61 62 6c 61 63 6b 2d 6f 6e 2d 77 68 69 74 65 5c 78 32 39 5c 78 37 62 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 49 74 65 6d 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 65 78 70 61 6e 64 65 64 2e 73 69 67 6e 49 6e 2c 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 49 74 65 6d 5c 78 33 61 68 6f 76 65 72 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 73 69 67 6e 49 6e 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: \x3ahover .primaryAction.signIn\x7bbackground-color\x3a\x230ff\x7d\x7d\x40media screen and \x28-ms-high-contrast\x3ablack-on-white\x29\x7b.mectrl_accountItem .primaryAction.expanded.signIn,.mectrl_accountItem\x3ahover .primaryAction.signIn\x7bbackground-c
2024-09-29 06:21:28 UTC	3094	IN	Data Raw: 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 41 63 74 69 6f 6e 73 20 2e 6d 65 63 74 72 6c 5f 74 72 69 67 67 65 72 2e 65 78 70 61 6e 64 65 64 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 41 63 74 69 6f 6e 73 20 2e 6d 65 63 74 72 6c 5f 74 72 69 67 67 65 72 5c 78 33 61 68 6f 76 65 72 5c 78 37 62 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 61 64 6a 75 73 74 5c 78 33 61 6e 6f 6e 65 5c 78 33 62 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 Data Ascii: _theme_azure_hclight .mectrl_accountActions .mectrl_trigger.expanded,.mectrl_theme_azure_hclight .mectrl_accountActions .mectrl_trigger\x3ahover\x7b-ms-high-contrast-adjust\x3anone\x3bcolor\x3a\x23fff\x21important\x3bborder-color\x3a\x23fff\x21important\x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49887	152.199.21.175	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:29 UTC	602	OUT	GET /16.000/content/js/MeControl_byKfhfjpuoP7eXmeHHGYoA2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:30 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3966918 Cache-Control: public, max-age=31536000 Content-MD5: tkTQjl7A5y54ujmmGkggdg== Content-Type: application/x-javascript Date: Sun, 29 Sep 2024 06:21:30 GMT Etag: 0x8DCB6A18D0299CB Last-Modified: Wed, 07 Aug 2024 05:26:55 GMT Server: ECAcc (lhc/7965) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8c75e22c-401e-0001-6d23-ee0b12000000 x-ms-version: 2009-09-19 Content-Length: 17287 Connection: close
2024-09-29 06:21:30 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 68 58 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 74 72 75 65 3a 61 3d 3d 30 7c 7c 61 3d 3d 66 61 6c 73 65 7c 7c 61 3d 3d 22 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 44 75 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 5f 4a 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 44 28 61 29 7b 72 65 74 75 72 6e 20 22 66 75 6e 63 74 69 6f 6e 22 2e 5f 66 30 28 74 79 70 65 6f 66 20 61 2c 74 72 75 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 46 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 45 28 61 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 26 26 5f Data Ascii: function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_
2024-09-29 06:21:30 UTC	904	IN	Data Raw: 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3d 53 65 72 76 65 72 44 61 74 61 2e 63 44 3b 69 66 28 64 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 64 7d 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 64 56 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 63 2c 61 29 7b 76 61 72 20 62 3d 7b 65 72 72 6f 72 3a 64 2c 75 73 65 72 4c 69 73 74 3a 5b 5d 2c 70 6f 73 74 4c 6f 67 6f 75 74 52 65 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3a 63 7d 3b 69 66 28 61 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 61 3b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 66 33 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 4d 65 43 6f 6e 74 72 6f 6c 2e 5f 6a 51 28 61 2e 6f 72 69 67 69 6e 29 21 3d 3d 4d 65 43 6f 6e 74 72 6f 6c 2e Data Ascii: directUriValid=ServerData.cD;if(d)b.performance=d}return JSON.stringify(b)},_dV:function(d,c,a){var b={error:d,userList:[],postLogoutRedirectUriValid:c};if(a)b.performance=a;return JSON.stringify(b)},_f3:function(a){if(MeControl._jQ(a.origin)!==MeControl.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49894	13.107.246.67	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:30 UTC	754	OUT	GET /me/mecache?partner=smcconvergence&wreply=https%3A%2F%2Fsupport.microsoft.com HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:31 UTC	698	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 06:21:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 3467 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=43200 Expires: Sun, 29 Sep 2024 11:58:33 GMT X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors https://support.microsoft.com; X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240929T062130Z-15767c5fc55852fxfeh7csa2dn00000004h0000000009gg4 x-fd-int-roxy-purgeid: 38334287 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-09-29 06:21:31 UTC	3467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 20 2f 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 62 6f 64 79 22 20 72 6f 6c 65 3d 22 6d 61 69 6e 22 3e 0d Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width" /> </head><body> <div id="body" role="main">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49893	152.199.21.175	443	3776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:31 UTC	399	OUT	GET /16.000/content/js/MeControl_byKfhfjpuoP7eXmeHHGYoA2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 06:21:31 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3966919 Cache-Control: public, max-age=31536000 Content-MD5: tkTQjl7A5y54ujmmGkggdg== Content-Type: application/x-javascript Date: Sun, 29 Sep 2024 06:21:31 GMT Etag: 0x8DCB6A18D0299CB Last-Modified: Wed, 07 Aug 2024 05:26:55 GMT Server: ECAcc (lhc/7965) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8c75e22c-401e-0001-6d23-ee0b12000000 x-ms-version: 2009-09-19 Content-Length: 17287 Connection: close
2024-09-29 06:21:31 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 68 58 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 74 72 75 65 3a 61 3d 3d 30 7c 7c 61 3d 3d 66 61 6c 73 65 7c 7c 61 3d 3d 22 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 44 75 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 5f 4a 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 44 28 61 29 7b 72 65 74 75 72 6e 20 22 66 75 6e 63 74 69 6f 6e 22 2e 5f 66 30 28 74 79 70 65 6f 66 20 61 2c 74 72 75 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 46 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 45 28 61 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 26 26 5f Data Ascii: function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_
2024-09-29 06:21:31 UTC	904	IN	Data Raw: 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3d 53 65 72 76 65 72 44 61 74 61 2e 63 44 3b 69 66 28 64 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 64 7d 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 64 56 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 63 2c 61 29 7b 76 61 72 20 62 3d 7b 65 72 72 6f 72 3a 64 2c 75 73 65 72 4c 69 73 74 3a 5b 5d 2c 70 6f 73 74 4c 6f 67 6f 75 74 52 65 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3a 63 7d 3b 69 66 28 61 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 61 3b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 66 33 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 4d 65 43 6f 6e 74 72 6f 6c 2e 5f 6a 51 28 61 2e 6f 72 69 67 69 6e 29 21 3d 3d 4d 65 43 6f 6e 74 72 6f 6c 2e Data Ascii: directUriValid=ServerData.cD;if(d)b.performance=d}return JSON.stringify(b)},_dV:function(d,c,a){var b={error:d,userList:[],postLogoutRedirectUriValid:c};if(a)b.performance=a;return JSON.stringify(b)},_f3:function(a){if(MeControl._jQ(a.origin)!==MeControl.

