Edit tour

Windows Analysis Report
You have late tasks (291Ko).msg

Overview

General Information

Sample name:	You have late tasks (291Ko).msg
Analysis ID:	1525469
MD5:	977c4f5577eb888fc317da1c63f55c44
SHA1:	be6362a40eefd05fc525f78f4599ec8fd0b41996
SHA256:	1fcf22be5d76e824cb3b007932a23bd93219881dca0e7925cb931d83c5f4d53b
Infos:

Detection

Score:	6
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Detected hidden input values containing email addresses (often used in phishing pages)

Detected suspicious crossdomain redirect

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Queries the volume information (name, serial number etc) of a device

Sigma detected: Office Autorun Keys Modification

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

OUTLOOK.EXE (PID: 6520 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\You have late tasks (291Ko).msg" MD5: 91A5292942864110ED734005B7E005C0)

ai.exe (PID: 6268 cmdline: "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "147BB6B8-C38F-4960-B5B0-AAFE9F02DEBF" "4E6B8628-15E5-4F56-9FB8-1D32CD1E329F" "6520" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD)

chrome.exe (PID: 3528 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2200 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1968,i,15811105649717450159,8775413160418026291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Sigma Signatures

Sigma detected: Office Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: 1, EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, ProcessId: 6520, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\SearchToolbarsDisabled

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAArVFNTNNgGG7pGGwOWTh5NJMTsdv3rT9fu4RD13YsKn-iJEjM8rX9ygprO9puDAjReMKTeCUhQY-LB-IJiYleuHCR6I2TNw0HYzhx0bjGi0cOPocnz5s875snzzvGwDwsjYK_4NiYWWDbkDVJrP5BMJLOvpp__unpPrU_sPHi19StxeNdOlVrOG2SN323S2v1KGqGpULBrGMvckgQWqSBo0Y8rLYI667nwzoOSNN3vCheKdRsP3DDgkVs3GpEeRw2O4c0fUrT32m627eqSxUAFAQ0XQGqBHVB5RVN1QURojKQuV4oXikDBGKTVEaQ5UVYVCCHVFREGgeQLpR1jUeyJBTLgshXRA3xgqCUIQ9FDmgakpEgq4og9FwyFMWzvuFppRXVizH5gbNBLvpSccZa0w-jXSYxrYG1LnOlvt4yozYSOU4WDdbCgLB80SYsxlzPJhEgAyAVsYhPmKTfJJ5jnSbo80QGMKXBwXSWukHdpC4T9Ov-XuvLh9W9i70Pd94_-XJ8-XuFOukvSOvzcwpBVRCsG4jcm9KbswvVWd6prMzKcmVmTenMTVqT4oOljaVxVII7SXonmTxKpgaZLJVj1Bn4M0lvD1BHqf_ys9Nr9EGGPsvAdMr0jQB7lmONjEJoWBKQOFZCBLA8NATWMJDEAsPkOVPCEpHwWYZPJ80GdtxwZGwz51i1yF8hXq60meu4Yc00Y9XGjRYJc6XFXC947vHW1tazoStd_zhEXV5_-bn75tv2ux_V8-Hbdyc82ajfnzBniqJqK0bbaU_ILtEbBU-e1BfmHz4quHPLrc6Uao4fZKmvWeoP0&estsfed=1&uaid=cf8956a1a080a000077a8ffd4e235bc5&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&fci=00000003-0000-0ff1-ce00-000000000000&wsucxt=1&username=test%40test.com&login_hint=test%40test.com

HTTP Parser: test@test.com

Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAArVFNTNNgGG7pGGwOWTh5NJMTsdv3rT9fu4RD13YsKn-iJEjM8rX9ygprO9puDAjReMKTeCUhQY-LB-IJiYleuHCR6I2TNw0HYzhx0bjGi0cOPocnz5s875snzzvGwDwsjYK_4NiYWWDbkDVJrP5BMJLOvpp__unpPrU_sPHi19StxeNdOlVrOG2SN323S2v1KGqGpULBrGMvckgQWqSBo0Y8rLYI667nwzoOSNN3vCheKdRsP3DDgkVs3GpEeRw2O4c0fUrT32m627eqSxUAFAQ0XQGqBHVB5RVN1QURojKQuV4oXikDBGKTVEaQ5UVYVCCHVFREGgeQLpR1jUeyJBTLgshXRA3xgqCUIQ9FDmgakpEgq4og9FwyFMWzvuFppRXVizH5gbNBLvpSccZa0w-jXSYxrYG1LnOlvt4yozYSOU4WDdbCgLB80SYsxlzPJhEgAyAVsYhPmKTfJJ5jnSbo80QGMKXBwXSWukHdpC4T9Ov-XuvLh9W9i70Pd94_-XJ8-XuFOukvSOvzcwpBVRCsG4jcm9KbswvVWd6prMzKcmVmTenMTVqT4oOljaVxVII7SXonmTxKpgaZLJVj1Bn4M0lvD1BHqf_ys9Nr9EGGPsvAdMr0jQB7lmONjEJoWBKQOFZCBLA8NATWMJDEAsPkOVPCEpHwWYZPJ80GdtxwZGwz51i1yF8hXq60meu4Yc00Y9XGjRYJc6XFXC947vHW1tazoStd_zhEXV5_-b...	HTTP Parser: Iframe src: https://fpt.live.com?session_id=cf8956a1a080a000077a8ffd4e235bc5&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAArVFNTNNgGG7pGGwOWTh5NJMTsdv3rT9fu4RD13YsKn-iJEjM8rX9ygprO9puDAjReMKTeCUhQY-LB-IJiYleuHCR6I2TNw0HYzhx0bjGi0cOPocnz5s875snzzvGwDwsjYK_4NiYWWDbkDVJrP5BMJLOvpp__unpPrU_sPHi19StxeNdOlVrOG2SN323S2v1KGqGpULBrGMvckgQWqSBo0Y8rLYI667nwzoOSNN3vCheKdRsP3DDgkVs3GpEeRw2O4c0fUrT32m627eqSxUAFAQ0XQGqBHVB5RVN1QURojKQuV4oXikDBGKTVEaQ5UVYVCCHVFREGgeQLpR1jUeyJBTLgshXRA3xgqCUIQ9FDmgakpEgq4og9FwyFMWzvuFppRXVizH5gbNBLvpSccZa0w-jXSYxrYG1LnOlvt4yozYSOU4WDdbCgLB80SYsxlzPJhEgAyAVsYhPmKTfJJ5jnSbo80QGMKXBwXSWukHdpC4T9Ov-XuvLh9W9i70Pd94_-XJ8-XuFOukvSOvzcwpBVRCsG4jcm9KbswvVWd6prMzKcmVmTenMTVqT4oOljaVxVII7SXonmTxKpgaZLJVj1Bn4M0lvD1BHqf_ys9Nr9EGGPsvAdMr0jQB7lmONjEJoWBKQOFZCBLA8NATWMJDEAsPkOVPCEpHwWYZPJ80GdtxwZGwz51i1yF8hXq60meu4Yc00Y9XGjRYJc6XFXC947vHW1tazoStd_zhEXV5_-b...	HTTP Parser: Iframe src: https://fpt.live.com?session_id=cf8956a1a080a000077a8ffd4e235bc5&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAArVFNTNNgGG7pGGwOWTh5NJMTsdv3rT9fu4RD13YsKn-iJEjM8rX9ygprO9puDAjReMKTeCUhQY-LB-IJiYleuHCR6I2TNw0HYzhx0bjGi0cOPocnz5s875snzzvGwDwsjYK_4NiYWWDbkDVJrP5BMJLOvpp__unpPrU_sPHi19StxeNdOlVrOG2SN323S2v1KGqGpULBrGMvckgQWqSBo0Y8rLYI667nwzoOSNN3vCheKdRsP3DDgkVs3GpEeRw2O4c0fUrT32m627eqSxUAFAQ0XQGqBHVB5RVN1QURojKQuV4oXikDBGKTVEaQ5UVYVCCHVFREGgeQLpR1jUeyJBTLgshXRA3xgqCUIQ9FDmgakpEgq4og9FwyFMWzvuFppRXVizH5gbNBLvpSccZa0w-jXSYxrYG1LnOlvt4yozYSOU4WDdbCgLB80SYsxlzPJhEgAyAVsYhPmKTfJJ5jnSbo80QGMKXBwXSWukHdpC4T9Ov-XuvLh9W9i70Pd94_-XJ8-XuFOukvSOvzcwpBVRCsG4jcm9KbswvVWd6prMzKcmVmTenMTVqT4oOljaVxVII7SXonmTxKpgaZLJVj1Bn4M0lvD1BHqf_ys9Nr9EGGPsvAdMr0jQB7lmONjEJoWBKQOFZCBLA8NATWMJDEAsPkOVPCEpHwWYZPJ80GdtxwZGwz51i1yF8hXq60meu4Yc00Y9XGjRYJc6XFXC947vHW1tazoStd_zhEXV5_-b...	HTTP Parser: Iframe src: https://fpt.live.com?session_id=cf8956a1a080a000077a8ffd4e235bc5&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
Source: https://login.live.com/ppsecure/post.srf?username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027069&uaid=cf8956a1a080a000077a8ffd4e235bc5&pid=15216	HTTP Parser: Iframe src: https://fpt.live.com?session_id=cf8956a1a080a000077a8ffd4e235bc5&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
Source: https://login.live.com/ppsecure/post.srf?username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027069&uaid=cf8956a1a080a000077a8ffd4e235bc5&pid=15216	HTTP Parser: Iframe src: https://fpt.live.com?session_id=cf8956a1a080a000077a8ffd4e235bc5&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
Source: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&uaid=cf8956a1a080a000077a8ffd4e235bc5&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027089&mkt=EN-US	HTTP Parser: Iframe src: https://fpt.live.com?session_id=cf8956a1a080a000077a8ffd4e235bc5&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
Source: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&uaid=cf8956a1a080a000077a8ffd4e235bc5&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027089&mkt=EN-US	HTTP Parser: Iframe src: https://fpt.live.com?session_id=cf8956a1a080a000077a8ffd4e235bc5&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
Source: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&uaid=cf8956a1a080a000077a8ffd4e235bc5&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027089&mkt=EN-US	HTTP Parser: Iframe src: https://fpt.live.com?session_id=cf8956a1a080a000077a8ffd4e235bc5&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI

Source: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/oauth20_authorize.srf%3fusername%3dtest%2540test.com%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3d11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26username%3dtest%2540test.com%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3d11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26uaid%3dcf8956a1a080a000077a8ffd4e235bc5%26contextid%3d01FE12CA1582AAD6%26opid%3dEA31FBF6F374D5BA%26bk%3d1728027089&id=293577&uiflavor=web&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&client_id=1E00004417ACAE&uaid=cf8956a1a080a000077a8ffd4e235bc5&mkt=EN-US&lc=1033&bk=1728027089	HTTP Parser: Number of links: 0

Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAArVFNTNNgGG7pGGwOWTh5NJMTsdv3rT9fu4RD13YsKn-iJEjM8rX9ygprO9puDAjReMKTeCUhQY-LB-IJiYleuHCR6I2TNw0HYzhx0bjGi0cOPocnz5s875snzzvGwDwsjYK_4NiYWWDbkDVJrP5BMJLOvpp__unpPrU_sPHi19StxeNdOlVrOG2SN323S2v1KGqGpULBrGMvckgQWqSBo0Y8rLYI667nwzoOSNN3vCheKdRsP3DDgkVs3GpEeRw2O4c0fUrT32m627eqSxUAFAQ0XQGqBHVB5RVN1QURojKQuV4oXikDBGKTVEaQ5UVYVCCHVFREGgeQLpR1jUeyJBTLgshXRA3xgqCUIQ9FDmgakpEgq4og9FwyFMWzvuFppRXVizH5gbNBLvpSccZa0w-jXSYxrYG1LnOlvt4yozYSOU4WDdbCgLB80SYsxlzPJhEgAyAVsYhPmKTfJJ5jnSbo80QGMKXBwXSWukHdpC4T9Ov-XuvLh9W9i70Pd94_-XJ8-XuFOukvSOvzcwpBVRCsG4jcm9KbswvVWd6prMzKcmVmTenMTVqT4oOljaVxVII7SXonmTxKpgaZLJVj1Bn4M0lvD1BHqf_ys9Nr9EGGPsvAdMr0jQB7lmONjEJoWBKQOFZCBLA8NATWMJDEAsPkOVPCEpHwWYZPJ80GdtxwZGwz51i1yF8hXq60meu4Yc00Y9XGjRYJc6XFXC947vHW1tazoStd_zhEXV5_-b...	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&uaid=cf8956a1a080a000077a8ffd4e235bc5&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027089&mkt=EN-US	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https:%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F:fl:%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy

HTTP Parser: Base64 decoded: s=%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com&d=b!xqS8qAyil0K1XIQ_hk1QiZ4NXIBdUfZAkRiOWnL3FTsNsvqrGjOoTatOE_9se77g&f=0122I5VSREDDXEO5STXRFLWYGFBW3KKLZ4&c=%2F&fluid=1&p=%40ms%2Foffice-fluid-container

Source: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAArVFNTNNgGG7pGGwOWTh5NJMTsdv3rT9fu4RD13YsKn-iJEjM8rX9ygprO9puDAjReMKTeCUhQY-LB-IJiYleuHCR6I2TNw0HYzhx0bjGi0cOPocnz5s875snzzvGwDwsjYK_4NiYWWDbkDVJrP5BMJLOvpp__unpPrU_sPHi19StxeNdOlVrOG2SN323S2v1KGqGpULBrGMvckgQWqSBo0Y8rLYI667nwzoOSNN3vCheKdRsP3DDgkVs3GpEeRw2O4c0fUrT32m627eqSxUAFAQ0XQGqBHVB5RVN1QURojKQuV4oXikDBGKTVEaQ5UVYVCCHVFREGgeQLpR1jUeyJBTLgshXRA3xgqCUIQ9FDmgakpEgq4og9FwyFMWzvuFppRXVizH5gbNBLvpSccZa0w-jXSYxrYG1LnOlvt4yozYSOU4WDdbCgLB80SYsxlzPJhEgAyAVsYhPmKTfJJ5jnSbo80QGMKXBwXSWukHdpC4T9Ov-XuvLh9W9i70Pd94_-XJ8-XuFOukvSOvzcwpBVRCsG4jcm9KbswvVWd6prMzKcmVmTenMTVqT4oOljaVxVII7SXonmTxKpgaZLJVj1Bn4M0lvD1BHqf_ys9Nr9EGGPsvAdMr0jQB7lmONjEJoWBKQOFZCBLA8NATWMJDEAsPkOVPCEpHwWYZPJ80GdtxwZGwz51i1yF8hXq60meu4Yc00Y9XGjRYJc6XFXC947vHW1tazoStd_zhEXV5_-b...	HTTP Parser: Title: Sign in to your Microsoft account does not match URL
Source: https://login.live.com/ppsecure/post.srf?username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027069&uaid=cf8956a1a080a000077a8ffd4e235bc5&pid=15216	HTTP Parser: Title: Sign in to your Microsoft account does not match URL
Source: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&uaid=cf8956a1a080a000077a8ffd4e235bc5&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027089&mkt=EN-US	HTTP Parser: Title: Sign in to your Microsoft account does not match URL

Source: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5&sso_reload=true	HTTP Parser: <input type="password" .../> found
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAArVFNTNNgGG7pGGwOWTh5NJMTsdv3rT9fu4RD13YsKn-iJEjM8rX9ygprO9puDAjReMKTeCUhQY-LB-IJiYleuHCR6I2TNw0HYzhx0bjGi0cOPocnz5s875snzzvGwDwsjYK_4NiYWWDbkDVJrP5BMJLOvpp__unpPrU_sPHi19StxeNdOlVrOG2SN323S2v1KGqGpULBrGMvckgQWqSBo0Y8rLYI667nwzoOSNN3vCheKdRsP3DDgkVs3GpEeRw2O4c0fUrT32m627eqSxUAFAQ0XQGqBHVB5RVN1QURojKQuV4oXikDBGKTVEaQ5UVYVCCHVFREGgeQLpR1jUeyJBTLgshXRA3xgqCUIQ9FDmgakpEgq4og9FwyFMWzvuFppRXVizH5gbNBLvpSccZa0w-jXSYxrYG1LnOlvt4yozYSOU4WDdbCgLB80SYsxlzPJhEgAyAVsYhPmKTfJJ5jnSbo80QGMKXBwXSWukHdpC4T9Ov-XuvLh9W9i70Pd94_-XJ8-XuFOukvSOvzcwpBVRCsG4jcm9KbswvVWd6prMzKcmVmTenMTVqT4oOljaVxVII7SXonmTxKpgaZLJVj1Bn4M0lvD1BHqf_ys9Nr9EGGPsvAdMr0jQB7lmONjEJoWBKQOFZCBLA8NATWMJDEAsPkOVPCEpHwWYZPJ80GdtxwZGwz51i1yF8hXq60meu4Yc00Y9XGjRYJc6XFXC947vHW1tazoStd_zhEXV5_-b...	HTTP Parser: <input type="password" .../> found
Source: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&uaid=cf8956a1a080a000077a8ffd4e235bc5&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027089&mkt=EN-US	HTTP Parser: <input type="password" .../> found

Source: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5	HTTP Parser: No favicon
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAArVFNTNNgGG7pGGwOWTh5NJMTsdv3rT9fu4RD13YsKn-iJEjM8rX9ygprO9puDAjReMKTeCUhQY-LB-IJiYleuHCR6I2TNw0HYzhx0bjGi0cOPocnz5s875snzzvGwDwsjYK_4NiYWWDbkDVJrP5BMJLOvpp__unpPrU_sPHi19StxeNdOlVrOG2SN323S2v1KGqGpULBrGMvckgQWqSBo0Y8rLYI667nwzoOSNN3vCheKdRsP3DDgkVs3GpEeRw2O4c0fUrT32m627eqSxUAFAQ0XQGqBHVB5RVN1QURojKQuV4oXikDBGKTVEaQ5UVYVCCHVFREGgeQLpR1jUeyJBTLgshXRA3xgqCUIQ9FDmgakpEgq4og9FwyFMWzvuFppRXVizH5gbNBLvpSccZa0w-jXSYxrYG1LnOlvt4yozYSOU4WDdbCgLB80SYsxlzPJhEgAyAVsYhPmKTfJJ5jnSbo80QGMKXBwXSWukHdpC4T9Ov-XuvLh9W9i70Pd94_-XJ8-XuFOukvSOvzcwpBVRCsG4jcm9KbswvVWd6prMzKcmVmTenMTVqT4oOljaVxVII7SXonmTxKpgaZLJVj1Bn4M0lvD1BHqf_ys9Nr9EGGPsvAdMr0jQB7lmONjEJoWBKQOFZCBLA8NATWMJDEAsPkOVPCEpHwWYZPJ80GdtxwZGwz51i1yF8hXq60meu4Yc00Y9XGjRYJc6XFXC947vHW1tazoStd_zhEXV5_-b...	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAArVFNTNNgGG7pGGwOWTh5NJMTsdv3rT9fu4RD13YsKn-iJEjM8rX9ygprO9puDAjReMKTeCUhQY-LB-IJiYleuHCR6I2TNw0HYzhx0bjGi0cOPocnz5s875snzzvGwDwsjYK_4NiYWWDbkDVJrP5BMJLOvpp__unpPrU_sPHi19StxeNdOlVrOG2SN323S2v1KGqGpULBrGMvckgQWqSBo0Y8rLYI667nwzoOSNN3vCheKdRsP3DDgkVs3GpEeRw2O4c0fUrT32m627eqSxUAFAQ0XQGqBHVB5RVN1QURojKQuV4oXikDBGKTVEaQ5UVYVCCHVFREGgeQLpR1jUeyJBTLgshXRA3xgqCUIQ9FDmgakpEgq4og9FwyFMWzvuFppRXVizH5gbNBLvpSccZa0w-jXSYxrYG1LnOlvt4yozYSOU4WDdbCgLB80SYsxlzPJhEgAyAVsYhPmKTfJJ5jnSbo80QGMKXBwXSWukHdpC4T9Ov-XuvLh9W9i70Pd94_-XJ8-XuFOukvSOvzcwpBVRCsG4jcm9KbswvVWd6prMzKcmVmTenMTVqT4oOljaVxVII7SXonmTxKpgaZLJVj1Bn4M0lvD1BHqf_ys9Nr9EGGPsvAdMr0jQB7lmONjEJoWBKQOFZCBLA8NATWMJDEAsPkOVPCEpHwWYZPJ80GdtxwZGwz51i1yF8hXq60meu4Yc00Y9XGjRYJc6XFXC947vHW1tazoStd_zhEXV5_-b	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAArVFNTNNgGG7pGGwOWTh5NJMTsdv3rT9fu4RD13YsKn-iJEjM8rX9ygprO9puDAjReMKTeCUhQY-LB-IJiYleuHCR6I2TNw0HYzhx0bjGi0cOPocnz5s875snzzvGwDwsjYK_4NiYWWDbkDVJrP5BMJLOvpp__unpPrU_sPHi19StxeNdOlVrOG2SN323S2v1KGqGpULBrGMvckgQWqSBo0Y8rLYI667nwzoOSNN3vCheKdRsP3DDgkVs3GpEeRw2O4c0fUrT32m627eqSxUAFAQ0XQGqBHVB5RVN1QURojKQuV4oXikDBGKTVEaQ5UVYVCCHVFREGgeQLpR1jUeyJBTLgshXRA3xgqCUIQ9FDmgakpEgq4og9FwyFMWzvuFppRXVizH5gbNBLvpSccZa0w-jXSYxrYG1LnOlvt4yozYSOU4WDdbCgLB80SYsxlzPJhEgAyAVsYhPmKTfJJ5jnSbo80QGMKXBwXSWukHdpC4T9Ov-XuvLh9W9i70Pd94_-XJ8-XuFOukvSOvzcwpBVRCsG4jcm9KbswvVWd6prMzKcmVmTenMTVqT4oOljaVxVII7SXonmTxKpgaZLJVj1Bn4M0lvD1BHqf_ys9Nr9EGGPsvAdMr0jQB7lmONjEJoWBKQOFZCBLA8NATWMJDEAsPkOVPCEpHwWYZPJ80GdtxwZGwz51i1yF8hXq60meu4Yc00Y9XGjRYJc6XFXC947vHW1tazoStd_zhEXV5_-b	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAArVFNTNNgGG7pGGwOWTh5NJMTsdv3rT9fu4RD13YsKn-iJEjM8rX9ygprO9puDAjReMKTeCUhQY-LB-IJiYleuHCR6I2TNw0HYzhx0bjGi0cOPocnz5s875snzzvGwDwsjYK_4NiYWWDbkDVJrP5BMJLOvpp__unpPrU_sPHi19StxeNdOlVrOG2SN323S2v1KGqGpULBrGMvckgQWqSBo0Y8rLYI667nwzoOSNN3vCheKdRsP3DDgkVs3GpEeRw2O4c0fUrT32m627eqSxUAFAQ0XQGqBHVB5RVN1QURojKQuV4oXikDBGKTVEaQ5UVYVCCHVFREGgeQLpR1jUeyJBTLgshXRA3xgqCUIQ9FDmgakpEgq4og9FwyFMWzvuFppRXVizH5gbNBLvpSccZa0w-jXSYxrYG1LnOlvt4yozYSOU4WDdbCgLB80SYsxlzPJhEgAyAVsYhPmKTfJJ5jnSbo80QGMKXBwXSWukHdpC4T9Ov-XuvLh9W9i70Pd94_-XJ8-XuFOukvSOvzcwpBVRCsG4jcm9KbswvVWd6prMzKcmVmTenMTVqT4oOljaVxVII7SXonmTxKpgaZLJVj1Bn4M0lvD1BHqf_ys9Nr9EGGPsvAdMr0jQB7lmONjEJoWBKQOFZCBLA8NATWMJDEAsPkOVPCEpHwWYZPJ80GdtxwZGwz51i1yF8hXq60meu4Yc00Y9XGjRYJc6XFXC947vHW1tazoStd_zhEXV5_-b	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/ppsecure/post.srf?username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027069&uaid=cf8956a1a080a000077a8ffd4e235bc5&pid=15216	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/ppsecure/post.srf?username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027069&uaid=cf8956a1a080a000077a8ffd4e235bc5&pid=15216	HTTP Parser: No <meta name="author".. found
Source: https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/oauth20_authorize.srf%3fusername%3dtest%2540test.com%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3d11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26username%3dtest%2540test.com%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3d11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26uaid%3dcf8956a1a080a000077a8ffd4e235bc5%26contextid%3d01FE12CA1582AAD6%26opid%3dEA31FBF6F374D5BA%26bk%3d1728027089&id=293577&uiflavor=web&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&client_id=1E00004417ACAE&uaid=cf8956a1a080a000077a8ffd4e235bc5&mkt=EN-US&lc=1033&bk=1728027089	HTTP Parser: No <meta name="author".. found
Source: https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/oauth20_authorize.srf%3fusername%3dtest%2540test.com%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3d11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26username%3dtest%2540test.com%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3d11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26uaid%3dcf8956a1a080a000077a8ffd4e235bc5%26contextid%3d01FE12CA1582AAD6%26opid%3dEA31FBF6F374D5BA%26bk%3d1728027089&id=293577&uiflavor=web&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&client_id=1E00004417ACAE&uaid=cf8956a1a080a000077a8ffd4e235bc5&mkt=EN-US&lc=1033&bk=1728027089	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&uaid=cf8956a1a080a000077a8ffd4e235bc5&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027089&mkt=EN-US	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&uaid=cf8956a1a080a000077a8ffd4e235bc5&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027089&mkt=EN-US	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&uaid=cf8956a1a080a000077a8ffd4e235bc5&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027089&mkt=EN-US	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAArVFNTNNgGG7pGGwOWTh5NJMTsdv3rT9fu4RD13YsKn-iJEjM8rX9ygprO9puDAjReMKTeCUhQY-LB-IJiYleuHCR6I2TNw0HYzhx0bjGi0cOPocnz5s875snzzvGwDwsjYK_4NiYWWDbkDVJrP5BMJLOvpp__unpPrU_sPHi19StxeNdOlVrOG2SN323S2v1KGqGpULBrGMvckgQWqSBo0Y8rLYI667nwzoOSNN3vCheKdRsP3DDgkVs3GpEeRw2O4c0fUrT32m627eqSxUAFAQ0XQGqBHVB5RVN1QURojKQuV4oXikDBGKTVEaQ5UVYVCCHVFREGgeQLpR1jUeyJBTLgshXRA3xgqCUIQ9FDmgakpEgq4og9FwyFMWzvuFppRXVizH5gbNBLvpSccZa0w-jXSYxrYG1LnOlvt4yozYSOU4WDdbCgLB80SYsxlzPJhEgAyAVsYhPmKTfJJ5jnSbo80QGMKXBwXSWukHdpC4T9Ov-XuvLh9W9i70Pd94_-XJ8-XuFOukvSOvzcwpBVRCsG4jcm9KbswvVWd6prMzKcmVmTenMTVqT4oOljaVxVII7SXonmTxKpgaZLJVj1Bn4M0lvD1BHqf_ys9Nr9EGGPsvAdMr0jQB7lmONjEJoWBKQOFZCBLA8NATWMJDEAsPkOVPCEpHwWYZPJ80GdtxwZGwz51i1yF8hXq60meu4Yc00Y9XGjRYJc6XFXC947vHW1tazoStd_zhEXV5_-b...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAArVFNTNNgGG7pGGwOWTh5NJMTsdv3rT9fu4RD13YsKn-iJEjM8rX9ygprO9puDAjReMKTeCUhQY-LB-IJiYleuHCR6I2TNw0HYzhx0bjGi0cOPocnz5s875snzzvGwDwsjYK_4NiYWWDbkDVJrP5BMJLOvpp__unpPrU_sPHi19StxeNdOlVrOG2SN323S2v1KGqGpULBrGMvckgQWqSBo0Y8rLYI667nwzoOSNN3vCheKdRsP3DDgkVs3GpEeRw2O4c0fUrT32m627eqSxUAFAQ0XQGqBHVB5RVN1QURojKQuV4oXikDBGKTVEaQ5UVYVCCHVFREGgeQLpR1jUeyJBTLgshXRA3xgqCUIQ9FDmgakpEgq4og9FwyFMWzvuFppRXVizH5gbNBLvpSccZa0w-jXSYxrYG1LnOlvt4yozYSOU4WDdbCgLB80SYsxlzPJhEgAyAVsYhPmKTfJJ5jnSbo80QGMKXBwXSWukHdpC4T9Ov-XuvLh9W9i70Pd94_-XJ8-XuFOukvSOvzcwpBVRCsG4jcm9KbswvVWd6prMzKcmVmTenMTVqT4oOljaVxVII7SXonmTxKpgaZLJVj1Bn4M0lvD1BHqf_ys9Nr9EGGPsvAdMr0jQB7lmONjEJoWBKQOFZCBLA8NATWMJDEAsPkOVPCEpHwWYZPJ80GdtxwZGwz51i1yF8hXq60meu4Yc00Y9XGjRYJc6XFXC947vHW1tazoStd_zhEXV5_-b...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAArVFNTNNgGG7pGGwOWTh5NJMTsdv3rT9fu4RD13YsKn-iJEjM8rX9ygprO9puDAjReMKTeCUhQY-LB-IJiYleuHCR6I2TNw0HYzhx0bjGi0cOPocnz5s875snzzvGwDwsjYK_4NiYWWDbkDVJrP5BMJLOvpp__unpPrU_sPHi19StxeNdOlVrOG2SN323S2v1KGqGpULBrGMvckgQWqSBo0Y8rLYI667nwzoOSNN3vCheKdRsP3DDgkVs3GpEeRw2O4c0fUrT32m627eqSxUAFAQ0XQGqBHVB5RVN1QURojKQuV4oXikDBGKTVEaQ5UVYVCCHVFREGgeQLpR1jUeyJBTLgshXRA3xgqCUIQ9FDmgakpEgq4og9FwyFMWzvuFppRXVizH5gbNBLvpSccZa0w-jXSYxrYG1LnOlvt4yozYSOU4WDdbCgLB80SYsxlzPJhEgAyAVsYhPmKTfJJ5jnSbo80QGMKXBwXSWukHdpC4T9Ov-XuvLh9W9i70Pd94_-XJ8-XuFOukvSOvzcwpBVRCsG4jcm9KbswvVWd6prMzKcmVmTenMTVqT4oOljaVxVII7SXonmTxKpgaZLJVj1Bn4M0lvD1BHqf_ys9Nr9EGGPsvAdMr0jQB7lmONjEJoWBKQOFZCBLA8NATWMJDEAsPkOVPCEpHwWYZPJ80GdtxwZGwz51i1yF8hXq60meu4Yc00Y9XGjRYJc6XFXC947vHW1tazoStd_zhEXV5_-b...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/ppsecure/post.srf?username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027069&uaid=cf8956a1a080a000077a8ffd4e235bc5&pid=15216	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/ppsecure/post.srf?username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027069&uaid=cf8956a1a080a000077a8ffd4e235bc5&pid=15216	HTTP Parser: No <meta name="copyright".. found
Source: https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/oauth20_authorize.srf%3fusername%3dtest%2540test.com%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3d11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26username%3dtest%2540test.com%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3d11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26uaid%3dcf8956a1a080a000077a8ffd4e235bc5%26contextid%3d01FE12CA1582AAD6%26opid%3dEA31FBF6F374D5BA%26bk%3d1728027089&id=293577&uiflavor=web&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&client_id=1E00004417ACAE&uaid=cf8956a1a080a000077a8ffd4e235bc5&mkt=EN-US&lc=1033&bk=1728027089	HTTP Parser: No <meta name="copyright".. found
Source: https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/oauth20_authorize.srf%3fusername%3dtest%2540test.com%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3d11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26username%3dtest%2540test.com%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3d11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26uaid%3dcf8956a1a080a000077a8ffd4e235bc5%26contextid%3d01FE12CA1582AAD6%26opid%3dEA31FBF6F374D5BA%26bk%3d1728027089&id=293577&uiflavor=web&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&client_id=1E00004417ACAE&uaid=cf8956a1a080a000077a8ffd4e235bc5&mkt=EN-US&lc=1033&bk=1728027089	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&uaid=cf8956a1a080a000077a8ffd4e235bc5&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027089&mkt=EN-US	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&uaid=cf8956a1a080a000077a8ffd4e235bc5&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027089&mkt=EN-US	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&uaid=cf8956a1a080a000077a8ffd4e235bc5&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027089&mkt=EN-US	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49792 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: chantiersdelatlantique-my.sharepoint.com to https://login.microsoftonline.com:443/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5fid=00000003%2d0000%2d0ff1%2dce00%2d000000000000&response%5fmode=form%5fpost&response%5ftype=code%20id%5ftoken&resource=00000003%2d0000%2d0ff1%2dce00%2d000000000000&scope=openid&nonce=e8f00a70dea0c81e5c4adce5617b0930004ab07000a78b71%2d4612a137c727d307e5bed479852b564f6d7455ab141630dd79759ca55ed49166&redirect%5furi=https%3a%2f%2fchantiersdelatlantique%2dmy%2esharepoint%2ecom%2f%5fforms%2fdefault%2easpx&state=od0w&claims=%7b%22id%5ftoken%22%3a%7b%22xms%5fcc%22%3a%7b%22values%22%3a%5b%22cp1%22%5d%7d%7d%7d&wsucxt=1&cobrandid=11bd8083%2d87e0%2d41b5%2dbb78%2d0bc43c8a8e8a&client%2drequest%2did=cf8956a1%2da080%2da000%2d077a%2d8ffd4e235bc5

Source: Joe Sandbox View	IP Address: 163.172.240.109 163.172.240.109
Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 13.107.246.67 13.107.246.67
Source: Joe Sandbox View	IP Address: 13.107.246.44 13.107.246.44

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=M22rboTO7a4X5or&MD=RnNXoG6v HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles.16be3c9519762a3240e8.css HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime.3847a57210e62cb7ac86.js HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polyfills.2daf523d1a5fc162c0c2.js HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main.3791483c41ff7549eac3.js HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime.3847a57210e62cb7ac86.js HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polyfills.2daf523d1a5fc162c0c2.js HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main.3791483c41ff7549eac3.js HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/config/config.json HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /Content-type: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4.efcb4f36899adf4857d1.js HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/config/config.json HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /translations/en.json HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /Content-type: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https:%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F:fl:%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4.efcb4f36899adf4857d1.js HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/load.svg HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https:%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F:fl:%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo-cloud.png HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https:%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F:fl:%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /translations/en.json HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vadesecure-logo.png HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https:%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F:fl:%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/load.svg HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo-cloud.png HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https:%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F:fl:%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analyse HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /:fl:/r/personal/pascal_renier_chantiers-atlantique_com/Documents/OneNote%20Loop%20Files/Tasklist.loop?d=w47ee182453764abcbb60c50db6a52f3c&csf=1&web=1&nav=cz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy HTTP/1.1Host: chantiersdelatlantique-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://antiphishing.vadesecure.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/pascal_renier_chantiers-atlantique_com/Documents/OneNote%20Loop%20Files/Tasklist.loop?d=w47ee182453764abcbb60c50db6a52f3c&csf=1&web=1&nav=cz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy&CID=8fac216c-369e-4f91-adb9-936d18901f9f HTTP/1.1Host: chantiersdelatlantique-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://antiphishing.vadesecure.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/pascal_renier_chantiers-atlantique_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Fpascal%5Frenier%5Fchantiers%2Datlantique%5Fcom%2FDocuments%2FOneNote%20Loop%20Files%2FTasklist%2Eloop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy%26CID%3D8fac216c%2D369e%2D4f91%2Dadb9%2D936d18901f9f HTTP/1.1Host: chantiersdelatlantique-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://antiphishing.vadesecure.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2fpascal_renier_chantiers-atlantique_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Fpascal%255Frenier%255Fchantiers%252Datlantique%255Fcom%252FDocuments%252FOneNote%2520Loop%2520Files%252FTasklist%252Eloop%253Fd%253Dw47ee182453764abcbb60c50db6a52f3c%2526csf%253D1%2526web%253D1%2526nav%253Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy%2526CID%253D8fac216c%252D369e%252D4f91%252Dadb9%252D936d18901f9f&Source=cookie HTTP/1.1Host: chantiersdelatlantique-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://antiphishing.vadesecure.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RpsContextCookie=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
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=M22rboTO7a4X5or&MD=RnNXoG6v HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/5/js/login_en_aoiK-OIF0h_hqcPcffI9dw2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/login_en_aoiK-OIF0h_hqcPcffI9dw2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000.30374.3/images/favicon.ico HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000.30374.3/images/favicon.ico HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/reset-password-signinname_en_JOEV9q8F85e8zIrr9TrzjA2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/reset-password-signinname_en_JOEV9q8F85e8zIrr9TrzjA2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/reset-password-fabric_en_NEoXnGfR1XTSRZBK3ucL0g2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/reset-password-fabric_en_NEoXnGfR1XTSRZBK3ucL0g2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/reset-password-fabric_en_NEoXnGfR1XTSRZBK3ucL0g2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/login_en_aPH1MdAMytMMq1WvwJPhJA2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/login_en_aPH1MdAMytMMq1WvwJPhJA2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: antiphishing.vadesecure.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: chantiersdelatlantique-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: acctcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: fpt.live.com
Source: global traffic	DNS traffic detected: DNS query: account.live.com

Source: unknown

HTTP traffic detected: POST /analyse HTTP/1.1Host: antiphishing.vadesecure.comConnection: keep-aliveContent-Length: 651sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*Content-type: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://antiphishing.vadesecure.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https:%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F:fl:%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: text/plain; charset=utf-8vary: Originx-content-type-options: nosniffdate: Fri, 04 Oct 2024 07:30:38 GMTcontent-length: 19connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: text/plain; charset=utf-8vary: Originx-content-type-options: nosniffdate: Fri, 04 Oct 2024 07:30:39 GMTcontent-length: 19connection: close

Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: chromecache_186.12.dr	String found in binary or memory: https://antiphishing.vadesecure.com/
Source: ~WRS{B29B87F8-6960-44C6-A5B6-B7C6AEB953DB}.tmp.0.dr	String found in binary or memory: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.aadrm.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.aadrm.com/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.addins.omex.office.net/api/addins/search
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.cortana.ai
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.microsoftstream.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.office.net
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.officescripts.microsoftusercontent.com/api
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.onedrive.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/imports
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://api.scheduler.
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://apis.mobile.m365.svc.cloud.microsoft
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://app.powerbi.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://augloop.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://augloop.office.com/v2
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://canary.designerapp.
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designer-mobile
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/fonts
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-assets
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-dynamic-strings
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-home-screen
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://cdn.entity.
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/fonts
Source: chromecache_186.12.dr	String found in binary or memory: https://chantiersdelatlantique-my.sharepoint.com/:fl:/r/personal/pascal_renier_chantiers-atlantique_
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://clients.config.office.net
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://clients.config.office.net/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/DeltaAdvisory
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://consent.config.office.com/consentweb/v1.0/consents
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://cortana.ai
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://cortana.ai/api
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://cr.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://d.docs.live.net
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://designerapp.azurewebsites.net
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://designerappservice.officeapps.live.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://dev.cortana.ai
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://devnull.onenote.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://directory.services.
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://ecs.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://ecs.office.com/config/v1/Designer
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://edge.skype.com/registrar/prod
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://edge.skype.com/rps
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/v2.1601652342626
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://fpastorage.cdn.office.net/%s
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://fpastorage.cdn.office.net/firstpartyapp/addins.xml
Source: You have late tasks (291Ko).msg	String found in binary or memory: https://germanywestcentralr-notifyp.svc.ms:443/api/v2/tracking/method/View?mi=B_wjZtmDnUaZGBQvMUMDow
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://graph.windows.net
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://graph.windows.net/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/pivots/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://ic3.teams.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://invites.office.com/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://lifecycle.office.com
Source: chromecache_125.12.dr, A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://login.microsoftonline.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://login.microsoftonline.com/organizations
Source: chromecache_125.12.dr	String found in binary or memory: https://login.windows-ppe.net
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://login.windows.local
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://make.powerautomate.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://management.azure.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://management.azure.com/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://messagebroker.mobile.m365.svc.cloud.microsoft
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://messaging.action.office.com/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://messaging.office.com/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://mss.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://ncus.contentsync.
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://ods-diagnostics-ppe.trafficmanager.net
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://officeapps.live.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://officepyservice.office.net/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://officepyservice.office.net/service.functionality
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://onedrive.live.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://otelrules.svc.static.microsoft
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://outlook.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://outlook.office.com/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://outlook.office365.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://outlook.office365.com/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://outlook.office365.com/connectors
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://powerlift.acompli.net
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://pushchannel.1drv.ms
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://res.cdn.office.net
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://res.cdn.office.net/mro1cdnstorage/fonts/prod/4.40
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://res.cdn.office.net/polymer/models
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://safelinks.protection.outlook.com/api/GetPolicy
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://service.officepy.microsoftusercontent.com/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://service.powerapps.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://settings.outlook.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://staging.cortana.ai
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://substrate.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://substrate.office.com/Notes-Internal.ReadWrite
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://tasks.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://templatesmetadata.office.net/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://useraudit.o365auditrealtimeingestion.manage.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://webshell.suite.office.com
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://word-edit.officeapps.live.com/we/rrdiscovery.ashx
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://wus2.contentsync.
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	String found in binary or memory: https://www.yammer.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49792 version: TLS 1.2

Source: classification engine

Classification label: clean6.winMSG@21/164@38/11

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\Office\Heartbeat\HeartbeatCache.xml

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241004T0330170624-6520.etl

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\You have late tasks (291Ko).msg"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "147BB6B8-C38F-4960-B5B0-AAFE9F02DEBF" "4E6B8628-15E5-4F56-9FB8-1D32CD1E329F" "6520" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1968,i,15811105649717450159,8775413160418026291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "147BB6B8-C38F-4960-B5B0-AAFE9F02DEBF" "4E6B8628-15E5-4F56-9FB8-1D32CD1E329F" "6520" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1968,i,15811105649717450159,8775413160418026291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: c2r64.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: gpapi.dll	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{F959DBBB-3867-41F2-8E5F-3B8BEFAA81B3}\InprocServer32

Jump to behavior

Source: Google Drive.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Window found: window name: SysTabControl32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Queries volume information: C:\Program Files (x86)\Microsoft Office\root\Office16\AI\WordCombinedFloatieLreOnline.onnx VolumeInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	3 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	1 Process Injection	LSASS Memory	12 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://shell.suite.office.com:1443	0%	URL Reputation	safe
https://designerapp.azurewebsites.net	0%	URL Reputation	safe
https://autodiscover-s.outlook.com/	0%	URL Reputation	safe
https://useraudit.o365auditrealtimeingestion.manage.office.com	0%	URL Reputation	safe
https://outlook.office365.com/connectors	0%	URL Reputation	safe
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	0%	URL Reputation	safe
https://cdn.entity.	0%	URL Reputation	safe
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	0%	URL Reputation	safe
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	0%	URL Reputation	safe
https://rpsticket.partnerservices.getmicrosoftkey.com	0%	URL Reputation	safe
https://lookup.onenote.com/lookup/geolocation/v1	0%	URL Reputation	safe
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	0%	URL Reputation	safe
https://api.aadrm.com/	0%	URL Reputation	safe
https://canary.designerapp.	0%	URL Reputation	safe
https://www.yammer.com	0%	URL Reputation	safe
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	0%	URL Reputation	safe
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	0%	URL Reputation	safe
https://cr.office.com	0%	URL Reputation	safe
https://messagebroker.mobile.m365.svc.cloud.microsoft	0%	URL Reputation	safe
https://edge.skype.com/registrar/prod	0%	URL Reputation	safe
https://edge.skype.com/registrar/prod	0%	URL Reputation	safe
https://res.getmicrosoftkey.com/api/redemptionevents	0%	URL Reputation	safe
https://tasks.office.com	0%	URL Reputation	safe
https://officeci.azurewebsites.net/api/	0%	URL Reputation	safe
https://store.office.cn/addinstemplate	0%	URL Reputation	safe
https://edge.skype.com/rps	0%	URL Reputation	safe
https://messaging.engagement.office.com/	0%	URL Reputation	safe
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	0%	URL Reputation	safe
https://www.odwebp.svc.ms	0%	URL Reputation	safe
https://api.powerbi.com/v1.0/myorg/groups	0%	URL Reputation	safe
https://web.microsoftstream.com/video/	0%	URL Reputation	safe
https://api.addins.store.officeppe.com/addinstemplate	0%	URL Reputation	safe
https://graph.windows.net	0%	URL Reputation	safe
https://consent.config.office.com/consentcheckin/v1.0/consents	0%	URL Reputation	safe
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	0%	URL Reputation	safe
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	0%	URL Reputation	safe
https://safelinks.protection.outlook.com/api/GetPolicy	0%	URL Reputation	safe
https://ncus.contentsync.	0%	URL Reputation	safe
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	0%	URL Reputation	safe
http://weather.service.msn.com/data.aspx	0%	URL Reputation	safe
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	0%	URL Reputation	safe
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	0%	URL Reputation	safe
https://mss.office.com	0%	URL Reputation	safe
https://pushchannel.1drv.ms	0%	URL Reputation	safe
https://wus2.contentsync.	0%	URL Reputation	safe
https://clients.config.office.net/user/v1.0/ios	0%	URL Reputation	safe
https://api.addins.omex.office.net/api/addins/search	0%	URL Reputation	safe
https://outlook.office365.com/api/v1.0/me/Activities	0%	URL Reputation	safe
https://clients.config.office.net/user/v1.0/android/policies	0%	URL Reputation	safe
https://entitlement.diagnostics.office.com	0%	URL Reputation	safe
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
https://substrate.office.com/search/api/v1/SearchHistory	0%	URL Reputation	safe
https://clients.config.office.net/c2r/v1.0/InteractiveInstallation	0%	URL Reputation	safe
https://service.powerapps.com	0%	URL Reputation	safe
https://graph.windows.net/	0%	URL Reputation	safe
https://devnull.onenote.com	0%	URL Reputation	safe
https://messaging.office.com/	0%	URL Reputation	safe
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing	0%	URL Reputation	safe
https://skyapi.live.net/Activity/	0%	URL Reputation	safe
https://messaging.action.office.com/setcampaignaction	0%	URL Reputation	safe
https://visio.uservoice.com/forums/368202-visio-on-devices	0%	URL Reputation	safe
https://staging.cortana.ai	0%	URL Reputation	safe
https://augloop.office.com	0%	URL Reputation	safe
https://api.diagnosticssdf.office.com/v2/file	0%	URL Reputation	safe
https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory	0%	URL Reputation	safe
https://officepyservice.office.net/	0%	URL Reputation	safe
https://api.diagnostics.office.com	0%	URL Reputation	safe
https://store.office.de/addinstemplate	0%	URL Reputation	safe
https://wus2.pagecontentsync.	0%	URL Reputation	safe
https://api.powerbi.com/v1.0/myorg/datasets	0%	URL Reputation	safe
https://cortana.ai/api	0%	URL Reputation	safe
https://otelrules.svc.static.microsoft	0%	Virustotal		Browse
https://antiphishing.vadesecure.com/translations/en.json	0%	Virustotal		Browse
https://chantiersdelatlantique-my.sharepoint.com/:fl:/r/personal/pascal_renier_chantiers-atlantique_com/Documents/OneNote%20Loop%20Files/Tasklist.loop?d=w47ee182453764abcbb60c50db6a52f3c&csf=1&web=1&nav=cz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy	0%	Virustotal		Browse
https://api.microsoftstream.com/api/	0%	Virustotal		Browse
https://d.docs.live.net	0%	Virustotal		Browse
https://antiphishing.vadesecure.com/	0%	Virustotal		Browse
https://my.microsoftpersonalcontent.com	0%	Virustotal		Browse
https://logincdn.msftauth.net/16.000.30374.3/images/favicon.ico	0%	Virustotal		Browse
https://antiphishing.vadesecure.com/favicon.ico	0%	Virustotal		Browse
https://outlook.office.com/	0%	Virustotal		Browse
https://logincdn.msftauth.net/shared/5/js/login_en_aPH1MdAMytMMq1WvwJPhJA2.js	0%	Virustotal		Browse
https://login.windows-ppe.net	1%	Virustotal		Browse
https://antiphishing.vadesecure.com/redirect	0%	Virustotal		Browse
https://antiphishing.vadesecure.com/polyfills.2daf523d1a5fc162c0c2.js	0%	Virustotal		Browse
https://api.cortana.ai	0%	Virustotal		Browse
https://storage.live.com/clientlogs/uploadlocation	0%	Virustotal		Browse
https://onedrive.live.com/embed?	1%	Virustotal		Browse
https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	0%	Virustotal		Browse
https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0016.t-0009.t-msedge.net	13.107.246.44	true	false	unknown
antiphishing.vadesecure.com	163.172.240.109	true	false	unknown
190019-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com	52.105.56.39	true	false	unknown
s-part-0023.t-0009.t-msedge.net	13.107.246.51	true	false	unknown
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	172.217.16.196	true	false	unknown
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
chantiersdelatlantique-my.sharepoint.com	unknown	unknown	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
logincdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
fpt.live.com	unknown	unknown	false	unknown
account.live.com	unknown	unknown	false	unknown
acctcdn.msftauth.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://chantiersdelatlantique-my.sharepoint.com/:fl:/r/personal/pascal_renier_chantiers-atlantique_com/Documents/OneNote%20Loop%20Files/Tasklist.loop?d=w47ee182453764abcbb60c50db6a52f3c&csf=1&web=1&nav=cz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy	false	0%, Virustotal, Browse	unknown
https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5&sso_reload=true	false		unknown
https://chantiersdelatlantique-my.sharepoint.com/personal/pascal_renier_chantiers-atlantique_com/Documents/OneNote%20Loop%20Files/Tasklist.loop?d=w47ee182453764abcbb60c50db6a52f3c&csf=1&web=1&nav=cz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy&CID=8fac216c-369e-4f91-adb9-936d18901f9f	false		unknown
https://logincdn.msftauth.net/shared/5/js/reset-password-fabric_en_NEoXnGfR1XTSRZBK3ucL0g2.js	false		unknown
https://antiphishing.vadesecure.com/translations/en.json	false	0%, Virustotal, Browse	unknown
https://antiphishing.vadesecure.com/runtime.3847a57210e62cb7ac86.js	false		unknown
https://chantiersdelatlantique-my.sharepoint.com/_forms/default.aspx?ReturnUrl=%2fpersonal%2fpascal_renier_chantiers-atlantique_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Fpascal%255Frenier%255Fchantiers%252Datlantique%255Fcom%252FDocuments%252FOneNote%2520Loop%2520Files%252FTasklist%252Eloop%253Fd%253Dw47ee182453764abcbb60c50db6a52f3c%2526csf%253D1%2526web%253D1%2526nav%253Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy%2526CID%253D8fac216c%252D369e%252D4f91%252Dadb9%252D936d18901f9f&Source=cookie	false		unknown
https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy	false		unknown
https://logincdn.msftauth.net/16.000.30374.3/images/favicon.ico	false	0%, Virustotal, Browse	unknown
https://antiphishing.vadesecure.com/favicon.ico	false	0%, Virustotal, Browse	unknown
https://antiphishing.vadesecure.com/redirect	false	0%, Virustotal, Browse	unknown
https://logincdn.msftauth.net/shared/5/js/login_en_aPH1MdAMytMMq1WvwJPhJA2.js	false	0%, Virustotal, Browse	unknown
https://chantiersdelatlantique-my.sharepoint.com/personal/pascal_renier_chantiers-atlantique_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Fpascal%5Frenier%5Fchantiers%2Datlantique%5Fcom%2FDocuments%2FOneNote%20Loop%20Files%2FTasklist%2Eloop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy%26CID%3D8fac216c%2D369e%2D4f91%2Dadb9%2D936d18901f9f	false		unknown
https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg	false	0%, Virustotal, Browse	unknown
https://antiphishing.vadesecure.com/vadesecure-logo.png	false		unknown
https://antiphishing.vadesecure.com/polyfills.2daf523d1a5fc162c0c2.js	false	0%, Virustotal, Browse	unknown
https://antiphishing.vadesecure.com/4.efcb4f36899adf4857d1.js	false		unknown
https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	false	0%, Virustotal, Browse	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://shell.suite.office.com:1443	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://designerapp.azurewebsites.net	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://autodiscover-s.outlook.com/	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://useraudit.o365auditrealtimeingestion.manage.office.com	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://outlook.office365.com/connectors	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://cdn.entity.	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://rpsticket.partnerservices.getmicrosoftkey.com	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://lookup.onenote.com/lookup/geolocation/v1	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://api.aadrm.com/	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://canary.designerapp.	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://www.yammer.com	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://api.microsoftstream.com/api/	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	0%, Virustotal, Browse	unknown
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://cr.office.com	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://messagebroker.mobile.m365.svc.cloud.microsoft	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://otelrules.svc.static.microsoft	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	0%, Virustotal, Browse	unknown
https://edge.skype.com/registrar/prod	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://res.getmicrosoftkey.com/api/redemptionevents	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://tasks.office.com	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://officeci.azurewebsites.net/api/	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://my.microsoftpersonalcontent.com	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	0%, Virustotal, Browse	unknown
https://store.office.cn/addinstemplate	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://edge.skype.com/rps	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://messaging.engagement.office.com/	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://www.odwebp.svc.ms	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://api.powerbi.com/v1.0/myorg/groups	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://web.microsoftstream.com/video/	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://api.addins.store.officeppe.com/addinstemplate	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://graph.windows.net	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://consent.config.office.com/consentcheckin/v1.0/consents	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B	~WRS{B29B87F8-6960-44C6-A5B6-B7C6AEB953DB}.tmp.0.dr	false		unknown
https://chantiersdelatlantique-my.sharepoint.com/:fl:/r/personal/pascal_renier_chantiers-atlantique_	chromecache_186.12.dr	false		unknown
https://d.docs.live.net	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	0%, Virustotal, Browse	unknown
https://safelinks.protection.outlook.com/api/GetPolicy	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://ncus.contentsync.	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://antiphishing.vadesecure.com/	chromecache_186.12.dr	false	0%, Virustotal, Browse	unknown
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
http://weather.service.msn.com/data.aspx	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://mss.office.com	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://pushchannel.1drv.ms	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://wus2.contentsync.	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/user/v1.0/ios	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://api.addins.omex.office.net/api/addins/search	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://outlook.office365.com/api/v1.0/me/Activities	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/user/v1.0/android/policies	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://entitlement.diagnostics.office.com	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://login.windows-ppe.net	chromecache_125.12.dr	false	1%, Virustotal, Browse	unknown
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://outlook.office.com/	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	0%, Virustotal, Browse	unknown
https://storage.live.com/clientlogs/uploadlocation	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	0%, Virustotal, Browse	unknown
https://login.microsoftonline.com	chromecache_125.12.dr, A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://substrate.office.com/search/api/v1/SearchHistory	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/c2r/v1.0/InteractiveInstallation	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://service.powerapps.com	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://graph.windows.net/	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://devnull.onenote.com	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://messaging.office.com/	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://skyapi.live.net/Activity/	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://api.cortana.ai	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	0%, Virustotal, Browse	unknown
https://messaging.action.office.com/setcampaignaction	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://visio.uservoice.com/forums/368202-visio-on-devices	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://staging.cortana.ai	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://onedrive.live.com/embed?	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	1%, Virustotal, Browse	unknown
https://augloop.office.com	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://api.diagnosticssdf.office.com/v2/file	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://officepyservice.office.net/	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://api.diagnostics.office.com	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://store.office.de/addinstemplate	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://wus2.pagecontentsync.	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://api.powerbi.com/v1.0/myorg/datasets	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown
https://cortana.ai/api	A843BD1E-2EAF-44B0-8588-510029B2B0DC.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
163.172.240.109	antiphishing.vadesecure.com	United Kingdom	12876	OnlineSASFR	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.44	s-part-0016.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.51	s-part-0023.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.105.56.39	190019-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525469
Start date and time:	2024-10-04 09:29:45 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	You have late tasks (291Ko).msg
Detection:	CLEAN
Classification:	clean6.winMSG@21/164@38/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .msg

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.32.97, 52.113.194.132, 2.19.126.160, 2.19.126.151, 52.111.243.41, 52.111.243.40, 52.111.243.43, 52.111.243.42, 172.217.16.195, 142.250.185.78, 142.251.168.84, 34.104.35.123, 20.42.73.27, 40.126.32.68, 20.190.160.22, 40.126.32.72, 40.126.32.140, 40.126.32.134, 20.190.160.20, 40.126.32.74, 40.126.32.133, 2.16.241.17, 2.16.241.15, 40.126.32.76, 20.190.160.17, 40.126.32.138, 13.89.178.26, 142.250.181.234, 142.250.184.202, 142.250.185.74, 142.250.185.170, 142.250.185.234, 142.250.185.202, 142.250.186.42, 142.250.184.234, 172.217.16.202, 142.250.185.138, 142.250.186.106, 142.250.185.106, 216.58.212.170, 172.217.18.10, 142.250.186.170, 216.58.206.42, 20.190.159.2, 40.126.31.71, 40.126.31.69, 20.190.159.0, 20.190.159.4, 40.126.31.73, 20.190.159.23, 20.190.159.71, 184.28.89.167, 20.44.10.122, 20.190.159.64, 40.126.31.67, 20.190.159.68, 20.190.159.75, 20.190.159.73, 52.167.30.171, 172.217.18.106, 216.58.206.74, 142.250.74.202, 216.58.212.138, 20.72.243.62, 104.46.162.227
Excluded domains from analysis (whitelisted): greenid-prod-pme.eastus2.cloudapp.azure.com, lgincdnmsftuswe2.azureedge.net, pme-greenid-prod.trafficmanager.net, slscr.update.microsoft.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, onedscolprdcus00.centralus.cloudapp.azure.com, ak.privatelink.msidentity.com, mobile.events.data.microsoft.com, e11290.dspg.akamaiedge.net, clients2.google.com, onedscolprdwus18.westus.cloudapp.azure.com, login.live.com, update.googleapis.com, officeclient.microsoft.com, acctcdnvzeuno.azureedge.net, ukw-azsc-config.officeapps.live.com, acctcdnvzeuno.ec.azureedge.net, a1864.dscd.akamai.net, ecs.office.com, fpt2.microsoft.com, fs.microsoft.com, acctcdnmsftuswe2.azureedge.net, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, lgincdnvzeuno.ec.azureedge.net, aadcdn.msauth.net, onedscolprdeus19.eastus.cloudapp.azure.com, www.googleapis.com, s-0005-office.config.skype.com, onedscolprdeus12.eastus.cloudapp.azure.co
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadFile calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd Model: jbxai	{ "brand":["Vade", "HORNET SECURITY CLOUD"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: Email Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Vrifier dlgataires ad hoc dans vos secteurs (SEC3HSE009 Formation)", "prominent_button_name":"Planner in Teams or Planner for web", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "has_visible_qrcode":false}

URL: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"testi Cant access your account?", "prominent_button_name":"Next", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.microsoftonline.com/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Can't access your account?", "prominent_button_name":"Sign-in options", "text_input_field_labels":["test@test.com"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2fo Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Enter password", "prominent_button_name":"Sign in", "text_input_field_labels":["Password", "Forgot password?", "Email code to test@test.com"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2fo Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"live.com", "classification":"wellknown", "reasons":["The brand 'Microsoft' is well-known and commonly associated with the domain 'live.com'.", "The URL 'login.live.com' is a legitimate subdomain used by Microsoft for its services.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The presence of a password input field is typical for a login page associated with Microsoft services."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"Password"}

URL: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2fo Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Enter password", "prominent_button_name":"Sign in", "text_input_field_labels":["test@test.com"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2fo Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"live.com", "classification":"wellknown", "reasons":["The brand 'Microsoft' is well-known and commonly associated with the domain 'live.com'.", "The URL 'login.live.com' is a legitimate subdomain used by Microsoft for authentication purposes.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The domain 'live.com' is fully matching the legitimate domain associated with Microsoft services."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"test@test.com"}

URL: https://login.live.com/ppsecure/post.srf?username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027069&uaid=cf8956a1a080a000077a8ffd4e2 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Sign-in is blocked", "prominent_button_name":"Reset your password", "text_input_field_labels":["Sign in using another Microsoft account"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.live.com/ppsecure/post.srf?username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027069&uaid=cf8956a1a080a000077a8ffd4e2 Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"login.live.com", "classification":"wellknown", "reasons":["The URL 'login.live.com' is a legitimate subdomain of Microsoft, which is a well-known brand.", "The domain 'live.com' is associated with Microsoft services, particularly for login and authentication purposes.", "The input field 'Sign in using another Microsoft account' is consistent with Microsoft's authentication services.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"Sign in using another Microsoft account"}

URL: https://login.live.com/ppsecure/post.srf?username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027069&uaid=cf8956a1a080a000077a8ffd4e2 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Sign-in is blocked", "prominent_button_name":"Reset your password", "text_input_field_labels":["Sign in using another Microsoft account"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.live.com/ppsecure/post.srf?username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027069&uaid=cf8956a1a080a000077a8ffd4e2 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Sign-in is blocked", "prominent_button_name":"Reset your password", "text_input_field_labels":["test@test.com"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "has_visible_qrcode":false}

URL: https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/oauth20_authorize.srf%3fusername%3dtest%2540test.com%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3d11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26username%3dtest%2540test Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Recover your account", "prominent_button_name":"Next", "text_input_field_labels":["Email", "phone", "or Skype name"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/oauth20_authorize.srf%3fusername%3dtest%2540test.com%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3d11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26username%3dtest%2540test Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"live.com", "classification":"wellknown", "reasons":["The brand 'Microsoft' is well-known and commonly associated with the domain 'live.com'.", "The URL 'account.live.com' is a legitimate subdomain used by Microsoft for account-related services.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The input field 'Email' is appropriate for a Microsoft account login page."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"Email"}

URL: https://login.live.com/ppsecure/post.srf?username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&contextid=01FE12CA1582AAD6&opid=EA31FBF6F374D5BA&bk=1728027069&uaid=cf8956a1a080a000077a8ffd4e2 Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"live.com", "classification":"wellknown", "reasons":["The brand 'Microsoft' is well-known and commonly associated with the domain 'live.com'.", "The URL 'login.live.com' is a legitimate subdomain used by Microsoft for its services.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The domain 'live.com' is fully matching the legitimate domain associated with Microsoft services."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"test@test.com"}

URL: https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/oauth20_authorize.srf%3fusername%3dtest%2540test.com%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3d11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26username%3dtest%2540test Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Recover your account", "prominent_button_name":"Next", "text_input_field_labels":["test"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://account.live.com/password/reset?wreply=https%3A%2F%2Flogin.live.com%2Foauth20_authorize.srf%3Fusername%3Dtest%2540test.com%26client_id%3D51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3D11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26username%3Dtest%2540 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"We need to verify your identity", "prominent_button_name":"Get code", "text_input_field_labels":["Email test@test.com", "I have a code", "I don't have any of these"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://account.live.com/password/reset?wreply=https%3A%2F%2Flogin.live.com%2Foauth20_authorize.srf%3Fusername%3Dtest%2540test.com%26client_id%3D51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3D11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26username%3Dtest%2540 Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"live.com", "classification":"wellknown", "reasons":["The brand 'Microsoft' is well-known and commonly associated with the domain 'live.com'.", "The URL 'account.live.com' is a legitimate subdomain of 'live.com', which is owned by Microsoft.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The input field for email is typical for a Microsoft account login page."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"Email test@test.com"}

URL: https://account.live.com/password/reset?wreply=https%3A%2F%2Flogin.live.com%2Foauth20_authorize.srf%3Fusername%3Dtest%2540test.com%26client_id%3D51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3D11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26username%3Dtest%2540 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"We need to verify your identity", "prominent_button_name":"Get code", "text_input_field_labels":["Email test@test.com", "I have a code", "I don't have any of these"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://account.live.com/password/reset?wreply=https%3A%2F%2Flogin.live.com%2Foauth20_authorize.srf%3Fusername%3Dtest%2540test.com%26client_id%3D51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3D11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26username%3Dtest%2540 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"We need to verify your identity", "prominent_button_name":"Get code", "text_input_field_labels":["Email test@test.com", "I have a code", "I don't have any of these"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083- Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Enter password", "prominent_button_name":"Sign in", "text_input_field_labels":["Password", "Forgot password?", "Email code to test@test.com"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://account.live.com/password/reset?wreply=https%3A%2F%2Flogin.live.com%2Foauth20_authorize.srf%3Fusername%3Dtest%2540test.com%26client_id%3D51483342-085c-4d86-bf88-cf50c7252078%26cobrandid%3D11bd8083-87e0-41b5-bb78-0bc43c8a8e8a%26username%3Dtest%2540 Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"live.com", "classification":"wellknown", "reasons":["The brand 'Microsoft' is well-known and commonly associated with the domain 'live.com'.", "The URL 'account.live.com' is a legitimate subdomain of 'live.com', which is owned by Microsoft.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The input field for email is typical for a Microsoft account login page."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"Email test@test.com"}

URL: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083- Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Enter password", "prominent_button_name":"Sign in", "text_input_field_labels":["Password", "Forgot password?", "Email code to test@test.com"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083- Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"login.live.com", "classification":"wellknown", "reasons":["The URL 'login.live.com' is a legitimate subdomain of Microsoft, which is a well-known brand.", "Microsoft commonly uses 'live.com' for its services, including login pages.", "The domain name matches fully with the legitimate domain name associated with Microsoft services.", "No suspicious elements such as misspellings or unusual domain extensions are present in the URL."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"Password"}

URL: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083- Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"live.com", "classification":"wellknown", "reasons":["The URL 'login.live.com' is a subdomain of 'live.com', which is a legitimate domain associated with Microsoft services.", "Microsoft is a well-known brand, and 'live.com' is commonly used for Microsoft account services.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The presence of a password input field is typical for login pages, especially for a service like Microsoft Live."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"Password"}

URL: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083- Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Enter password", "prominent_button_name":"Sign in", "text_input_field_labels":["test@test.com"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.live.com/oauth20_authorize.srf?username=test%40test.com&username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&cobrandid=11bd8083- Model: jbxai	{ "phishing_score":1, "brands":"Microsoft", "legit_domain":"live.com", "classification":"wellknown", "reasons":["The brand 'Microsoft' is well-known and commonly associated with the domain 'live.com'.", "The URL 'login.live.com' is a legitimate subdomain used by Microsoft for its services.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The domain 'live.com' is fully matching the legitimate domain name associated with Microsoft services."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"test@test.com"}

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
163.172.240.109	https://antiphishing.vadesecure.com/v4?f=UU1XcHkxazJBTmIySlBBMSQ4map7seJoLcqVcyuXcD80bv8vE7pNjUuCrX4xa02_UwRDsrb-apqIDMK-qD7Xd0tTmJhsa6Sm-AmoSMZqX4maOZjzog2wCHYwWFiYj5Cbz21tK_VzM-G6He128i5gmA&i=RTNLd2NGeE1RTDFrR25iaOm2xB2s1spZDnxwqtN2vbA&k=ywmE&r=ZnVkMm1UMHFmWHNzejI1TlfXpSkBwoXpU1_2bAt5XCtiZlJ8lQ_KQmkqjhNBIGFXoOkBb_ekcGXfE7Mb65vIlg&s=612441400e2c05ea616d7412e25bb78ba8230f86b164844724b412811ee9074d&u=https%3A%2F%2Fwgr0gg2e.r.us-east-1.awstrack.me%2FL0%2Fhttps%3A%252F%252Ftrk-mkt.tason.com%252FCheckNew.html%253FxXqV4zrk4GUIfIqyaQmdjp9z3zQIOWGJEInT7KqIO9Q%3D%3D%2526hOCclxjXN4Fvn9aGoeccdp8uAefeG9Lx4X%3D%2526URL%3Dhttps%3A%252F%252Fukl.mesadenegociosbrasil.com%252Fsaz%252Falice.elsen%40chantiers-atlantique.com%2F1%2F010001921dee8188-a1c0ca79-f61a-4571-bda5-70f27965f3ec-000000%2F6i3wX9uBLRCBTe4d153Zg2oS0ZQ%3D392	Get hash	malicious	Unknown	Browse
	Consumer Notice (997Ko).msg	Get hash	malicious	Unknown	Browse
	Fw Received Commande.eml	Get hash	malicious	HTMLPhisher	Browse
	BlueFiles Expiration prochaine d'un contenu non encore ouvert (486Ko).msg	Get hash	malicious	Unknown	Browse
	Pour votre information (216Ko).msg	Get hash	malicious	Unknown	Browse
	https://antiphishing.vadesecure.com/v4?f=dGQ1Z2NpTTBXM0g2dWtFUN_KOjPqQK-j1botL__IWpnYSC3r2hpwmqJVibPLhHeX&i=cUNDakxOM3hJWGlmZjdUWUqfACZlDdJrovXum0GUsP8&k=wfPo&r=c3hxZG9hRzFYc1Zwck92QTBhAH-gLWcQPMn0YEYv7KA59695M8y9rOVpviUWHBgrh_hnjBdq6wp3O48N0cdixw&s=2baf0361cb348e2813b55cb57b015b1d1aa9d3e41edd3d050bbd901827616ff0&u=https%3A%2F%2Fwww.google.com.au%2Furl%3Fq%3D%2F%2Fwww.google.co.nz%2Famp%2Fs%2Ffedralmout.sa.com%2Fsecure%2Fpdfdocument.html	Get hash	malicious	HTMLPhisher	Browse
	https://antiphishing.vadesecure.com/v4?f=Qnhka2E0dmNmY3lSdFV6VAj_RbQzks7zm9fqYjJKCXoMlyiogwwhvI6TD4tEphDsuHf7VhsB6vZQkQDjzSz60w&i=RzlZTWtkemNSOUVkZTJBYYUlDJEhkkmV_HmoUJI--hg&k=hhAT&r=elJGbDNhQkVyRzlHSTJuYzDt5BEQXMDeBb2fMFPLNkRXK3hId2MQyg0GIxeUcvn7Ny6BdUuKUd8HwuhI5dA-gA&s=83eed285acecc235e2dd270590eef0a0e64f8720a701dde7ea7b13a7daceb975&u=https%3A%2F%2Fcontractbusinessproposals.vercel.app%2F	Get hash	malicious	HTMLPhisher	Browse
	https://antiphishing.vadesecure.com/v4?f=Q3ZQNmU2SnpsRFlRbUF3dnXrUX6IVRqoHkav3zS2FUU4SSgWF2Bh53LuIqIaYuHrQDsnYOK56JKj0hXr4VDw6qL5o_uh_nqnyJa_2on34iQ&i=SXVFem5DOGVpUU1rNjdmQs96J83fcHVCxOlJVucRT2c&k=syJL&r=bWt1djZ5QzcyUms5R1Nzas8e2Z1uyQF5dl89S8qefCBSiTlgrr5sTiH-8ESNqzpA&s=28bc277065cef76943ee4a3e64550f59f4824833fcb12a460650a34e741aba3d&u=http%3A%2F%2Ffranceuniv.fr	Get hash	malicious	Unknown	Browse
	Fw EDI IMPLANTACI#U00d3N .eml	Get hash	malicious	Unknown	Browse
	https://antiphishing.vadesecure.com/v4?f=Rld2eGhGQ3psZjlOWGwxQ0vcfDvxqJTcKosaNlK-5ZpAY4ZWsxa7V3yzjS4b8PrI&i=U2pXU09ocHltdTEydGM2aUXXbihjQdv6PQPA1D2RBy8&k=1XpP&r=SjA3d003VWxKRk1kazNaeRAix_QSmxcOa_Y-CbwYUkz7nibpV-Nw_puZqGqZB6nI&s=2d3763f47e2b5818e0e9a464b8b1eae3491289b32c8ef2089726ab302bf85650&u=https%3A%2F%2Fwww.mbcb.sa%2Fen%2Fimages%2FDocusign%2F%3Fe%3DYy5sZXBvZ2FtQGRhaWx5Y2VyLWZyLmNvbQ%3D%3D	Get hash	malicious	Unknown	Browse
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
13.107.246.67	https://wvr4dgzxxavl6jjpq7rl.igortsaplin.pro/WFzFCiNx	Get hash	malicious	HTMLPhisher	Browse
	Stager.exe	Get hash	malicious	Unknown	Browse
	KpCJCaQswCshdLQFFKLtCbGdhL.ps1	Get hash	malicious	Unknown	Browse
	Axactor Microsoft - Introduksjonsm#U00f8te.msg	Get hash	malicious	EvilProxy	Browse
	Axactor Microsoft - Introduksjonsm#U00f8te.msg	Get hash	malicious	EvilProxy	Browse
	https://wwvmicrosx.live/office365/office_cookies/main	Get hash	malicious	HTMLPhisher	Browse
	http://microsoft.biosency.com/	Get hash	malicious	Unknown	Browse
	https://mettamaskzendlogg.godaddysites.com/	Get hash	malicious	Unknown	Browse
	http://serviceappinfms12.pages.dev/	Get hash	malicious	TechSupportScam	Browse
	https://cionzbazee-prozeel0g.godaddysites.com/	Get hash	malicious	HTMLPhisher	Browse
13.107.246.44	https://1drv.ms/o/c/fdad16d5f2338a27/Eo8O_nGS-PdFnAhpolmsW1cBd-Jv5WSSl5AjZZuAQUSXNw?e=5%3aI9hXvq&sharingv2=true&fromShare=true&at=9	Get hash	malicious	Unknown	Browse
	https://wvr4dgzxxavl6jjpq7rl.igortsaplin.pro/WFzFCiNx	Get hash	malicious	HTMLPhisher	Browse
	https://tecvia.ladesk.com/412763-SICHERE-GESCH%C3%84FTSDOKUMENTE	Get hash	malicious	HTMLPhisher	Browse
	Play_VM-Now(Tina.lawvey)CQDM.html	Get hash	malicious	HTMLPhisher	Browse
	Swift_ach Complaints.sppgCQDM.html	Get hash	malicious	HTMLPhisher	Browse
	http://microsoft.biosency.com/	Get hash	malicious	Unknown	Browse
	https://index-html.info/?rid=jhOgcp4	Get hash	malicious	Unknown	Browse
	CLQD.htm	Get hash	malicious	HTMLPhisher	Browse
	https://www.google.co.za/url?q=xtcjw2geVaKWnfmdoGJR&rct=plPBlHNa5kwdhss6Wkqp&sa=t&esrc=513lj8JvP7Ittpg5uakw&source=&cd=HEdeaS5QG8iPRKWBvNC5&cad=v3vi70ntSK6fhpPYoZj8&ved=blJ54Mupbf2HcJbicYcQ&uact=&url=amp/s%2Furl.za.m.mimecastprotect.com/s/BjZHCy856GFEJl8cZf1CxlF3B	Get hash	malicious	Unknown	Browse
	https://0610ddce8f18f5a435e0067c7ddb3ec6.pages.dev/	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0016.t-0009.t-msedge.net	https://1drv.ms/o/c/fdad16d5f2338a27/Eo8O_nGS-PdFnAhpolmsW1cBd-Jv5WSSl5AjZZuAQUSXNw?e=5%3aI9hXvq&sharingv2=true&fromShare=true&at=9	Get hash	malicious	Unknown	Browse	13.107.246.44
	https://wvr4dgzxxavl6jjpq7rl.igortsaplin.pro/WFzFCiNx	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
	https://tecvia.ladesk.com/412763-SICHERE-GESCH%C3%84FTSDOKUMENTE	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
	Play_VM-Now(Tina.lawvey)CQDM.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
	Swift_ach Complaints.sppgCQDM.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
	http://microsoft.biosency.com/	Get hash	malicious	Unknown	Browse	13.107.246.44
	https://index-html.info/?rid=jhOgcp4	Get hash	malicious	Unknown	Browse	13.107.246.44
	CLQD.htm	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
	https://www.google.co.za/url?q=xtcjw2geVaKWnfmdoGJR&rct=plPBlHNa5kwdhss6Wkqp&sa=t&esrc=513lj8JvP7Ittpg5uakw&source=&cd=HEdeaS5QG8iPRKWBvNC5&cad=v3vi70ntSK6fhpPYoZj8&ved=blJ54Mupbf2HcJbicYcQ&uact=&url=amp/s%2Furl.za.m.mimecastprotect.com/s/BjZHCy856GFEJl8cZf1CxlF3B	Get hash	malicious	Unknown	Browse	13.107.246.44
	https://0610ddce8f18f5a435e0067c7ddb3ec6.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
190019-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com	https://forezbennes42-my.sharepoint.com/:o:/g/personal/sav_forez-bennes_fr/ErEp3Zm6249OnrvlidK324ABPUC7M0jQNY3boePnTudwXA?e=14vnTZ	Get hash	malicious	Unknown	Browse	52.105.56.39
antiphishing.vadesecure.com	https://antiphishing.vadesecure.com/v4?f=UU1XcHkxazJBTmIySlBBMSQ4map7seJoLcqVcyuXcD80bv8vE7pNjUuCrX4xa02_UwRDsrb-apqIDMK-qD7Xd0tTmJhsa6Sm-AmoSMZqX4maOZjzog2wCHYwWFiYj5Cbz21tK_VzM-G6He128i5gmA&i=RTNLd2NGeE1RTDFrR25iaOm2xB2s1spZDnxwqtN2vbA&k=ywmE&r=ZnVkMm1UMHFmWHNzejI1TlfXpSkBwoXpU1_2bAt5XCtiZlJ8lQ_KQmkqjhNBIGFXoOkBb_ekcGXfE7Mb65vIlg&s=612441400e2c05ea616d7412e25bb78ba8230f86b164844724b412811ee9074d&u=https%3A%2F%2Fwgr0gg2e.r.us-east-1.awstrack.me%2FL0%2Fhttps%3A%252F%252Ftrk-mkt.tason.com%252FCheckNew.html%253FxXqV4zrk4GUIfIqyaQmdjp9z3zQIOWGJEInT7KqIO9Q%3D%3D%2526hOCclxjXN4Fvn9aGoeccdp8uAefeG9Lx4X%3D%2526URL%3Dhttps%3A%252F%252Fukl.mesadenegociosbrasil.com%252Fsaz%252Falice.elsen%40chantiers-atlantique.com%2F1%2F010001921dee8188-a1c0ca79-f61a-4571-bda5-70f27965f3ec-000000%2F6i3wX9uBLRCBTe4d153Zg2oS0ZQ%3D392	Get hash	malicious	Unknown	Browse	163.172.240.109
	Consumer Notice (997Ko).msg	Get hash	malicious	Unknown	Browse	163.172.240.109
	Fw Received Commande.eml	Get hash	malicious	HTMLPhisher	Browse	163.172.240.109
	BlueFiles Expiration prochaine d'un contenu non encore ouvert (486Ko).msg	Get hash	malicious	Unknown	Browse	163.172.240.109
	Pour votre information (216Ko).msg	Get hash	malicious	Unknown	Browse	163.172.240.109
	https://antiphishing.vadesecure.com/v4?f=dGQ1Z2NpTTBXM0g2dWtFUN_KOjPqQK-j1botL__IWpnYSC3r2hpwmqJVibPLhHeX&i=cUNDakxOM3hJWGlmZjdUWUqfACZlDdJrovXum0GUsP8&k=wfPo&r=c3hxZG9hRzFYc1Zwck92QTBhAH-gLWcQPMn0YEYv7KA59695M8y9rOVpviUWHBgrh_hnjBdq6wp3O48N0cdixw&s=2baf0361cb348e2813b55cb57b015b1d1aa9d3e41edd3d050bbd901827616ff0&u=https%3A%2F%2Fwww.google.com.au%2Furl%3Fq%3D%2F%2Fwww.google.co.nz%2Famp%2Fs%2Ffedralmout.sa.com%2Fsecure%2Fpdfdocument.html	Get hash	malicious	HTMLPhisher	Browse	163.172.240.109
	https://antiphishing.vadesecure.com/v4?f=Qnhka2E0dmNmY3lSdFV6VAj_RbQzks7zm9fqYjJKCXoMlyiogwwhvI6TD4tEphDsuHf7VhsB6vZQkQDjzSz60w&i=RzlZTWtkemNSOUVkZTJBYYUlDJEhkkmV_HmoUJI--hg&k=hhAT&r=elJGbDNhQkVyRzlHSTJuYzDt5BEQXMDeBb2fMFPLNkRXK3hId2MQyg0GIxeUcvn7Ny6BdUuKUd8HwuhI5dA-gA&s=83eed285acecc235e2dd270590eef0a0e64f8720a701dde7ea7b13a7daceb975&u=https%3A%2F%2Fcontractbusinessproposals.vercel.app%2F	Get hash	malicious	HTMLPhisher	Browse	163.172.240.109
	https://antiphishing.vadesecure.com/v4?f=Q3ZQNmU2SnpsRFlRbUF3dnXrUX6IVRqoHkav3zS2FUU4SSgWF2Bh53LuIqIaYuHrQDsnYOK56JKj0hXr4VDw6qL5o_uh_nqnyJa_2on34iQ&i=SXVFem5DOGVpUU1rNjdmQs96J83fcHVCxOlJVucRT2c&k=syJL&r=bWt1djZ5QzcyUms5R1Nzas8e2Z1uyQF5dl89S8qefCBSiTlgrr5sTiH-8ESNqzpA&s=28bc277065cef76943ee4a3e64550f59f4824833fcb12a460650a34e741aba3d&u=http%3A%2F%2Ffranceuniv.fr	Get hash	malicious	Unknown	Browse	163.172.240.109
	Fw EDI IMPLANTACI#U00d3N .eml	Get hash	malicious	Unknown	Browse	163.172.240.109
	https://antiphishing.vadesecure.com/v4?f=Rld2eGhGQ3psZjlOWGwxQ0vcfDvxqJTcKosaNlK-5ZpAY4ZWsxa7V3yzjS4b8PrI&i=U2pXU09ocHltdTEydGM2aUXXbihjQdv6PQPA1D2RBy8&k=1XpP&r=SjA3d003VWxKRk1kazNaeRAix_QSmxcOa_Y-CbwYUkz7nibpV-Nw_puZqGqZB6nI&s=2d3763f47e2b5818e0e9a464b8b1eae3491289b32c8ef2089726ab302bf85650&u=https%3A%2F%2Fwww.mbcb.sa%2Fen%2Fimages%2FDocusign%2F%3Fe%3DYy5sZXBvZ2FtQGRhaWx5Y2VyLWZyLmNvbQ%3D%3D	Get hash	malicious	Unknown	Browse	163.172.240.109
s-part-0023.t-0009.t-msedge.net	https://irp.cdn-website.com/02ccf804/files/uploaded/webpage.html	Get hash	malicious	Unknown	Browse	13.107.246.51
	http://144.126.159.102	Get hash	malicious	Unknown	Browse	13.107.246.51
	https://www.salarytoolint.net/lam/c650d2e0-ca12-4bbd-8ff2-35011d35d0af/a717ea91-20df-42de-8c6b-2dc111827916/c05902dd-1112-4a4c-81f2-0bf48471902f/login?id=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	Get hash	malicious	Unknown	Browse	13.107.246.51
	http://c34ebfd07b9fd2a2b598b27a26c95beb2ad53a4fcc238014c4963dd0bf.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.51
	https://www.opinionstage.com/page/9bcc3898-85f3-45d7-8bf3-83291ce66ba3	Get hash	malicious	Unknown	Browse	13.107.246.51
	http://adf-ask-accessibility-daeeafembaazdzfk.z01.azurefd.net	Get hash	malicious	Unknown	Browse	13.107.246.51
	IT1_Individual_Resident_Return_XLS.xls	Get hash	malicious	Unknown	Browse	13.107.246.51
	https://sharepoint.intopics.com/	Get hash	malicious	Unknown	Browse	13.107.246.51
	http://login.microsoft.com.sec-lab.site/	Get hash	malicious	Unknown	Browse	13.107.246.51
	Play-Audio_Now(Steven.haerle)CLQD.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.51
sni1gl.wpc.alphacdn.net	https://wvr4dgzxxavl6jjpq7rl.igortsaplin.pro/WFzFCiNx	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://targetemissionservices.ezofficeinventory.com/users/sign_in	Get hash	malicious	Unknown	Browse	152.199.21.175
	http://microsoft.biosency.com/	Get hash	malicious	Unknown	Browse	152.199.21.175
	https://palomaestro1211.github.io/microsoftlogin/	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://index-html.info/?rid=jhOgcp4	Get hash	malicious	Unknown	Browse	152.199.21.175
	http://win2-z13-web-core-windows-net.pages.dev/	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	152.199.21.175
	http://purchaseorders.vercel.app/	Get hash	malicious	Unknown	Browse	152.199.21.175
	https://www.google.co.za/url?q=xtcjw2geVaKWnfmdoGJR&rct=plPBlHNa5kwdhss6Wkqp&sa=t&esrc=513lj8JvP7Ittpg5uakw&source=&cd=HEdeaS5QG8iPRKWBvNC5&cad=v3vi70ntSK6fhpPYoZj8&ved=blJ54Mupbf2HcJbicYcQ&uact=&url=amp/s%2Furl.za.m.mimecastprotect.com/s/BjZHCy856GFEJl8cZf1CxlF3B	Get hash	malicious	Unknown	Browse	152.199.21.175
	https://www.google.co.uk/url?q=xtcjw2geVaKWnfmdoGJR&rct=plPBlHNa5kwdhss6Wkqp&sa=t&esrc=513lj8JvP7Ittpg5uakw&source=&cd=HEdeaS5QG8iPRKWBvNC5&cad=v3vi70ntSK6fhpPYoZj8&ved=blJ54Mupbf2HcJbicYcQ&uact=&url=amp/s%2Furl.us.m.mimecastprotect.com/s/n0rICERpMNsxN8vRCNfXC76qeb?domain=sharedocx.z13.web.core.windows.net	Get hash	malicious	Unknown	Browse	152.199.21.175
	https://www.google.co.za/url?q=xtcjw2geVaKWnfmdoGJR&rct=plPBlHNa5kwdhss6Wkqp&sa=t&esrc=513lj8JvP7Ittpg5uakw&source=&cd=HEdeaS5QG8iPRKWBvNC5&cad=v3vi70ntSK6fhpPYoZj8&ved=blJ54Mupbf2HcJbicYcQ&uact=&url=amp/s%2Furl.za.m.mimecastprotect.com/s/BjZHCy856GFEJl8cZf1CxlF3B	Get hash	malicious	Unknown	Browse	152.199.21.175