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49930	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 06:21:55 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 6d 34 56 69 4f 43 50 52 59 45 69 66 53 6f 4c 76 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 34 63 33 33 33 30 32 65 39 34 62 65 33 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: m4ViOCPRYEifSoLv.1Context: 34c33302e94be3f
2024-09-29 06:21:55 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 06:21:55 UTC	1083	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 30 0d 0a 4d 53 2d 43 56 3a 20 6d 34 56 69 4f 43 50 52 59 45 69 66 53 6f 4c 76 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 34 63 33 33 33 30 32 65 39 34 62 65 33 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 4a 53 48 68 6a 36 30 6a 4f 77 4c 47 35 61 47 48 6c 65 49 79 55 45 37 66 34 55 75 49 2f 73 65 4a 52 4e 34 33 44 50 56 52 6f 47 56 45 38 45 55 37 6a 4e 73 44 65 6c 64 54 4a 5a 63 4d 54 31 57 65 48 38 46 64 48 45 4c 63 43 64 63 48 6d 4d 67 6f 43 6f 74 56 39 31 62 72 33 39 78 71 61 48 74 70 56 7a 6b 6f 58 63 41 41 58 61 4c 53 46 Data Ascii: ATH 2 CON\DEVICE 1060MS-CV: m4ViOCPRYEifSoLv.2Context: 34c33302e94be3f<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcJSHhj60jOwLG5aGHleIyUE7f4UuI/seJRN43DPVRoGVE8EU7jNsDeldTJZcMT1WeH8FdHELcCdcHmMgoCotV91br39xqaHtpVzkoXcAAXaLSF
2024-09-29 06:21:55 UTC	217	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 6d 34 56 69 4f 43 50 52 59 45 69 66 53 6f 4c 76 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 34 63 33 33 33 30 32 65 39 34 62 65 33 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 196MS-CV: m4ViOCPRYEifSoLv.3Context: 34c33302e94be3f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 06:21:55 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 06:21:55 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 63 4c 58 54 70 5a 61 48 4c 45 57 2b 34 38 2f 46 69 43 45 36 72 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: cLXTpZaHLEW+48/FiCE6rA.0Payload parsing failed.