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	6BTZGMvUv1.elf	Get hash	malicious	Unknown	Browse	104.210.188.92
	MOfHb44mph.elf	Get hash	malicious	Unknown	Browse	52.243.82.1
	https://forms.office.com/Pages/ResponsePage.aspx?id=4mPIUn7HtEOifSf_jkD9akHPEdQOqpJDoTs5yuUf8txUMEFQTE42TU03SUJBSU84VTY3MEtFR1JaUS4u	Get hash	malicious	HTMLPhisher	Browse	40.126.31.69
	https://url.us.m.mimecastprotect.com/s/8I0_CKrkVEt48y6BzfMfWF5hBIN?domain=woems-my.sharepoint.com	Get hash	malicious	Unknown	Browse	52.98.179.34
	https://t.co/dvIdjH2Xsv	Get hash	malicious	Unknown	Browse	40.114.177.156
	https://go.hginsights.com/rs/214-HYO-692/images/HG	Get hash	malicious	Unknown	Browse	13.107.42.14
	faststone-capture_voLss-1.exe	Get hash	malicious	PureLog Stealer	Browse	204.79.197.203
	https://lillian.ru.com/9?ai=xd	Get hash	malicious	Unknown	Browse	13.107.246.45
	faststone-capture_voLss-1.exe	Get hash	malicious	PureLog Stealer	Browse	204.79.197.203
	https://1drv.ms/o/c/fdad16d5f2338a27/Eo8O_nGS-PdFnAhpolmsW1cBd-Jv5WSSl5AjZZuAQUSXNw?e=5%3aI9hXvq&sharingv2=true&fromShare=true&at=9	Get hash	malicious	Unknown	Browse	52.108.8.12
MICROSOFT-CORP-MSN-AS-BLOCKUS	6BTZGMvUv1.elf	Get hash	malicious	Unknown	Browse	104.210.188.92
	MOfHb44mph.elf	Get hash	malicious	Unknown	Browse	52.243.82.1
	https://forms.office.com/Pages/ResponsePage.aspx?id=4mPIUn7HtEOifSf_jkD9akHPEdQOqpJDoTs5yuUf8txUMEFQTE42TU03SUJBSU84VTY3MEtFR1JaUS4u	Get hash	malicious	HTMLPhisher	Browse	40.126.31.69
	https://url.us.m.mimecastprotect.com/s/8I0_CKrkVEt48y6BzfMfWF5hBIN?domain=woems-my.sharepoint.com	Get hash	malicious	Unknown	Browse	52.98.179.34
	https://t.co/dvIdjH2Xsv	Get hash	malicious	Unknown	Browse	40.114.177.156
	https://go.hginsights.com/rs/214-HYO-692/images/HG	Get hash	malicious	Unknown	Browse	13.107.42.14
	faststone-capture_voLss-1.exe	Get hash	malicious	PureLog Stealer	Browse	204.79.197.203
	https://lillian.ru.com/9?ai=xd	Get hash	malicious	Unknown	Browse	13.107.246.45
	faststone-capture_voLss-1.exe	Get hash	malicious	PureLog Stealer	Browse	204.79.197.203
	https://1drv.ms/o/c/fdad16d5f2338a27/Eo8O_nGS-PdFnAhpolmsW1cBd-Jv5WSSl5AjZZuAQUSXNw?e=5%3aI9hXvq&sharingv2=true&fromShare=true&at=9	Get hash	malicious	Unknown	Browse	52.108.8.12
MICROSOFT-CORP-MSN-AS-BLOCKUS	6BTZGMvUv1.elf	Get hash	malicious	Unknown	Browse	104.210.188.92
	MOfHb44mph.elf	Get hash	malicious	Unknown	Browse	52.243.82.1
	https://forms.office.com/Pages/ResponsePage.aspx?id=4mPIUn7HtEOifSf_jkD9akHPEdQOqpJDoTs5yuUf8txUMEFQTE42TU03SUJBSU84VTY3MEtFR1JaUS4u	Get hash	malicious	HTMLPhisher	Browse	40.126.31.69
	https://url.us.m.mimecastprotect.com/s/8I0_CKrkVEt48y6BzfMfWF5hBIN?domain=woems-my.sharepoint.com	Get hash	malicious	Unknown	Browse	52.98.179.34
	https://t.co/dvIdjH2Xsv	Get hash	malicious	Unknown	Browse	40.114.177.156
	https://go.hginsights.com/rs/214-HYO-692/images/HG	Get hash	malicious	Unknown	Browse	13.107.42.14
	faststone-capture_voLss-1.exe	Get hash	malicious	PureLog Stealer	Browse	204.79.197.203
	https://lillian.ru.com/9?ai=xd	Get hash	malicious	Unknown	Browse	13.107.246.45
	faststone-capture_voLss-1.exe	Get hash	malicious	PureLog Stealer	Browse	204.79.197.203
	https://1drv.ms/o/c/fdad16d5f2338a27/Eo8O_nGS-PdFnAhpolmsW1cBd-Jv5WSSl5AjZZuAQUSXNw?e=5%3aI9hXvq&sharingv2=true&fromShare=true&at=9	Get hash	malicious	Unknown	Browse	52.108.8.12
OnlineSASFR	WannaCry.bin.zip	Get hash	malicious	Conti, Wannacry	Browse	163.172.131.88
	http://d-mj-hood-83.limesurvey.net/182116/	Get hash	malicious	Unknown	Browse	51.158.227.154
	file.exe	Get hash	malicious	LummaC, Clipboard Hijacker, Cryptbot, LummaC Stealer, Neoreklami, Socks5Systemz	Browse	195.154.173.35
	SecuriteInfo.com.Trojan.Win32.Crypt.31282.17969.exe	Get hash	malicious	Socks5Systemz	Browse	195.154.173.35
	SecuriteInfo.com.Gen.Heur.Munp.1.11072.7602.exe	Get hash	malicious	Socks5Systemz	Browse	195.154.173.35
	report_209.pdf	Get hash	malicious	Unknown	Browse	62.210.196.157
	g3V051umJf.html	Get hash	malicious	Unknown	Browse	212.129.25.206
	https://campaignjoinnow42.cloud/	Get hash	malicious	Unknown	Browse	51.159.84.191
	EvKSsyJozV.exe	Get hash	malicious	Socks5Systemz	Browse	195.154.173.35
	J2alzv5eSV.exe	Get hash	malicious	Socks5Systemz	Browse	195.154.173.35

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Credential Flusher	Browse	172.202.163.200 184.28.90.27
	Aura.exe	Get hash	malicious	RedLine	Browse	172.202.163.200 184.28.90.27
	https://url.us.m.mimecastprotect.com/s/8I0_CKrkVEt48y6BzfMfWF5hBIN?domain=woems-my.sharepoint.com	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27
	https://t.co/dvIdjH2Xsv	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27
	https://irp.cdn-website.com/02ccf804/files/uploaded/webpage.html	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27
	file.exe	Get hash	malicious	Credential Flusher	Browse	172.202.163.200 184.28.90.27
	http://whinairith.net	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27
	Full Litigation File.pdf	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27
	http://185.95.84.78/rd/4gmsyP17223JZmx332lihotmtcwn9842ZSCGIOAIIATLJCU85240TITV3606d9	Get hash	malicious	Phisher	Browse	172.202.163.200 184.28.90.27
	file.exe	Get hash	malicious	Credential Flusher	Browse	172.202.163.200 184.28.90.27

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	118
Entropy (8bit):	3.5700810731231707
Encrypted:	false
SSDEEP:	3:QaklTlAlXMLLmHlIlFLlmIK/5lTn84vlJlhlXlDHlA6l3l6Als:QFulcLk04/5p8GVz6QRq
MD5:	573220372DA4ED487441611079B623CD
SHA1:	8F9D967AC6EF34640F1F0845214FBC6994C0CB80
SHA-256:	BE84B842025E4241BFE0C9F7B8F86A322E4396D893EF87EA1E29C74F47B6A22D
SHA-512:	F19FA3583668C3AF92A9CEF7010BD6ECEC7285F9C8665F2E9528DBA606F105D9AF9B1DB0CF6E7F77EF2E395943DC0D5CB37149E773319078688979E4024F9DD7
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.H.e.a.r.t.b.e.a.t.C.a.c.h.e./.>.

C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	245980
Entropy (8bit):	4.203446028723607
Encrypted:	false
SSDEEP:	3072:oKGgd8PgTmiGu2SqoQFrt0Fv9g5qoXHF:5smmi2vp5qoX
MD5:	8CC1CB39FB6D6C6CF1586A0D33FD0DDD
SHA1:	880CF2C472E5DB56019F48AA41970F61CB57ED0E
SHA-256:	37DDD752710588BDA4041E365EE1CBF0DCD76C6586A829F34A1C4ED5E1CF6917
SHA-512:	1955F1887371A6922FADB111B99457573D231F6FDBA3F57623A9600969B79CA9E816BD5F0478CC870A51D08FE51E4E46C3CF983BE95AD89EC45CD7E4BA3EFD67
Malicious:	false
Reputation:	low
Preview:	TH02...... .`.H/.......SM01........P..7/...........IPM.TaskRequest.Decline........h...............h............H..h4........wT....h..........".H..h\cal ...pDat...hP...0..........h.qZ...!........h........_`Uk...hcpZ.H...I.lw...h....P...8.Zk...0....\...............l.........2h...............k..............!h.............. h3..Y..........#h....8.........$h..".....@....."h.)......@)....'h..............1h.qZ...........0h.........Zk../h..........ZkH..h.r!. ...4.....-h ...0........+h'nZ.4...(........... ...... ..............FS..............FIPM.TaskRequest.Decline.Form.d.dStandard.PM.Task Decline.PM.IPM.Microsoft.FolderDesign.FormsDescription................F.k..........1111110000000000.icrMicrosoft.isThis form is used to decline a task request.........kf...... ..........&...........(.......(... ...@...............................................................................................................................D@..............D@x.............DG...p..........DH..www.wwp.....

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	322260
Entropy (8bit):	4.000299760592446
Encrypted:	false
SSDEEP:	6144:dztCFLNyoAHq5Rv2SCtUTnRe4N2+A/3oKBL37GZbTSB+pMZIrh:HMLgvKz9CtgRemO3oUHi3SBSMZIl
MD5:	CC90D669144261B198DEAD45AA266572
SHA1:	EF164048A8BC8BD3A015CF63E78BDAC720071305
SHA-256:	89C701EEFF939A44F28921FD85365ECD87041935DCD0FE0BAF04957DA12C9899
SHA-512:	16F8A8A6DCBAEAEFB88C7CFF910BCCC71B76A723CF808B810F500E28E543112C2FAE2491D4D209569BD810490EDFF564A2B084709B02963BCAF6FDF1AEEC59AC
Malicious:	false
Reputation:	high, very likely benign file
Preview:	51253fe60063c31af0d295afb42228b0:v2:2:1:1590:2:8479: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

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	10
Entropy (8bit):	2.1709505944546685
Encrypted:	false
SSDEEP:	3:LNVXS9Sn:hVXX
MD5:	3DCCAFEC80389E13F05CBB03D1BEDC87
SHA1:	05FC85F3F673AC6D6C35695B1DF5B545837C8E73
SHA-256:	3B1525F5954CD62810B0A292D767247EF0FDB33528912FA28823E0C8C4A60A75
SHA-512:	9572D5F30CA7B4A564072418CEDF3888457BD56FF547A4166733AEC7F8A086E5DA02D299D1D190566D4B9575DE8D426FC5103126FA1D5F25BDAF9A251D8B6542
Malicious:	false
Reputation:	low
Preview:	1728027027

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\A843BD1E-2EAF-44B0-8588-510029B2B0DC

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	177810
Entropy (8bit):	5.28721046841265
Encrypted:	false
SSDEEP:	1536:Di2XfRAqcbH41gwEwLe7HW8bM/o/NMdcAZl1p5ihs7EXXPEAD2Odavo:WCe7HW8bM/o/TXsk4o
MD5:	1D9DD39288E0207C9B34774D808B080D
SHA1:	D91754F7790055A01DBB6D6D7CC6A8700F326FD2
SHA-256:	A4B35AA248928911009B99C8C940A455473C81B9F33C2FEAC848908F071A58C0
SHA-512:	A654DB039890083618BEC4BF59B895CABCAE5C41A6763A09F6421A897936DA51CBF4C22D608D0A32B541DD86E098FC355E48E0D0D07014CFC39CFE98929A30D6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2024-10-04T07:30:24">.. Build: 16.0.18124.40132-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://word-edit.officeapps.live.com/we/rrdiscovery.ashx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId" o:authentication="1">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. <o:ticket o:policy="MBI_SSL_SHORT" o:idprovider="1" o:target="[MAX.AuthHost]" o:headerValue="Passport1.4 from-PP='{}&p='" />.. <o:ticket o:idprovider="3" o:headerValue="Bearer {}" o:resourceId="[

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.04579732647217531
Encrypted:	false
SSDEEP:	3:Gtlxtjl5hI1UpFY/tlxtjl5hI1UpftjR9//8l1lvlll1lllwlvlllglbelDbllAC:Gtgqp2/tgqpn9X01PH4l942wU
MD5:	7472B5BA1F2373751860B45B60821EE7
SHA1:	C21CD5CE6ACEBC92EB2D7469F11B6041622A3C68
SHA-256:	3E0FB248881C6A250710DD967D1F7826977EB5CF4BEC6211395934941E05C744
SHA-512:	0BDC1EBA9A06B2D966180DBD1366C234427F1D256AB982CEF441719E7EB61735C2852F2A1F3E1BDCB7CEB2B24A9D4190409BE608FAB3C4904902DE95D374F117
Malicious:	false
Preview:	..-.....................JQ._F.N^.....z.g..-FS.<..-.....................JQ._F.N^.....z.g..-FS.<........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	49472
Entropy (8bit):	0.48523337012293444
Encrypted:	false
SSDEEP:	48:DVTyQ1usvqUll7DYMuaKgzO8VFDYMuk7P1PeBO8VFDYML:D5lssvFll4JapjVGJk7pUjVGC
MD5:	5E13B7F6B3896E1B31B8AB8615B4F158
SHA1:	10060C51654BC869F3CD345A02D6B0A293F958E2
SHA-256:	734ED496DD685BB2EAC824E3F0535897C8C1CC1DAAB2D7CA341B671D5431113D
SHA-512:	7007302D5AF9973B3156064F6057E62A2616A86546C31EDAD46CE413374F7D023BD16B762DB129F5F9EBE5DC1B722188B18440505942903823534C5826A31AD8
Malicious:	false
Preview:	7....-...............z.^...................z..2....e"SQLite format 3......@ .......................................................................... .............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\1C8D5C05.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1545
Entropy (8bit):	7.814106631260873
Encrypted:	false
SSDEEP:	24:27/6xAjS78jctwsXrFPSvBd8rW1W5UkOCi7sJ23PHRdTPouraq+qUtFW8ACUWaGo:27/6xAOYkE5dVWbOhok3Zdbou7cy8sGo
MD5:	1CC66A051DA88F978985985D0B4B4E27
SHA1:	8A3DCFD0251B747F79560ACFA58112A50DE3246D
SHA-256:	5FF7E995B6CF368D9AFB16AF5769CD68D9AA21F83A0D0531B6CE4BAE898C523C
SHA-512:	5F2F2A94641793EBEBD56204A81B9DC7AB21E873F24E35AEC63B8A71DDE32211423251E021FA48CFAD51D20A4B7D4E193B0A1A78E22859AF1988BAD1F9C02E23
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....pHYs.................sRGB.........gAMA......a.....IDATx..VM..E.~U.....&........^." ....c"...1F./p...f.x1.=ibL.x.D...&..'1!.....F..=......O....."k.&.U.]...}.......yn..zi...(%d..O.1.#.'F..o....x(...!..........w#1o.$8.....e.......:..............X_.9.&p....I.J...^B.8q..oFj.....0........h%.`Hb.9+...u..B@.[...::7.H^>\|lm#....2.-..z..SeD3S..Y3...Xm,.....?.8..8.$.,..$n..Q+8...'...~...)c...8g.....z.....s=...;.{....6.....).N.P.....X.Q.g.0i..E..mg.F.....9..Lc.cg6..y....#Q....;...N..! e1$.]`..G..0.c,..z$T..2......&.KB.:.,.7...TD...g.#8..J....H@r.lw.A.....@..A.....@.. .....rh....8.-..u..sR.S%.+pD..<@..)...)...@?.5u#.Tm..N....D...%..n..'~.]......i.{._.P..'.O.h.!!8..,q..F$p.."..[.2X.=2..I\|.W.U.w..+...A...r...>....?d..q..oAp..&...L...U...<.G.>.[1.%4.7?....8..J8...c..\.Y...!..p..oc~mK..^y I....!.-(Ks..n..".m=e.......M....m%\..H......p8.c.tn\|......:.x.\|....Y.......\..E.......j.s...?.l*.....&H'. .$bG.!..9... ...9...Q..PmA..h....C.Y.:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\3A94F15B.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 226 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3496
Entropy (8bit):	7.932855241509023
Encrypted:	false
SSDEEP:	96:wbTtdQ3lDuPlDjmOu5ScLATKs08CnYy+C2FIP:wbTtwtuNvA5ScLATK/nWGP
MD5:	EF971F0A20D0D378DE0740921C43ACA9
SHA1:	AF6775D1AFF8C1FFA484F970B3C5DC6566F20C36
SHA-256:	0A9E89001F52351CFC61DF359D569C1A5F730B3A195D70BB0C51C0A4D2800673
SHA-512:	B71C8827776142945AEA8602EFF3C409675B933CC1D01A6AF8B836E622E3C1B76F91E7F7583FE2A9FB6B196EA4B97F01746D81F336CB705F3DF177365785E934
Malicious:	false
Preview:	.PNG........IHDR.......0...........oIDATx..].tT...w.a. ..y%.P...A...H..P.P.-H.T....Jk+m.G...Z..V..R-Z......Q..$..J@.G.{.}........w.....\|..'w..;w......un\|^).tA...........A..~6..O[."t...@.B.t....\m.!X..j..\i..".............v![8.r..iQ.r....~W..Ue.......H.....P..&i.S..#......x..P..2b....;..PM&@z..u...ED......n..-..PC3br.a..;.B.6CKC..I...aiX..P..).O.b..r.m..J.....]..Q.n.F.....-R5.1...iF$.4......=.m...4....!..q....s.j.s.^...!.....\|...T0.0.k..J.m.v#..g+. ..3..b..i..F.....t.....=.@1.MH..jj..........H.NA..A....!....b....-W0.[..<.T..K=.S.....#..4[f$&l..E.#...t.f.....0..z...!.U..EZ.....)]qM&.g..e#.o!=..i1\o.W...rcB...C.......Hc..q9M.'Z.D..C.{-V.Mw".R..FwCJa..l.........".A....!-.c.H[c..T.+..,.'?A.....\|..u.....I..\|hrO.....D..b...x.......@=K.....<.X..h....(...4A..H~.y5.U.. f.#.w.I...X....=Hk.f[..<.....Hc[b.`o..Ta..."..H.xb9...{H.L...{6...Xv2...W..W..._.t.Ro.{..x.:...i=..&.._E..."}..H;..:.$=.p=}.;e....>.T.e>..Y-..p.{..o#..0oe)..5yU;._Ro7hF<..h.r..*._...B

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\5D3FC19F.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1828
Entropy (8bit):	7.860713638434036
Encrypted:	false
SSDEEP:	48:pZUCpVGWu+2L+RQ0/kmvLFiuMwIRBlL4cawu0X:lGm2L+RQFmvLFipwIRFRX
MD5:	214A9808C2A5AEABD7772E0F2D249F50
SHA1:	0EAEC4740DD6356BED3AEF493413B98EDC77BE2E
SHA-256:	1DB2487B622E0B96E5074B34D7670AB2BF26A634FB084542016A8D620F046A4C
SHA-512:	0787C8D5E7888F5F614F6407E8071D35A9A94950A907FCD957E7CF766583835E8B25C76FF45A80ECF526A7E2D484F5AE9D733C8F193C36161C5B84A779081899
Malicious:	false
Preview:	.PNG........IHDR...(...(........m....pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx..o.E.........@$@Z+.4....."!.i... .!Z.hr.A..vAE......b:.L../"R$ ..I\|...{of.g....&.'......g.....q;n..!..5..z.V.3.o.K..$0.........5"Z.5....M8B;4.W/.K...O,^A.uc............Q.....0.q...!...P..(]......$.d@....,.I...r.._...c......P..h(....2?..X..0.'..>(...`...8j.Q.\|...s..m.S..._B1.C.J\|....b/..g....Z..._.{n..C...\nn....G..^...b....#g.A...B......z.G.....i2..A.qna.D.efU.k0..a.'O].Bm..rP\t!}...E..C......B.#/`....R...)..:..3!...........}h...10H.lZ..u.P.LI%...O......S..L.f..O6Q.....?..\|vP..V0.fPMM.]..p.m.YX.......3G7.....{...+....4.0....F.vv64U$A.ph... .&d...$ ..J.P......."..FLL..-...`..X.}+N..n..lT.a<..8.....`U4yjy......%:..4X.y....$f....R.....C..r \.....8.HB..S..G<-.......?5....W..Gy.L......n..~.>..d..Q....y.#.....`TK...We..2U..J<.U2.........p#-.x..9......W...K...........(.)...Z...#....7...I...TA...W.....o0f.JpG.2.K9.}H...9.H..L...#....*EWt........t.L..".)..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\BE92F14.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	921
Entropy (8bit):	7.688281715044376
Encrypted:	false
SSDEEP:	24:22iIvqmrr4//MahSleuGLAsfHwNktE4FJmWTVNDNGpMilN/:2nIycHahSoucDHxzKC7A1N
MD5:	F684395D1FDBAD9B8196A6A9248B7A7E
SHA1:	24444E89B78504F04A5196A02BC65E8154472CC1
SHA-256:	8322550FE1B7ED3ED89A2F8AD61A77C628C1D33A8B67CDD1D08CAABB6D6DD605
SHA-512:	EB84244E38A6F2FE481A41B1962F28696FD4BB2A1D4083CAFFEC1CD1CDC2B324C1F7BD8CBDE536DD11336B1C112FB0033988EF24F6AE90479D50E1479F8F5261
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....pHYs...#...#.x.?v...KIDATX..Oo.U.......F.4.)...\...\P....[..B8".#4\|.Tj{....8.UzH.@......H....Oq...e....Z...8v....f.f43o<O..B\|.\|.\.f.#.0".p......vJ"..,.O9h3h..k0....I;...W...8..V.].G...yD".L...,k"....Kwvv..x.?...Z-"..H....d2....~}.....\|.\|..-.K..~...4.i"..:.M.p.........\|...V.....&.Z.. ..<.T.^..eY.....T.%..".T..p-.!"..;.n..@.nnN..nn. .n...^i"b.S....\|..{(......a.}u../........m;.x.J)..y..q...0.q{P..u...(..J...^4...:.D...C>...D......L.u..r_...F...4M....&2.......h4.;.y....L&'b.`jj.]..<.K..M...l.>.....um.n.}M..@............k........j....f...,.\6#.lF,......$..,........Y_.@....>P..'.....0...-.T...k...y.@>.H~q.B.0Pw.....uO...y.F..W_.\...[C..\L...q..x.G...0.N..R....k6...HD:.).$...\z.....Qp]W....f:......X,.\|........N9:Ja....b....\..W. =F._NF.+R.<.{${R.H21.w$.9.~W..2.Tz.J..T..y....X.;.X.N&C....R.\|...<...4..a..(.......)..Z....U....n._....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C254AA42.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	341
Entropy (8bit):	6.953457036063963
Encrypted:	false
SSDEEP:	6:6v/lhPNIR/BB8SLk+xz8206G7WZW04DxnnmnXXVrzZdjrtevijX0Vg1tljp:6v/72/XN423G7W7MmnHB9zZt7
MD5:	AF3469CD479C158A9519D5C58A682F1A
SHA1:	98FC6B6C3E0AFF75C86AA2770BD6198E7AB13254
SHA-256:	36408D3CE9CA85E19CEBF244533C853D3A28316653F8133114CE4C590E99FF2B
SHA-512:	C81917A88925795ACC60320C2CB3590C2BFE5C11BEFBDE072A211478A974224FDAC314B6889B37366A02EC12D5D5D121041B4678882D84767F32BCDDAE14A330
Malicious:	false
Preview:	.PNG........IHDR...(...(........m....pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx...1..@....ba......%..&...(.....x..`l..neld....L6..W.f6.aw."c.1j..v{*.R_6.g.Up.\|.h./D.K.m~..O..p..N.z2.$\|F}8 SJ..!Q...3..e..F...?....`W..Z.Pk.S<v.`..N(&.. &.Z...%CM./.Rl..=.....0.H..\M..)E.S.O7.".?.L..EG....I...Y\|)....c~..t.(y.2......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\DADE4E96.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 76 x 76, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2670
Entropy (8bit):	7.89485098075843
Encrypted:	false
SSDEEP:	48:lwsTrg0kZq0wt33C7HqBOzuuEyNJCOzaaiJhjMrxEp7aiqNoDhbm:lwsTrg0vt33C7HqOjNTUnjq6wbOhbm
MD5:	419B064F11D8D5D054A441CF917BA06E
SHA1:	FC281035019A4AB130817DCAE54F7A12441EC2FD
SHA-256:	926F12B6EF2B4302D01950546723DAA172854BA57AD4FF3691E9B6874BC13D2F
SHA-512:	D3E124F608ACB06CEA04B1C2ACB20B4FA94915A3C8A794341127AB94A88AE65733CD784EF4774D13A72931F64C96FC05F6A84677B9B128F55235757E27AD4459
Malicious:	false
Preview:	.PNG........IHDR...L...L......Q+....pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx..\Kl[...3..#Y.H@....%.....XR........@...$....M.+.....ku. .$..tAy."N!zQ...J.I....s.q.G..........\|...{..{.Q........S.`).\|... F)......f.P...C[.[.(c3#..f....t.`tF...Yb.[./..K...O.B<..X....3@O.......6...R..)cR..2LS.<.d..sO..!l[~T..-..d[..T.....Y[.......zB...0.;nI.I.h.L3B\...$i.rI.WV.....E\|..R.a.D.I.4....r.X....+..0%...`.....H.^..F....B.$/.....$.&u.=.KU..f...V......O....+.......k.S3..(.\|..Q..v..qe... ...<...7...?...a.....A.g.$.bcJ....b...c..B.Je{..z&lww7ep..d.%..xi.. m....I.,.\|cf.Wi/..D.C.m.^9x...+ a..<U..=.Dy..i]..M..{ll....k.b...H.07Y.W.x.F. ..vMZG.....,G.F., ...M"a..C...g....A...Ht...b.1g."....l'.=.0.Y.7....bl\|......;.mi..ww...}..^.84.._(.#.?'2......f.5%........8..B......7..4.....j..s!.@[.Q.D+.<%aJ.L....#...p..M\|.1.vH.....0...d.?~L?}.%.=zD....#..M/...>...../`..j.?3H@.6..O..v.8.0.O>.H...\..C...g.......RV......D"..%.../....._.....j);....]P..o.Q

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{B29B87F8-6960-44C6-A5B6-B7C6AEB953DB}.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	23108
Entropy (8bit):	3.5688787659581713
Encrypted:	false
SSDEEP:	192:R3ABdtUaUl6k00Yl6k0x3daW0Fgwy6aks8Yrgws6hob6jj6V36x:R3AB/0z4ytaWygwVsngw
MD5:	19DFA61B9F8A5758624AA0F0F22143B0
SHA1:	9A1C6325CA098E10B93340791D2DDAFCF125D66B
SHA-256:	D3C61FB3680041C45F7DC8E364EB983FDD8652BEDDCB2457DD0C1892A2B84BB2
SHA-512:	34DA635D84A2CE06F2DDE8BDA49DFFE3CAFC6B8AD60CEC8ECA7CBD53DA6D0ABED6AA14B300239FDBFBB60A0C9B59B931837D2ADEE5B5A46B609DDC02A7580878
Malicious:	false
Preview:	....A.V.E.R.T.I.S.S.E.M.E.N.T.:. ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................\|...............................................t............................!.................................................................................................................................................................................................................................................................................................................$.a$.*...$..$.If........!v..h.#v....:V.......t.....6......5.......4........4........a........

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728027023132735900_E7B650C9-51C0-42DB-BDEC-F0192B87EDC9.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with very long lines (28799), with CRLF line terminators
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.17717358236182623
Encrypted:	false
SSDEEP:	1536:Xzp3+Uc4Tmumv+Tcuvx/xrdd8RoLr9juBVc/eyl/gIdnVx+Bh3WD:MUNBmv76J5/e
MD5:	F9B97B883742F99E41376DEFD51D6D0B
SHA1:	D8161D59A0E338A4B23E69CCA56798250880B81D
SHA-256:	2196C63B9E8851071B8F7124054DAF18BCF7E236A5BDF81A8FAC9B74A4D77DC1
SHA-512:	62838C1E644E1B5CFE6EA71BBB5D71C0685CACA0FBC538FA0BB1485FA00355625A2237DEFD4715F6C7192E7B70E5EA078FF13158BC8BFBAA7F313675A91420F0
Malicious:	false
Preview:	Timestamp.Process.TID.Area.Category.EventID.Level.Message.Correlation..10/04/2024 07:30:23.188.OUTLOOK (0x1978).0x1974.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Text.GDIAssistant.HandleCallback","Flags":30962256044949761,"InternalSequenceNumber":23,"Time":"2024-10-04T07:30:23.188Z","Contract":"Office.System.Activity","Activity.CV":"yVC258BR20K97PAZK4ftyQ.4.9","Activity.Duration":12,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":true,"Data.GdiFamilyName":"","Data.CloudFontStatus":6,"Data.CloudFontTypes":256}...10/04/2024 07:30:23.204.OUTLOOK (0x1978).0x1974.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Text.ResourceClient.Deserialize","Flags":30962256044949761,"InternalSequenceNumber":25,"Time":"2024-10-04T07:30:23.204Z","Contract":"Office.System.Activity","Activity.CV":"yVC258BR20K97PAZK4ftyQ.4.10","Activity.Duration":12025,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":true,"Data.JsonFileMajorV

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728027023133566500_E7B650C9-51C0-42DB-BDEC-F0192B87EDC9.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	8F4E33F3DC3E414FF94E5FB6905CBA8C
SHA1:	9674344C90C2F0646F0B78026E127C9B86E3AD77
SHA-256:	CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC
SHA-512:	7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241004T0330170624-6520.etl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	94208
Entropy (8bit):	4.463891348983887
Encrypted:	false
SSDEEP:	768:MaQjioFDZE4YxaX64Mt1ygI9YxR7DQTBXy5xVWkwWlWdWWWACz1:SY4eI9YxR7D8BXy5ROCz1
MD5:	E08CCED6D9D268282CAA4E5C417DCAFA
SHA1:	BEAE55FAB02E36D9DBA5A433A4297617F3DEC00C
SHA-256:	4025E078C9533AA38AC8D0CB580F132D38647AC1C63F0064F29550FFF0633B50
SHA-512:	B015F072F412D062BC82CB8C10657284F26101A4722CFF70360CCFE888B44B183F260AED771297141508ECE72D7A5F60DEA5A8207BDE23C4E094F2695C3E5CF3
Malicious:	false
Preview:	............................................................................`...t...x.....B/...................eJ..............Zb..2...................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1...........................................................p..D.Y............B/...........v.2._.O.U.T.L.O.O.K.:.1.9.7.8.:.a.d.b.c.6.6.9.0.c.3.b.b.4.6.8.9.a.b.5.7.b.9.4.e.f.6.3.3.f.0.f.e...C.:.\.U.s.e.r.s.\.c.a.l.i.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.O.u.t.l.o.o.k. .L.o.g.g.i.n.g.\.O.U.T.L.O.O.K._.1.6._.0._.1.6.8.2.7._.2.0.1.3.0.-.2.0.2.4.1.0.0.4.T.0.3.3.0.1.7.0.6.2.4.-.6.5.2.0...e.t.l.......P.P.t...x.....B/...........................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF55CEDDF862EEFE47.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.3613836054883338
Encrypted:	false
SSDEEP:	3:YmsalTlLPltl2N81HRQjlORGt7RQ//W1XR9//3R9//3R9//:rl912N0xs+CFQXCB9Xh9Xh9X
MD5:	679672A5004E0AF50529F33DB5469699
SHA1:	427A4EC3281C9C4FAEB47A22FFBE7CA3E928AFB0
SHA-256:	205D000AA762F3A96AC3AD4B25D791B5F7FC8EFB9056B78F299F671A02B9FD21
SHA-512:	F8615C5E5CF768A94E06961C7C8BEF99BEB43E004A882A4E384F5DD56E047CA59B963A59971F78DCF4C35D1BB92D3A9BC7055BFA3A0D597635DE1A9CE06A3476
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFABE4F6AA711E68F2.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	163840
Entropy (8bit):	0.33281755637930327
Encrypted:	false
SSDEEP:	192:epZNayCYHeu0o4VlmkPZV16WNgz0XHWQOAIAbAFAqwNh/:oZYOH1R4/ZV165z0XHOAIMu
MD5:	EC51150F2683BC740E9E0C41FCDC65A6
SHA1:	8D8C44D7148968361E7994B3D993E0D214E80DB6
SHA-256:	B8150D19F89B887F2F65EB5C6CB4095B8D1C19BB155CA08EC2D47426EB426E65
SHA-512:	287630973F6F3D7ECC7DCEE25CECAA73BEEBEA76506751772A0D724A27458DBDE88F6295FC8E89809B6E2FE3FA63EFCDCB7B31C82846CFC04664D6FC71D008C7
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFBEC12CC2DF614C7F.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	1.172253928364927
Encrypted:	false
SSDEEP:	3:z+X:
MD5:	1F35231962F4BBCAEE2EF10AFB8CA7E7
SHA1:	8F1C24DB8E1AC922A4F2C5A05ED361719192E2B2
SHA-256:	562FB6A7C7793F0823DA58C82819C7F99076588C876C2F87327887EB402F7313
SHA-512:	9BE5E28A517744C2807BE2BDB3F0E3544BE72467DFA758228A66A4222C1544F99F3706DD21C8EA40D761ADA2543D8D28C68A43D602EF42E05895A1CEE9621256
Malicious:	false
Preview:	..............................

C:\Users\user\AppData\Roaming\Microsoft\Outlook\NoEmail.srs

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.6705720258086854
Encrypted:	false
SSDEEP:	12:rl3baF0SkZqLKeTy2MyheC8T23BMyhe+S7wzQe9zNMyhe+S7xMyheCZ:rikwmnq1Pj961Z
MD5:	F4BB71606FBD077C971E328B105F539D
SHA1:	6AD9F5345B945813FFFA8801E21DB847A0987B18
SHA-256:	705DF0541E421A3156CC9AF6F8D71BB626AF3A0863211A590E909F0F2EF1FF6C
SHA-512:	0A651069AC122074890738C24D1F4BBF0F27410ACD0456A77D0D895D429A056FD8BFDB3FE7CCB1C59F4132CDCEEA14375493D13CC47A57260466F15DCA69A697
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	modified
Size (bytes):	14
Entropy (8bit):	2.699513850319966
Encrypted:	false
SSDEEP:	3:QGiWlG:QGbY
MD5:	C5A12EA2F9C2D2A79155C1BC161C350C
SHA1:	75004B4B6C6C4EE37BE7C3FD7EE4AF4A531A1B1A
SHA-256:	61EC0DAA23CBC92167446DADEFB919D86E592A31EBBD0AB56E64148EBF82152D
SHA-512:	B3D5AF7C4A9CB09D27F0522671503654D06891740C36D3089BB5CB21E46AB235B0FA3DC2585A383B9F89F5C6DAE78F49F72B0AD58E6862DE39F440C4D6FF460B
Malicious:	false
Preview:	..c.a.l.i.....

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 06:30:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9819306522600346
Encrypted:	false
SSDEEP:	48:85dVT9B4HKidAKZdA1FehwiZUklqehqy+3:8Zjt9y
MD5:	D19E438BEB547497AF6E8BFA95D16A91
SHA1:	01EBDF695851B1910E2BCF802E30CFBDDA1BF9F3
SHA-256:	D85B24AD2DF73DC6ECB9D29977077853E0C2DB312CF1A914315F1A6F8FEA20C6
SHA-512:	7DB86AD6679A3CE8F98C58545858465CADF51D8D5219351C8203055965EF8EEA9EBFE40161BB614A8DE6AD2E50592D696EC8EECB664F017BDFC7CD5E2DC5C96F
Malicious:	false
Preview:	L..................F.@.. ...$+.,....U..L/...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IDY.;....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.;....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.;....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.;..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.;...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........F.S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 06:30:33 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9970765893394846
Encrypted:	false
SSDEEP:	48:8DdVT9B4HKidAKZdA1seh/iZUkAQkqehty+2:8vjD9QAy
MD5:	F386AD6CC3D60C62171B3B08AFD7FEB8
SHA1:	19DD1E79DA34800804B34D6B3980093515F3EC36
SHA-256:	B3B9541E54832F5E56D0ED462EB765EF473FABF18D59EC799C1EEDAA348E30DC
SHA-512:	F83A29C472F05604DD05F3D8459BCDDB4592EF43A8891A060EC960656E4CBF0AA7C8E611ACE570C26D5786045EEED4293D0F23B6B2BA7AE66A3D3B7F259750D3
Malicious:	false
Preview:	L..................F.@.. ...$+.,......iL/...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IDY.;....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.;....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.;....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.;..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.;...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........F.S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.007380727978395
Encrypted:	false
SSDEEP:	48:8XdVT9BAHKidAKZdA14meh7sFiZUkmgqeh7s7y+BX:8rjfnBy
MD5:	9D7C0489AA3BE760DAE51CDDE7D64C5A
SHA1:	0B6DFA3FC20535157E37E335DB794D2460D69DCC
SHA-256:	9EF1143ABB1CDE5F349788AFBA32889945F61490DBD3ECFF3863FFE71D2288E7
SHA-512:	7DFE2E77A4E4275C391B51B2B857275FF31B922863DAC6F49C56C8D92B14DF7E5B0A897E149BA6632AFD8D97828603E9280AC9D1FE5F83077D47630F455B6D13
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IDY.;....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.;....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.;....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.;..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........F.S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 06:30:33 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9954298105843273
Encrypted:	false
SSDEEP:	48:8fkPdVT9B4HKidAKZdA1TehDiZUkwqehpy+R:8fkzjwDy
MD5:	D4AC31861714C0A4E1F0391BAA420545
SHA1:	AB9B3BC109DAFC0936CFEB05A628DA7956791539
SHA-256:	9FCC6FC4046BC6AF8A69E0D6461691F9D21F17952EB3B7295937E09AAF173238
SHA-512:	87BE14C084DF097E31C2275C26E97C63183530D77A1E4866FE97349A158E26E9A085B9822BEFBB2A587E20810F8529AB328B20ADC3FD3A11277E28C98412D701
Malicious:	false
Preview:	L..................F.@.. ...$+.,....1&ZL/...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IDY.;....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.;....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.;....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.;..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.;...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........F.S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 06:30:33 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.987436801550077
Encrypted:	false
SSDEEP:	48:80dVT9B4HKidAKZdA1dehBiZUk1W1qeh/y+C:8KjQ9fy
MD5:	531C929AC5BE3D5AB6E3B949BF3A1C97
SHA1:	539FFD3FD9459C70929FE6AFFDBCB061F8B6A7C6
SHA-256:	6F6277553CEC868C7472A7BA3A4118CFF9DD7CCAF1FBDA146DD1F7B6F99C5191
SHA-512:	D7C6769925346D102C2C11D6ADB0C8C4C9026DA86F6736A25BC5AF0B2E2A6207209447822F550BC3F771DA99A4C1E0B86B074FDB75239EF1942060ADE2CF15F8
Malicious:	false
Preview:	L..................F.@.. ...$+.,......zL/...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IDY.;....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.;....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.;....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.;..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.;...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........F.S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 06:30:33 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9939376606651655
Encrypted:	false
SSDEEP:	48:8vjdVT9B4HKidAKZdA1duTeehOuTbbiZUk5OjqehOuTbBy+yT+:8HjCTfTbxWOvTbBy7T
MD5:	78A29AC4D96220FF38C2FE4ACC8DFA2C
SHA1:	278BDC9F581492481A78393D11FE9C71B29C343E
SHA-256:	9BA26CB63AE377E944B3288C184FFAAB8AE042DB964FC4B4E97553526189BE5F
SHA-512:	81AAA7C505944FDAF1A286F33FFC42A0CD969DD93418229D9ABC45EF5689595AC17EDE07675ADD6855773F71446986A78736A4F9EA7E829E4AD0ADE5CF717178
Malicious:	false
Preview:	L..................F.@.. ...$+.,......IL/...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IDY.;....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.;....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.;....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.;..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.;...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........F.S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Microsoft Outlook email folder (>=2003)
Category:	dropped
Size (bytes):	271360
Entropy (8bit):	1.1512975865324302
Encrypted:	false
SSDEEP:	768:6TtQcayAOlMqk+ritDVmHdV2G5Y8BUTIZ:0ju70dRYeNZ
MD5:	97112F861FB74B6DA518D114826D2540
SHA1:	91EEB740FE70B575C775B9699DA50E1875E8EC0B
SHA-256:	926B7C30DE6D7E53132B66FED90591727F6E964301827EB0B0F18F01A689AF16
SHA-512:	585F9540BD25ED4FACFC441E451656AF1D0D2F2762C0C10ADAFD97471CE96EAB39636955D12FF196E184FF7197B28B1AB2EF910EE1F58046AEA9DFD9A3963FA7
Malicious:	false
Preview:	!BDNT-..SM......\...(...................P................@...........@...@...................................@...........................................................................$.......D......@V..............*...............-...........................................................................................................................................................................................................................................................................................h........T..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	1.270492240133339
Encrypted:	false
SSDEEP:	384:TMpdsiRAMRyartLT2LGN9FPWYSJ7W1R7fiE9G0yYjTIXJ9DeVqHo7t:TMIUtIGLmYT8BUTIZ9jo7
MD5:	77E656D168250C26B15568B67D9DE9C5
SHA1:	586A359FA1A9469958179B5756508DEB4509306E
SHA-256:	4DC572D18564F4198D2FE57EBBE3399C40167A76E1AB415B9B656A7BF9518B95
SHA-512:	2FD5CC146896D779DA3CE311C12BE838D19058778048A0FF7DE1CA5F345DB461C701E55DB1EF65E88320F09EDC30360AD1D9A8B31635BE4CCE6D314F1D222216
Malicious:	false
Preview:	...{0...`.......x......B/........D............#...........................................................~.............................................................................................................................................................................................................................................................................................................................................................................................................................................................D.........W0...a.......x......B/........B............#.........................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
Category:	dropped
Size (bytes):	49804
Entropy (8bit):	7.994672288751266
Encrypted:	true
SSDEEP:	1536:SMuttwJ0uUmAcZjNL6nnQlL+mwKLiQC7Mn3dxPErr:SwJ0vmAcKnnQF+8LJOMn3DPE/
MD5:	6DE768A4DF1E0D0061CDB52EF06346C4
SHA1:	3829A667B97668008023DDA98F4C0772174C8EF6
SHA-256:	58732EEE2ED9091F4F5776DC8A8A14116CBE5A2BA1CCDA0256896BAB08A52128
SHA-512:	CC6966D2C2B43E762750102E734DA6B88D7BFB92DDB5D482EE25029337D95E997466E83001586F2B63DAEE890B5F3188E8EC0F1B084D5EB67CFEA55EDDFAD47D
Malicious:	false
Preview:	...........m[.8.0........OL....;w..nf.0.ff.X.'V......4.r~........=........,..JU.......T~.l..?..E.....X..\|t~P9...TN..G..?^.~.............Xx.0..Q..Fa4.#7.q...F.;......4...Q.W&~.@....O.T.y.37J.+Ggf...P....Pz.N...>..a.D..<.m./A,...Q.....WN.Q...8.Db$.G.H<...'....J,..8..{nG.2@HYkL../......=.pL....A?.&Ng.i,......2lo...$.<.3...?~pW..=...L..&x.QR.u3..#6q2....U.Y1..".M. .<W."7@......w..."H,@......0..P....p:...[...E].A..%..V.K\.......F.ir.}.Lc{s..O.g..(\|.........9o..A.t.K....Wv.l6..T.......t.........+..........-w {l..g...V..\=W.j.oaT}t.J`E..$W......;.k.\.t.w~}".....jf..W..."..a..0y........@.T.1.G0........Y_....../..........@.....]+....q\.cR.....t.3S-5g....'U.j.d......y.n,:).\|.?.FW...d...\|.......*.`.3....kMKf...#..,DM.TY+..g.........e+.>...{y..N/..g-#FV.V.p.......Xs.(..{..}..-.O..H=."...........8M.g..!H..0.~.Tdf.;...$D%N .)..!..V...'r\.... ...&....J\|."Nd%D:uw:.<W.+...H&.Z...L=..U.v....J.t.0%+...U..3M....y...L..G...p='.....pB"-..\|.....j .a".i=O.R Q2..."...

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
URL:	https://logincdn.msauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449703
Category:	dropped
Size (bytes):	122193
Entropy (8bit):	7.997505273485286
Encrypted:	true
SSDEEP:	3072:H4ojbjOwCNA0H+Zenw+OA6m3SmjcnlDHG21TIoN:dHyi0Ity3wnY2lIA
MD5:	AF2A7A4929E13F15A045C8C8D80A4543
SHA1:	6A1EC81A5085D0846C77DD616AE686FF732C32D6
SHA-256:	EB47C5509CEF44C582EF8ABB8C58766EA6118AD40B0FFC22A7652ED1DC6FEE8B
SHA-512:	D3B1FC08CB7DDE27E9A16B749B0024A9F11D5067B0D023F8EB2E468533297DFC5BD7739C9B696F8D11D269350FA5F2D329FE6ABC4AB679888FDC97B2450DB336
Malicious:	false
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.QX..................Oix..).NK7...KW...........`....G/..=......[..R......Y....KS.7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...a.^.]..a.X&......2.o...$,..s..l<^0)..1...Yu..w.$..0c.=c.}...xT"d....{..@.&.. .es0q.$bl.D..1:z+y..t.F..X.....qn.../fUI...q....r.f.wk..Q.Y.I2.....<.GU'...\|..1t.y...{....w..y.s.+.t5.A.J.............$...}...k.......tu........;Vf...]...\|.Q......Z.].^...q..VMw........`.<..;;.....{}0.US..O..m..v<x..%3..Tu`...U...;.~{....c.?....?...v ..-E..2......{+..*T.....p....S...qR..+K1@k..mkQo...A........]p_.X2........B.....I..3..7..]d....@.bX....z.g...\|..V-K[..^(..y...^N.^..oJF.kQ.P.R..F..om.B.pL.<F....R...(..i..,......I.F< ..T...`1.W3....L....+.S.M.c....110..........H....E,O..v..l..=...H$.J..J....4.C..dzPI..S.B@RJ.V>..GJ."/.eEwC..Q}d.k......KN\|.i...=.....!.V....<%J.D......b

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19
Entropy (8bit):	3.6818808028034042
Encrypted:	false
SSDEEP:	3:uZuUeZn:u5eZn
MD5:	595E88012A6521AAE3E12CBEBE76EB9E
SHA1:	DA3968197E7BF67AA45A77515B52BA2710C5FC34
SHA-256:	B16E15764B8BC06C5C3F9F19BC8B99FA48E7894AA5A6CCDAD65DA49BBF564793
SHA-512:	FD13C580D15CC5E8B87D97EAD633209930E00E85C113C776088E246B47F140EFE99BDF6AB02070677445DB65410F7E62EC23C71182F9F78E9D0E1B9F7FDA0DC3
Malicious:	false
URL:	https://antiphishing.vadesecure.com/vadesecure-logo.png
Preview:	404 page not found.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5316
Entropy (8bit):	5.11748772056844
Encrypted:	false
SSDEEP:	96:SBfabD3b6dM1pLAm4fVapBDe8X7JAAHnlB3uMn2Uj1nOEYPwyjCtvOSP:eanb6dM1pLAm4fVuDe8rOAHG02s1OEYW
MD5:	776B2BD1CD566295034971A14FE80D20
SHA1:	247BF3960EF481D0BD127CCFA962CEFC680B9D50
SHA-256:	08D7C39E3772D4A8FAA3238C7E03DDC11CE28E469F815911C153178FB4BD9E04
SHA-512:	CCDC9ABFB18B6B0080C530C3B03A90E8C7901E38FACDD6F3A0BC747A95D3254F822A3861AFF88E135B11C1EA5B4AF1EF81C49670F5C01DE794A5566B6DB6C4D1
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Calque_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 417.6 258.9" style="enable-background:new 0 0 417.6 258.9;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;stroke:#3D505B;stroke-miterlimit:10;}...st1{opacity:0.38;fill:#C3D2D8;enable-background:new ;}...st2{fill:#C3D2D8;stroke:#3D505B;stroke-miterlimit:10;}...st3{fill:none;stroke:#3D505B;stroke-miterlimit:10;}...st4{fill:#6A00F4;stroke:#5500C3;stroke-miterlimit:10;}...st5{fill:#A549FF;stroke:#5500C3;stroke-miterlimit:10;}...st6{fill:#6A00F4;stroke:#5500C3;stroke-width:1;stroke-miterlimit:9.9996;}...st7{fill:#FFFFFF;}.</style>.<g id="layer_1">..<rect id="Paper" x="125.1" y="63.2" class="st0" width="165.6" height="195.2"/>..<circle class="st1" cx="137.4" cy="73.4" r="2.8"/>..<circle class="st1"

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://acctcdn.msauth.net/images/favicon.ico?v=2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	3.8512137721714885
Encrypted:	false
SSDEEP:	48:HHFLpla1btjzvj3ijqjOj38jqEjoOji3CnkcD6YcUe0l+5+Nu:HH1pla7MKkE6/u+5F
MD5:	94B32A451FB1DF3F887BFA39540F993D
SHA1:	2CB4A55B8FF777073B6F3C73E2AA3BCD00A4903B
SHA-256:	87FF3643EB0D5FB9363F6AFDD5FE811DAED551B2F80BB69163A97803FCC06044
SHA-512:	90BB8128CE24E9705773E39963A620539611485B2E8732EA5082EBC8AF174FC4A233A99BD07DA67846CABDCC4D6AC51722A8292579A775A97102FA3434612BB2
Malicious:	false
Preview:	...... .... .........(... ...@..... .........................LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG............ ... ........LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG........=......................f....LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.Lp

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
Category:	dropped
Size (bytes):	254
Entropy (8bit):	7.066074991728423
Encrypted:	false
SSDEEP:	6:XtS8G99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:XAH99kRX1YQBDFCnDXdWYtrE
MD5:	847A4212B99B9076EE39328B24CD30AF
SHA1:	73F15078CF1D396485F644A79B6E25EF0637685D
SHA-256:	29DC0C26C372805325EB7EB926769E832A60B47BEF96A66436EC3EC05CD6128E
SHA-512:	9AF77E9ED8BD9A39A47F36AAC2D01B5AF5D56C04CD933427DF95CC80904D7EE7AC3F7F9443D8AEF236CC84FB4DC4CC335AF0BF8F9BC0C13D720187096D149220
Malicious:	false
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32915), with no line terminators
Category:	downloaded
Size (bytes):	32915
Entropy (8bit):	5.248079629087054
Encrypted:	false
SSDEEP:	768:JXJXUUOzJnvjS92/hM8Y0suWC1dVLb0d7WaxRqyNL6Qm97o1txhxKGRd:On3ECLod7lqyNLbm97o1tvJRd
MD5:	B9C918128D594300A4E0240611439A74
SHA1:	08DA04E6068B3FEF9B70B7E689B05F1A1FDCE411
SHA-256:	8F22F067C478666AF71F92EBE9991946DA07D6C8F2C343BB6129D97D27F66737
SHA-512:	21E7DAAE87EA158225BE4D934CDA1C040BEEDD64AF9D41B41EBBDCC0A3BE46AF545D22DC9D57375818C1A3F35EFD87B799418EDD36C87AAC71635574105F3687
Malicious:	false
URL:	https://antiphishing.vadesecure.com/4.efcb4f36899adf4857d1.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{J66h:function(module,exports,__webpack_require__){var __WEBPACK_AMD_DEFINE_ARRAY__,__WEBPACK_AMD_DEFINE_RESULT__;!function(l,n){module.exports=n(l)}("undefined"!=typeof self?self:"undefined"!=typeof window?window:"undefined"!=typeof global?global:this,function(global){"use strict";global=global\|\|{};var _Base64=global.Base64,version="2.5.2",buffer;if(module.exports)try{buffer=eval("require('buffer').Buffer")}catch(err){buffer=void 0}var b64chars="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",b64tab=function(l){for(var n={},t=0,u=l.length;t<u;t++)n[l.charAt(t)]=t;return n}(b64chars),fromCharCode=String.fromCharCode,cb_utob=function(l){if(l.length<2)return(n=l.charCodeAt(0))<128?l:n<2048?fromCharCode(192\|n>>>6)+fromCharCode(128\|63&n):fromCharCode(224\|n>>>12&15)+fromCharCode(128\|n>>>6&63)+fromCharCode(128\|63&n);var n=65536+1024*(l.charCodeAt(0)-55296)+(l.charCodeAt(1)-56320);return fromCharCode(240\|n>>>18&7)+fromC

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65439)
Category:	downloaded
Size (bytes):	90677
Entropy (8bit):	5.331203510001561
Encrypted:	false
SSDEEP:	768:FVEDx3ySKZOP00d5TjMSYzSRRM1d0YjSRpUKHHacTItx7vtn1yC0JalF1rmq6Llb:v+0Z9yFrGi8SRGfyC0JalFx3gKa7
MD5:	57FD0FB79B8289945CA246DE0908D270
SHA1:	7FC9AB444778E83D566F35102D604969ED50576D
SHA-256:	EB327424AA27D47E4499187303774F8F22557359DB3C6BB583E033E07DD0B337
SHA-512:	99F654C722C50C08BB1C68A18BF6EED1FDA1E4CCF6D30BE65BFA6F24B21BA2F1995870C8CF54E820655B41497716DDFDD7487E0A33C121B322F705FA37E5DA09
Malicious:	false
URL:	https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js
Preview:	/! For license information please see oneds-analytics-js_077217740c853b5d4fe8.js.LICENSE.txt /."use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[471],{2278:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore:function(){return qo},ApplicationInsights:function(){return ja},BE_PROFILE:function(){return Vo},BaseTelemetryPlugin:function(){return di},Cloud:function(){return Vi},CoreUtils:function(){return Hr},Device:function(){return Xi},DiagnosticLogger:function(){return et},EventLatency:function(){return Ga},EventPersistence:function(){return Qa},EventsDiscardedReason:function(){return Ho},InternalAppInsightsCore:function(){return Ko},Loc:function(){return $i},LoggingSeverity:function(){return Wa},MinChannelPriorty:function(){return $a},NRT_PROFILE:function(){return Wo},NotificationManager:function(){return Uo},PostChannel:function(){return qa},PropertiesPlugin:function(){return Po},RT_PROFILE:function(){return jo},Session:function(){return B

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2444
Entropy (8bit):	4.6547645458915685
Encrypted:	false
SSDEEP:	48:Kk+fLBlpByk3smM6j3xQwQp97R7hN/gyFySiIK3WKGLAH:mfdluk3Vfjx67pBiIK3Q8H
MD5:	C7A394F950B4464C3333972349CBEA1E
SHA1:	38149F545C42265641AF887951C02AC98C2BBDA6
SHA-256:	7E77BE3B81880130E86E5025825504F4AC6608C3BCB9EDCB92342ED01BDA52E9
SHA-512:	29493B2A3CB0D787841A3FFFE46E068F57F80766951452EDD61398096FED52606C1981456AFE4D1EB480AED5F9A55C9E7AA3FB571987B30BC7C5380121C4337D
Malicious:	false
URL:	https://antiphishing.vadesecure.com/translations/en.json
Preview:	{. "CANT_FIND_WAY_BACK": "Can't find your way back?",. "clean": "The site is clean.",. "cleanRedirect": "You will be redirected.",. "exitPage": "Leave the page",. "followTheTrainingClass": "Stop falling for phishing",. "goAnyway": "Proceed to the page anyway",. "goWebSite": "Proceed to web page with caution",. "ifYouBelieveThisWebsiteIsLegitimate": "If you believe this website is legitimate, please proceed to web page with caution.",. "internalError": "Internal error, retry later.",. "letsTakeThePhishingClass": "Train yourself",. "PAGE_NOT_FOUND": "Page not found",. "phishing": "The web page has been identified as PHISHING.",. "phishingContent": "Phishing is the attempt to acquire sensitive information such as usernames, passwords, and credit card details (and sometimes, indirectly, money), often for malicious reasons. We advise you do not visit the page.",. "running": "Security analysis in progress.",. "suspicious": "Warning: suspiscious li

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113401
Category:	downloaded
Size (bytes):	20414
Entropy (8bit):	7.979508934961097
Encrypted:	false
SSDEEP:	384:ekqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IMU7ULgCsHqZo9v8:9CGEiL/w7R8DW9Z5BU7UMZHqok
MD5:	48981D3CF57E7C58CA7E3E851EF9354E
SHA1:	73593DE7633B10F9FFD0EF0E46280FA40FF433FF
SHA-256:	8A5E756923CC5C3F013862427B7622F58A52501C5A6017FFF2FDB2AFD94A10C2
SHA-512:	4E2B6EA222CE77E6EC12E059362DDDEA13758CDC77259FF5CF449BED5A1677E112CF49CD7ED7B1378F96FFD7C5E21BE66D2CA7EB2A9CD8026732F867FB5AE8B1
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	559431
Entropy (8bit):	5.234425173350185
Encrypted:	false
SSDEEP:	6144:nb6nSdNJpxC1UdWEJozZhu5loL6TwUmI8pzvW7730xP:cSdndUZW2Kt7730xP
MD5:	AC8EDEC8F1D8160FF62ACA4822330255
SHA1:	C7882AE94C0850C9FB0108002FE4C71001B51D08
SHA-256:	89F871A93A4F7BF7DB98650303C08884AA602133455AC7B2E1EE199C4617C168
SHA-512:	EB7AFA78A25E98777355CC75BF1BE7A97DABAF0141EC5C813A4B952599E4F13E01A99FAABD5867478DC25D1A17E0A0EDE5B63BD2BA70C6371A0F7FABF629D333
Malicious:	false
URL:	https://antiphishing.vadesecure.com/main.3791483c41ff7549eac3.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+tJ4":function(t,e,n){"use strict";n.d(e,"a",function(){return r});var r=function(t){return function(e){for(var n=0,r=t.length;n<r&&!e.closed;n++)e.next(t[n]);e.closed\|\|e.complete()}}},"+umK":function(t,e,n){"use strict";function r(){}n.d(e,"a",function(){return r})},"/WYv":function(t,e,n){"use strict";function r(t){return t&&"function"!=typeof t.subscribe&&"function"==typeof t.then}n.d(e,"a",function(){return r})},0:function(t,e,n){t.exports=n("zUnb")},"0/uQ":function(t,e,n){"use strict";var r=n("6blF"),o=n("/WYv"),i=n("2ePl"),a=n("xTla");var s=n("En8+");var u=n("IUTb"),c=n("pugT"),l=n("S5XQ");var p=n("u67D");var f=n("JcRv");var h=n("Fxb1");function d(t,e){if(!e)return t instanceof r.a?t:new r.a(Object(h.a)(t));if(null!=t){if(function(t){return t&&"function"==typeof t[a.a]}(t))return function(t,e){return e?new r.a(function(n){var r=new c.a;return r.add(e.schedule(function(){var o=t[a.a]();r.add(o.subscribe({next:function(t){r.a

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2624), with CRLF line terminators
Category:	downloaded
Size (bytes):	2745
Entropy (8bit):	5.664931949062292
Encrypted:	false
SSDEEP:	48:t1XXw+kOhX/BxVgnK/Q6GiuGq9juwbae13NhcKBLd4r0+99mZr06i+2ih5O1VDaT:H9W3iuV96wDrHBZ4r7mZoka72jn/
MD5:	4FF39708E79AB6393B5DF9ADFE141E09
SHA1:	743881B39BD76D3FC445C5ED4512445C04D70182
SHA-256:	1FDDD9632C2064739BD943391BCC96AD909B62DA80F7EA885849E5A95785B2F6
SHA-512:	1173565A84C335F34763681B8E6A40B311B8A4A812FF4ACDEAA25BF0836261DBAC05D219505D946D74FE4B05153F0B3C4DDA8AD40BE8834AC5C8FAFBEF8804F8
Malicious:	false
URL:	https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=cf8956a1a080a000077a8ffd4e235bc5&id=81a06a8f-e7b2-172f-4ed1-7f556ad79d68&w=8DCE446860F77DA&tkt=taBcrIH61PuCVH7eNCyH0APzNoEiOrOqF4FbdtfiWWKJawuFYIyBNo6m52bUdgWwMITHXXZpJ2ipVkOZyLMGc0WKsBQCWZi7b%252bxHRi8kkUEJogl0LfAz5qM%252bBIm5o1tMmtCbCkqe08MltZHj7ULALu%252fQZQw0Kb9k5magbIkmZc72cStOqwdaT61Xc1iXuwuhQVAcF3N36x3lts3tLjf%252bFviy1YOC9CQDfgX7DB9eCFvm6n4sx%252bW0O2d8DDCT8dcmRhN4LyAaO2F3Q313lfEVuGU8NNtnQGXaDMhlUnsU3qWWp3sK1KQ3bwObIlabXG39&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>..</head>..<script>function BaseStamp() { this.GetStorageQsInfo = function () { if (window.localStorage) { var n = window.localStorage.getItem(lsKey); var lsupd = "False"; if (lsupd === "true" && n) { var xhr = new XMLHttpRequest(), method = "GET", url = target + "updatels.html?ofid=" + n + "&session_id=" + sid + "&CustomerId=" + cid; xhr.open(method, url, true); xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE && xhr.status === 200) { var update = xhr.responseText; if (update && update.toLowerCase() === "true") { window.localStorage.setItem(lsKey, id); } } }; xhr.send(); } if (n && n != null && n != "" \|\| (window.localStorage.setItem(lsKey, id), n = id), id != n) return "session_id=" + sid + "&CustomerId=" + cid + "&fid=" + id + "&ofid=" + n + "&w=" + ticks + "&auth=" + encodeURIComponent(authKey) } return "" }; this.newXMLHttp = function () { var n = null; return

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	dropped
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65470)
Category:	dropped
Size (bytes):	945160
Entropy (8bit):	5.410027230508284
Encrypted:	false
SSDEEP:	6144:2uEP2IUNxO5HyGdefrMDJgmZMSePbrGtvjFqnziHO+cHNlA4f5uJAn8ABP+4zMD7:5syg90PbWvjQ+sNpZ8ABPe
MD5:	6A888AF8E205D21FE1A9C3DC7DF23D77
SHA1:	6500A0AAECC2B43E5D952865C97111037CC19247
SHA-256:	53EBABDBA4E6157F44278BB006DD5A862A38731B450E104019D03CBA9AEEAC35
SHA-512:	498DB4161790C2F15FAFFC4368470C812ADD7E338DDB7CAC49840AF6FEF95414737748430B6483BBCFA243DA6BF98752F5BB9BB36F287DB6C6D5F7284CB2EE7B
Malicious:	false
Preview:	/! For license information please see login_en.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function s(e){return r.isMemo(e)?a:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=a;var c=Object.defineProperty,u=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,p=Object.getOwnPropertyDescriptor,f=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(g){var o=f(n);o&&o!==g&&e(t,o,r)}var a=u(n);d&&(a=a.concat(d(n)));for(var l=s(t),m=s(n),h=0;h<a.length;++h){var b=a[h];if(!(i[b]\|\|r&&r[b

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7007
Category:	downloaded
Size (bytes):	2419
Entropy (8bit):	7.9084162154611555
Encrypted:	false
SSDEEP:	48:XMZLME8ac0UTyw+G0mNbF8pDRfciXxBce7Fh5hqoucAKFBwMJiUh4BTiFT:70Uh7NapDbNl8oucAKFSMJzhn
MD5:	9FAF36E3F793E68A83548EEE5622A222
SHA1:	220342B65C5563A249E462B779F2DC46BE3AD5A8
SHA-256:	E16E9ABCEFABFF8B5DD9895E4331F137E94A3D64354AD989951342A1B2813A39
SHA-512:	49B8E11A9B32FF76E7A5090D1E0C8CEFD4B9EDE08A8346DFB186B6DCCE2F712F7446CA944C01419F83499329CE1BDC296DCC32BFABE8471BB5A945E0CD0485F8
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js
Preview:	...........Xmo.8..._Ak.D....8U...l..&9...).Z.-..)..._..~C.._......$....p.y.C.~..A.......=ow....~.n_.;x.....^.._.G....J4.!Ap.cI\|....Q.q.s...(..............N<%QH..I}...2A.....j...,....F...l..S...b\Q. ..T[..L..0..4.......\.B.x....L`.l.FX.$.B..T.......LfQ.......p......)....,Z..,.:KN.i..> ..'....P6D..H.v..B...'.rJ.D...a.8....Kj..y.A@.S4..... qx(...S6...S.SD...IWf#"..c....'T....B.%g{.w..z.Z?...V.P..ZmHU....G5.'..Kp..........w.M.....>x..x.)+l.-G....."....B.........e..G.9...4MH?.....P.n.{z...r.D.....o..a..9H...eR...z.cH...=..p.[..K.9\.-..u....-\..aM.HxG..... >$.....].t....c...kf...Qd..:..j...4..I.j.....aG.uR......G..8...........@I.E.vR...R.+p$.>......g........fT?^...=.Z..?).....)..i...D...../...G0.....RP.~ ^...[n.H%.6\9...S.\~.W../...G}:\DqjfA.n.@.#.c...?.".Y....c..h...G.m$.O..3l...'_..-..A8 /..K:.m.....(S[.d.j..;^..f.j....S9....l.pV...+.R.f.U^......T.+....%..2..l....,^:i.p...w....d..C..2.4......+...........Y.x.H.F...o.CYa.NA5.D...t-M\Q.&.W.....

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8965
Entropy (8bit):	7.9585820102925116
Encrypted:	false
SSDEEP:	192:iMLjfCHHyTU4N/WkvVNI9Lph89y9eur47gNJ2uspzGxxP:i+jaHHgWkPyHey93r47D8
MD5:	14C9FB3C6A688289A128DBE23EAA8375
SHA1:	47208516DB1D05F93EEE566CDEE9DDC8721A2DB2
SHA-256:	994CA4F9D6A564EC2341F1B82060776EF01BAECC38C1FDFE0540E5F1583166BB
SHA-512:	01D1FEA80F6BFF18800421D4A07B30C9A95DADDF5883A0DF3D45E55EEA5630BC4AC4AC424FC31B29628617F20CFF46998421DC38CC88CB6C63837856A525A265
Malicious:	false
Preview:	.PNG........IHDR...,...x.....H.. ....pHYs...%...%.IR$.....sRGB.........gAMA......a...".IDATx..m...U...^........{w{.......UH...g.....c...q....@...)Hhz.....X.......@....a!..i.,..{........H(q{.]..]u9.V.tM.TW...t.......VWw..s.=..h4..A`.y....f.H!.d.ue.......DS..,.....\..a..5L.....w.L`...-..+.z<...h.^..x......Z.R.u-l.~.>..X......t...!...wY.-.z...4.......g.... .......jA..y...M..\|F..$..#,...=.2i..px....N.....JZ/.s^.....^......S.Q........^=.s.[..9........-...?.,C3....Z..;...=.6.....`.q......}-c=G..E..b :l%.J.X....[TB...>h.{...{.w..ek..[Y.!Xi....:.0f..O.V..y&..f....E.....[U$..e..oi..c.)..]Kq...x.h..H...V.[N$...Gem..@.@.J,.X!...=..;.k.L8Z.....o.\|.L.-..b..5{.4.FB.D.j[A..%.$...L.......]+q...x.D.X..%xJ....$.P.\|..\C;$T.j.ak.g..~...g...2....i..V.?.{...p.p.....c.2+..oz".Y4.0..Q....Y........J.v../.$.%..0YV..gI.to[Y....(kL.e...M!...`...LI.XDj......6...`....K0.......9h.was:.fU..*8.......s..v$h..4./ _O.._.r1.pp?..+=K..).#...xBI.Z..`!.......U.i.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90677
Category:	downloaded
Size (bytes):	32811
Entropy (8bit):	7.992877953733209
Encrypted:	true
SSDEEP:	768:fDPYSdMWwCyzH8REcKPN/8p0x7UQzlRMXv1FevViDAqA:a8REcsUp0xUQzc/8VCAV
MD5:	2E287EB418940084B921590C6E672C9E
SHA1:	1FC75A9DAA054EF88AAEA181F3A9B4CBA2B6B6E1
SHA-256:	6C2C58DAAE76131A00D1BFEE20852F372CF594BE7F4A8848ACC42F8BF72C1BBD
SHA-512:	A77F69571B0F04F4A2354D9E18E41EF86F22274EAED20C02215B632BFEF09C6543A83591E9DB3F2B4036A9684BFF666EB6A7B253BA18893500E9CD541AB752A0
Malicious:	false
URL:	https://logincdn.msauth.net/shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js
Preview:	...........iw.8.?.~>....%."9K'R...q:.fw.,.n_.Z.l.eRMR^b.O...A.N...yq.t,b!.....BU....4kM.Lr..I.]DE.&..TF..K.J.9.7.$....(..'?....f...tG...?y8~0..;..w;[....;.u........D.......N:W.d........E..eR...q..sJG.O.Z,....l......~.........'.d.......n.N..@.../....l'...".J3Y..n3Y...o..T...P0..j..-.....v.m7T.LM. .....Ev.7...IC.q..[.t>nj.e..OE<m...l)^.K.......8:M.&.]zz..j.X..K........'3..Tk....Z.2.GQ6..Fi._.\|v.Bf.W?...T.]:j(.%F.)..t_^........8.:..DN..8....B.>\|<..~..\|H.x.q.=-.f.~..{.z..&t...e.LfE,.;.d...n.....2..FH. .Y,.J...EC.cj. .F......o.....\...&\.J..fJiJ.S..4.5..NM]m.....Q.....e.O..iSs'........'Z..6A(Y.8..eQ.....2..I.?...;dS..I...D..@./7t.:z.......c...dF..B.......9...8)..h.........<.I...2.\FY+.=S.8...$Qv...<..IL.x".w9_..3.."-nfR.(..WDN..L.....z..I8.E..Ub......d..M.....sq.N........p..lX...A]3Y....j...%.`N..G.v..6.m.KH.M......Z..a2.N.....4....,u.O.vWM...=d..J.r`..b.....N.hzp..C..?.. ......:..M6............;.w.."B.^.ZP.N.:.[..(:...(.y.)q...

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	94555
Entropy (8bit):	5.06394242860707
Encrypted:	false
SSDEEP:	768:TP4ij1YvEoNj31oEDvbK4gsPnfBCYHfzZD+Kyt/1MFiWJbAVzyY2K2+qMdWLq8:nCZN6ELG4gsv7HbZDZyXSeVGi20sq8
MD5:	940FEFF436A6FB6FBA25E2FA78B88F49
SHA1:	B57396B0C9A0611707F0A2FE6D250EDEFA3B2281
SHA-256:	7AE3FE5A3005E6A4A45748A9025190DEB3DAD53F2E345261500EE5D8256D79F3
SHA-512:	B6BFDD010F9A82AAD2EBEBE9BDD55EA9CF7F7328C5261B8A0A6B2585322174C23F3274FBFDAB639D89BEB6CC1DE9F941AD1F8468E59D03B968818BB23BA9CC9E
Malicious:	false
URL:	https://antiphishing.vadesecure.com/styles.16be3c9519762a3240e8.css
Preview:	@charset "utf-8";*,:after,:before{box-sizing:border-box}body,button,div,fieldset,figure,footer,form,h1,h2,h3,h4,header,html,iframe,label,li,nav,object,p,section,ul{border:none;outline:0;margin:0;padding:0}::-moz-selection{background:#d61f29;color:#fff}::selection{background:#d61f29;color:#fff}html{background:#fff;background:linear-gradient(to bottom,#fff 0,#e6e6e6 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#e6e6e6', GradientType=0);height:100%;position:relative;width:100%}body{background:#fff;background:linear-gradient(to bottom,#fff 0,#e6e6e6 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#e6e6e6', GradientType=0);color:#666;font-family:'Open Sans',Arial,sans-serif;font-size:15px;line-height:24px;font-weight:400;letter-spacing:normal;padding-bottom:120px;min-height:100%}h1{color:#333;font-size:18px;line-height:27px;margin:10px 0 20px}h2{font-size:16px;line-height:24px;margin:0 0 20px}ul{l

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65470)
Category:	downloaded
Size (bytes):	946086
Entropy (8bit):	5.409753384157591
Encrypted:	false
SSDEEP:	6144:XusPgI1Jco6/NNXkrBM7J3h7YLem7hGtvjSungUX19O+cgNp/2kA3lzVNzgA9WEC:NONZ3lm7UvjPs+7NfsgA9Wn
MD5:	68F1F531D00CCAD30CAB55AFC093E124
SHA1:	92956CEA8F77453A460F33DF51E601653A5E0FD9
SHA-256:	F709D9E0A2435C4E5D66CDF6EC744006D5A32AD329AB489181924CEDBD72D4AF
SHA-512:	2493C3065C58BDEF0504E104A27B4F61787DD16DDEE22E2C243638FA94F632E868FAF38F76CEDB7F90A8FC56C8AC2A0A62BDBCCA9603F78BF027BBCDDD621B88
Malicious:	false
URL:	https://logincdn.msftauth.net/shared/5/js/login_en_aPH1MdAMytMMq1WvwJPhJA2.js
Preview:	/! For license information please see login_en.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function s(e){return r.isMemo(e)?a:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=a;var c=Object.defineProperty,u=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,p=Object.getOwnPropertyDescriptor,f=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(g){var o=f(n);o&&o!==g&&e(t,o,r)}var a=u(n);d&&(a=a.concat(d(n)));for(var l=s(t),m=s(n),h=0;h<a.length;++h){var b=a[h];if(!(i[b]\|\|r&&r[b

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
Category:	downloaded
Size (bytes):	628
Entropy (8bit):	7.6610853322771
Encrypted:	false
SSDEEP:	12:X6/EjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X6cP5e3dgYLMk69Ii1epryt/Md
MD5:	6F68E9881DF18F8E251AB57D5786239B
SHA1:	C0F7A01A288752833390FC330995F25488BCE8EC
SHA-256:	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
SHA-512:	B33DFF67480DF940FA0565B231E02F26840DCB5135A4A2FF3C310AA062D3D4B456FA9C8C6E2BC59EC76B515EA1B36D574A5701771BCEE7CEE97B99EF60A803C6
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2232), with no line terminators
Category:	dropped
Size (bytes):	2232
Entropy (8bit):	5.19933353228959
Encrypted:	false
SSDEEP:	48:ElW9cBYnIZGzUOFtPiUuJmTLfkBLok/X6X8LLec:Eg9/IGnj3ap/X6yt
MD5:	6C82B9591D45C74072ED9C23CC8F156B
SHA1:	FA77C8816341AF1AA93A73F40ACECF7804CADE1F
SHA-256:	6D1F78FE92F945BE2C15153CD0CE0BA1321E48FAF8931DA6912E47DAADE82C0E
SHA-512:	D86018703155C2008B22C7785EAC1CF128B961C5AEBAF86F29603F796323AA1AFCF6E1D4179B669C88BB84219F8182F3A82DE19A9664ED2D20FE92B281F17F01
Malicious:	false
Preview:	!function(e){function r(r){for(var n,i,a=r[0],f=r[1],c=r[2],p=0,s=[];p<a.length;p++)i=a[p],o[i]&&s.push(o[i][0]),o[i]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(l&&l(r);s.length;)s.shift()();return u.push.apply(u,c\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,a=1;a<t.length;a++){var f=t[a];0!==o[f]&&(n=!1)}n&&(u.splice(r--,1),e=i(i.s=t[0]))}return e}var n={},o={0:0},u=[];function i(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,i),t.l=!0,t.exports}i.e=function(e){var r=[],t=o[e];if(0!==t)if(t)r.push(t[2]);else{var n=new Promise(function(r,n){t=o[e]=[r,n]});r.push(t[2]=n);var u,a=document.createElement("script");a.charset="utf-8",a.timeout=120,i.nc&&a.setAttribute("nonce",i.nc),a.src=function(e){return i.p+""+({}[e]\|\|e)+"."+{4:"efcb4f36899adf4857d1",5:"1f58102d1016fa6a58a6"}[e]+".js"}(e),u=function(r){a.onerror=a.onload=null,clearTimeout(f);var t=o[e];if(0!==t){if(t){var n=r&&

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	downloaded
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65470)
Category:	dropped
Size (bytes):	946086
Entropy (8bit):	5.409753384157591
Encrypted:	false
SSDEEP:	6144:XusPgI1Jco6/NNXkrBM7J3h7YLem7hGtvjSungUX19O+cgNp/2kA3lzVNzgA9WEC:NONZ3lm7UvjPs+7NfsgA9Wn
MD5:	68F1F531D00CCAD30CAB55AFC093E124
SHA1:	92956CEA8F77453A460F33DF51E601653A5E0FD9
SHA-256:	F709D9E0A2435C4E5D66CDF6EC744006D5A32AD329AB489181924CEDBD72D4AF
SHA-512:	2493C3065C58BDEF0504E104A27B4F61787DD16DDEE22E2C243638FA94F632E868FAF38F76CEDB7F90A8FC56C8AC2A0A62BDBCCA9603F78BF027BBCDDD621B88
Malicious:	false
Preview:	/! For license information please see login_en.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function s(e){return r.isMemo(e)?a:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=a;var c=Object.defineProperty,u=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,p=Object.getOwnPropertyDescriptor,f=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(g){var o=f(n);o&&o!==g&&e(t,o,r)}var a=u(n);d&&(a=a.concat(d(n)));for(var l=s(t),m=s(n),h=0;h<a.length;++h){var b=a[h];if(!(i[b]\|\|r&&r[b

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:fCu:au
MD5:	AAAB7A355103063D9EEB4824A3A6B374
SHA1:	E51555F02C32321F3E48F07A0FA5AF46DF835BFC
SHA-256:	79BA862622D6FA84AC7E4F98EB95043A255FC2C81711E9400A8AA4D4B1608471
SHA-512:	D1A0C9C4F628459F5CA904405B2A66A69425A50E8DCE1BAA43161D784EB219BD3E1FD9447BCBACC314652EDA08CF0B02C863C87F3AC1534AE0F62A414C191F1B
Malicious:	false
Preview:	dfp:OK

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65439)
Category:	dropped
Size (bytes):	90677
Entropy (8bit):	5.331203510001561
Encrypted:	false
SSDEEP:	768:FVEDx3ySKZOP00d5TjMSYzSRRM1d0YjSRpUKHHacTItx7vtn1yC0JalF1rmq6Llb:v+0Z9yFrGi8SRGfyC0JalFx3gKa7
MD5:	57FD0FB79B8289945CA246DE0908D270
SHA1:	7FC9AB444778E83D566F35102D604969ED50576D
SHA-256:	EB327424AA27D47E4499187303774F8F22557359DB3C6BB583E033E07DD0B337
SHA-512:	99F654C722C50C08BB1C68A18BF6EED1FDA1E4CCF6D30BE65BFA6F24B21BA2F1995870C8CF54E820655B41497716DDFDD7487E0A33C121B322F705FA37E5DA09
Malicious:	false
Preview:	/! For license information please see oneds-analytics-js_077217740c853b5d4fe8.js.LICENSE.txt /."use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[471],{2278:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore:function(){return qo},ApplicationInsights:function(){return ja},BE_PROFILE:function(){return Vo},BaseTelemetryPlugin:function(){return di},Cloud:function(){return Vi},CoreUtils:function(){return Hr},Device:function(){return Xi},DiagnosticLogger:function(){return et},EventLatency:function(){return Ga},EventPersistence:function(){return Qa},EventsDiscardedReason:function(){return Ho},InternalAppInsightsCore:function(){return Ko},Loc:function(){return $i},LoggingSeverity:function(){return Wa},MinChannelPriorty:function(){return $a},NRT_PROFILE:function(){return Wo},NotificationManager:function(){return Uo},PostChannel:function(){return qa},PropertiesPlugin:function(){return Po},RT_PROFILE:function(){return jo},Session:function(){return B

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	106404
Entropy (8bit):	5.3639815962876245
Encrypted:	false
SSDEEP:	1536:YyflEEubPTjjvY+tIQF74PO99i0kcUHfrcd:YyfaE+jN4PcyY
MD5:	920DBA2A9D981A1FB6B23EEB3808E063
SHA1:	9F6B8B0E38CD21ED64BA6EFC98DB8DD2755D220C
SHA-256:	7750ADF4099B74C0BEC40860C75B3EBC889724558944BC1C03EE0C91F0605D8C
SHA-512:	F7D7F67D7DE7497C64B224B7ED653A97794C0E8F5B65E3A0853B423FE5B9C4E40F875837FF2E0380FE2B92C4FD60E5A93588F09386AE5000D1325FEFC94B837C
Malicious:	false
URL:	https://antiphishing.vadesecure.com/polyfills.2daf523d1a5fc162c0c2.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"+auO":function(t,e,n){var r=n("XKFU"),o=n("lvtm");r(r.S,"Math",{cbrt:function(t){return o(t=+t)*Math.pow(Math.abs(t),1/3)}})},"+lvF":function(t,e,n){t.exports=n("VTer")("native-function-to-string",Function.toString)},"+oPb":function(t,e,n){"use strict";n("OGtf")("blink",function(t){return function(){return t(this,"blink","","")}})},"+rLv":function(t,e,n){var r=n("dyZX").document;t.exports=r&&r.documentElement},"/KAi":function(t,e,n){var r=n("XKFU"),o=n("dyZX").isFinite;r(r.S,"Number",{isFinite:function(t){return"number"==typeof t&&o(t)}})},"/SS/":function(t,e,n){var r=n("XKFU");r(r.S,"Object",{setPrototypeOf:n("i5dc").set})},"/e88":function(t,e){t.exports="\t\n\v\f\r \xa0\u1680\u180e\u2000\u2001\u2002\u2003\u2004\u2005\u2006\u2007\u2008\u2009\u200a\u202f\u205f\u3000\u2028\u2029\ufeff"},"0/R4":function(t,e){t.exports=function(t){return"object"==typeof t?null!==t:"function"==typeof t}},"0E+W":function(t,e,n){n("elZq")("Array")},"0