Target ID:	0
Start time:	02:20:40
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	02:20:44
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2196,i,4525585386826145495,10144725593978225122,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	02:20:46
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://microsoft.biosency.com/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://microsoft.biosency.com/	HTTP Parser: Number of links: 0
Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0	HTTP Parser: Number of links: 0

Source: https://signup.live.com/?lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/?lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/?lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/?lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/?lic=1	HTTP Parser: No favicon
Source: https://signup.live.com/?lic=1	HTTP Parser: No favicon
Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0	HTTP Parser: No favicon
Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0	HTTP Parser: No favicon

Source: https://microsoft.biosency.com/	HTTP Parser: No <meta name="author".. found
Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0	HTTP Parser: No <meta name="author".. found

Source: https://microsoft.biosency.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://support.microsoft.com/en-us/windows/configure-windows-hello-dae28983-8242-bb2a-d3d1-87c9d265a5f0	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: microsoft.biosency.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/4.5.0/css/bootstrap.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://microsoft.biosency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft.biosency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/styles.min.css HTTP/1.1Host: microsoft.biosency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://microsoft.biosency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/line-awesome/1.1/css/line-awesome.min.css HTTP/1.1Host: maxcdn.icons8.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://microsoft.biosency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.bundle.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft.biosency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/microsoft_logo.svg HTTP/1.1Host: microsoft.biosency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft.biosency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/script.min.js HTTP/1.1Host: microsoft.biosency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft.biosency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/background.png HTTP/1.1Host: microsoft.biosency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft.biosency.com/assets/css/styles.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/4.5.0/js/bootstrap.bundle.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/line-awesome/1.1/fonts/line-awesome.woff2?v=1.1. HTTP/1.1Host: maxcdn.icons8.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://microsoft.biosency.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://maxcdn.icons8.com/fonts/line-awesome/1.1/css/line-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/microsoft_logo.svg HTTP/1.1Host: microsoft.biosency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/script.min.js HTTP/1.1Host: microsoft.biosency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/favicon32.svg HTTP/1.1Host: microsoft.biosency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft.biosency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/background.png HTTP/1.1Host: microsoft.biosency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/favicon32.svg HTTP/1.1Host: microsoft.biosency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_l7exbVZEGzG2v4FeAaRSUA2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_l7exbVZEGzG2v4FeAaRSUA2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=029dbc40-7e2b-11ef-856f-85724689caa7 HTTP/1.1Host: stk.hsprotect.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://msft.hsprotect.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://msft.hsprotect.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=029dbc40-7e2b-11ef-856f-85724689caa7 HTTP/1.1Host: stk.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1Host: mem.gfx.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24228.4/en-US/meBoot.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24228.4/en-US/meBoot.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/FetchSessions_Core_VRFGv7Cn5qZDpUQIsx-pnA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/FetchSessions_Core_VRFGv7Cn5qZDpUQIsx-pnA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24228.4/en-US/meCore.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24228.4/en-US/meCore.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000/content/js/MeControl_byKfhfjpuoP7eXmeHHGYoA2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /me/mecache?partner=smcconvergence&wreply=https%3A%2F%2Fsupport.microsoft.com HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000/content/js/MeControl_byKfhfjpuoP7eXmeHHGYoA2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: microsoft.biosency.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199

Source: global traffic	DNS traffic detected: DNS query: microsoft.biosency.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.icons8.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: signup.live.com
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: fpt.live.com
Source: global traffic	DNS traffic detected: DNS query: msft.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: client.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: collector-pxzc5j78di.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: stk.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: support.content.office.net
Source: global traffic	DNS traffic detected: DNS query: c.s-microsoft.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: mem.gfx.ms
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: acctcdn.msftauth.net

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://microsoft.biosency.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Windows Analysis Report
http://microsoft.biosency.com/