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.21287868934203
Encrypted:	false
SSDEEP:	3:FAXTzffASKGEJ7PVqn:FyTzoSdEJ7Pkn
MD5:	48CEF5284EEBCF3B1380D6710357990C
SHA1:	B381F3445730FEFD66485A85E761CF6323D59AD9
SHA-256:	CDFC8444656AA534028FB59331119A15CE73E5129435B877ED8AA11A65C91FA7
SHA-512:	419F94B95EE23EE0AD5DEB4C1580C6A0C3E39C04D81E21DD9BCB6BC68823788F6A5D80B4BBB8ECBB52349010418D1F5910791C6C091299BD6D8432782DA224DA
Malicious:	false
URL:	https://antiphishing.vadesecure.com/app/config/config.json
Preview:	{. "serviceUrl": "http://localhost:4220".}.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 643975
Category:	downloaded
Size (bytes):	170691
Entropy (8bit):	7.998142317191475
Encrypted:	true
SSDEEP:	3072:VnqanNo3e6mc+FL+mbhRT/BQDjGK3HWiIb/wDjdyANVMrH5L:VqaJc+wmbhRTJ+jNsAjdyATyH5L
MD5:	72A42CA37CF74610AE2194124AB9D18B
SHA1:	B9AC1958F8798A3D30F353E4F3D9B29ECFD46DC3
SHA-256:	7EBED8FA7464B37A11ABC8F5006DE30849E02000C97D6D0837661FE77FAD28E8
SHA-512:	9B7C123563D89CB48525F8AE7D3BB5F4FD40ACB59A8E052A28A4113D35F4B927976476F49841AA83F815C618164F9AAADC4BCCC3AFDDF53D90617C38037D8759
Malicious:	false
URL:	https://logincdn.msauth.net/shared/5/js/reset-password-signinname_en_JOEV9q8F85e8zIrr9TrzjA2.js
Preview:	...........kw.. ....[7K.<.....[..v'.yu.....x..d3.H...8......$.$..9w.V,...B..T.....cs. /6f.Xf..H.i^....L&.UJ.Q.RV..,/.b.]..Y.e.\.....x.t...^.........t.... .:O..)..B."....v.F.....:Kl..q...'E..;...B..W.t6y.g..Z..\.2..}.=..&.Y........Yr.....SY..JPV......A...."/.3...iF..d...l.}.T.3..Vg.h.W..d6..IQ^R...2.J~H.K.,..n....).z.H....n.m._..z06....Y-.l...K9.!k.D.C....]_..a...H..[9=.d6....P...M.....2~}.I....f.+.Eu)J....."..Xi)../.].O.Y)...d9..E..b.x.G..T..\|3tC._.yQ..A.....t.t.....f...(..'E.O.,...n.....~..+\|..%..v.A.'=..qR.S..!7/.,4..A..3..B1.......D6..sC'qr8?.B.Azx..Wt..%..3J...$B..2^..8..Uqy...N.e....g.yx....J..J....M..t6..........?<H.n..D.E/.d....lk.BUR......\.D....1......i;.#.[d.......ZQ5....V..c.)d.t%g.'\|'.....]X7.J!.%3U....m..Er..u..y[1...y>....1no..).Q\lpG,..;O'.X.!L.bj.V..a..J..l..7...]S.xY..S..'..U.SUr..v+z...wEUl.&.M.gi.....Bk.9,o.....,.v......ENf...ji ....&..&..}q.Z.6.E..Q.<....9..R.yhg.1.3\.rZ...c...n...`.I^S... .."..V.1..y.2$.."*

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	559431
Entropy (8bit):	5.234425173350185
Encrypted:	false
SSDEEP:	6144:nb6nSdNJpxC1UdWEJozZhu5loL6TwUmI8pzvW7730xP:cSdndUZW2Kt7730xP
MD5:	AC8EDEC8F1D8160FF62ACA4822330255
SHA1:	C7882AE94C0850C9FB0108002FE4C71001B51D08
SHA-256:	89F871A93A4F7BF7DB98650303C08884AA602133455AC7B2E1EE199C4617C168
SHA-512:	EB7AFA78A25E98777355CC75BF1BE7A97DABAF0141EC5C813A4B952599E4F13E01A99FAABD5867478DC25D1A17E0A0EDE5B63BD2BA70C6371A0F7FABF629D333
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+tJ4":function(t,e,n){"use strict";n.d(e,"a",function(){return r});var r=function(t){return function(e){for(var n=0,r=t.length;n<r&&!e.closed;n++)e.next(t[n]);e.closed\|\|e.complete()}}},"+umK":function(t,e,n){"use strict";function r(){}n.d(e,"a",function(){return r})},"/WYv":function(t,e,n){"use strict";function r(t){return t&&"function"!=typeof t.subscribe&&"function"==typeof t.then}n.d(e,"a",function(){return r})},0:function(t,e,n){t.exports=n("zUnb")},"0/uQ":function(t,e,n){"use strict";var r=n("6blF"),o=n("/WYv"),i=n("2ePl"),a=n("xTla");var s=n("En8+");var u=n("IUTb"),c=n("pugT"),l=n("S5XQ");var p=n("u67D");var f=n("JcRv");var h=n("Fxb1");function d(t,e){if(!e)return t instanceof r.a?t:new r.a(Object(h.a)(t));if(null!=t){if(function(t){return t&&"function"==typeof t[a.a]}(t))return function(t,e){return e?new r.a(function(n){var r=new c.a;return r.add(e.schedule(function(){var o=t[a.a]();r.add(o.subscribe({next:function(t){r.a

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.925790510960767
Encrypted:	false
SSDEEP:	3:pvAP2ybsTEwTp+AFcbKRR:p4PTbsTEmpNcc
MD5:	88A9F7A8F7681BBFD0C42E3AED069D5E
SHA1:	2933C1BBE7AB6C2A20DA92400E50C69F837F5A8F
SHA-256:	0E0C579E7D9FE8DA04A7E301963EFDCB3B102436234608EC6AEDBE225BFDFE5F
SHA-512:	7C6B805474E25C3810AF30A313BCDB9323DE84706AC30FB41ADD016936143434223B7217486DE09AF87003E6862361CD7E60BB1C0B1FED2A2E49AE04ED44A8FA
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlwWwY0Nini5hIFDVd69_0=?alt=proto
Preview:	CjAKLg1Xevf9GgQISxgCKiEIClIdChNAIS4jKiRfLT8rJiUvLCleKDo9EAEY/////w8=

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	182
Entropy (8bit):	5.111382121361486
Encrypted:	false
SSDEEP:	3:PouVKQnFqDmJS4RKYPOyzAEtGFUvzUbG3SQLDUfQ3zfc7MBWhtoAc9Zxu:h4Qn4mc4sLWAEtSUbU63lUYDfYMch07U
MD5:	B74499BDA902C84D1468A84DA5F443FB
SHA1:	0A3259A9852BE07405F10D39293466137C44BB4F
SHA-256:	0BA26423ED3348AE5C95A103E7D7AF6EA3B202C4A4830EFF7D609558925A5382
SHA-512:	B82A3F5996F65F36565E066845E673B7AB1587F6A64B7CD41225A5867CE6CFC38CE0DB7349AA0855C23F2E562C26D932EF53DB9DA9E42228D58C54B0DC6EBBD4
Malicious:	false
URL:	https://fpt.live.com/?session_id=cf8956a1a080a000077a8ffd4e235bc5&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>window.parent.postMessage('dfp:OK', '*');</script>..</head>..<body/>..</html>..

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 643975
Category:	dropped
Size (bytes):	170691
Entropy (8bit):	7.998142317191475
Encrypted:	true
SSDEEP:	3072:VnqanNo3e6mc+FL+mbhRT/BQDjGK3HWiIb/wDjdyANVMrH5L:VqaJc+wmbhRTJ+jNsAjdyATyH5L
MD5:	72A42CA37CF74610AE2194124AB9D18B
SHA1:	B9AC1958F8798A3D30F353E4F3D9B29ECFD46DC3
SHA-256:	7EBED8FA7464B37A11ABC8F5006DE30849E02000C97D6D0837661FE77FAD28E8
SHA-512:	9B7C123563D89CB48525F8AE7D3BB5F4FD40ACB59A8E052A28A4113D35F4B927976476F49841AA83F815C618164F9AAADC4BCCC3AFDDF53D90617C38037D8759
Malicious:	false
Preview:	...........kw.. ....[7K.<.....[..v'.yu.....x..d3.H...8......$.$..9w.V,...B..T.....cs. /6f.Xf..H.i^....L&.UJ.Q.RV..,/.b.]..Y.e.\.....x.t...^.........t.... .:O..)..B."....v.F.....:Kl..q...'E..;...B..W.t6y.g..Z..\.2..}.=..&.Y........Yr.....SY..JPV......A...."/.3...iF..d...l.}.T.3..Vg.h.W..d6..IQ^R...2.J~H.K.,..n....).z.H....n.m._..z06....Y-.l...K9.!k.D.C....]_..a...H..[9=.d6....P...M.....2~}.I....f.+.Eu)J....."..Xi)../.].O.Y)...d9..E..b.x.G..T..\|3tC._.yQ..A.....t.t.....f...(..'E.O.,...n.....~..+\|..%..v.A.'=..qR.S..!7/.,4..A..3..B1.......D6..sC'qr8?.B.Azx..Wt..%..3J...$B..2^..8..Uqy...N.e....g.yx....J..J....M..t6..........?<H.n..D.E/.d....lk.BUR......\.D....1......i;.#.[d.......ZQ5....V..c.)d.t%g.'\|'.....]X7.J!.%3U....m..Er..u..y[1...y>....1no..).Q\lpG,..;O'.X.!L.bj.V..a..J..l..7...]S.xY..S..'..U.SUr..v+z...wEUl.&.M.gi.....Bk.9,o.....,.v......ENf...ji ....&..&..}q.Z.6.E..Q.<....9..R.yhg.1.3\.rZ...c...n...`.I^S... .."..V.1..y.2$.."*

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
Category:	downloaded
Size (bytes):	49804
Entropy (8bit):	7.994672288751266
Encrypted:	true
SSDEEP:	1536:SMuttwJ0uUmAcZjNL6nnQlL+mwKLiQC7Mn3dxPErr:SwJ0vmAcKnnQF+8LJOMn3DPE/
MD5:	6DE768A4DF1E0D0061CDB52EF06346C4
SHA1:	3829A667B97668008023DDA98F4C0772174C8EF6
SHA-256:	58732EEE2ED9091F4F5776DC8A8A14116CBE5A2BA1CCDA0256896BAB08A52128
SHA-512:	CC6966D2C2B43E762750102E734DA6B88D7BFB92DDB5D482EE25029337D95E997466E83001586F2B63DAEE890B5F3188E8EC0F1B084D5EB67CFEA55EDDFAD47D
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	...........m[.8.0........OL....;w..nf.0.ff.X.'V......4.r~........=........,..JU.......T~.l..?..E.....X..\|t~P9...TN..G..?^.~.............Xx.0..Q..Fa4.#7.q...F.;......4...Q.W&~.@....O.T.y.37J.+Ggf...P....Pz.N...>..a.D..<.m./A,...Q.....WN.Q...8.Db$.G.H<...'....J,..8..{nG.2@HYkL../......=.pL....A?.&Ng.i,......2lo...$.<.3...?~pW..=...L..&x.QR.u3..#6q2....U.Y1..".M. .<W."7@......w..."H,@......0..P....p:...[...E].A..%..V.K\.......F.ir.}.Lc{s..O.g..(\|.........9o..A.t.K....Wv.l6..T.......t.........+..........-w {l..g...V..\=W.j.oaT}t.J`E..$W......;.k.\.t.w~}".....jf..W..."..a..0y........@.T.1.G0........Y_....../..........@.....]+....q\.cR.....t.3S-5g....'U.j.d......y.n,:).\|.?.FW...d...\|.......*.`.3....kMKf...#..,DM.TY+..g.........e+.>...{y..N/..g-#FV.V.p.......Xs.(..{..}..-.O..H=."...........8M.g..!H..0.~.Tdf.;...$D%N .)..!..V...'r\.... ...&....J\|."Nd%D:uw:.<W.+...H&.Z...L=..U.v....J.t.0%+...U..3M....y...L..G...p='.....pB"-..\|.....j .a".i=O.R Q2..."...

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
Category:	dropped
Size (bytes):	628
Entropy (8bit):	7.6610853322771
Encrypted:	false
SSDEEP:	12:X6/EjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X6cP5e3dgYLMk69Ii1epryt/Md
MD5:	6F68E9881DF18F8E251AB57D5786239B
SHA1:	C0F7A01A288752833390FC330995F25488BCE8EC
SHA-256:	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
SHA-512:	B33DFF67480DF940FA0565B231E02F26840DCB5135A4A2FF3C310AA062D3D4B456FA9C8C6E2BC59EC76B515EA1B36D574A5701771BCEE7CEE97B99EF60A803C6
Malicious:	false
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8965
Entropy (8bit):	7.9585820102925116
Encrypted:	false
SSDEEP:	192:iMLjfCHHyTU4N/WkvVNI9Lph89y9eur47gNJ2uspzGxxP:i+jaHHgWkPyHey93r47D8
MD5:	14C9FB3C6A688289A128DBE23EAA8375
SHA1:	47208516DB1D05F93EEE566CDEE9DDC8721A2DB2
SHA-256:	994CA4F9D6A564EC2341F1B82060776EF01BAECC38C1FDFE0540E5F1583166BB
SHA-512:	01D1FEA80F6BFF18800421D4A07B30C9A95DADDF5883A0DF3D45E55EEA5630BC4AC4AC424FC31B29628617F20CFF46998421DC38CC88CB6C63837856A525A265
Malicious:	false
URL:	https://antiphishing.vadesecure.com/images/logo-cloud.png
Preview:	.PNG........IHDR...,...x.....H.. ....pHYs...%...%.IR$.....sRGB.........gAMA......a...".IDATx..m...U...^........{w{.......UH...g.....c...q....@...)Hhz.....X.......@....a!..i.,..{........H(q{.]..]u9.V.tM.TW...t.......VWw..s.=..h4..A`.y....f.H!.d.ue.......DS..,.....\..a..5L.....w.L`...-..+.z<...h.^..x......Z.R.u-l.~.>..X......t...!...wY.-.z...4.......g.... .......jA..y...M..\|F..$..#,...=.2i..px....N.....JZ/.s^.....^......S.Q........^=.s.[..9........-...?.,C3....Z..;...=.6.....`.q......}-c=G..E..b :l%.J.X....[TB...>h.{...{.w..ek..[Y.!Xi....:.0f..O.V..y&..f....E.....[U$..e..oi..c.)..]Kq...x.h..H...V.[N$...Gem..@.@.J,.X!...=..;.k.L8Z.....o.\|.L.-..b..5{.4.FB.D.j[A..%.$...L.......]+q...x.D.X..%xJ....$.P.\|..\C;$T.j.ak.g..~...g...2....i..V.?.{...p.p.....c.2+..oz".Y4.0..Q....Y........J.v../.$.%..0YV..gI.to[Y....(kL.e...M!...`...LI.XDj......6...`....K0.......9h.was:.fU..*8.......s..v$h..4./ _O.._.r1.pp?..+=K..).#...xBI.Z..`!.......U.i.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:fCu:au
MD5:	AAAB7A355103063D9EEB4824A3A6B374
SHA1:	E51555F02C32321F3E48F07A0FA5AF46DF835BFC
SHA-256:	79BA862622D6FA84AC7E4F98EB95043A255FC2C81711E9400A8AA4D4B1608471
SHA-512:	D1A0C9C4F628459F5CA904405B2A66A69425A50E8DCE1BAA43161D784EB219BD3E1FD9447BCBACC314652EDA08CF0B02C863C87F3AC1534AE0F62A414C191F1B
Malicious:	false
URL:	https://fpt.live.com/Images/Clear.PNG?ctx=jscb1.0&session_id=cf8956a1a080a000077a8ffd4e235bc5&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=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&eci=eyJ1dmRyIjoiR29vZ2xlIEluYy4gKEdvb2dsZSkiLCJ1cmRyIjoiQU5HTEUgKEdvb2dsZSwgVnVsa2FuIDEuMy4wIChTd2lmdFNoYWRlciBEZXZpY2UgKFN1Ynplcm8pICgweDAwMDBDMERFKSksIFN3aWZ0U2hhZGVyIGRyaXZlcikiLCJ2ZHIiOiJXZWJLaXQiLCJyZHIiOiJXZWJLaXQgV2ViR0wiLCJpZHVoIjoiMTViNmNhNDcyNjliZTQyODc1Njg1MDY5MzdlOTkxN2MifQ==&PageId=SI&u1=&u3=10.0.0&u4=x86&u5=64&u2=(Google%20Chrome%2C117.0.5938.132)%2C(Not%3BA%3DBrand%2C8.0.0.0)%2C(Chromium%2C117.0.5938.132)
Preview:	dfp:OK

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2444
Entropy (8bit):	4.6547645458915685
Encrypted:	false
SSDEEP:	48:Kk+fLBlpByk3smM6j3xQwQp97R7hN/gyFySiIK3WKGLAH:mfdluk3Vfjx67pBiIK3Q8H
MD5:	C7A394F950B4464C3333972349CBEA1E
SHA1:	38149F545C42265641AF887951C02AC98C2BBDA6
SHA-256:	7E77BE3B81880130E86E5025825504F4AC6608C3BCB9EDCB92342ED01BDA52E9
SHA-512:	29493B2A3CB0D787841A3FFFE46E068F57F80766951452EDD61398096FED52606C1981456AFE4D1EB480AED5F9A55C9E7AA3FB571987B30BC7C5380121C4337D
Malicious:	false
Preview:	{. "CANT_FIND_WAY_BACK": "Can't find your way back?",. "clean": "The site is clean.",. "cleanRedirect": "You will be redirected.",. "exitPage": "Leave the page",. "followTheTrainingClass": "Stop falling for phishing",. "goAnyway": "Proceed to the page anyway",. "goWebSite": "Proceed to web page with caution",. "ifYouBelieveThisWebsiteIsLegitimate": "If you believe this website is legitimate, please proceed to web page with caution.",. "internalError": "Internal error, retry later.",. "letsTakeThePhishingClass": "Train yourself",. "PAGE_NOT_FOUND": "Page not found",. "phishing": "The web page has been identified as PHISHING.",. "phishingContent": "Phishing is the attempt to acquire sensitive information such as usernames, passwords, and credit card details (and sometimes, indirectly, money), often for malicious reasons. We advise you do not visit the page.",. "running": "Security analysis in progress.",. "suspicious": "Warning: suspiscious li

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	182
Entropy (8bit):	5.111382121361486
Encrypted:	false
SSDEEP:	3:PouVKQnFqDmJS4RKYPOyzAEtGFUvzUbG3SQLDUfQ3zfc7MBWhtoAc9Zxu:h4Qn4mc4sLWAEtSUbU63lUYDfYMch07U
MD5:	B74499BDA902C84D1468A84DA5F443FB
SHA1:	0A3259A9852BE07405F10D39293466137C44BB4F
SHA-256:	0BA26423ED3348AE5C95A103E7D7AF6EA3B202C4A4830EFF7D609558925A5382
SHA-512:	B82A3F5996F65F36565E066845E673B7AB1587F6A64B7CD41225A5867CE6CFC38CE0DB7349AA0855C23F2E562C26D932EF53DB9DA9E42228D58C54B0DC6EBBD4
Malicious:	false
URL:	https://fpt.live.com/?session_id=cf8956a1a080a000077a8ffd4e235bc5&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>window.parent.postMessage('dfp:OK', '*');</script>..</head>..<body/>..</html>..

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65454)
Category:	downloaded
Size (bytes):	809542
Entropy (8bit):	5.422240239677127
Encrypted:	false
SSDEEP:	6144:RTUe7IN0IS5Gt7TO50CMQJYpYas4dSEb4G4+2dC8tt+f8creHbn4wjs7mTzDCy:C0Et7TqjaSEi+208JtA7Y
MD5:	344A179C67D1D574D245904ADEE70BD2
SHA1:	DBEB90D75259F470D2B3F26D4C374FDE8ADCEC7D
SHA-256:	ED2FD85F8749D30549719D54AAB98BEBF1BB4CAB54AA434851A512772DA9F359
SHA-512:	E902890E7795C3AC0325A92A1678AE5405C86CF33F0214EC1FA8521A6C6162395400F4EDF524D362900CFDED752ED5946239238AD7C6CE2153A5F504F012F4C7
Malicious:	false
URL:	https://logincdn.msftauth.net/shared/5/js/reset-password-fabric_en_NEoXnGfR1XTSRZBK3ucL0g2.js
Preview:	/! For license information please see reset-password-fabric_en.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function c(e){return r.isMemo(e)?a:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=a;var s=Object.defineProperty,u=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,f=Object.getOwnPropertyDescriptor,p=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(g){var o=p(n);o&&o!==g&&e(t,o,r)}var a=u(n);d&&(a=a.concat(d(n)));for(var l=c(t),b=c(n),h=0;h<a.length;++h){var m=a[h];i

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
Category:	downloaded
Size (bytes):	254
Entropy (8bit):	7.066074991728423
Encrypted:	false
SSDEEP:	6:XtS8G99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:XAH99kRX1YQBDFCnDXdWYtrE
MD5:	847A4212B99B9076EE39328B24CD30AF
SHA1:	73F15078CF1D396485F644A79B6E25EF0637685D
SHA-256:	29DC0C26C372805325EB7EB926769E832A60B47BEF96A66436EC3EC05CD6128E
SHA-512:	9AF77E9ED8BD9A39A47F36AAC2D01B5AF5D56C04CD933427DF95CC80904D7EE7AC3F7F9443D8AEF236CC84FB4DC4CC335AF0BF8F9BC0C13D720187096D149220
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5316
Entropy (8bit):	5.11748772056844
Encrypted:	false
SSDEEP:	96:SBfabD3b6dM1pLAm4fVapBDe8X7JAAHnlB3uMn2Uj1nOEYPwyjCtvOSP:eanb6dM1pLAm4fVuDe8rOAHG02s1OEYW
MD5:	776B2BD1CD566295034971A14FE80D20
SHA1:	247BF3960EF481D0BD127CCFA962CEFC680B9D50
SHA-256:	08D7C39E3772D4A8FAA3238C7E03DDC11CE28E469F815911C153178FB4BD9E04
SHA-512:	CCDC9ABFB18B6B0080C530C3B03A90E8C7901E38FACDD6F3A0BC747A95D3254F822A3861AFF88E135B11C1EA5B4AF1EF81C49670F5C01DE794A5566B6DB6C4D1
Malicious:	false
URL:	https://antiphishing.vadesecure.com/images/load.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Calque_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 417.6 258.9" style="enable-background:new 0 0 417.6 258.9;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;stroke:#3D505B;stroke-miterlimit:10;}...st1{opacity:0.38;fill:#C3D2D8;enable-background:new ;}...st2{fill:#C3D2D8;stroke:#3D505B;stroke-miterlimit:10;}...st3{fill:none;stroke:#3D505B;stroke-miterlimit:10;}...st4{fill:#6A00F4;stroke:#5500C3;stroke-miterlimit:10;}...st5{fill:#A549FF;stroke:#5500C3;stroke-miterlimit:10;}...st6{fill:#6A00F4;stroke:#5500C3;stroke-width:1;stroke-miterlimit:9.9996;}...st7{fill:#FFFFFF;}.</style>.<g id="layer_1">..<rect id="Paper" x="125.1" y="63.2" class="st0" width="165.6" height="195.2"/>..<circle class="st1" cx="137.4" cy="73.4" r="2.8"/>..<circle class="st1"

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449703
Category:	downloaded
Size (bytes):	122193
Entropy (8bit):	7.997505273485286
Encrypted:	true
SSDEEP:	3072:H4ojbjOwCNA0H+Zenw+OA6m3SmjcnlDHG21TIoN:dHyi0Ity3wnY2lIA
MD5:	AF2A7A4929E13F15A045C8C8D80A4543
SHA1:	6A1EC81A5085D0846C77DD616AE686FF732C32D6
SHA-256:	EB47C5509CEF44C582EF8ABB8C58766EA6118AD40B0FFC22A7652ED1DC6FEE8B
SHA-512:	D3B1FC08CB7DDE27E9A16B749B0024A9F11D5067B0D023F8EB2E468533297DFC5BD7739C9B696F8D11D269350FA5F2D329FE6ABC4AB679888FDC97B2450DB336
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.QX..................Oix..).NK7...KW...........`....G/..=......[..R......Y....KS.7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...a.^.]..a.X&......2.o...$,..s..l<^0)..1...Yu..w.$..0c.=c.}...xT"d....{..@.&.. .es0q.$bl.D..1:z+y..t.F..X.....qn.../fUI...q....r.f.wk..Q.Y.I2.....<.GU'...\|..1t.y...{....w..y.s.+.t5.A.J.............$...}...k.......tu........;Vf...]...\|.Q......Z.].^...q..VMw........`.<..;;.....{}0.US..O..m..v<x..%3..Tu`...U...;.~{....c.?....?...v ..-E..2......{+..*T.....p....S...qR..+K1@k..mkQo...A........]p_.X2........B.....I..3..7..]d....@.bX....z.g...\|..V-K[..^(..y...^N.^..oJF.kQ.P.R..F..om.B.pL.<F....R...(..i..,......I.F< ..T...`1.W3....L....+.S.M.c....110..........H....E,O..v..l..=...H$.J..J....4.C..dzPI..S.B@RJ.V>..GJ."/.eEwC..Q}d.k......KN\|.i...=.....!.V....<%J.D......b

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	106404
Entropy (8bit):	5.3639815962876245
Encrypted:	false
SSDEEP:	1536:YyflEEubPTjjvY+tIQF74PO99i0kcUHfrcd:YyfaE+jN4PcyY
MD5:	920DBA2A9D981A1FB6B23EEB3808E063
SHA1:	9F6B8B0E38CD21ED64BA6EFC98DB8DD2755D220C
SHA-256:	7750ADF4099B74C0BEC40860C75B3EBC889724558944BC1C03EE0C91F0605D8C
SHA-512:	F7D7F67D7DE7497C64B224B7ED653A97794C0E8F5B65E3A0853B423FE5B9C4E40F875837FF2E0380FE2B92C4FD60E5A93588F09386AE5000D1325FEFC94B837C
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"+auO":function(t,e,n){var r=n("XKFU"),o=n("lvtm");r(r.S,"Math",{cbrt:function(t){return o(t=+t)*Math.pow(Math.abs(t),1/3)}})},"+lvF":function(t,e,n){t.exports=n("VTer")("native-function-to-string",Function.toString)},"+oPb":function(t,e,n){"use strict";n("OGtf")("blink",function(t){return function(){return t(this,"blink","","")}})},"+rLv":function(t,e,n){var r=n("dyZX").document;t.exports=r&&r.documentElement},"/KAi":function(t,e,n){var r=n("XKFU"),o=n("dyZX").isFinite;r(r.S,"Number",{isFinite:function(t){return"number"==typeof t&&o(t)}})},"/SS/":function(t,e,n){var r=n("XKFU");r(r.S,"Object",{setPrototypeOf:n("i5dc").set})},"/e88":function(t,e){t.exports="\t\n\v\f\r \xa0\u1680\u180e\u2000\u2001\u2002\u2003\u2004\u2005\u2006\u2007\u2008\u2009\u200a\u202f\u205f\u3000\u2028\u2029\ufeff"},"0/R4":function(t,e){t.exports=function(t){return"object"==typeof t?null!==t:"function"==typeof t}},"0E+W":function(t,e,n){n("elZq")("Array")},"0

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2263)
Category:	downloaded
Size (bytes):	3021
Entropy (8bit):	6.012943868658261
Encrypted:	false
SSDEEP:	48:0CRLxczKnj9qDVE7JMci0dGdMqThHEWEj2iDIQ+3p0UByUVsj3P+Z7JMci0dGxMh:NKNw/BQx5Y8jp0s/P/BQxMMm
MD5:	8657853FE5947678C1E7FBC577E9E787
SHA1:	6653539FE754FD8227C04437AA43C5B9A26D2665
SHA-256:	0677EB32D5E4ACA7C41AE7ACB62C151B584AF2462DC292F2F1B35C0DC46D1463
SHA-512:	61E12382C4168E9AC9388A6424F40C249B0FE4DE84995B49C14E9AE319AA54E195528BB96ECBAA568A9293C2DEC210B04231A164F691D880721D2E958E01E599
Malicious:	false
URL:	https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy
Preview:	<!doctype html>.<html lang="en" data-logo="images/logo-cloud.png">.<head>. <title id="text-title">Anti-phishing analysis</title>. <base href="https://antiphishing.vadesecure.com/">. <meta charset="UTF-8">. <meta name="vsc-antiphishing" content="1.0">. <meta name="viewport" content="width=device-width, initial-scale=1">. <link rel="icon" href="./favicon.ico" />.<link rel="stylesheet" href="styles.16be3c9519762a3240e8.css"></head>.<body data-users="{"context":{"emailFrom":"noreply@planner.office365.com","emailTo":"Charlotte.Gagliolo@chantiers-atlantique.com","login":"VRC198148","time":"","action":"","IIP":{"url":"https://chantiersdelatlantique-my.sharepoint.com/:fl:/r/personal/pascal_renier_chantiers-atlantique_com/Documents/OneNote%20Loop%20Files/Tasklist.loop?d=w47ee182453764abcbb60c50db6a52f3c\u0026csf=1\u0026web=1\u0026nav=cz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZ

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	50
Entropy (8bit):	4.21287868934203
Encrypted:	false
SSDEEP:	3:FAXTzffASKGEJ7PVqn:FyTzoSdEJ7Pkn
MD5:	48CEF5284EEBCF3B1380D6710357990C
SHA1:	B381F3445730FEFD66485A85E761CF6323D59AD9
SHA-256:	CDFC8444656AA534028FB59331119A15CE73E5129435B877ED8AA11A65C91FA7
SHA-512:	419F94B95EE23EE0AD5DEB4C1580C6A0C3E39C04D81E21DD9BCB6BC68823788F6A5D80B4BBB8ECBB52349010418D1F5910791C6C091299BD6D8432782DA224DA
Malicious:	false
Preview:	{. "serviceUrl": "http://localhost:4220".}.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32915), with no line terminators
Category:	dropped
Size (bytes):	32915
Entropy (8bit):	5.248079629087054
Encrypted:	false
SSDEEP:	768:JXJXUUOzJnvjS92/hM8Y0suWC1dVLb0d7WaxRqyNL6Qm97o1txhxKGRd:On3ECLod7lqyNLbm97o1tvJRd
MD5:	B9C918128D594300A4E0240611439A74
SHA1:	08DA04E6068B3FEF9B70B7E689B05F1A1FDCE411
SHA-256:	8F22F067C478666AF71F92EBE9991946DA07D6C8F2C343BB6129D97D27F66737
SHA-512:	21E7DAAE87EA158225BE4D934CDA1C040BEEDD64AF9D41B41EBBDCC0A3BE46AF545D22DC9D57375818C1A3F35EFD87B799418EDD36C87AAC71635574105F3687
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{J66h:function(module,exports,__webpack_require__){var __WEBPACK_AMD_DEFINE_ARRAY__,__WEBPACK_AMD_DEFINE_RESULT__;!function(l,n){module.exports=n(l)}("undefined"!=typeof self?self:"undefined"!=typeof window?window:"undefined"!=typeof global?global:this,function(global){"use strict";global=global\|\|{};var _Base64=global.Base64,version="2.5.2",buffer;if(module.exports)try{buffer=eval("require('buffer').Buffer")}catch(err){buffer=void 0}var b64chars="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",b64tab=function(l){for(var n={},t=0,u=l.length;t<u;t++)n[l.charAt(t)]=t;return n}(b64chars),fromCharCode=String.fromCharCode,cb_utob=function(l){if(l.length<2)return(n=l.charCodeAt(0))<128?l:n<2048?fromCharCode(192\|n>>>6)+fromCharCode(128\|63&n):fromCharCode(224\|n>>>12&15)+fromCharCode(128\|n>>>6&63)+fromCharCode(128\|63&n);var n=65536+1024*(l.charCodeAt(0)-55296)+(l.charCodeAt(1)-56320);return fromCharCode(240\|n>>>18&7)+fromC

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
URL:	https://logincdn.msauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
URL:	https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65470)
Category:	downloaded
Size (bytes):	945160
Entropy (8bit):	5.410027230508284
Encrypted:	false
SSDEEP:	6144:2uEP2IUNxO5HyGdefrMDJgmZMSePbrGtvjFqnziHO+cHNlA4f5uJAn8ABP+4zMD7:5syg90PbWvjQ+sNpZ8ABPe
MD5:	6A888AF8E205D21FE1A9C3DC7DF23D77
SHA1:	6500A0AAECC2B43E5D952865C97111037CC19247
SHA-256:	53EBABDBA4E6157F44278BB006DD5A862A38731B450E104019D03CBA9AEEAC35
SHA-512:	498DB4161790C2F15FAFFC4368470C812ADD7E338DDB7CAC49840AF6FEF95414737748430B6483BBCFA243DA6BF98752F5BB9BB36F287DB6C6D5F7284CB2EE7B
Malicious:	false
URL:	https://logincdn.msftauth.net/shared/5/js/login_en_aoiK-OIF0h_hqcPcffI9dw2.js
Preview:	/! For license information please see login_en.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function s(e){return r.isMemo(e)?a:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=a;var c=Object.defineProperty,u=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,p=Object.getOwnPropertyDescriptor,f=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(g){var o=f(n);o&&o!==g&&e(t,o,r)}var a=u(n);d&&(a=a.concat(d(n)));for(var l=s(t),m=s(n),h=0;h<a.length;++h){var b=a[h];if(!(i[b]\|\|r&&r[b

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90677
Category:	dropped
Size (bytes):	32811
Entropy (8bit):	7.992877953733209
Encrypted:	true
SSDEEP:	768:fDPYSdMWwCyzH8REcKPN/8p0x7UQzlRMXv1FevViDAqA:a8REcsUp0xUQzc/8VCAV
MD5:	2E287EB418940084B921590C6E672C9E
SHA1:	1FC75A9DAA054EF88AAEA181F3A9B4CBA2B6B6E1
SHA-256:	6C2C58DAAE76131A00D1BFEE20852F372CF594BE7F4A8848ACC42F8BF72C1BBD
SHA-512:	A77F69571B0F04F4A2354D9E18E41EF86F22274EAED20C02215B632BFEF09C6543A83591E9DB3F2B4036A9684BFF666EB6A7B253BA18893500E9CD541AB752A0
Malicious:	false
Preview:	...........iw.8.?.~>....%."9K'R...q:.fw.,.n_.Z.l.eRMR^b.O...A.N...yq.t,b!.....BU....4kM.Lr..I.]DE.&..TF..K.J.9.7.$....(..'?....f...tG...?y8~0..;..w;[....;.u........D.......N:W.d........E..eR...q..sJG.O.Z,....l......~.........'.d.......n.N..@.../....l'...".J3Y..n3Y...o..T...P0..j..-.....v.m7T.LM. .....Ev.7...IC.q..[.t>nj.e..OE<m...l)^.K.......8:M.&.]zz..j.X..K........'3..Tk....Z.2.GQ6..Fi._.\|v.Bf.W?...T.]:j(.%F.)..t_^........8.:..DN..8....B.>\|<..~..\|H.x.q.=-.f.~..{.z..&t...e.LfE,.;.d...n.....2..FH. .Y,.J...EC.cj. .F......o.....\...&\.J..fJiJ.S..4.5..NM]m.....Q.....e.O..iSs'........'Z..6A(Y.8..eQ.....2..I.?...;dS..I...D..@./7t.:z.......c...dF..B.......9...8)..h.........<.I...2.\FY+.=S.8...$Qv...<..IL.x".w9_..3.."-nfR.(..WDN..L.....z..I8.E..Ub......d..M.....sq.N........p..lX...A]3Y....j...%.`N..G.v..6.m.KH.M......Z..a2.N.....4....,u.O.vWM...=d..J.r`..b.....N.hzp..C..?.. ......:..M6............;.w.."B.^.ZP.N.:.[..(:...(.y.)q...

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	3.8512137721714885
Encrypted:	false
SSDEEP:	48:HHFLpla1btjzvj3ijqjOj38jqEjoOji3CnkcD6YcUe0l+5+Nu:HH1pla7MKkE6/u+5F
MD5:	94B32A451FB1DF3F887BFA39540F993D
SHA1:	2CB4A55B8FF777073B6F3C73E2AA3BCD00A4903B
SHA-256:	87FF3643EB0D5FB9363F6AFDD5FE811DAED551B2F80BB69163A97803FCC06044
SHA-512:	90BB8128CE24E9705773E39963A620539611485B2E8732EA5082EBC8AF174FC4A233A99BD07DA67846CABDCC4D6AC51722A8292579A775A97102FA3434612BB2
Malicious:	false
URL:	https://antiphishing.vadesecure.com/favicon.ico
Preview:	...... .... .........(... ...@..... .........................LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG............ ... ........LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG........=......................f....LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.LpG.Lp

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://logincdn.msftauth.net/16.000.30374.3/images/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7007
Category:	dropped
Size (bytes):	2419
Entropy (8bit):	7.9084162154611555
Encrypted:	false
SSDEEP:	48:XMZLME8ac0UTyw+G0mNbF8pDRfciXxBce7Fh5hqoucAKFBwMJiUh4BTiFT:70Uh7NapDbNl8oucAKFSMJzhn
MD5:	9FAF36E3F793E68A83548EEE5622A222
SHA1:	220342B65C5563A249E462B779F2DC46BE3AD5A8
SHA-256:	E16E9ABCEFABFF8B5DD9895E4331F137E94A3D64354AD989951342A1B2813A39
SHA-512:	49B8E11A9B32FF76E7A5090D1E0C8CEFD4B9EDE08A8346DFB186B6DCCE2F712F7446CA944C01419F83499329CE1BDC296DCC32BFABE8471BB5A945E0CD0485F8
Malicious:	false
Preview:	...........Xmo.8..._Ak.D....8U...l..&9...).Z.-..)..._..~C.._......$....p.y.C.~..A.......=ow....~.n_.;x.....^.._.G....J4.!Ap.cI\|....Q.q.s...(..............N<%QH..I}...2A.....j...,....F...l..S...b\Q. ..T[..L..0..4.......\.B.x....L`.l.FX.$.B..T.......LfQ.......p......)....,Z..,.:KN.i..> ..'....P6D..H.v..B...'.rJ.D...a.8....Kj..y.A@.S4..... qx(...S6...S.SD...IWf#"..c....'T....B.%g{.w..z.Z?...V.P..ZmHU....G5.'..Kp..........w.M.....>x..x.)+l.-G....."....B.........e..G.9...4MH?.....P.n.{z...r.D.....o..a..9H...eR...z.cH...=..p.[..K.9\.-..u....-\..aM.HxG..... >$.....].t....c...kf...Qd..:..j...4..I.j.....aG.uR......G..8...........@I.E.vR...R.+p$.>......g........fT?^...=.Z..?).....)..i...D...../...G0.....RP.~ ^...[n.H%.6\9...S.\~.W../...G}:\DqjfA.n.@.#.c...?.".Y....c..h...G.m$.O..3l...'_..-..A8 /..K:.m.....(S[.d.j..;^..f.j....S9....l.pV...+.R.f.U^......T.+....%..2..l....,^:i.p...w....d..C..2.4......+...........Y.x.H.F...o.CYa.NA5.D...t-M\Q.&.W.....

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2232), with no line terminators
Category:	downloaded
Size (bytes):	2232
Entropy (8bit):	5.19933353228959
Encrypted:	false
SSDEEP:	48:ElW9cBYnIZGzUOFtPiUuJmTLfkBLok/X6X8LLec:Eg9/IGnj3ap/X6yt
MD5:	6C82B9591D45C74072ED9C23CC8F156B
SHA1:	FA77C8816341AF1AA93A73F40ACECF7804CADE1F
SHA-256:	6D1F78FE92F945BE2C15153CD0CE0BA1321E48FAF8931DA6912E47DAADE82C0E
SHA-512:	D86018703155C2008B22C7785EAC1CF128B961C5AEBAF86F29603F796323AA1AFCF6E1D4179B669C88BB84219F8182F3A82DE19A9664ED2D20FE92B281F17F01
Malicious:	false
URL:	https://antiphishing.vadesecure.com/runtime.3847a57210e62cb7ac86.js
Preview:	!function(e){function r(r){for(var n,i,a=r[0],f=r[1],c=r[2],p=0,s=[];p<a.length;p++)i=a[p],o[i]&&s.push(o[i][0]),o[i]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(l&&l(r);s.length;)s.shift()();return u.push.apply(u,c\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,a=1;a<t.length;a++){var f=t[a];0!==o[f]&&(n=!1)}n&&(u.splice(r--,1),e=i(i.s=t[0]))}return e}var n={},o={0:0},u=[];function i(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,i),t.l=!0,t.exports}i.e=function(e){var r=[],t=o[e];if(0!==t)if(t)r.push(t[2]);else{var n=new Promise(function(r,n){t=o[e]=[r,n]});r.push(t[2]=n);var u,a=document.createElement("script");a.charset="utf-8",a.timeout=120,i.nc&&a.setAttribute("nonce",i.nc),a.src=function(e){return i.p+""+({}[e]\|\|e)+"."+{4:"efcb4f36899adf4857d1",5:"1f58102d1016fa6a58a6"}[e]+".js"}(e),u=function(r){a.onerror=a.onload=null,clearTimeout(f);var t=o[e];if(0!==t){if(t){var n=r&&

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65454)
Category:	dropped
Size (bytes):	809542
Entropy (8bit):	5.422240239677127
Encrypted:	false
SSDEEP:	6144:RTUe7IN0IS5Gt7TO50CMQJYpYas4dSEb4G4+2dC8tt+f8creHbn4wjs7mTzDCy:C0Et7TqjaSEi+208JtA7Y
MD5:	344A179C67D1D574D245904ADEE70BD2
SHA1:	DBEB90D75259F470D2B3F26D4C374FDE8ADCEC7D
SHA-256:	ED2FD85F8749D30549719D54AAB98BEBF1BB4CAB54AA434851A512772DA9F359
SHA-512:	E902890E7795C3AC0325A92A1678AE5405C86CF33F0214EC1FA8521A6C6162395400F4EDF524D362900CFDED752ED5946239238AD7C6CE2153A5F504F012F4C7
Malicious:	false
Preview:	/! For license information please see reset-password-fabric_en.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function c(e){return r.isMemo(e)?a:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=a;var s=Object.defineProperty,u=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,f=Object.getOwnPropertyDescriptor,p=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(g){var o=p(n);o&&o!==g&&e(t,o,r)}var a=u(n);d&&(a=a.concat(d(n)));for(var l=c(t),b=c(n),h=0;h<a.length;++h){var m=a[h];i

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.8464393446710154
Encrypted:	false
SSDEEP:	3:mJHCm:m8m
MD5:	139A010C54200F8E63F5F8196DFC6B88
SHA1:	1F239A55AE74A6A1741A5070A428E48108088B29
SHA-256:	071CB6EC5D3727D93DB3261F2CADA840A8511897A3BFA677A338E3C855CB7D18
SHA-512:	D58E9D7D6E5347F131DA02F5AE1C5352A103DF3995C2903D3B69A9539B85B0EAABBE4DE455993E588973007CFB0B72D5FCCBD1437781B1C3E6D2CD298EE79FEC
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnw8PvhQPeM6xIFDewtwx0=?alt=proto
Preview:	Cg0KCw3sLcMdGgQIZBgC

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.6818808028034042
Encrypted:	false
SSDEEP:	3:uZuUeZn:u5eZn
MD5:	595E88012A6521AAE3E12CBEBE76EB9E
SHA1:	DA3968197E7BF67AA45A77515B52BA2710C5FC34
SHA-256:	B16E15764B8BC06C5C3F9F19BC8B99FA48E7894AA5A6CCDAD65DA49BBF564793
SHA-512:	FD13C580D15CC5E8B87D97EAD633209930E00E85C113C776088E246B47F140EFE99BDF6AB02070677445DB65410F7E62EC23C71182F9F78E9D0E1B9F7FDA0DC3
Malicious:	false
Preview:	404 page not found.

Static File Info

General

File type:	CDFV2 Microsoft Outlook Message
Entropy (8bit):	5.181345733007826
TrID:	Outlook Message (71009/1) 58.92% Outlook Form Template (41509/1) 34.44% Generic OLE2 / Multistream Compound File (8008/1) 6.64%
File name:	You have late tasks (291Ko).msg
File size:	61'952 bytes
MD5:	977c4f5577eb888fc317da1c63f55c44
SHA1:	be6362a40eefd05fc525f78f4599ec8fd0b41996
SHA256:	1fcf22be5d76e824cb3b007932a23bd93219881dca0e7925cb931d83c5f4d53b
SHA512:	a15fde9231bca1d987e415ee3478f9f1172d691443d6c2abf81c7fa4c0c8db21b776aec8feea3715ea13940963ecea059c2aac741d8a504ca58f2c7dadbf666e
SSDEEP:	768:CUvM/mUWT11zID66pP7tKPkzXNQowtVL6IKyWvJ9+mxeIyZ8fJgAst:eeUWT+hpw4vJaIyIt
TLSH:	3553622535F94606F27BEF315CF580879936BD82AD20DB4F3191730E1971A81EDA2B2B
File Content Preview:	........................>......................................................................................................................................................................................................................................

Static Mail

General

Subject:	You have late tasks
From:	Microsoft on behalf of your organization <noreply@planner.office365.com>
To:	"Gagliolo; Charlotte" <Charlotte.Gagliolo@chantiers-atlantique.com>
Cc:
BCC:
Date:	Wed, 18 Sep 2024 06:11:44 +0200
Communications:	AVERTISSEMENT: Cet e-mail provient de lextrieur de lorganisation. Ne cliquez pas sur des liens ou nouvrez pas de pices jointes moins de reconnatre lexpditeur et de savoir que le contenu est sr. Hi CHARLOTTE. You have a task due. You have a late task Vrifier dlgataires ad hoc dans vos secteurs (SEC3HSE009 Formation) <https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy> In a Loop component linked to Tasklist <https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy> 9/11/2024 7 days late View tasks in Planner in Teams <https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=b362886ab343a31cf58c4e619b6ffd96c0dfdece5b632c284133acb979df2de3&u=https%3A%2F%2Fteams.microsoft.com%2Fl%2Fentity%2Fcom.microsoft.teamspace.tab.planner%2Fmytasks%3FtenantId%3Df763396b-da0e-42fe-aa30-08e090082a6a%26webUrl%3Dhttps%253a%252f%252ftasks.teams.microsoft.com%252fteamsui%252fpersonalApp%252falltasklists%26context%3D%257b%2522subEntityId%2522%253a%2522%252fv1%252fassignedtome%253fnc%253demail%2526nt%253dduedate%2522%257d> or Planner for web <https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=b19d20887ad58c51afa14b223a0870e646a3e5b2fc9141f3a612ce526aacbe14&u=https%3A%2F%2Ftasks.office.com%2Fchantiers-atlantique.com%2Fen-US%2FHome%2FMyTasks%3FType%3DDueDate%26Channel%3DOdspNotify%26CreatedTime%3D638622295017751296> To change your notification settings, go to Planner for web <https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=a1ab31ca665859a10c5bd3a690183d9c687295fe53607860d4858a02a20b226a&u=https%3A%2F%2Ftasks.office.com%2F> , choose the settings button in the top right, and then select Notifications. Learn more <https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=b7553950b97b63ae7942e680553266e28a85c6fe084e157a280b0d361e25b90e&u=https%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3Flinkid%3D853944> . You are receiving this email because you have subscribed to Microsoft Office 365. ________________________________ Privacy Statement <https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=68023b8cd77b847d81a475c7b70404635f14ae7a79207c19cce157ff1ee88d04&u=https%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3FLinkId%3D521839> This email is generated through Chantiers de l'Atlantique's use of Microsoft 365 and may contain content that is controlled by Chantiers de l'Atlantique. <https://germanywestcentralr-notifyp.svc.ms:443/api/v2/tracking/method/View?mi=B_wjZtmDnUaZGBQvMUMDow>
Attachments:	5c140c63-a08e-4347-848b-663ec5eb8fe2.png 3b8f6f13-b602-492b-947b-62d4a944fe5c.png e1ac3bc4-c15d-45e1-86a4-d9d55865b345.png cddf0d30-878f-4909-9708-e5b9349587ac.png 4872e8ed-bca1-496f-9662-d09309c0162a.png 460a97f8-08b1-4177-a316-8b1031c184f5.png

Headers

Key	Value
Received	from substrate.office.com (2603:10a6:208:198::10) by
14.3.498.0; Wed, 18 Sep 2024 06	11:46 +0200
Wed, 18 Sep 2024 06	11:45 +0200 (CEST)
PR1P264CA0181.FRAP264.PROD.OUTLOOK.COM; Wed, 18 Sep 2024 04	11:44 +0000
From	Microsoft on behalf of your organization <noreply@planner.office365.com>
To	"Gagliolo, Charlotte" <Charlotte.Gagliolo@chantiers-atlantique.com>
Subject	You have late tasks
Thread-Topic	You have late tasks
Thread-Index	AQHbCYDg5tKcIMaCfkykZMVEZfvkIQ==
Date	Wed, 18 Sep 2024 06:11:44 +0200
Message-ID	<PlannerDueDate-1f3b5fa9-ddb0-477e-af36-7f9e4cb4db13-DispatchToRecipients-PreprocessPayload-r0-SendEmail@odspnotify>
Content-Language	fr-FR
X-MS-Exchange-Organization-AuthAs	Anonymous
X-MS-Exchange-Organization-AuthSource	A0-CASHUB01.casn.net
X-MS-Has-Attach	yes
X-MS-Exchange-Organization-SCL	-1
X-MS-TNEF-Correlator	Content-Type: multipart/related;
MIME-Version	1.0
date	Wed, 18 Sep 2024 06:11:44 +0200

File Icon


Icon Hash:	c4e1928eacb280a2

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 4, 2024 09:30:17.467633009 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 4, 2024 09:30:17.771269083 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 4, 2024 09:30:18.379271984 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 4, 2024 09:30:19.586304903 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 4, 2024 09:30:20.389542103 CEST	49689	80	192.168.2.16	192.229.211.108
Oct 4, 2024 09:30:22.000210047 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 4, 2024 09:30:23.735002041 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:23.735065937 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:23.735174894 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:23.736803055 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:23.736828089 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:24.391053915 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:24.391355038 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:24.394710064 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:24.394742012 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:24.395106077 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:24.436362028 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:24.446949005 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:24.487426996 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:24.660752058 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:24.660903931 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:24.661155939 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:24.663209915 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:24.663209915 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:24.663264036 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:24.663294077 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:24.714045048 CEST	49710	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:24.714137077 CEST	443	49710	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:24.714242935 CEST	49710	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:24.716191053 CEST	49710	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:24.716227055 CEST	443	49710	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:25.381753922 CEST	443	49710	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:25.381850958 CEST	49710	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:25.383402109 CEST	49710	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:25.383429050 CEST	443	49710	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:25.383721113 CEST	443	49710	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:25.385112047 CEST	49710	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:25.431400061 CEST	443	49710	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:25.633579969 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 4, 2024 09:30:25.663448095 CEST	443	49710	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:25.663619995 CEST	443	49710	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:25.663722038 CEST	49710	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:25.664438009 CEST	49710	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:25.664438963 CEST	49710	443	192.168.2.16	184.28.90.27
Oct 4, 2024 09:30:25.664483070 CEST	443	49710	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:25.664508104 CEST	443	49710	184.28.90.27	192.168.2.16
Oct 4, 2024 09:30:25.947179079 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 4, 2024 09:30:26.214895010 CEST	49712	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:30:26.214921951 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:26.215023041 CEST	49712	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:30:26.216402054 CEST	49712	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:30:26.216414928 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:26.562227964 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 4, 2024 09:30:26.814306974 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 4, 2024 09:30:26.920438051 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:26.920558929 CEST	49712	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:30:26.922648907 CEST	49712	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:30:26.922656059 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:26.923052073 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:26.973225117 CEST	49712	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:30:26.995831966 CEST	49712	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:30:27.043401957 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:27.226258039 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:27.226315975 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:27.226355076 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:27.226397038 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:27.226464987 CEST	49712	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:30:27.226464987 CEST	49712	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:30:27.226461887 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:27.226512909 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:27.226532936 CEST	49712	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:30:27.226579905 CEST	49712	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:30:27.227083921 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:27.227185965 CEST	49712	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:30:27.227193117 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:27.227325916 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:27.227466106 CEST	49712	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:30:27.297646046 CEST	49712	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:30:27.297646046 CEST	49712	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:30:27.297661066 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:27.297667980 CEST	443	49712	172.202.163.200	192.168.2.16
Oct 4, 2024 09:30:27.777201891 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 4, 2024 09:30:30.093381882 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 4, 2024 09:30:30.188194036 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 4, 2024 09:30:30.396233082 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 4, 2024 09:30:31.002228022 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 4, 2024 09:30:31.961319923 CEST	49719	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:31.961416006 CEST	443	49719	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:31.961479902 CEST	49719	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:31.961744070 CEST	49719	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:31.961777925 CEST	443	49719	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:32.212241888 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 4, 2024 09:30:33.180896044 CEST	443	49719	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.181365967 CEST	49719	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.181428909 CEST	443	49719	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.183130980 CEST	443	49719	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.183229923 CEST	49719	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.184515953 CEST	49719	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.184612989 CEST	443	49719	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.184755087 CEST	49719	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.184772968 CEST	443	49719	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.231256008 CEST	49719	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.377590895 CEST	443	49719	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.377657890 CEST	443	49719	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.377806902 CEST	443	49719	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.377850056 CEST	49719	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.377985001 CEST	49719	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.378483057 CEST	49719	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.378529072 CEST	443	49719	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.394898891 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.395006895 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.395103931 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.395538092 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.395632029 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.395724058 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.396112919 CEST	49722	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.396133900 CEST	443	49722	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.396394014 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.396434069 CEST	49722	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.396435022 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.396774054 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.396795988 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.396975994 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.396989107 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.397025108 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.397304058 CEST	49722	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.397326946 CEST	443	49722	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:33.397536993 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:33.397566080 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.060877085 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.061252117 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.061275959 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.061759949 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.062181950 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.062278986 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.062354088 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.066612005 CEST	443	49722	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.066833019 CEST	49722	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.066878080 CEST	443	49722	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.069180012 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.069511890 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.069528103 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.070653915 CEST	443	49722	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.070736885 CEST	49722	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.070776939 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.071178913 CEST	49722	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.071410894 CEST	443	49722	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.071717024 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.071896076 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.071954012 CEST	49722	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.071969986 CEST	443	49722	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.072037935 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.072124958 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.072400093 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.072413921 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.073951960 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.074054956 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.074568033 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.074651957 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.074740887 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.105248928 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.105257988 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.119402885 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.119429111 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.120261908 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.120260954 CEST	49722	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.120280027 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.167274952 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.332114935 CEST	443	49722	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.332233906 CEST	443	49722	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.332454920 CEST	49722	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.332521915 CEST	443	49722	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.332998991 CEST	443	49722	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.333081961 CEST	49722	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.333554029 CEST	49722	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.333554029 CEST	49722	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.333591938 CEST	443	49722	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.333729029 CEST	49722	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.357032061 CEST	49725	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.357127905 CEST	443	49725	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.357280970 CEST	49725	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.357496977 CEST	49725	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.357531071 CEST	443	49725	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.378634930 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.378658056 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.378670931 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.378707886 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.378746986 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.378788948 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.378863096 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.378900051 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.378923893 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.379581928 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.379607916 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.379625082 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.379707098 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.379740953 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.379790068 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.408606052 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.417207003 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.417228937 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.417325020 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.417381048 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.417401075 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.419264078 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.425291061 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.425337076 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.425363064 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.425383091 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.425437927 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.430120945 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.430160046 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.430185080 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.430206060 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.430233955 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.430258036 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.430264950 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.430299997 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.430350065 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.430350065 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.430383921 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.430396080 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.436708927 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.436757088 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.436798096 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.436810970 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.436841011 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.469257116 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.485295057 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.501296997 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.501315117 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.501349926 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.501400948 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.501470089 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.501492023 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.501615047 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.506125927 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.506150961 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.506267071 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.506290913 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.506345987 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.508697987 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.508723974 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.508826971 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.508912086 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.508991957 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.511707067 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.511751890 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.512059927 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.512070894 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.512125015 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.515497923 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.515578032 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.515593052 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.515625954 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.515655994 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.515682936 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.516448021 CEST	49720	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.516483068 CEST	443	49720	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.518435955 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.518459082 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.518563032 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.518604994 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.518663883 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.521961927 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.521997929 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.522083998 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.522119045 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.522218943 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.525521040 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.525557995 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.525609016 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.525629044 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.525650978 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.525716066 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.525732040 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.526377916 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.528593063 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.528637886 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.528698921 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.528717041 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.528762102 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.528784990 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.531470060 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.531526089 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.531588078 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.531605959 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.531647921 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.531691074 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.531701088 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.534320116 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.534378052 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.534400940 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.534420013 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.534459114 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.554802895 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.554877043 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.554913998 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.554934025 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.555003881 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.556085110 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.556173086 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.556185961 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.556278944 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.556337118 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.556854010 CEST	49721	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.556890965 CEST	443	49721	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.562098026 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.562134027 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.562372923 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.563100100 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.563117027 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.580236912 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.608509064 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.608577013 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.608614922 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.608633041 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.608675957 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.608700991 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.613405943 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.613460064 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.613496065 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.613507032 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.613543987 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.613956928 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.615516901 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.615565062 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.615612030 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.615624905 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.615657091 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.615680933 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.617933035 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.617974997 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.618024111 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.618036985 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.618071079 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.618139029 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.629570961 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 4, 2024 09:30:34.693933964 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.694004059 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.694092989 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.694127083 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.695530891 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.700228930 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.700272083 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.700326920 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.700345039 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.700385094 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.700417995 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.702404022 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.702454090 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.702497005 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.702516079 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.702548981 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.702573061 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.703293085 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.703335047 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.703367949 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.703381062 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.703419924 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.703438044 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.705066919 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.705111027 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.705148935 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.705162048 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.705192089 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.705229044 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.706610918 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.706656933 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.706696033 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.706708908 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.706742048 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.706762075 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.707669020 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.707712889 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.707741976 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.707755089 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.707782984 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.707806110 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.779495001 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.779555082 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.779608011 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.779635906 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.779653072 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.779727936 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.783190966 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.783236980 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.783272028 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.783284903 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.783327103 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.783345938 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.787003994 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.787061930 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.787103891 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.787123919 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.787153959 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.787174940 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.791503906 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.791552067 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.791594982 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.791623116 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.791661978 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.791685104 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.792521000 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.792572021 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.792604923 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.792618036 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.792648077 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.792679071 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.793442965 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.793484926 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.793518066 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.793529987 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.793550968 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.793574095 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.795794964 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.795840979 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.795890093 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.795902967 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.795942068 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.795963049 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.796500921 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.796542883 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.796577930 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.796591043 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.796613932 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.796636105 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.868649006 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.868722916 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.868762016 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.868782043 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.868818045 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.868854046 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.873471975 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.873532057 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.873574018 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.873591900 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.873622894 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.873673916 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.875901937 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.875948906 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.875997066 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.876010895 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.876045942 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.876071930 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.880341053 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.880393028 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.880454063 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.880471945 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.880507946 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.880531073 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.881257057 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.881302118 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.881344080 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.881356001 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.881392002 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.881444931 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.882818937 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.882868052 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.882919073 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.882931948 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.882970095 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.882987976 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.884448051 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.884510040 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.884558916 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.884571075 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.884603977 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.884633064 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.885464907 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.885508060 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.885569096 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.885581970 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.885608912 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.885634899 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.957396984 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.957457066 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.957556009 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.957556963 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.957614899 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.957637072 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.957783937 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.957851887 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.958159924 CEST	49723	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.958201885 CEST	443	49723	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.964257956 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.964308977 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.964462042 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.964687109 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:34.964721918 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:34.993253946 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 4, 2024 09:30:35.008922100 CEST	443	49725	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.009192944 CEST	49725	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.009218931 CEST	443	49725	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.012748957 CEST	443	49725	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.012819052 CEST	49725	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.013309002 CEST	49725	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.013395071 CEST	443	49725	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.013561010 CEST	49725	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.013570070 CEST	443	49725	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.015938044 CEST	49729	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.016016006 CEST	443	49729	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.016100883 CEST	49729	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.016294003 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.016314030 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.016427994 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.016598940 CEST	49729	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.016627073 CEST	443	49729	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.016802073 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.016829014 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.057307005 CEST	49725	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.193361998 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.193706989 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.193736076 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.197382927 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.197469950 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.197912931 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.198102951 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.198235035 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.198251963 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.248255014 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.276937962 CEST	443	49725	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.276962996 CEST	443	49725	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.277034044 CEST	443	49725	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.277055025 CEST	49725	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.277112961 CEST	49725	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.277740002 CEST	49725	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.277775049 CEST	443	49725	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.502116919 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.502150059 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.502157927 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.502202034 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.502233028 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.502243996 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.502278090 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.502309084 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.502335072 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.551876068 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.552982092 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.553030968 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.553064108 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.553097963 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.553137064 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.595249891 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.596718073 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.596965075 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.596987963 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.600533009 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.600606918 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.600903988 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.601031065 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.601070881 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.642262936 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.642271996 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.642270088 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.642329931 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.642359972 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.642379045 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.642421007 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.642446995 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.643630028 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.643656969 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.643693924 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.643702984 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.643739939 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.643760920 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.646090984 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.646114111 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.646162033 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.646169901 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.646240950 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.652218103 CEST	443	49729	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.652460098 CEST	49729	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.652518034 CEST	443	49729	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.653002977 CEST	443	49729	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.653295994 CEST	49729	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.653393984 CEST	443	49729	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.653399944 CEST	49729	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.680298090 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.680357933 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.680378914 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.680387974 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.680452108 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.680465937 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.680531979 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.680540085 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.680640936 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.680708885 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.681035995 CEST	49727	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.681051016 CEST	443	49727	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.690270901 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.699409962 CEST	443	49729	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.706269026 CEST	49729	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.758846998 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.759125948 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.759147882 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.760346889 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.760740995 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.760871887 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.760885000 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.760962009 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.801363945 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.921466112 CEST	443	49729	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.921629906 CEST	443	49729	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.921881914 CEST	49729	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.922125101 CEST	49729	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.922158957 CEST	443	49729	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.922203064 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.922264099 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.922286034 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.922306061 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.922338009 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.922344923 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.922368050 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.922373056 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.922395945 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.922398090 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.922420979 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.922445059 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.925013065 CEST	49732	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.925045013 CEST	443	49732	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.925368071 CEST	49732	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.925601959 CEST	49732	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.925611973 CEST	443	49732	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.960069895 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.963373899 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.963468075 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.963509083 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:35.963522911 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:35.963562012 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.004991055 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.276983976 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.277018070 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.277064085 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.277089119 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.277098894 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.277110100 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.277137995 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.277142048 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.277164936 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.277173042 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.277731895 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.277750969 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.277791977 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.277802944 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.277815104 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.277856112 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.279911995 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.279954910 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.279979944 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.279989958 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.280011892 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.280028105 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.281001091 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.281044006 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.281069040 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.281074047 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.281100035 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.281114101 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.281975031 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.282011032 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.282020092 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.282052040 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.282083988 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.282084942 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.282135963 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.282169104 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.282169104 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.282216072 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.285888910 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.285913944 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.285967112 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.285972118 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.285996914 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.286003113 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.286032915 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.286050081 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.286072969 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.286075115 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.286097050 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.286102057 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.286115885 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.286147118 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.286298037 CEST	49730	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.286329985 CEST	443	49730	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.287863970 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.287904978 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.287930012 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.287934065 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.287967920 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.287986040 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.289565086 CEST	49733	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.289659023 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.289740086 CEST	49733	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.289947033 CEST	49733	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.289968014 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.290102005 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.290168047 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.290177107 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.290191889 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.290227890 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.290235996 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.292629004 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.292670965 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.292701006 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.292706013 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.292737007 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.292747974 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.295675993 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.295717955 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.295763016 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.295768976 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.295799017 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.295816898 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.297158957 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.297199011 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.297249079 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.297255039 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.297281981 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.297297955 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.299108028 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.299160957 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.299180984 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.299186945 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.299233913 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.300474882 CEST	49734	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.300501108 CEST	443	49734	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.301095963 CEST	49734	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.301265955 CEST	49734	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.301292896 CEST	443	49734	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.301498890 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.301542044 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.301569939 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.301574945 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.301590919 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.301609993 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.302213907 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.302256107 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.302283049 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.302289009 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.302325010 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.304160118 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.304183006 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.304250002 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.304255009 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.304363966 CEST	49735	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.304373980 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.304402113 CEST	443	49735	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.305061102 CEST	49736	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.305099964 CEST	49735	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.305110931 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.305488110 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.305505991 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.305562973 CEST	49736	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.305604935 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.305604935 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.305614948 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.305670023 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.305794001 CEST	49735	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.305810928 CEST	443	49735	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.306018114 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.306061983 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.306071997 CEST	49737	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.306102037 CEST	443	49737	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.306104898 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.306109905 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.306180954 CEST	49737	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.306183100 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.306183100 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.306498051 CEST	49736	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.306524038 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.306608915 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.306628942 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.306663036 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.306668043 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.306684971 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.306696892 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.306746960 CEST	49737	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.306761980 CEST	443	49737	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.307607889 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.307627916 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.307677984 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.307682991 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.307964087 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.308801889 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.308823109 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.308866978 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.308871031 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.308895111 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.308902025 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.309717894 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.309736967 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.309783936 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.309788942 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.309807062 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.309823990 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.310785055 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.310803890 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.310853004 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.310858011 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.310874939 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.310893059 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.312102079 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.312123060 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.312179089 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.312185049 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.312469959 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.312472105 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.312482119 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.312498093 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.312529087 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.312551975 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.312581062 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.312607050 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.313374996 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.313395023 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.313448906 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.313466072 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.313493013 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.313694000 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.314392090 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.314413071 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.314450026 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.314454079 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.314474106 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.314496040 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.357644081 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.357671022 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.357764959 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.357800007 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.358325958 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.358345032 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.358397007 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.358418941 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.358444929 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.359344006 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.392541885 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.392584085 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.392672062 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.392697096 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.392712116 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.393065929 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.393316031 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.393361092 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.393388033 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.393393040 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.393419027 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.393434048 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.394429922 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.394476891 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.394505978 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.394511938 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.394539118 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.394556046 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.395422935 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.395473003 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.395498037 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.395503044 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.395530939 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.395549059 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.396388054 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.396428108 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.396461010 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.396470070 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.396492004 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.396514893 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.396517038 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.396543980 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.396572113 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.396595955 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.396600008 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.396722078 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.396760941 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.396766901 CEST	443	49728	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.396775007 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.396799088 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.396879911 CEST	49728	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.420356035 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 4, 2024 09:30:36.554958105 CEST	443	49732	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.555349112 CEST	49732	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.555378914 CEST	443	49732	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.556526899 CEST	443	49732	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.556932926 CEST	49732	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.557087898 CEST	49732	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.557125092 CEST	443	49732	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.610236883 CEST	49732	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.750822067 CEST	49738	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:30:36.750885010 CEST	443	49738	172.217.16.196	192.168.2.16
Oct 4, 2024 09:30:36.750967026 CEST	49738	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:30:36.751142979 CEST	49738	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:30:36.751151085 CEST	443	49738	172.217.16.196	192.168.2.16
Oct 4, 2024 09:30:36.817763090 CEST	443	49732	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.817904949 CEST	443	49732	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.818011999 CEST	49732	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.818665981 CEST	49732	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.818687916 CEST	443	49732	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.939779997 CEST	443	49737	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.940393925 CEST	443	49734	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.940690994 CEST	49734	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.940752983 CEST	443	49734	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.940781116 CEST	49737	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.940804005 CEST	443	49737	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.941948891 CEST	443	49734	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.942257881 CEST	443	49737	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.942337990 CEST	49737	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.942704916 CEST	49734	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.942883015 CEST	443	49734	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.942984104 CEST	49737	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.943073988 CEST	443	49737	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.943150043 CEST	49734	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.943185091 CEST	49737	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.943192005 CEST	443	49737	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.943205118 CEST	49737	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.947921038 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.950308084 CEST	49733	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.950326920 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.951489925 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.954521894 CEST	49733	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.954612017 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.954690933 CEST	49733	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.961458921 CEST	443	49735	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.964699984 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.964960098 CEST	49736	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.964998960 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.965033054 CEST	49735	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.965054989 CEST	443	49735	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.966239929 CEST	443	49735	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.968503952 CEST	49735	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.968615055 CEST	49735	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.968622923 CEST	443	49735	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.968674898 CEST	443	49735	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.968693018 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.968756914 CEST	49736	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.969301939 CEST	49736	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.969392061 CEST	49736	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.969403982 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.969475985 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.987420082 CEST	443	49734	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.987445116 CEST	443	49737	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:36.989264011 CEST	49737	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:36.999408960 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.020317078 CEST	49736	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.020323992 CEST	49735	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.020348072 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.069252968 CEST	49736	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.205596924 CEST	443	49734	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.205656052 CEST	443	49734	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.205739021 CEST	49734	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.205795050 CEST	443	49734	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.205842972 CEST	443	49734	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.205899954 CEST	49734	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.206537008 CEST	49734	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.206569910 CEST	443	49734	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.211152077 CEST	49739	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.211241961 CEST	443	49739	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.211321115 CEST	49739	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.211683989 CEST	49740	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.211775064 CEST	443	49740	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.211844921 CEST	49740	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.211961985 CEST	49739	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.211997986 CEST	443	49739	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.212136984 CEST	49740	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.212174892 CEST	443	49740	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.216965914 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.232327938 CEST	443	49735	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.232394934 CEST	443	49735	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.232404947 CEST	443	49735	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.232465982 CEST	49735	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.232482910 CEST	443	49735	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.232532978 CEST	49735	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.236279964 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.236350060 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.236370087 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.236392021 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.236426115 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.236426115 CEST	49736	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.236502886 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.236536026 CEST	49736	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.236560106 CEST	49736	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.236572027 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.236624002 CEST	49736	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.243086100 CEST	49735	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.243104935 CEST	443	49735	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.256203890 CEST	49736	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.256237984 CEST	443	49736	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.258261919 CEST	49733	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.258281946 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.266681910 CEST	49741	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.266771078 CEST	443	49741	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.266859055 CEST	49741	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.267024040 CEST	49742	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.267044067 CEST	443	49742	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.267122030 CEST	49742	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.267265081 CEST	49741	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.267313957 CEST	443	49741	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.267400026 CEST	49742	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.267417908 CEST	443	49742	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.302123070 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.302145004 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.302175999 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.302210093 CEST	49733	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.302233934 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.302254915 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.302277088 CEST	49733	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.302277088 CEST	49733	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.302299976 CEST	49733	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.311559916 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.311613083 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.311642885 CEST	49733	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.311654091 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.311674118 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.311693907 CEST	49733	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.311744928 CEST	49733	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.311847925 CEST	49733	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.311863899 CEST	443	49733	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.399547100 CEST	443	49738	172.217.16.196	192.168.2.16
Oct 4, 2024 09:30:37.399801970 CEST	49738	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:30:37.399825096 CEST	443	49738	172.217.16.196	192.168.2.16
Oct 4, 2024 09:30:37.401459932 CEST	443	49738	172.217.16.196	192.168.2.16
Oct 4, 2024 09:30:37.401551962 CEST	49738	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:30:37.403779030 CEST	49738	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:30:37.403898954 CEST	443	49738	172.217.16.196	192.168.2.16
Oct 4, 2024 09:30:37.449259996 CEST	49738	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:30:37.449317932 CEST	443	49738	172.217.16.196	192.168.2.16
Oct 4, 2024 09:30:37.496294975 CEST	49738	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:30:37.843560934 CEST	443	49740	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.843827009 CEST	49740	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.843888998 CEST	443	49740	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.844388962 CEST	443	49740	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.844651937 CEST	49740	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.844763041 CEST	49740	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.844892979 CEST	443	49740	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.871263027 CEST	443	49739	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.871556997 CEST	49739	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.871620893 CEST	443	49739	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.872801065 CEST	443	49739	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.873105049 CEST	49739	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.873219967 CEST	443	49739	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.873228073 CEST	49739	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.896274090 CEST	49740	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.898976088 CEST	443	49742	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.899235010 CEST	49742	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.899298906 CEST	443	49742	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.902508974 CEST	443	49742	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.902591944 CEST	49742	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.902842999 CEST	49742	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.902931929 CEST	443	49742	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.902961969 CEST	49742	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.915426016 CEST	443	49739	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.916779041 CEST	443	49741	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.917001963 CEST	49741	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.917021036 CEST	443	49741	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.918121099 CEST	443	49741	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.918417931 CEST	49741	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.918520927 CEST	49741	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.918593884 CEST	443	49741	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.928255081 CEST	49739	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.943270922 CEST	49742	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.943289995 CEST	443	49742	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:37.958276033 CEST	49741	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:37.990247011 CEST	49742	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.110239983 CEST	443	49740	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.110311031 CEST	443	49740	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.110362053 CEST	49740	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.110399008 CEST	443	49740	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.110470057 CEST	443	49740	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.110527992 CEST	49740	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.111586094 CEST	49740	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.111618042 CEST	443	49740	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.138861895 CEST	443	49739	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.139036894 CEST	443	49739	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.139108896 CEST	49739	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.139681101 CEST	49739	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.139734030 CEST	443	49739	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.144778967 CEST	49743	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.144834042 CEST	443	49743	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.144906998 CEST	49743	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.145114899 CEST	49743	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.145145893 CEST	443	49743	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.167637110 CEST	443	49742	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.167699099 CEST	443	49742	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.167718887 CEST	443	49742	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.167759895 CEST	49742	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.167797089 CEST	443	49742	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.167826891 CEST	49742	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.167879105 CEST	443	49742	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.167937994 CEST	49742	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.168960094 CEST	49742	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.168992043 CEST	443	49742	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.184153080 CEST	443	49741	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.184845924 CEST	443	49741	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.184866905 CEST	443	49741	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.184900999 CEST	443	49741	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.184914112 CEST	49741	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.184941053 CEST	443	49741	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.184974909 CEST	49741	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.184999943 CEST	49741	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.185012102 CEST	443	49741	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.185072899 CEST	443	49741	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.185122013 CEST	49741	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.185184002 CEST	49741	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.185201883 CEST	443	49741	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.185224056 CEST	49741	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.185254097 CEST	49741	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.202186108 CEST	443	49737	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.202384949 CEST	443	49737	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.202476978 CEST	49737	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.202888966 CEST	49737	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.202910900 CEST	443	49737	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.205207109 CEST	49744	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.205282927 CEST	443	49744	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.205355883 CEST	49744	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.206052065 CEST	49744	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.206087112 CEST	443	49744	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.206695080 CEST	49745	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.206737041 CEST	443	49745	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.206792116 CEST	49745	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.207120895 CEST	49745	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.207137108 CEST	443	49745	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.260422945 CEST	49746	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:38.260489941 CEST	443	49746	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:38.260560036 CEST	49746	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:38.260699034 CEST	49747	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:38.260734081 CEST	443	49747	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:38.260781050 CEST	49747	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:38.260879993 CEST	49746	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:38.260911942 CEST	443	49746	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:38.261020899 CEST	49747	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:38.261038065 CEST	443	49747	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:38.778614044 CEST	443	49743	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.778934002 CEST	49743	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.778975010 CEST	443	49743	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.779360056 CEST	443	49743	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.779731035 CEST	49743	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.779803991 CEST	443	49743	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.779934883 CEST	49743	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.827409029 CEST	443	49743	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.864900112 CEST	443	49744	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.868700027 CEST	443	49745	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.869050980 CEST	49745	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.869076014 CEST	443	49745	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.869189024 CEST	49744	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.869251013 CEST	443	49744	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.869779110 CEST	443	49744	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.870181084 CEST	443	49745	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.870229006 CEST	49744	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.870318890 CEST	443	49744	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.870687008 CEST	49745	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.870701075 CEST	49744	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.870728970 CEST	443	49744	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.870774984 CEST	49744	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.870857000 CEST	49745	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.870863914 CEST	443	49745	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.911336899 CEST	49745	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:38.911356926 CEST	443	49745	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:38.911482096 CEST	443	49744	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.046783924 CEST	443	49743	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.046844959 CEST	443	49743	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.046937943 CEST	443	49743	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.047116041 CEST	49743	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.047116041 CEST	49743	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.048144102 CEST	49743	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.048166037 CEST	443	49743	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.051162004 CEST	49749	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.051229000 CEST	443	49749	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.051328897 CEST	49749	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.054164886 CEST	49749	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.054203987 CEST	443	49749	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.063658953 CEST	443	49744	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.063750982 CEST	443	49744	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.063880920 CEST	49744	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.066143990 CEST	49744	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.066178083 CEST	443	49744	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.073885918 CEST	443	49747	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.074347019 CEST	49747	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.074362993 CEST	443	49747	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.076023102 CEST	443	49747	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.076360941 CEST	49747	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.077359915 CEST	49747	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.077459097 CEST	443	49747	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.077615023 CEST	49747	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.084711075 CEST	443	49746	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.085222960 CEST	49746	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.085258961 CEST	443	49746	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.086819887 CEST	443	49746	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.086977005 CEST	49746	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.087316036 CEST	49746	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.087407112 CEST	443	49746	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.117335081 CEST	49747	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.117358923 CEST	443	49747	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.133392096 CEST	49746	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.133462906 CEST	443	49746	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.135842085 CEST	443	49745	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.135948896 CEST	443	49745	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.136049986 CEST	49745	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.138139009 CEST	49745	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.138154030 CEST	443	49745	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.164288998 CEST	49747	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.180437088 CEST	49746	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.362425089 CEST	443	49747	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.362648964 CEST	443	49747	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.362744093 CEST	49747	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.363313913 CEST	49747	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.363342047 CEST	443	49747	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.368177891 CEST	49746	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.415437937 CEST	443	49746	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.435331106 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 4, 2024 09:30:39.706701994 CEST	443	49749	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.710834026 CEST	49749	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.710886002 CEST	443	49749	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.712083101 CEST	443	49749	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.714212894 CEST	49749	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.714212894 CEST	49749	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.714428902 CEST	443	49749	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.770281076 CEST	49749	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.795679092 CEST	443	49746	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.795900106 CEST	443	49746	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.796169043 CEST	49746	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.796463013 CEST	49746	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.796509981 CEST	443	49746	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.799232006 CEST	49750	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.799287081 CEST	443	49750	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.799355030 CEST	49750	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.799561024 CEST	49750	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:39.799573898 CEST	443	49750	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:39.974172115 CEST	443	49749	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.974221945 CEST	443	49749	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.974287033 CEST	49749	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.974354029 CEST	443	49749	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:39.974409103 CEST	49749	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.975212097 CEST	49749	443	192.168.2.16	163.172.240.109
Oct 4, 2024 09:30:39.975244999 CEST	443	49749	163.172.240.109	192.168.2.16
Oct 4, 2024 09:30:40.616072893 CEST	443	49750	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:40.616348028 CEST	49750	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:40.616415977 CEST	443	49750	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:40.616909981 CEST	443	49750	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:40.617369890 CEST	49750	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:40.617459059 CEST	443	49750	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:40.617604971 CEST	49750	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:40.663412094 CEST	443	49750	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:40.906335115 CEST	443	49750	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:40.906404972 CEST	443	49750	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:40.906488895 CEST	49750	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:40.906531096 CEST	443	49750	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:40.906698942 CEST	443	49750	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:40.907263041 CEST	49750	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:40.907270908 CEST	443	49750	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:40.907286882 CEST	49750	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:40.907286882 CEST	49750	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:40.907308102 CEST	49750	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:40.910696030 CEST	49751	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:40.910788059 CEST	443	49751	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:40.911034107 CEST	49751	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:40.911201954 CEST	49751	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:40.911223888 CEST	443	49751	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:41.713757038 CEST	443	49751	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:41.714104891 CEST	49751	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:41.714133978 CEST	443	49751	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:41.714481115 CEST	443	49751	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:41.714905024 CEST	49751	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:41.714972019 CEST	443	49751	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:41.715101957 CEST	49751	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:41.715132952 CEST	443	49751	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:41.962769032 CEST	443	49751	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:41.962827921 CEST	443	49751	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:41.962862968 CEST	443	49751	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:41.962898016 CEST	443	49751	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:41.963063955 CEST	443	49751	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:41.963107109 CEST	49751	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:41.963107109 CEST	49751	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:41.963179111 CEST	49751	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:41.965133905 CEST	49751	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:41.965135098 CEST	49751	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:41.965203047 CEST	443	49751	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:41.965292931 CEST	49751	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:43.174690962 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:43.174737930 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:43.174804926 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:43.175028086 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:43.175045967 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:43.839958906 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:43.841387033 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:43.841408014 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:43.843046904 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:43.843137026 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:43.844213009 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:43.844304085 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:43.844408989 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:43.844418049 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:43.886377096 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:43.947679996 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:43.947741032 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:43.947761059 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:43.947802067 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:43.947840929 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:43.947844028 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:43.947877884 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:43.947900057 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:43.947942019 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:43.947972059 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.034811020 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.034879923 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.034945011 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.034976006 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.035001993 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.035032988 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.036950111 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.037003994 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.037039995 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.037049055 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.037072897 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.037095070 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.037100077 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.037130117 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.037177086 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.037185907 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.037307024 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.037373066 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.054871082 CEST	49753	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.054891109 CEST	443	49753	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.107944012 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.107973099 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.108047009 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.108639002 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.108680964 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.123641014 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:44.123651981 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:44.123744011 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:44.123984098 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:44.123991013 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:44.158281088 CEST	49758	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:44.158293962 CEST	443	49758	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:44.158405066 CEST	49758	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:44.158674955 CEST	49758	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:44.158688068 CEST	443	49758	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:44.605314970 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 4, 2024 09:30:44.807560921 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.807858944 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.807888985 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.811467886 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.811573029 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.811847925 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.812051058 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.816807985 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:44.817004919 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:44.817037106 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:44.820604086 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:44.820708990 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:44.820964098 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:44.821078062 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:44.821136951 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:44.860316038 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.860375881 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:44.860375881 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:44.860413074 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:44.908303022 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:44.908373117 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:44.920038939 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:44.920094967 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:44.920114040 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:44.920253992 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:44.920279980 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:44.920294046 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:44.920428991 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:44.920428991 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:44.920428991 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:44.920429945 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:44.920429945 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:44.920464039 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:44.920670986 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:44.979892015 CEST	443	49758	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:44.980182886 CEST	49758	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:44.980215073 CEST	443	49758	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:44.981298923 CEST	443	49758	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:44.981379032 CEST	49758	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:44.981678009 CEST	49758	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:44.981744051 CEST	443	49758	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:45.005832911 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:45.005897045 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:45.006033897 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:45.006033897 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:45.006066084 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:45.006278038 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:45.007505894 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:45.007560968 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:45.007606983 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:45.007641077 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:45.007659912 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:45.007663012 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:45.007693052 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:45.007702112 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:45.007750988 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:45.007759094 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:45.007837057 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:45.007889986 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:45.008158922 CEST	49757	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:45.008176088 CEST	443	49757	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:45.036303043 CEST	49758	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:45.036331892 CEST	443	49758	52.105.56.39	192.168.2.16
Oct 4, 2024 09:30:45.084347963 CEST	49758	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:30:45.306255102 CEST	49760	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.306328058 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.306446075 CEST	49760	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.306725025 CEST	49760	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.306756973 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.314023018 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.314068079 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.314330101 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.314330101 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.314397097 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.314460993 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.314979076 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.314996958 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.315253973 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.315265894 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.950162888 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.950586081 CEST	49760	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.950620890 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.951776981 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.952147961 CEST	49760	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.952275991 CEST	49760	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.952284098 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.952323914 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.953913927 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.954106092 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.954138041 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.955280066 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.955564976 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.955645084 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.955651999 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.955741882 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.987819910 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.988152981 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.988163948 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.991708040 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.991810083 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.992090940 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.992254019 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:45.992278099 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:45.993314981 CEST	49760	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.009314060 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.039433956 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.041281939 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.041292906 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.051490068 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.051547050 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.051564932 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.051601887 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.051631927 CEST	49760	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.051652908 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.051688910 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.051762104 CEST	49760	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.051762104 CEST	49760	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.051762104 CEST	49760	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.051762104 CEST	49760	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.089319944 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.098229885 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.098290920 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.098315954 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.098354101 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.098361969 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.098395109 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.098400116 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.098412991 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.098423004 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.098428011 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.098443031 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.098463058 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.098479033 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.098483086 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.098545074 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.098598957 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.099188089 CEST	49762	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.099205017 CEST	443	49762	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.101660013 CEST	49765	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:46.101702929 CEST	443	49765	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:46.101784945 CEST	49765	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:46.101969957 CEST	49765	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:46.101988077 CEST	443	49765	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:46.137347937 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.137443066 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.137455940 CEST	49760	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.137489080 CEST	49760	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.137782097 CEST	49760	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:46.137804031 CEST	443	49760	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:46.764086962 CEST	443	49765	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:46.768938065 CEST	49765	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:46.768970013 CEST	443	49765	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:46.769453049 CEST	443	49765	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:46.769788980 CEST	49765	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:46.769867897 CEST	443	49765	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:46.769918919 CEST	49765	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:46.815398932 CEST	443	49765	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:46.871757030 CEST	443	49765	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:46.871781111 CEST	443	49765	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:46.871855021 CEST	443	49765	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:46.871983051 CEST	49765	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:46.871983051 CEST	49765	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:46.871999979 CEST	443	49765	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:46.872050047 CEST	49765	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:46.877549887 CEST	49765	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:46.877568007 CEST	443	49765	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:47.324964046 CEST	443	49738	172.217.16.196	192.168.2.16
Oct 4, 2024 09:30:47.325107098 CEST	443	49738	172.217.16.196	192.168.2.16
Oct 4, 2024 09:30:47.325181007 CEST	49738	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:30:47.467839956 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.467904091 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.467924118 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.467968941 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.467988014 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.468008995 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.468144894 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.468185902 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.468225002 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.468308926 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.550051928 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.550115108 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.550276041 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.550276041 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.550301075 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.550357103 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.551947117 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.552002907 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.552052975 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.552062035 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.552103996 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.552124977 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.637028933 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.637098074 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.637154102 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.637164116 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.637212992 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.638165951 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.638212919 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.638251066 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.638258934 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.638286114 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.638303995 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.639822960 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.639868975 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.639966965 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.639976025 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.640057087 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.640862942 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.640914917 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.640950918 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.640958071 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.640985012 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.641005039 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.934153080 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.934191942 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.934381008 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.934390068 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.934434891 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.934793949 CEST	49761	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.934814930 CEST	443	49761	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.937722921 CEST	49738	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:30:47.937783003 CEST	443	49738	172.217.16.196	192.168.2.16
Oct 4, 2024 09:30:47.937989950 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:47.938045025 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:47.938117981 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:47.938333035 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:47.938352108 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:47.967602968 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.995750904 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.995845079 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:47.995999098 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.996345043 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:47.996381998 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.011440992 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.081834078 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.081899881 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.081921101 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.081940889 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.081976891 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.081981897 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.082001925 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.082034111 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.082037926 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.082062960 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.082087040 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.162283897 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.162358999 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.162417889 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.162448883 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.162476063 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.162487984 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.164731979 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.164773941 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.164810896 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.164819956 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.164848089 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.164870024 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.250123024 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.250191927 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.250334024 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.250334024 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.250349045 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.250399113 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.250932932 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.250982046 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.251013994 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.251019955 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.251048088 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.251064062 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.252641916 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.252685070 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.252720118 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.252724886 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.252752066 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.252767086 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.254004002 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.254043102 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.254077911 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.254084110 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.254116058 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.254133940 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.254148960 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.254208088 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.254214048 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.254326105 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.254378080 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.254558086 CEST	49756	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.254574060 CEST	443	49756	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.257251024 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.257317066 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.257411003 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.257653952 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.257672071 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.290988922 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.291047096 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.291152000 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.291400909 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.291486025 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.291568041 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.291686058 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.291728973 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.291862965 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.291913033 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.301655054 CEST	49772	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.301692009 CEST	443	49772	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.301919937 CEST	49772	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.302025080 CEST	49772	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.302042007 CEST	443	49772	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.624373913 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.624758959 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.624820948 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.625942945 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.626214981 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.626327991 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.626385927 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.657299042 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.657710075 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.657742023 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.658214092 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.658495903 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.658575058 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.658613920 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.666316986 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.673141003 CEST	49774	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.673245907 CEST	443	49774	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.673342943 CEST	49774	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.674685955 CEST	49774	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.674727917 CEST	443	49774	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.698405027 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.698431969 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.727705956 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.727768898 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.727788925 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.727828026 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.727832079 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.727858067 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.727874041 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.727880001 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.727896929 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.727915049 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.760617971 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.760642052 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.760652065 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.760696888 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.760740042 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.760863066 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.760863066 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.760863066 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.760895967 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.760911942 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.760967016 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.762198925 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.762218952 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.765656948 CEST	49775	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.765683889 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.765757084 CEST	49775	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.765971899 CEST	49775	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.765983105 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.813225985 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.813293934 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.813379049 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.813395023 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.813581944 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.814594030 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.814649105 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.814681053 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.814686060 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.814747095 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.899208069 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.899275064 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.899322987 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.899367094 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.899431944 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.899431944 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.900535107 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.900587082 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.900635004 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.900648117 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.900674105 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.900693893 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.901606083 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.901669025 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.901711941 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.901796103 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.901809931 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.901823997 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.901835918 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.901948929 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.902584076 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.902657986 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.902707100 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.902757883 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.902769089 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.902864933 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.902896881 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.902973890 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.903058052 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.947401047 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.953521967 CEST	443	49772	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.953763008 CEST	49772	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.953784943 CEST	443	49772	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.955249071 CEST	443	49772	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.955313921 CEST	49772	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.955677032 CEST	49772	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.955756903 CEST	443	49772	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.955919981 CEST	49772	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.955935001 CEST	443	49772	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.961911917 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.962142944 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.962155104 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.962960958 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.963249922 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.963329077 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.963390112 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.964044094 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.964313984 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.964342117 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.968080997 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.968303919 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.968539000 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.968705893 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:48.968734026 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.968765974 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:48.986756086 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.986872911 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.986905098 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.986978054 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:48.987030029 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.987520933 CEST	49767	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:48.987539053 CEST	443	49767	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.000300884 CEST	49772	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.003424883 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.004410028 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.004470110 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.004524946 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.004534006 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.004559994 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.004585981 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.004611015 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.016309977 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.016434908 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.016495943 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.050318956 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 4, 2024 09:30:49.061204910 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.069691896 CEST	443	49772	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.069891930 CEST	443	49772	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.069948912 CEST	49772	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.070633888 CEST	49772	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.070657969 CEST	443	49772	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.073394060 CEST	49776	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.073435068 CEST	443	49776	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.073508978 CEST	49776	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.073720932 CEST	49776	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.073743105 CEST	443	49776	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.078525066 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.079222918 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.079286098 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.079298973 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.079349995 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.079402924 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.079571009 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.079582930 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.081749916 CEST	49777	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.081804037 CEST	443	49777	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.081883907 CEST	49777	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.082031965 CEST	49777	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.082048893 CEST	443	49777	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.082458019 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.082509041 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.082530975 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.082551003 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.082578897 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.082588911 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.082608938 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.082631111 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.082631111 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.082637072 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.082653999 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.082686901 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.089860916 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.089919090 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.089957952 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.089993954 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.090028048 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.090046883 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.092295885 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.092348099 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.092382908 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.092390060 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.092420101 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.092443943 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.171071053 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.171137094 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.171439886 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.171439886 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.171509981 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.171634912 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.171804905 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.171865940 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.171880960 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.171941996 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.171977997 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.172036886 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.173012018 CEST	49771	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.173039913 CEST	443	49771	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.176678896 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.176739931 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.176790953 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.176801920 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.176836014 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.176853895 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.177740097 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.177786112 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.177819967 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.177825928 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.177854061 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.177876949 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.179461956 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.179501057 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.179539919 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.179547071 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.179582119 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.179599047 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.180772066 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.180814028 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.180845976 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.180851936 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.180886984 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.180906057 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.185535908 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.185606956 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.185688972 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.186341047 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.186373949 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.263535023 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.263729095 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.263793945 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.264271975 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.264589071 CEST	49769	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.264604092 CEST	443	49769	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.317545891 CEST	443	49774	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.317871094 CEST	49774	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.317908049 CEST	443	49774	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.319042921 CEST	443	49774	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.319365025 CEST	49774	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.319477081 CEST	49774	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.319493055 CEST	443	49774	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.319631100 CEST	443	49774	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.365328074 CEST	49774	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.406800032 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.407057047 CEST	49775	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.407078028 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.408255100 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.408549070 CEST	49775	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.408664942 CEST	49775	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.408718109 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.416537046 CEST	443	49774	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.416707993 CEST	443	49774	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.416779041 CEST	49774	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.417231083 CEST	49774	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:49.417260885 CEST	443	49774	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:49.419811010 CEST	49779	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.419862032 CEST	443	49779	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.419974089 CEST	49779	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.420172930 CEST	49779	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.420191050 CEST	443	49779	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.460402012 CEST	49775	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.508580923 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.508627892 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.508649111 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.508696079 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.508698940 CEST	49775	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.508714914 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.508734941 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.508748055 CEST	49775	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.508761883 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.508766890 CEST	49775	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.508793116 CEST	49775	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.508812904 CEST	49775	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.508862019 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.508915901 CEST	49775	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.508927107 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.508992910 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.509047031 CEST	49775	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.509274006 CEST	49775	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.509289026 CEST	443	49775	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.734325886 CEST	443	49777	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.734580994 CEST	49777	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.734646082 CEST	443	49777	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.736112118 CEST	443	49777	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.736186981 CEST	49777	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.736449003 CEST	49777	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.736537933 CEST	443	49777	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.736577988 CEST	49777	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.744925976 CEST	443	49776	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.745107889 CEST	49776	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.745141029 CEST	443	49776	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.745640993 CEST	443	49776	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.745901108 CEST	49776	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.745982885 CEST	443	49776	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.746020079 CEST	49776	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.779443979 CEST	443	49777	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.791402102 CEST	443	49776	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.791414976 CEST	49776	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.791440010 CEST	49777	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.791475058 CEST	443	49777	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.836371899 CEST	443	49777	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.836463928 CEST	49777	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.836479902 CEST	443	49777	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.836555958 CEST	443	49777	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.836704016 CEST	49777	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.837296009 CEST	49777	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.837325096 CEST	443	49777	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.849045992 CEST	443	49776	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.849114895 CEST	443	49776	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.849169970 CEST	49776	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.849185944 CEST	443	49776	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.849237919 CEST	443	49776	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.849297047 CEST	49776	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.849668026 CEST	49776	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.849688053 CEST	443	49776	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.849699020 CEST	49776	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.849734068 CEST	49776	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.854779005 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.854998112 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.855015993 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.856473923 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.856554031 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.856817007 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.856899977 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.856904984 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.899446964 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.903338909 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.903378010 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.951534033 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.961783886 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.961846113 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.961865902 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.961883068 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.961916924 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.961924076 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.961944103 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.961967945 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.961985111 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:49.962016106 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.962016106 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:49.962049007 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.051245928 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:50.051323891 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:50.051377058 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.051455975 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:50.051548958 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.051548958 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.051820993 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:50.051902056 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.051914930 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:50.051969051 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.051995993 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:50.052031994 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.052052975 CEST	443	49778	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:50.052077055 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.052077055 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.052114010 CEST	49778	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.092037916 CEST	443	49779	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:50.092279911 CEST	49779	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.092310905 CEST	443	49779	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:50.092803955 CEST	443	49779	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:50.093069077 CEST	49779	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.093153954 CEST	443	49779	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:50.093163967 CEST	49779	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.135435104 CEST	443	49779	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:50.138319969 CEST	49779	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.200906038 CEST	443	49779	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:50.201100111 CEST	443	49779	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:50.201256990 CEST	49779	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.201667070 CEST	49779	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:50.201687098 CEST	443	49779	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:56.666732073 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:56.666774035 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:56.666868925 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:56.667455912 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:56.667548895 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:56.667634010 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:56.667857885 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:56.667874098 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:56.668167114 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:56.668199062 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.342185974 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.342462063 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:57.342497110 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.342967987 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.343247890 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:57.343342066 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.343359947 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:57.359802961 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.360100031 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:57.360131979 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.360627890 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.360924959 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:57.361012936 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.361037016 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:57.387407064 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.396464109 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:57.403436899 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.412492037 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:57.457994938 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.458024025 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.458113909 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:57.458158016 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.458230972 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.458287954 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:57.459033966 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:57.459068060 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.461785078 CEST	49783	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:57.461819887 CEST	443	49783	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:57.461925983 CEST	49783	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:57.462158918 CEST	49783	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:57.462173939 CEST	443	49783	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:57.467674017 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.467705011 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.467792988 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:57.467804909 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.467856884 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:57.467959881 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.468044043 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.468095064 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:57.468269110 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:57.468281031 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:57.470213890 CEST	49784	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:57.470305920 CEST	443	49784	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:57.470405102 CEST	49784	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:57.470582008 CEST	49784	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:57.470618963 CEST	443	49784	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.105098009 CEST	443	49784	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.105556011 CEST	49784	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.105621099 CEST	443	49784	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.106115103 CEST	443	49784	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.106513977 CEST	49784	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.106606007 CEST	443	49784	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.106669903 CEST	49784	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.131213903 CEST	443	49783	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.131508112 CEST	49783	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.131531000 CEST	443	49783	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.132636070 CEST	443	49783	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.132952929 CEST	49783	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.133068085 CEST	49783	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.133074999 CEST	443	49783	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.147408009 CEST	443	49784	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.175391912 CEST	49783	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.175403118 CEST	443	49783	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.204229116 CEST	443	49784	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.204255104 CEST	443	49784	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.204329967 CEST	443	49784	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.204360962 CEST	49784	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.204397917 CEST	49784	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.205147982 CEST	49784	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.205179930 CEST	443	49784	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.232795954 CEST	443	49783	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.232853889 CEST	443	49783	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.232934952 CEST	49783	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.232947111 CEST	443	49783	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.232997894 CEST	49783	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.233365059 CEST	443	49783	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.233485937 CEST	443	49783	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.233544111 CEST	49783	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.233958960 CEST	49783	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.233974934 CEST	443	49783	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:58.233985901 CEST	49783	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.234038115 CEST	49783	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:58.698134899 CEST	49785	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:58.698187113 CEST	443	49785	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:58.698270082 CEST	49785	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:58.698539972 CEST	49785	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:58.698556900 CEST	443	49785	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:59.382457018 CEST	443	49785	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:59.382781029 CEST	49785	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:59.382822037 CEST	443	49785	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:59.383315086 CEST	443	49785	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:59.383599997 CEST	49785	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:59.383691072 CEST	443	49785	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:59.383709908 CEST	49785	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:59.431413889 CEST	443	49785	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:59.435421944 CEST	49785	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:59.767374992 CEST	443	49785	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:59.767419100 CEST	443	49785	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:59.767508030 CEST	49785	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:59.767517090 CEST	443	49785	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:59.767574072 CEST	49785	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:59.768079996 CEST	49785	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:30:59.768102884 CEST	443	49785	13.107.246.45	192.168.2.16
Oct 4, 2024 09:30:59.773880959 CEST	49787	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:59.773973942 CEST	443	49787	13.107.246.44	192.168.2.16
Oct 4, 2024 09:30:59.774070978 CEST	49787	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:59.774291992 CEST	49787	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:30:59.774322987 CEST	443	49787	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:00.029500961 CEST	49788	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.029548883 CEST	443	49788	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.029725075 CEST	49789	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.029766083 CEST	443	49789	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.029993057 CEST	49788	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.030222893 CEST	49789	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.030261040 CEST	49789	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.030267954 CEST	443	49789	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.030489922 CEST	49788	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.030512094 CEST	443	49788	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.442872047 CEST	443	49787	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:00.445075035 CEST	49787	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:00.445137024 CEST	443	49787	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:00.445628881 CEST	443	49787	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:00.446074963 CEST	49787	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:00.446161985 CEST	443	49787	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:00.446254969 CEST	49787	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:00.491395950 CEST	443	49787	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:00.547444105 CEST	443	49787	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:00.547476053 CEST	443	49787	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:00.547566891 CEST	49787	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:00.547599077 CEST	443	49787	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:00.547715902 CEST	443	49787	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:00.547765017 CEST	49787	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:00.548275948 CEST	49787	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:00.548294067 CEST	443	49787	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:00.671704054 CEST	443	49789	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.671996117 CEST	49789	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.672020912 CEST	443	49789	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.672564983 CEST	443	49789	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.672858953 CEST	49789	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.672945023 CEST	443	49789	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.672990084 CEST	49789	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.677026033 CEST	443	49788	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.677256107 CEST	49788	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.677273035 CEST	443	49788	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.678359985 CEST	443	49788	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.678637028 CEST	49788	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.678740025 CEST	49788	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.678745985 CEST	443	49788	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.678807020 CEST	443	49788	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.714375019 CEST	49789	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.714385033 CEST	443	49789	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.730385065 CEST	49788	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.772046089 CEST	443	49789	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.772226095 CEST	443	49789	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.772401094 CEST	49789	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.773181915 CEST	49789	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.773224115 CEST	443	49789	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.775806904 CEST	49790	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:00.775856972 CEST	443	49790	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:00.776073933 CEST	49790	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:00.776181936 CEST	49790	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:00.776213884 CEST	443	49790	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:00.789614916 CEST	443	49788	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.789786100 CEST	443	49788	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.789844990 CEST	49788	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.790534019 CEST	49788	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:00.790546894 CEST	443	49788	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:00.816055059 CEST	49791	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:00.816107035 CEST	443	49791	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:00.816193104 CEST	49791	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:00.824950933 CEST	49791	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:00.824990034 CEST	443	49791	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.413599968 CEST	443	49790	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.413913965 CEST	49790	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:01.413939953 CEST	443	49790	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.414429903 CEST	443	49790	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.414720058 CEST	49790	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:01.414787054 CEST	443	49790	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.414841890 CEST	49790	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:01.459398031 CEST	443	49790	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.477330923 CEST	443	49791	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.477608919 CEST	49791	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:01.477623940 CEST	443	49791	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.478091955 CEST	443	49791	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.478388071 CEST	49791	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:01.478471994 CEST	443	49791	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.478524923 CEST	49791	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:01.514580011 CEST	443	49790	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.514657021 CEST	443	49790	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.514710903 CEST	49790	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:01.515289068 CEST	49790	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:01.515305996 CEST	443	49790	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.519391060 CEST	443	49791	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.579613924 CEST	443	49791	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.579777956 CEST	443	49791	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:01.579886913 CEST	49791	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:01.580235958 CEST	49791	443	192.168.2.16	13.107.246.44
Oct 4, 2024 09:31:01.580269098 CEST	443	49791	13.107.246.44	192.168.2.16
Oct 4, 2024 09:31:03.718898058 CEST	49792	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:31:03.718986034 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:03.719089985 CEST	49792	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:31:03.719471931 CEST	49792	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:31:03.719507933 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:04.136563063 CEST	49699	80	192.168.2.16	199.232.210.172
Oct 4, 2024 09:31:04.136774063 CEST	49700	80	192.168.2.16	199.232.210.172
Oct 4, 2024 09:31:04.142743111 CEST	80	49699	199.232.210.172	192.168.2.16
Oct 4, 2024 09:31:04.142803907 CEST	49699	80	192.168.2.16	199.232.210.172
Oct 4, 2024 09:31:04.143146992 CEST	80	49700	199.232.210.172	192.168.2.16
Oct 4, 2024 09:31:04.143208981 CEST	49700	80	192.168.2.16	199.232.210.172
Oct 4, 2024 09:31:04.402064085 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:04.402225971 CEST	49792	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:31:04.403352976 CEST	49792	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:31:04.403383017 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:04.403990030 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:04.405711889 CEST	49792	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:31:04.451395035 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:04.658802986 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:04.658864975 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:04.658905983 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:04.658962965 CEST	49792	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:31:04.659035921 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:04.659077883 CEST	49792	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:31:04.659096956 CEST	49792	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:31:04.660074949 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:04.660139084 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:04.660151958 CEST	49792	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:31:04.660173893 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:04.660212040 CEST	49792	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:31:04.660298109 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:04.660379887 CEST	49792	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:31:04.662342072 CEST	49792	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:31:04.662377119 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:04.662401915 CEST	49792	443	192.168.2.16	172.202.163.200
Oct 4, 2024 09:31:04.662415981 CEST	443	49792	172.202.163.200	192.168.2.16
Oct 4, 2024 09:31:09.447676897 CEST	49795	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:09.447715044 CEST	443	49795	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:09.448041916 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:09.448076963 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:09.448086023 CEST	49795	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:09.448123932 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:09.448358059 CEST	49797	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:09.448405981 CEST	443	49797	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:09.448606968 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:09.448622942 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:09.448632002 CEST	49797	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:09.448826075 CEST	49795	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:09.448841095 CEST	443	49795	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:09.448996067 CEST	49797	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:09.449013948 CEST	443	49797	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.098647118 CEST	443	49795	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:10.099205971 CEST	49795	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:10.099229097 CEST	443	49795	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:10.100950003 CEST	443	49795	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:10.101119995 CEST	49795	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:10.106240988 CEST	49795	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:10.106338024 CEST	443	49795	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:10.155008078 CEST	49795	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:10.155030966 CEST	443	49795	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:10.202436924 CEST	49795	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:10.257572889 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.257936001 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.257960081 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.259653091 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.259727955 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.260523081 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.260610104 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.260680914 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.260688066 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.260791063 CEST	443	49797	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.260955095 CEST	49797	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.260973930 CEST	443	49797	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.263015032 CEST	443	49797	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.263082981 CEST	49797	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.263684988 CEST	49797	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.263767004 CEST	443	49797	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.313424110 CEST	49797	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.313438892 CEST	443	49797	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.313519001 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.361437082 CEST	49797	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.509862900 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.511781931 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.511804104 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.511821032 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.511858940 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.511871099 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.511878014 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.511904001 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.511957884 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.512017012 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.596584082 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.596616030 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.596678019 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.596698046 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.596748114 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.597971916 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.598014116 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.598045111 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.598056078 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.598084927 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.598113060 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.681886911 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.681921005 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.681988001 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.681998014 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.682050943 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.682998896 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.683026075 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.683074951 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.683079958 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.683104992 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.683132887 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.684031963 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.684057951 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.684103966 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.684111118 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.684144974 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.684174061 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.685210943 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.685234070 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.685280085 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.685286999 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.685332060 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.768214941 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.768241882 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.768306971 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.768321037 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.768362999 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.768403053 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.769253969 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.769273043 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.769330025 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.769335985 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.769402981 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.770109892 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.770128965 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.770200968 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.770209074 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.770240068 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.770267963 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.771126986 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.771147966 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.771193981 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.771199942 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.771233082 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.771256924 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.771806002 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.771825075 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.771871090 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.771877050 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.771934032 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.771959066 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.772556067 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.772574902 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.772644997 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.772651911 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.772701025 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.773112059 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.773130894 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.773191929 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.773199081 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.773248911 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.808932066 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.808969021 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.809041023 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.809062958 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.809124947 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.856230021 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.856297970 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.856332064 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.856342077 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.856409073 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.856436014 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.857281923 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.857321024 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.857357979 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.857369900 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.857430935 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.857430935 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.857461929 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.857491016 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.857517004 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.857580900 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.857589006 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.858315945 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.858356953 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.858408928 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.858417034 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.858459949 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.859235048 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.859277964 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.859311104 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.859317064 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.859337091 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.860197067 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.860243082 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.860274076 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.860280991 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.860320091 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.860347033 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.860387087 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.860423088 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.860430002 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.860455036 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.905437946 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.938318968 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.938394070 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.938468933 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.938478947 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.938505888 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.938534021 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.942331076 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.942378998 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.942435026 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.942440987 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.942485094 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.943444967 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.943490028 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.943528891 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.943535089 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.943558931 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.943589926 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.944083929 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.944134951 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.944169044 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.944174051 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.944217920 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.945030928 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.945075035 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.945107937 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.945113897 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.945142984 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.945164919 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.945184946 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.945226908 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.945252895 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.945260048 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.945293903 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.945313931 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.946018934 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.946062088 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.946094036 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.946099997 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.946142912 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.946702003 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.946751118 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.946783066 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.946789026 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:10.946810961 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:10.946837902 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.024480104 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.024537086 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.024570942 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.024580002 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.024633884 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.028395891 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.028439045 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.028474092 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.028496027 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.028507948 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.028552055 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.028558016 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.029289007 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.029342890 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.029364109 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.029376030 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.029438972 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.030071974 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.030119896 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.030149937 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.030157089 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.030180931 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.030811071 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.030858040 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.030888081 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.030894041 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.030930042 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.031173944 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.031213045 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.031250000 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.031256914 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.031280041 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.032174110 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.032218933 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.032246113 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.032252073 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.032283068 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.032316923 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.032371044 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.032403946 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.032411098 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.032434940 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.081437111 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.110657930 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.110727072 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.110867023 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.110867023 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.110881090 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.110929966 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.114654064 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.114696980 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.114725113 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.114733934 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.114775896 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.115267992 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.115315914 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.115348101 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.115354061 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.115396976 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.115428925 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.115993023 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.116034031 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.116065025 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.116070986 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.116113901 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.116775990 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.116813898 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.116847038 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.116853952 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.116877079 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.116910934 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.117453098 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.117496967 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.117523909 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.117528915 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.117571115 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.118140936 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.118189096 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.118221998 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.118230104 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.118256092 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.118282080 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.118808031 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.118849039 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.118880033 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.118885994 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.118925095 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.198474884 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.198558092 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.198558092 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.198590040 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.198622942 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.198651075 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.200663090 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.200706959 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.200741053 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.200752020 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.200789928 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.200814962 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.200820923 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.201497078 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.201546907 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.201570034 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.201580048 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.201606989 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.202564955 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.202604055 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.202642918 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.202650070 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.202673912 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.203489065 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.203533888 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.203562021 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.203569889 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.203591108 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.203629017 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.203670979 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.203697920 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.203705072 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.203727007 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.204466105 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.204526901 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.204560041 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.204566956 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.204590082 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.205420971 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.205460072 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.205495119 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.205501080 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.205519915 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.256520033 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.659626961 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.659643888 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.659718037 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.659745932 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.659758091 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.659815073 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.660749912 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.660773993 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.660818100 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.660851002 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.660856962 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.660928011 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.661457062 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.661494970 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.661534071 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.661537886 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.661575079 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.661580086 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.661624908 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.661665916 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.662010908 CEST	49796	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.662022114 CEST	443	49796	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.674428940 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.674474001 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.674562931 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.674807072 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.674829006 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.714510918 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.714534998 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.714632034 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.714891911 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.714905024 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.760809898 CEST	49800	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.760844946 CEST	443	49800	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.760957003 CEST	49800	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.761305094 CEST	49801	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.761334896 CEST	443	49801	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.761447906 CEST	49801	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.761666059 CEST	49800	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.761683941 CEST	443	49800	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:11.761933088 CEST	49801	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:11.761946917 CEST	443	49801	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.490653038 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.492764950 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.492798090 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.496341944 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.496448040 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.499315023 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.499540091 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.502448082 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.502477884 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.512788057 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.513571978 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.513592958 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.514082909 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.516315937 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.516400099 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.518546104 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.548213959 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.561080933 CEST	443	49800	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.561501026 CEST	443	49801	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.563446045 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.563559055 CEST	49801	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.563584089 CEST	443	49801	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.563708067 CEST	49800	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.563735962 CEST	443	49800	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.564778090 CEST	443	49800	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.564846039 CEST	49800	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.564881086 CEST	443	49801	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.564933062 CEST	49801	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.569549084 CEST	49801	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.569670916 CEST	443	49801	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.577049971 CEST	49800	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.577250957 CEST	49801	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.577287912 CEST	443	49801	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.577299118 CEST	49800	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.577306986 CEST	443	49800	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.577419043 CEST	443	49800	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.627453089 CEST	49800	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.627470016 CEST	443	49800	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.627466917 CEST	49801	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.675446033 CEST	49800	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.755242109 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.756519079 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.756529093 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.756546974 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.756587982 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.756611109 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.756653070 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.756685019 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.756685019 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.756719112 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.775742054 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.776947021 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.776993036 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.777029991 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.777046919 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.777066946 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.777110100 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.823741913 CEST	443	49801	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.823919058 CEST	443	49801	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.823985100 CEST	49801	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.824002981 CEST	443	49801	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.824070930 CEST	49801	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.824357986 CEST	49801	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.824414968 CEST	443	49801	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.826517105 CEST	49805	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.826554060 CEST	443	49805	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.826638937 CEST	49805	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.826843977 CEST	49805	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.826860905 CEST	443	49805	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.827124119 CEST	443	49800	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.827244043 CEST	443	49800	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.827301025 CEST	49800	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.827316999 CEST	443	49800	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.827374935 CEST	443	49800	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.827455997 CEST	49800	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.827781916 CEST	49800	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.827795982 CEST	443	49800	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.829823017 CEST	49806	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.829834938 CEST	443	49806	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.829916000 CEST	49806	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.830096960 CEST	49806	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.830110073 CEST	443	49806	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.845319986 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.845343113 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.845423937 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.845432997 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.845473051 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.847106934 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.847129107 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.847182035 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.847194910 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.847244978 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.865591049 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.865639925 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.865670919 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.865688086 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.865704060 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.865732908 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.867446899 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.867491007 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.867546082 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.867554903 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.867589951 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.867608070 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.933128119 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.933156967 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.933224916 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.933243990 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.933275938 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.933298111 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.934161901 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.934190035 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.934242010 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.934254885 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.934283972 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.934303999 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.935158014 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.935185909 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.935235023 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.935246944 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.935275078 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.935292006 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.936868906 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.936889887 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.936949968 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.936964035 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.936990976 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.937012911 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.958110094 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.958168983 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.958226919 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.958246946 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.958266020 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.958293915 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.959155083 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.959196091 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.959233999 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.959240913 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.959274054 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.959290981 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.959847927 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.959923983 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.959933996 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.960028887 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.960078001 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.960225105 CEST	49799	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.960237026 CEST	443	49799	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.963830948 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.963897943 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:12.964004993 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.964227915 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:12.964257956 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.021727085 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.021754980 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.021835089 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.021877050 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.021936893 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.022469997 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.022490978 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.022540092 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.022553921 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.022584915 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.022623062 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.023399115 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.023427963 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.023467064 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.023479939 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.023507118 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.023525000 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.024086952 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.024110079 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.024166107 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.024180889 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.024230003 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.024672985 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.024698973 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.024755955 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.024770021 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.024827957 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.025598049 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.025624037 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.025679111 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.025697947 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.025719881 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.025749922 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.026470900 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.026490927 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.026544094 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.026556969 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.026606083 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.110311985 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.110337973 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.110541105 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.110584021 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.110640049 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.111021996 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.111047983 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.111093998 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.111112118 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.111140966 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.111162901 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.111176014 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.111439943 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.111466885 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.111509085 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.111527920 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.111558914 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.112225056 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.112242937 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.112307072 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.112345934 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.112371922 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.115577936 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.115602016 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.115660906 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.115680933 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.115711927 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.116183043 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.116203070 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.116251945 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.116277933 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.116303921 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.116636992 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.116661072 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.116703033 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.116724968 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.116748095 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.169473886 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.198545933 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.198573112 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.198668003 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.198733091 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.198801994 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.199146986 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.199167967 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.199218988 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.199235916 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.199264050 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.199285984 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.199693918 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.199727058 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.199771881 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.199785948 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.199814081 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.199846029 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.200381994 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.200407028 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.200459003 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.200478077 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.200500011 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.200525045 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.201152086 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.201174021 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.201220036 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.201231956 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.201256990 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.201273918 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.202112913 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.202145100 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.202192068 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.202203989 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.202236891 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.202256918 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.202786922 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.202814102 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.202862024 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.202873945 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.202899933 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.202920914 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.202974081 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.203016996 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.203042984 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.203058958 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.203083992 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.203102112 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.287441015 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.287472010 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.287530899 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.287602901 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.287638903 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.287662983 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.287883997 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.287910938 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.287950039 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.287964106 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.287992001 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.288013935 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.288652897 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.288681030 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.288738012 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.288753986 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.288808107 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.289410114 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.289433956 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.289480925 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.289494038 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.289519072 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.289539099 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.290128946 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.290158987 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.290200949 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.290211916 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.290258884 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.290258884 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.290666103 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.290685892 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.290731907 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.290744066 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.290767908 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.290786982 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.291599989 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.291626930 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.291670084 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.291682005 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.291707039 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.291726112 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.292426109 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.292445898 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.292505026 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.292517900 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.292572021 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.378454924 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.378515005 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.378566027 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.378587008 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.378606081 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.378622055 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.378627062 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.378654003 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.378674030 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.378681898 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.378704071 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.378719091 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.379357100 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.379442930 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.379489899 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.379554033 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.380378962 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.380477905 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.380496025 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.380502939 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.380526066 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.380541086 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.380579948 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.380631924 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.380640984 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.380662918 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.380681038 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.380692959 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.381268024 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.381311893 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.381334066 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.381341934 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.381362915 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.381377935 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.382194996 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.382242918 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.382267952 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.382273912 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.382297993 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.382313013 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.383117914 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.383167982 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.383188009 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.383193970 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.383214951 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.383230925 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.465154886 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.465217113 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.465269089 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.465286970 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.465307951 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.465321064 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.465574026 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.465620995 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.465643883 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.465650082 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.465661049 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.465687037 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.466274023 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.466319084 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.466340065 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.466347933 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.466365099 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.466382027 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.466427088 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.466996908 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.467037916 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.467072010 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.467087030 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.467113018 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.467926979 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.467976093 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.468003035 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.468017101 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.468048096 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.468076944 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.468116045 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.468144894 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.468159914 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.468187094 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.468799114 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.468844891 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.468873978 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.468887091 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.468913078 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.469685078 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.469723940 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.469758034 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.469777107 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.469799042 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.522305012 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.553638935 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.553668022 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.553807974 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.553874969 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.553940058 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.554119110 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.554141045 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.554178953 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.554193974 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.554225922 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.554248095 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.554657936 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.554678917 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.554733038 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.554744959 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.554771900 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.554811954 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.555447102 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.555469036 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.555516958 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.555526972 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.555541039 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.555584908 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.555613041 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.555623055 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.555644035 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.555696964 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.555877924 CEST	49798	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.555910110 CEST	443	49798	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.631845951 CEST	443	49806	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.632145882 CEST	49806	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.632159948 CEST	443	49806	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.633006096 CEST	443	49806	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.633302927 CEST	49806	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.633380890 CEST	443	49806	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.633426905 CEST	49806	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.634191036 CEST	443	49805	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.635993004 CEST	49805	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.636001110 CEST	443	49805	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.636445999 CEST	443	49805	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.637403011 CEST	49805	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.637469053 CEST	443	49805	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.637540102 CEST	49805	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.677474022 CEST	49806	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.677483082 CEST	443	49806	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.679415941 CEST	443	49805	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.765433073 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.765691042 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.765711069 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.767174006 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.767236948 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.767513990 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.767594099 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.767643929 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.767648935 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.821446896 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.893227100 CEST	443	49806	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.893353939 CEST	443	49806	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.893424988 CEST	443	49806	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.893424988 CEST	49806	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.893470049 CEST	49806	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.894061089 CEST	49806	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.894078016 CEST	443	49806	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.898973942 CEST	443	49805	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.899015903 CEST	443	49805	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.899061918 CEST	443	49805	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:13.899065971 CEST	49805	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.899102926 CEST	49805	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.900223970 CEST	49805	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:13.900228977 CEST	443	49805	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.029043913 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.031543016 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.031558990 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.031584024 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.031600952 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.031614065 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.031636000 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.031703949 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.031742096 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.031774044 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.116738081 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.116761923 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.116810083 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.116828918 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.116853952 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.116877079 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.119412899 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.119431019 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.119493961 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.119501114 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.119539976 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.202873945 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.202900887 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.202984095 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.203001022 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.203038931 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.204082012 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.204102039 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.204164028 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.204175949 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.204233885 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.204817057 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.204885960 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.204896927 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.204916954 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.204971075 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.205272913 CEST	49807	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.205300093 CEST	443	49807	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.485367060 CEST	49811	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.485393047 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.485471964 CEST	49811	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.485740900 CEST	49811	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:14.485755920 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:14.812922001 CEST	443	49795	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:14.813081980 CEST	443	49795	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:14.813160896 CEST	49795	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:15.083956003 CEST	49795	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:15.083981991 CEST	443	49795	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:15.309232950 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:15.309598923 CEST	49811	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:15.309659958 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:15.310785055 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:15.311244011 CEST	49811	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:15.311435938 CEST	49811	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:15.311450958 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:15.355468035 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:15.360466003 CEST	49811	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:15.574623108 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:15.576037884 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:15.576062918 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:15.576105118 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:15.576141119 CEST	49811	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:15.576145887 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:15.576194048 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:15.576234102 CEST	49811	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:15.576234102 CEST	49811	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:15.576272011 CEST	49811	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:15.576286077 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:15.576345921 CEST	49811	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:15.576406956 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:15.576466084 CEST	49811	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:15.576709032 CEST	49811	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:15.576739073 CEST	443	49811	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:15.579231977 CEST	49813	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:15.579277992 CEST	443	49813	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:15.579354048 CEST	49813	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:15.579533100 CEST	49813	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:15.579545975 CEST	443	49813	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:16.583515882 CEST	443	49813	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:16.583836079 CEST	49813	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:16.583869934 CEST	443	49813	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:16.585386992 CEST	443	49813	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:16.585670948 CEST	49813	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:16.585782051 CEST	49813	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:16.585855961 CEST	443	49813	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:16.636445999 CEST	49813	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:16.847667933 CEST	443	49813	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:16.848961115 CEST	443	49813	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:16.848972082 CEST	443	49813	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:16.848992109 CEST	443	49813	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:16.849033117 CEST	443	49813	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:16.849039078 CEST	49813	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:16.849064112 CEST	443	49813	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:16.849075079 CEST	49813	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:16.849090099 CEST	49813	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:16.849113941 CEST	49813	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:16.849128008 CEST	443	49813	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:16.849145889 CEST	443	49813	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:16.849176884 CEST	49813	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:16.849204063 CEST	49813	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:16.849337101 CEST	49813	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:16.849351883 CEST	443	49813	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:28.223335028 CEST	49819	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:28.223378897 CEST	443	49819	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:28.223438025 CEST	49819	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:28.224143982 CEST	49819	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:28.224164009 CEST	443	49819	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:29.030342102 CEST	443	49819	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:29.033210039 CEST	49819	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:29.033227921 CEST	443	49819	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:29.034775019 CEST	443	49819	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:29.035154104 CEST	49819	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:29.035337925 CEST	443	49819	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:29.089647055 CEST	49819	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:29.825000048 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:29.825077057 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:29.825197935 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:29.825402975 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:29.825436115 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:29.825685978 CEST	49821	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:29.825732946 CEST	443	49821	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:29.825793028 CEST	49821	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:29.826100111 CEST	49821	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:29.826114893 CEST	443	49821	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:30.046565056 CEST	49758	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:31:30.046571970 CEST	443	49758	52.105.56.39	192.168.2.16
Oct 4, 2024 09:31:30.685230970 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:30.685503006 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:30.685516119 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:30.685849905 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:30.688502073 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:30.688580036 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:30.696671963 CEST	443	49821	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:30.696974993 CEST	49821	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:30.697015047 CEST	443	49821	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:30.698148012 CEST	443	49821	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:30.698457956 CEST	49821	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:30.698627949 CEST	443	49821	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:30.732450962 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:30.747524023 CEST	49821	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:35.197412968 CEST	443	49821	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:35.197622061 CEST	443	49821	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:35.197767973 CEST	49821	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:35.706641912 CEST	49821	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:35.706676960 CEST	443	49821	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:36.796587944 CEST	49830	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:31:36.796622038 CEST	443	49830	172.217.16.196	192.168.2.16
Oct 4, 2024 09:31:36.796710014 CEST	49830	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:31:36.796962976 CEST	49830	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:31:36.796978951 CEST	443	49830	172.217.16.196	192.168.2.16
Oct 4, 2024 09:31:37.441912889 CEST	443	49830	172.217.16.196	192.168.2.16
Oct 4, 2024 09:31:37.442271948 CEST	49830	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:31:37.442306042 CEST	443	49830	172.217.16.196	192.168.2.16
Oct 4, 2024 09:31:37.443046093 CEST	443	49830	172.217.16.196	192.168.2.16
Oct 4, 2024 09:31:37.443378925 CEST	49830	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:31:37.443475962 CEST	443	49830	172.217.16.196	192.168.2.16
Oct 4, 2024 09:31:37.484591961 CEST	49830	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:31:41.450185061 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:41.450217009 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:41.450298071 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:41.450541973 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:41.450557947 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:42.361959934 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:42.362260103 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:42.362276077 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:42.363936901 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:42.364008904 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:42.364969015 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:42.365046978 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:42.365086079 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:42.409631014 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:42.409670115 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:42.456631899 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.041026115 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.041085005 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.041105032 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.041126013 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.041165113 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.041183949 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.041240931 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.041241884 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.041241884 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.041309118 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.041368008 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.041368008 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.126240969 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.126297951 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.126424074 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.126424074 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.126449108 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.126507044 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.128165007 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.128210068 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.128247976 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.128261089 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.128292084 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.128314018 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.211956978 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.212014914 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.212156057 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.212156057 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.212171078 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.212230921 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.213215113 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.213268995 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.213301897 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.213313103 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.213345051 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.213361025 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.214582920 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.214624882 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.214664936 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.214709044 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.214739084 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.214756966 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.215632915 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.215677023 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.215711117 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.215722084 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.215749979 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.215766907 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.298335075 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.298401117 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.298558950 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.298559904 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.298579931 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.298641920 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.298868895 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.298913956 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.298948050 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.298959017 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.298984051 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.299004078 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.299686909 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.299740076 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.299782991 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.299793005 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.299823999 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.299839020 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.300201893 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.300290108 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.300302029 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.300370932 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.300424099 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.301404953 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.301434994 CEST	443	49833	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.301479101 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.301501989 CEST	49833	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.329977036 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:43.330024958 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:43.330178976 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:43.330348015 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:43.330363989 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:43.340256929 CEST	49835	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.340265036 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.340338945 CEST	49835	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.340508938 CEST	49835	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.340518951 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.370301962 CEST	49836	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.370382071 CEST	443	49836	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.370455027 CEST	49836	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.370954990 CEST	49837	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.370992899 CEST	443	49837	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.371058941 CEST	49837	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.371226072 CEST	49836	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.371260881 CEST	443	49836	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:43.371409893 CEST	49837	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:43.371431112 CEST	443	49837	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.085850000 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.086128950 CEST	49835	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.086157084 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.086309910 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.086476088 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.086488008 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.086492062 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.086787939 CEST	49835	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.086855888 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.086922884 CEST	49835	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.088036060 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.088113070 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.088351011 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.088427067 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.088449955 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.090624094 CEST	443	49837	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.090801001 CEST	49837	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.090816975 CEST	443	49837	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.092293978 CEST	443	49836	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.092474937 CEST	49836	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.092524052 CEST	443	49836	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.094238997 CEST	443	49836	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.094249964 CEST	443	49837	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.094321012 CEST	49836	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.094558001 CEST	49837	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.094558954 CEST	49837	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.094654083 CEST	443	49837	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.094801903 CEST	49836	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.094892025 CEST	443	49836	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.094906092 CEST	49837	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.094916105 CEST	443	49837	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.094961882 CEST	49836	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.094976902 CEST	443	49836	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.127428055 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.127635002 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.127659082 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.143595934 CEST	49836	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.143604994 CEST	49837	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.175604105 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.189935923 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.189960957 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.189971924 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.189990044 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.190000057 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.190009117 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.190054893 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.190088987 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.190100908 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.190133095 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.195169926 CEST	443	49837	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.196084976 CEST	443	49837	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.196154118 CEST	49837	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.196162939 CEST	443	49837	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.196218014 CEST	443	49837	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.196268082 CEST	49837	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.199373007 CEST	49837	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.199393988 CEST	443	49837	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.202615976 CEST	49840	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.202636957 CEST	443	49840	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.202713966 CEST	49840	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.202996969 CEST	49840	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.203010082 CEST	443	49840	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.275964975 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.275996923 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.276055098 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.276092052 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.276109934 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.276134968 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.278204918 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.278230906 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.278295994 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.278325081 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.278372049 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.361916065 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.361953974 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.362029076 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.362066984 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.362101078 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.362175941 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.363122940 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.363152981 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.363224983 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.363235950 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.363276005 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.364341021 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.364362955 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.364412069 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.364418983 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.364453077 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.364473104 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.365801096 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.365823030 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.365864992 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.365870953 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.365895033 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.365910053 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.448620081 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.448647976 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.448698997 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.448710918 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.448754072 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.449177980 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.449203968 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.449243069 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.449249029 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.449270964 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.449295998 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.449970961 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.450000048 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.450037956 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.450043917 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.450088024 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.450200081 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.450277090 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.450283051 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.450295925 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.450354099 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.450858116 CEST	49834	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.450870037 CEST	443	49834	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.501230955 CEST	443	49836	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.501405001 CEST	443	49836	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.501477957 CEST	49836	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.502079964 CEST	49836	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.502094984 CEST	443	49836	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.507828951 CEST	49842	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.507900000 CEST	443	49842	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.507982016 CEST	49842	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.508256912 CEST	49842	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.508305073 CEST	443	49842	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.541898966 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.541961908 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.542004108 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.542027950 CEST	49835	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.542048931 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.542098999 CEST	49835	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.627435923 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.627485037 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.627557993 CEST	49835	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.627566099 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.627594948 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.627631903 CEST	49835	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.627733946 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.627798080 CEST	49835	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.628063917 CEST	49835	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:44.628092051 CEST	443	49835	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:44.631089926 CEST	49843	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.631110907 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.631203890 CEST	49843	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.631417036 CEST	49843	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.631433010 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.655747890 CEST	49844	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:44.655803919 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:44.655903101 CEST	49844	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:44.656080008 CEST	49844	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:44.656101942 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:44.846208096 CEST	443	49840	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.846524954 CEST	49840	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.846548080 CEST	443	49840	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.847027063 CEST	443	49840	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.847404957 CEST	49840	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.847486019 CEST	443	49840	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.847567081 CEST	49840	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.895426035 CEST	443	49840	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.949660063 CEST	443	49840	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.950020075 CEST	443	49840	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.950103998 CEST	49840	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.950126886 CEST	443	49840	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.950146914 CEST	443	49840	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:44.950221062 CEST	49840	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.950551033 CEST	49840	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:44.950560093 CEST	443	49840	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.095155954 CEST	49758	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:31:45.095343113 CEST	443	49758	52.105.56.39	192.168.2.16
Oct 4, 2024 09:31:45.095418930 CEST	49758	443	192.168.2.16	52.105.56.39
Oct 4, 2024 09:31:45.154685020 CEST	443	49842	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.154999971 CEST	49842	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.155020952 CEST	443	49842	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.155756950 CEST	443	49842	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.156174898 CEST	49842	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.156263113 CEST	443	49842	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.156327963 CEST	49842	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.203397036 CEST	443	49842	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.257663965 CEST	443	49842	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.258078098 CEST	443	49842	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.258141994 CEST	49842	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.258847952 CEST	49842	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.258869886 CEST	443	49842	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.271984100 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.272362947 CEST	49843	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.272387028 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.274173975 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.274246931 CEST	49843	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.274612904 CEST	49843	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.274689913 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.274760962 CEST	49843	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.274770975 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.305804968 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:45.306054115 CEST	49844	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:45.306081057 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:45.307014942 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:45.307089090 CEST	49844	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:45.307327032 CEST	49844	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:45.307395935 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:45.307445049 CEST	49844	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:45.318624020 CEST	49843	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.350646019 CEST	49844	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:45.350665092 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:45.375801086 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.375859976 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.375880957 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.375919104 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.375932932 CEST	49843	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.375946999 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.375956059 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.375988007 CEST	49843	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.376022100 CEST	49843	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.398648024 CEST	49844	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:45.412417889 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:45.412451982 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:45.412458897 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:45.412481070 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:45.412487030 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:45.412494898 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:45.412512064 CEST	49844	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:45.412528992 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:45.412554979 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:45.412559986 CEST	49844	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:45.412605047 CEST	49844	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:45.412606955 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:45.412648916 CEST	49844	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:45.413300037 CEST	49844	443	192.168.2.16	13.107.246.67
Oct 4, 2024 09:31:45.413316965 CEST	443	49844	13.107.246.67	192.168.2.16
Oct 4, 2024 09:31:45.425662041 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:45.425751925 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:45.426008940 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:45.426120043 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:45.426151991 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:45.461652040 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.461695910 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.461735010 CEST	49843	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.461745977 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.461802959 CEST	49843	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.461810112 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.461854935 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:45.461915016 CEST	49843	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.462424040 CEST	49843	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:31:45.462435007 CEST	443	49843	13.107.246.45	192.168.2.16
Oct 4, 2024 09:31:46.076613903 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:46.076925039 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:46.076984882 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:46.080920935 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:46.081208944 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:46.081484079 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:46.081566095 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:46.081955910 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:46.132734060 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:46.132793903 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:46.180741072 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:46.182853937 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:46.182910919 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:46.182934046 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:46.182980061 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:46.182998896 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:46.183021069 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:46.183111906 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:46.183111906 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:46.183111906 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:46.183111906 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:46.183188915 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:46.183219910 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:46.183247089 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:46.183260918 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:46.183322906 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:46.183864117 CEST	49846	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:46.183939934 CEST	443	49846	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:47.406538010 CEST	443	49830	172.217.16.196	192.168.2.16
Oct 4, 2024 09:31:47.406704903 CEST	443	49830	172.217.16.196	192.168.2.16
Oct 4, 2024 09:31:47.406769037 CEST	49830	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:31:48.349471092 CEST	49830	443	192.168.2.16	172.217.16.196
Oct 4, 2024 09:31:48.349495888 CEST	443	49830	172.217.16.196	192.168.2.16
Oct 4, 2024 09:31:52.968722105 CEST	49853	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:52.968818903 CEST	443	49853	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:52.968893051 CEST	49853	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:52.969378948 CEST	49853	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:52.969415903 CEST	443	49853	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:53.622246027 CEST	443	49853	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:53.622509956 CEST	49853	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:53.622559071 CEST	443	49853	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:53.623311043 CEST	443	49853	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:53.623574972 CEST	49853	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:53.623732090 CEST	443	49853	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:53.666663885 CEST	49853	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:54.151639938 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:54.151686907 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:54.151767015 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:54.152338982 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:54.152359962 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:54.820405006 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:54.820708990 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:54.820764065 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:54.821923971 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:54.822233915 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:54.822361946 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:54.822374105 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:54.822421074 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:54.863672972 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:54.959851980 CEST	49702	80	192.168.2.16	192.229.221.95
Oct 4, 2024 09:31:54.965341091 CEST	80	49702	192.229.221.95	192.168.2.16
Oct 4, 2024 09:31:54.965424061 CEST	49702	80	192.168.2.16	192.229.221.95
Oct 4, 2024 09:31:55.327683926 CEST	49797	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:55.327774048 CEST	443	49797	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:55.542227983 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.542254925 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.542263031 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.542320967 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.542321920 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.542367935 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.542396069 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.542437077 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.542437077 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.542460918 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.631669044 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.631683111 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.631746054 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.631805897 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.631835938 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.631895065 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.633523941 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.633538961 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.633606911 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.633620977 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.633676052 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.721822977 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.721843958 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.721952915 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.721970081 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.722026110 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.723068953 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.723087072 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.723160028 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.723172903 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.723228931 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.724183083 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.724195957 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.724286079 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.724298000 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.724351883 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.725711107 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.725723982 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.725797892 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.725811005 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.725867987 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.813031912 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.813046932 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.813150883 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.813219070 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.813254118 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.813278913 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.813543081 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.813558102 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.813621044 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.813633919 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.813688993 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.814055920 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.814069986 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.814127922 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.814140081 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.814193010 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.814703941 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.814717054 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.814776897 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.814791918 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.814841032 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.815028906 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.815087080 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.815135956 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.815618992 CEST	49855	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:55.815650940 CEST	443	49855	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:55.825131893 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:55.871407986 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.011995077 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.013190985 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.013202906 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.013272047 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.013292074 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.013360023 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.013395071 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.013436079 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.013436079 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.013497114 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.098772049 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.098799944 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.098858118 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.098870039 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.098898888 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.098916054 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.100451946 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.100472927 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.100516081 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.100526094 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.100548983 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.100565910 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.185267925 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.185296059 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.185450077 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.185451031 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.185517073 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.185585022 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.186176062 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.186196089 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.186278105 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.186294079 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.186348915 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.187191963 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.187212944 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.187263012 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.187277079 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.187308073 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.187345982 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.188631058 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.188668013 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.188714981 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.188729048 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.188795090 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.189397097 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.272216082 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.272238970 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.272319078 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.272351980 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.272416115 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.272586107 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.272624016 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.272658110 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.272671938 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.272699118 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.272722006 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.273586988 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.273607969 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.273698092 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.273711920 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.273765087 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.274219990 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.274238110 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.274285078 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.274297953 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.274324894 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.274348021 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.274976015 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.274995089 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.275052071 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.275074005 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.275127888 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.275633097 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.275672913 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.275706053 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.275724888 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.275748968 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.275866032 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.276437044 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.276460886 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.276514053 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.276525974 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.276551962 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.276571035 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.358697891 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.358725071 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.358823061 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.358867884 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.358937979 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.359411955 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.359433889 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.359489918 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.359504938 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.359534979 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.359556913 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.360104084 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.360131025 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.360178947 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.360189915 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.360219955 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.360246897 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.360380888 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.360400915 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.360440969 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.360454082 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.360482931 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.360502958 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.363770008 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.363800049 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.363873005 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.363893032 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.363917112 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.363944054 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.364387035 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.364409924 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.364456892 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.364469051 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.364500046 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.364522934 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.364836931 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.364856005 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.364903927 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.364916086 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.364942074 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.364965916 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.446002007 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.446027040 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.446125031 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.446196079 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.446235895 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.446261883 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.446405888 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.446425915 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.446470976 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.446485996 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.446516037 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.446538925 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.447268963 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.447290897 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.447345972 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.447357893 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.447392941 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.447417974 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.447417974 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.447418928 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.447453022 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.447458029 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.447503090 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.447527885 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.448091984 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.448112965 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.448167086 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.448180914 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.448214054 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.448251963 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.448997974 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.449017048 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.449069977 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.449084044 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.449115992 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.449155092 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.449942112 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.449959993 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.450016975 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.450028896 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.450043917 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.450073004 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.450105906 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.450105906 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.450126886 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.450156927 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.450185061 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.532006979 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.532027006 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.532129049 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.532160044 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.532221079 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.532639027 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.532654047 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.532710075 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.532721043 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.532762051 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.533133984 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.533148050 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.533198118 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.533205986 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.533246994 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.533976078 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.533989906 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.534044027 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.534051895 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.534090042 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.534533024 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.534552097 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.534607887 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.534615993 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.534667015 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.535407066 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.535420895 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.535459042 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.535494089 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.535491943 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.535511971 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.535542965 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.536248922 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.536262989 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.536318064 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.536329031 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.585659981 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.618683100 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.618700981 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.618793964 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.618840933 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.618906975 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.619333029 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.619350910 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.619421005 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.619441986 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.619468927 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.619492054 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.620079041 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.620095968 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.620160103 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.620176077 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.620239973 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.620735884 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.620750904 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.620810986 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.620826960 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.620908976 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.621505976 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.621524096 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.621575117 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.621587992 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.621649981 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.622380018 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.622420073 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.622425079 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.622442961 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.622448921 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.622483015 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.622505903 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.622929096 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.622942924 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.623003006 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.623018026 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.623083115 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.623225927 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.623253107 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.623287916 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.623306990 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.623332977 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.623359919 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.705538988 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.705591917 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.705666065 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.705709934 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.705743074 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.705770016 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.706151962 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.706202030 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.706234932 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.706249952 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.706283092 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.706305027 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.706840038 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.706860065 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.706928015 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.706943035 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.707010984 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.707362890 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.707381964 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.707459927 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.707475901 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.707534075 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.707659006 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.707739115 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.707740068 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.707840919 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.707879066 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.707916021 CEST	443	49820	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.707940102 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.707997084 CEST	49820	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.710741997 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.710777044 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:56.710870981 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.711045980 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:56.711057901 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.521589041 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.521975994 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.521996021 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.522288084 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.522763014 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.522816896 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.522840977 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.567426920 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.571655035 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.792398930 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.794478893 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.794485092 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.794497967 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.794552088 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.794672966 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.794673920 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.794697046 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.794894934 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.882004976 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.882028103 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.882142067 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.882160902 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.882462978 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.883924961 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.883939981 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.884017944 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.884028912 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.884120941 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.969820976 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.969841003 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.970071077 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.970091105 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.970150948 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.970478058 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.970491886 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.970571995 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.970578909 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.971414089 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.971421957 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.971436024 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.971493959 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.971502066 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.971570015 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.972383976 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.972398996 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.972461939 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:57.972469091 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:57.972645998 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.058864117 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.058880091 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.059134007 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.059164047 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.059228897 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.059499979 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.059516907 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.059572935 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.059582949 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.059638977 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.059973001 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.059986115 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.060045958 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.060051918 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.060075045 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.060112000 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.060491085 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.060504913 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.060590982 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.060597897 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.060652018 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.060959101 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.060973883 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.061033964 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.061041117 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.061105013 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.061780930 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.061794996 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.061853886 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.061861038 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.061903954 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.061903954 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.146687031 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.146708965 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.146888018 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.146897078 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.146948099 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.147197008 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.147212982 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.147258997 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.147264957 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.147305012 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.147700071 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.147715092 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.147758961 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.147764921 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.147803068 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.148150921 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.148169994 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.148200989 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.148205996 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.148232937 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.148243904 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.153204918 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.153224945 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.153290987 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.153299093 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.153341055 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.153588057 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.153609991 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.153650999 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.153656006 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.153672934 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.153693914 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.154119968 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.154134035 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.154184103 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.154189110 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.154230118 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.154632092 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.154648066 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.154681921 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.154686928 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.154716015 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.154725075 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.235184908 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.235214949 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.235416889 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.235424042 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.235471964 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.235608101 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.235625982 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.235678911 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.235686064 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.235730886 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.236165047 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.236179113 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.236413956 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.236421108 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.236478090 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.236824989 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.236840010 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.236907005 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.236912966 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.236958027 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.237426996 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.237441063 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.237502098 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.237509012 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.237554073 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.237821102 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.237837076 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.237890005 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.237896919 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.237942934 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.238892078 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.238907099 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.238965034 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.238970041 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.239022017 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.239250898 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.239268064 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.239324093 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.239329100 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.239370108 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.323625088 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.323645115 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.323698044 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.323703051 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.323749065 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.324086905 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.324101925 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.324161053 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.324166059 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.324206114 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.325015068 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.325031042 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.325087070 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.325093985 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.325136900 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.325701952 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.325721025 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.325786114 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.325792074 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.325831890 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.326380968 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.326401949 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.326467991 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.326473951 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.326518059 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.327155113 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.327173948 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.327238083 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.327244043 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.327301979 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.327569962 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.327586889 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.327655077 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.327661991 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.327703953 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.328250885 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.328265905 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.328337908 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.328344107 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.328392029 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.342031002 CEST	443	49853	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:58.342139006 CEST	443	49853	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:58.342217922 CEST	49853	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:58.349848032 CEST	49853	443	192.168.2.16	13.107.246.51
Oct 4, 2024 09:31:58.349896908 CEST	443	49853	13.107.246.51	192.168.2.16
Oct 4, 2024 09:31:58.412121058 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.412141085 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.412199974 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.412205935 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.412249088 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.413114071 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.413129091 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.413180113 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.413186073 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.413225889 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.413594007 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.413609028 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.413675070 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.413681030 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.413728952 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.414158106 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.414175034 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.414216042 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.414221048 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.414243937 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.414262056 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.414889097 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.414911985 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.414968014 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.414973974 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.415024042 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.415761948 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.415781975 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.415832043 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.415837049 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.415852070 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.415899038 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.415910959 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.415945053 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.415972948 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.415983915 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.416762114 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.416779995 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.416835070 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.416841984 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.416884899 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.500735998 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.500754118 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.500803947 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.500811100 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.500858068 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.501398087 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.501413107 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.501470089 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.501477003 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.501527071 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.501987934 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.502002001 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.502055883 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.502063036 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.502106905 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.502607107 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.502626896 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.502681017 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.502686977 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.502710104 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.502729893 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.502734900 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.502763987 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.502784014 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:31:58.502825975 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.502969980 CEST	49856	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:31:58.502985001 CEST	443	49856	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:10.353373051 CEST	49797	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:10.353585005 CEST	443	49797	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:10.353705883 CEST	49797	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:12.988925934 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:12.988961935 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:12.989453077 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:12.990705013 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:12.990722895 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:12.994376898 CEST	49868	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:12.994405985 CEST	443	49868	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:12.994493961 CEST	49868	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:12.994605064 CEST	49869	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:32:12.994612932 CEST	443	49869	13.107.246.45	192.168.2.16
Oct 4, 2024 09:32:12.994668007 CEST	49869	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:32:12.995410919 CEST	49869	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:32:12.995423079 CEST	443	49869	13.107.246.45	192.168.2.16
Oct 4, 2024 09:32:12.995575905 CEST	49868	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:12.995588064 CEST	443	49868	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:13.633796930 CEST	443	49869	13.107.246.45	192.168.2.16
Oct 4, 2024 09:32:13.634047031 CEST	49869	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:32:13.634062052 CEST	443	49869	13.107.246.45	192.168.2.16
Oct 4, 2024 09:32:13.634525061 CEST	443	49869	13.107.246.45	192.168.2.16
Oct 4, 2024 09:32:13.634917021 CEST	49869	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:32:13.634990931 CEST	443	49869	13.107.246.45	192.168.2.16
Oct 4, 2024 09:32:13.676853895 CEST	49869	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:32:13.793453932 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:13.793778896 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:13.793812990 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:13.794945955 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:13.795253038 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:13.795392036 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:13.795491934 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:13.805567026 CEST	443	49868	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:13.805829048 CEST	49868	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:13.805840015 CEST	443	49868	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:13.807029963 CEST	443	49868	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:13.807357073 CEST	49868	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:13.807357073 CEST	49868	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:13.807468891 CEST	443	49868	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:13.836802006 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:13.852777004 CEST	49868	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:13.852817059 CEST	443	49868	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:13.900074005 CEST	49868	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.043776989 CEST	49819	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.043801069 CEST	443	49819	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.056771040 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.057874918 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.057900906 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.057945013 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.057965994 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.057991028 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.058001041 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.058024883 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.058054924 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.058063030 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.058110952 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.145379066 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.145450115 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.145514965 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.145555973 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.145584106 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.145613909 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.147201061 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.147248983 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.147291899 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.147313118 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.147337914 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.147361994 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.232213020 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.232273102 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.232323885 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.232353926 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.232387066 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.232413054 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.233120918 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.233170986 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.233211994 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.233222961 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.233270884 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.234796047 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.234843969 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.234884024 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.234900951 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.234915018 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.234946012 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.234952927 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.235858917 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.235913038 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.235934973 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.235955000 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.235991955 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.283783913 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.319696903 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.319765091 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.319858074 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.319889069 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.319907904 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.319958925 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.319979906 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.319989920 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.320015907 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.320028067 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.320070982 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.320079088 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.320152044 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.321003914 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.321053028 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.321095943 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.321120024 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.321137905 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.321167946 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.321765900 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.321808100 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.321854115 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.321881056 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.321897030 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.321924925 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.322685003 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.322731018 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.322774887 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.322793961 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.322810888 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.322833061 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.323575020 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.323589087 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.323663950 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.323683977 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.323745966 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.324384928 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.324398994 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.324466944 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.324481010 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.324522018 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.406461000 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.406524897 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.406584024 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.406605959 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.406636000 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.406657934 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.407049894 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.407094955 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.407134056 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.407140970 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.407177925 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.407201052 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.407205105 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.407807112 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.407857895 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.407888889 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.407896042 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.407934904 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.408422947 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.408463001 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.408499956 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.408508062 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.408528090 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.411684990 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.411746979 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.411796093 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.411812067 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.411834002 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.412201881 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.412242889 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.412277937 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.412283897 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.412307978 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.412683964 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.412730932 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.412767887 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.412775993 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.412791967 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.413166046 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.413203955 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.413237095 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.413243055 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.413269997 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.459790945 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.495481014 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.495548964 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.495585918 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.495609045 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.495651007 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.495671034 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.495822906 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.495870113 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.495894909 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.495901108 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.495934963 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.495960951 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.496298075 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.496337891 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.496393919 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.496398926 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.496442080 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.496819973 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.496862888 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.496901035 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.496906996 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.496933937 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.496963978 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.497458935 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.497508049 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.497549057 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.497554064 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.497590065 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.498287916 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.498332977 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.498369932 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.498374939 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.498399973 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.498436928 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.498495102 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.498541117 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.498569965 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.498574972 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.498615026 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.502361059 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.502424002 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.502453089 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.502463102 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.502489090 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.502525091 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.582027912 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.582072020 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.582110882 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.582137108 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.582164049 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.582190990 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.582508087 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.582554102 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.582582951 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.582587957 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.582632065 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.582649946 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.583225012 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.583304882 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.583321095 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.583331108 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.583374977 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.583736897 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.583802938 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.583810091 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.583832026 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.583869934 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.584316969 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.584356070 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.584388018 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.584394932 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.584429979 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.585014105 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.585057020 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.585086107 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.585092068 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.585125923 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.585896015 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.585932970 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.586021900 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.586028099 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.586054087 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.586074114 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.586122990 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.586138010 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.586148024 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.586180925 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.635777950 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.669550896 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.669615030 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.669666052 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.669687986 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.669739962 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.669766903 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.670053959 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.670103073 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.670135975 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.670140982 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.670175076 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.670200109 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.670628071 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.670670033 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.670698881 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.670706034 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.670768976 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.671288013 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.671329975 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.671350002 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.671355963 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.671385050 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.671406984 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.671891928 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.671936035 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.671964884 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.671969891 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.672014952 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.672513962 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.672564030 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.672595024 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.672599077 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.672617912 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.672642946 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.673413038 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.673434019 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.673480988 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.673486948 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.673521996 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.673543930 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.673770905 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.673784971 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.673851013 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.673858881 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.673897982 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.757371902 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.757431030 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.757488012 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.757514954 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.757535934 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.757564068 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.757671118 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.757714033 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.757755041 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.757762909 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.757793903 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.757813931 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.757821083 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.758349895 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.758416891 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.758445978 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.758460999 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.758493900 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.758862972 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.758903980 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.758939981 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.758949995 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.758971930 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.759432077 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.759480953 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.759501934 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.759519100 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.759546995 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.760063887 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.760103941 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.760138035 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.760154963 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.760170937 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.760970116 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.761015892 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.761051893 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.761075974 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.761090994 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.761586905 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.761624098 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.761660099 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.761674881 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.761693001 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.811768055 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.845160961 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.845225096 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.845283031 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.845309973 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.845328093 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.845362902 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.845501900 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.845546007 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.845573902 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.845580101 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.845613003 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.845637083 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.845966101 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.846005917 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.846045017 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.846050978 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.846092939 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.846458912 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.846513033 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.846537113 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.846541882 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.846577883 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.846669912 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.846765041 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.846899986 CEST	49867	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.846914053 CEST	443	49867	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.850044012 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.850081921 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:14.850162983 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.850457907 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:14.850474119 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:15.684488058 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:15.685075998 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:15.685108900 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:15.685786963 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:15.686142921 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:15.686239004 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:15.686266899 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:15.727401018 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:15.732855082 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:15.954987049 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:15.955827951 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:15.955846071 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:15.955888033 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:15.955918074 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:15.955940962 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:15.955975056 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:15.956000090 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:15.956036091 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.047811985 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.047879934 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.047959089 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.048027039 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.048065901 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.048089027 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.049525976 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.049570084 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.049613953 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.049628973 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.049666882 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.049689054 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.139702082 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.139767885 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.139821053 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.139885902 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.139949083 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.139949083 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.141084909 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.141143084 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.141191006 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.141206026 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.141249895 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.141272068 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.142613888 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.142657042 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.142705917 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.142718077 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.142762899 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.142795086 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.228117943 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.228183985 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.228240967 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.228247881 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.228364944 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.232089043 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.232141018 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.232180119 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.232192039 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.232208967 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.232234955 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.232810974 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.232851982 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.232889891 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.232896090 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.232927084 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.232954025 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.233692884 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.233736038 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.233782053 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.233793020 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.233823061 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.233840942 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.234616041 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.234668970 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.234711885 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.234723091 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.234771013 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.234792948 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.235574961 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.235618114 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.235657930 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.235670090 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.235703945 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.235723019 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.236399889 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.236449003 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.236510038 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.236526012 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.236555099 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.236578941 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.320409060 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.320466995 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.320569992 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.320637941 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.320677042 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.320704937 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.324629068 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.324680090 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.324732065 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.324745893 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.324790955 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.324811935 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.325236082 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.325278044 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.325323105 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.325335026 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.325360060 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.325381994 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.325392962 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.325884104 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.325934887 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.325965881 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.325978994 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.326009035 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.326386929 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.326426983 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.326471090 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.326483965 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.326510906 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.326828957 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.326874971 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.326908112 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.326920033 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.326948881 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.327526093 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.327567101 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.327609062 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.327621937 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.327650070 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.365258932 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.365304947 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.365470886 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.365472078 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.365542889 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.417768955 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.740694046 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.740725040 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.740771055 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.740818977 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.740852118 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.740868092 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.740896940 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.740955114 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.740998030 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.741019011 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.741025925 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.741070032 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.741564035 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.741605997 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.741645098 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.741652012 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.741664886 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.741697073 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.742276907 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.742317915 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.742352962 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.742358923 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.742389917 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.742410898 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.742463112 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.742507935 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.742533922 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.742538929 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.742574930 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.742594957 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.743463039 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.743504047 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.743537903 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.743544102 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.743575096 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.743597031 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.744268894 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.744312048 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.744347095 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.744353056 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.744385958 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.744404078 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.744482994 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.744534969 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.744554043 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.744560003 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.744594097 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.744611025 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.745518923 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.745560884 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.745589018 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.745594025 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.745626926 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.745646954 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.746287107 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.746330023 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.746372938 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.746377945 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.746413946 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.746424913 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.746474981 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.746515989 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.746540070 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.746546030 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.746577978 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.746604919 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.746611118 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.747560978 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.747610092 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.747628927 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.747646093 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.747672081 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.747795105 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.747833967 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.747858047 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.747865915 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.747895002 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.748744011 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.748789072 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.748816967 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.748822927 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.748842001 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.749254942 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.749293089 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.749325991 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.749332905 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.749347925 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.749886036 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.749934912 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.749960899 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.749968052 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.750000954 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.750092983 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.750129938 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.750148058 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.750204086 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.750253916 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.750838041 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.750878096 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.750910997 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.750916004 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.750938892 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.751075983 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.751122952 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.751148939 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.751154900 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.751188040 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.751907110 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.751945972 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.751976013 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.751981974 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.752006054 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.752551079 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.752599955 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.752614021 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.752624035 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.752655983 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.752794027 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.752831936 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.752851009 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.752859116 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.752883911 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.753464937 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.753488064 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.753526926 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.753532887 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.753556967 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.753561020 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.753581047 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.753623009 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.753629923 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.753643036 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.754412889 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.754436016 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.754477978 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.754483938 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.754508018 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.754511118 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.754533052 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.754556894 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.754563093 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.754596949 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.755389929 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.755412102 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.755454063 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.755460024 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.755485058 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.755516052 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.755536079 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.755582094 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.755589962 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.756412983 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.756434917 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.756484985 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.756490946 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.756503105 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.756517887 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.756526947 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.756565094 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.756572008 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.756608963 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.757277966 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.757304907 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.757345915 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.757352114 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.757371902 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.757379055 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.757390022 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.757415056 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.757421017 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.757451057 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.787121058 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.787184000 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.787230968 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.787307024 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.787349939 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.787537098 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.787578106 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.787617922 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.787638903 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.787667036 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.787899017 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.787945986 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.787978888 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.787992001 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.788029909 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.788480043 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.788518906 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.788574934 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.788587093 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.788619995 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.788813114 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.788860083 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.788893938 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.788913012 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.788944006 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.788985014 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:16.788985014 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.789052963 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.789135933 CEST	49870	443	192.168.2.16	152.199.21.175
Oct 4, 2024 09:32:16.789166927 CEST	443	49870	152.199.21.175	192.168.2.16
Oct 4, 2024 09:32:18.360776901 CEST	443	49869	13.107.246.45	192.168.2.16
Oct 4, 2024 09:32:18.360971928 CEST	443	49869	13.107.246.45	192.168.2.16
Oct 4, 2024 09:32:18.361042023 CEST	49869	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:32:19.993227959 CEST	49869	443	192.168.2.16	13.107.246.45
Oct 4, 2024 09:32:19.993262053 CEST	443	49869	13.107.246.45	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 4, 2024 09:30:31.922435045 CEST	53	50961	1.1.1.1	192.168.2.16
Oct 4, 2024 09:30:31.942253113 CEST	60362	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:31.942662001 CEST	53851	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:31.958281040 CEST	53	58752	1.1.1.1	192.168.2.16
Oct 4, 2024 09:30:31.960279942 CEST	53	60362	1.1.1.1	192.168.2.16
Oct 4, 2024 09:30:31.961019039 CEST	53	53851	1.1.1.1	192.168.2.16
Oct 4, 2024 09:30:32.974493027 CEST	53	61804	1.1.1.1	192.168.2.16
Oct 4, 2024 09:30:34.337866068 CEST	62569	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:34.337915897 CEST	59376	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:34.347218037 CEST	53	62569	1.1.1.1	192.168.2.16
Oct 4, 2024 09:30:34.356517076 CEST	53	59376	1.1.1.1	192.168.2.16
Oct 4, 2024 09:30:36.739770889 CEST	60195	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:36.739882946 CEST	54549	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:36.746723890 CEST	53	60195	1.1.1.1	192.168.2.16
Oct 4, 2024 09:30:36.746922970 CEST	53	54549	1.1.1.1	192.168.2.16
Oct 4, 2024 09:30:38.211896896 CEST	59369	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:38.212028980 CEST	58315	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:41.966125965 CEST	51685	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:41.966310024 CEST	50203	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:44.101320982 CEST	52528	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:44.101530075 CEST	51309	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:45.083306074 CEST	58091	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:45.083307028 CEST	53850	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:45.305267096 CEST	50992	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:45.305438042 CEST	50750	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:45.312616110 CEST	53	50992	1.1.1.1	192.168.2.16
Oct 4, 2024 09:30:45.313698053 CEST	53	50750	1.1.1.1	192.168.2.16
Oct 4, 2024 09:30:48.390515089 CEST	53	58750	1.1.1.1	192.168.2.16
Oct 4, 2024 09:30:49.910442114 CEST	53	56843	1.1.1.1	192.168.2.16
Oct 4, 2024 09:30:58.688621998 CEST	60565	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:30:58.688822985 CEST	52529	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:08.873157978 CEST	53	57687	1.1.1.1	192.168.2.16
Oct 4, 2024 09:31:09.435652971 CEST	54463	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:09.435848951 CEST	56129	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:09.436554909 CEST	62085	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:09.436913967 CEST	51591	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:09.442693949 CEST	53	54463	1.1.1.1	192.168.2.16
Oct 4, 2024 09:31:09.443538904 CEST	53	56129	1.1.1.1	192.168.2.16
Oct 4, 2024 09:31:11.665076017 CEST	53325	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:11.665183067 CEST	64242	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:11.672666073 CEST	53	64242	1.1.1.1	192.168.2.16
Oct 4, 2024 09:31:11.673894882 CEST	53	53325	1.1.1.1	192.168.2.16
Oct 4, 2024 09:31:12.114746094 CEST	54715	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:12.114974976 CEST	56664	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:12.221318960 CEST	53	59670	1.1.1.1	192.168.2.16
Oct 4, 2024 09:31:14.107845068 CEST	59096	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:14.108067989 CEST	59702	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:21.805306911 CEST	138	138	192.168.2.16	192.168.2.255
Oct 4, 2024 09:31:31.855420113 CEST	53	51752	1.1.1.1	192.168.2.16
Oct 4, 2024 09:31:31.904788017 CEST	53	60503	1.1.1.1	192.168.2.16
Oct 4, 2024 09:31:34.849194050 CEST	53	58771	1.1.1.1	192.168.2.16
Oct 4, 2024 09:31:36.801834106 CEST	64597	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:36.801966906 CEST	61650	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:43.534316063 CEST	51883	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:43.534423113 CEST	58337	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:45.095468044 CEST	61245	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:45.095603943 CEST	50895	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:31:53.662192106 CEST	53	57877	1.1.1.1	192.168.2.16
Oct 4, 2024 09:32:00.715406895 CEST	53	61492	1.1.1.1	192.168.2.16
Oct 4, 2024 09:32:12.976475954 CEST	62863	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:32:12.976641893 CEST	62154	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:32:15.252100945 CEST	50134	53	192.168.2.16	1.1.1.1
Oct 4, 2024 09:32:15.252217054 CEST	51828	53	192.168.2.16	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 4, 2024 09:31:09.480679989 CEST	192.168.2.16	1.1.1.1	c2cc	(Port unreachable)	Destination Unreachable
Oct 4, 2024 09:31:12.144200087 CEST	192.168.2.16	1.1.1.1	c2ad	(Port unreachable)	Destination Unreachable
Oct 4, 2024 09:31:36.830457926 CEST	192.168.2.16	1.1.1.1	c29a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 4, 2024 09:30:31.942253113 CEST	192.168.2.16	1.1.1.1	0x4c22	Standard query (0)	antiphishing.vadesecure.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:31.942662001 CEST	192.168.2.16	1.1.1.1	0x1fc4	Standard query (0)	antiphishing.vadesecure.com	65	IN (0x0001)	false
Oct 4, 2024 09:30:34.337866068 CEST	192.168.2.16	1.1.1.1	0x276d	Standard query (0)	antiphishing.vadesecure.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:34.337915897 CEST	192.168.2.16	1.1.1.1	0x442b	Standard query (0)	antiphishing.vadesecure.com	65	IN (0x0001)	false
Oct 4, 2024 09:30:36.739770889 CEST	192.168.2.16	1.1.1.1	0xcac9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:36.739882946 CEST	192.168.2.16	1.1.1.1	0x673c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 09:30:38.211896896 CEST	192.168.2.16	1.1.1.1	0x87f9	Standard query (0)	chantiersdelatlantique-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:38.212028980 CEST	192.168.2.16	1.1.1.1	0x4b82	Standard query (0)	chantiersdelatlantique-my.sharepoint.com	65	IN (0x0001)	false
Oct 4, 2024 09:30:41.966125965 CEST	192.168.2.16	1.1.1.1	0x6796	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:41.966310024 CEST	192.168.2.16	1.1.1.1	0x2a71	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 4, 2024 09:30:44.101320982 CEST	192.168.2.16	1.1.1.1	0x2ea6	Standard query (0)	chantiersdelatlantique-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:44.101530075 CEST	192.168.2.16	1.1.1.1	0x82af	Standard query (0)	chantiersdelatlantique-my.sharepoint.com	65	IN (0x0001)	false
Oct 4, 2024 09:30:45.083306074 CEST	192.168.2.16	1.1.1.1	0xed3c	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:45.083307028 CEST	192.168.2.16	1.1.1.1	0xdaf7	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Oct 4, 2024 09:30:45.305267096 CEST	192.168.2.16	1.1.1.1	0xdb25	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:45.305438042 CEST	192.168.2.16	1.1.1.1	0x644c	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 4, 2024 09:30:58.688621998 CEST	192.168.2.16	1.1.1.1	0x892f	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:58.688822985 CEST	192.168.2.16	1.1.1.1	0x3c23	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 4, 2024 09:31:09.435652971 CEST	192.168.2.16	1.1.1.1	0xe6a9	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:09.435848951 CEST	192.168.2.16	1.1.1.1	0x6b9d	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Oct 4, 2024 09:31:09.436554909 CEST	192.168.2.16	1.1.1.1	0xa4b4	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:09.436913967 CEST	192.168.2.16	1.1.1.1	0x9877	Standard query (0)	acctcdn.msftauth.net	65	IN (0x0001)	false
Oct 4, 2024 09:31:11.665076017 CEST	192.168.2.16	1.1.1.1	0x54e	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:11.665183067 CEST	192.168.2.16	1.1.1.1	0x2396	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Oct 4, 2024 09:31:12.114746094 CEST	192.168.2.16	1.1.1.1	0x22bc	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:12.114974976 CEST	192.168.2.16	1.1.1.1	0xc62c	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Oct 4, 2024 09:31:14.107845068 CEST	192.168.2.16	1.1.1.1	0x309b	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:14.108067989 CEST	192.168.2.16	1.1.1.1	0xedf6	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Oct 4, 2024 09:31:36.801834106 CEST	192.168.2.16	1.1.1.1	0x324d	Standard query (0)	account.live.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:36.801966906 CEST	192.168.2.16	1.1.1.1	0xf47d	Standard query (0)	account.live.com	65	IN (0x0001)	false
Oct 4, 2024 09:31:43.534316063 CEST	192.168.2.16	1.1.1.1	0x86df	Standard query (0)	account.live.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:43.534423113 CEST	192.168.2.16	1.1.1.1	0x4804	Standard query (0)	account.live.com	65	IN (0x0001)	false
Oct 4, 2024 09:31:45.095468044 CEST	192.168.2.16	1.1.1.1	0x88d2	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:45.095603943 CEST	192.168.2.16	1.1.1.1	0xa666	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Oct 4, 2024 09:32:12.976475954 CEST	192.168.2.16	1.1.1.1	0x1efc	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:32:12.976641893 CEST	192.168.2.16	1.1.1.1	0x1d15	Standard query (0)	acctcdn.msftauth.net	65	IN (0x0001)	false
Oct 4, 2024 09:32:15.252100945 CEST	192.168.2.16	1.1.1.1	0x7b21	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:32:15.252217054 CEST	192.168.2.16	1.1.1.1	0x5c65	Standard query (0)	fpt.live.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 4, 2024 09:30:31.960279942 CEST	1.1.1.1	192.168.2.16	0x4c22	No error (0)	antiphishing.vadesecure.com		163.172.240.109	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:34.347218037 CEST	1.1.1.1	192.168.2.16	0x276d	No error (0)	antiphishing.vadesecure.com		163.172.240.109	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:36.746723890 CEST	1.1.1.1	192.168.2.16	0xcac9	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:36.746922970 CEST	1.1.1.1	192.168.2.16	0x673c	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 09:30:38.254662991 CEST	1.1.1.1	192.168.2.16	0x4b82	No error (0)	chantiersdelatlantique-my.sharepoint.com	chantiersdelatlantique.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:38.254662991 CEST	1.1.1.1	192.168.2.16	0x4b82	No error (0)	chantiersdelatlantique.sharepoint.com	361-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:38.254662991 CEST	1.1.1.1	192.168.2.16	0x4b82	No error (0)	361-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	190019-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:38.254662991 CEST	1.1.1.1	192.168.2.16	0x4b82	No error (0)	190019-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	190019-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:38.259896994 CEST	1.1.1.1	192.168.2.16	0x87f9	No error (0)	chantiersdelatlantique-my.sharepoint.com	chantiersdelatlantique.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:38.259896994 CEST	1.1.1.1	192.168.2.16	0x87f9	No error (0)	chantiersdelatlantique.sharepoint.com	361-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:38.259896994 CEST	1.1.1.1	192.168.2.16	0x87f9	No error (0)	361-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	190019-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:38.259896994 CEST	1.1.1.1	192.168.2.16	0x87f9	No error (0)	190019-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	190019-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:38.259896994 CEST	1.1.1.1	192.168.2.16	0x87f9	No error (0)	190019-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	190019-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:38.259896994 CEST	1.1.1.1	192.168.2.16	0x87f9	No error (0)	190019-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com		52.105.56.39	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:41.973577023 CEST	1.1.1.1	192.168.2.16	0x6796	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:41.973701954 CEST	1.1.1.1	192.168.2.16	0x2a71	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:43.172813892 CEST	1.1.1.1	192.168.2.16	0x1349	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:43.172813892 CEST	1.1.1.1	192.168.2.16	0x1349	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:44.122925997 CEST	1.1.1.1	192.168.2.16	0x66bc	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:44.122925997 CEST	1.1.1.1	192.168.2.16	0x66bc	No error (0)	s-part-0016.t-0009.t-msedge.net		13.107.246.44	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:44.150162935 CEST	1.1.1.1	192.168.2.16	0x2ea6	No error (0)	chantiersdelatlantique-my.sharepoint.com	chantiersdelatlantique.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:44.150162935 CEST	1.1.1.1	192.168.2.16	0x2ea6	No error (0)	chantiersdelatlantique.sharepoint.com	361-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:44.150162935 CEST	1.1.1.1	192.168.2.16	0x2ea6	No error (0)	361-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	190019-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:44.150162935 CEST	1.1.1.1	192.168.2.16	0x2ea6	No error (0)	190019-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	190019-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:44.150162935 CEST	1.1.1.1	192.168.2.16	0x2ea6	No error (0)	190019-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	190019-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:44.150162935 CEST	1.1.1.1	192.168.2.16	0x2ea6	No error (0)	190019-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com		52.105.56.39	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:44.157337904 CEST	1.1.1.1	192.168.2.16	0x82af	No error (0)	chantiersdelatlantique-my.sharepoint.com	chantiersdelatlantique.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:44.157337904 CEST	1.1.1.1	192.168.2.16	0x82af	No error (0)	chantiersdelatlantique.sharepoint.com	361-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:44.157337904 CEST	1.1.1.1	192.168.2.16	0x82af	No error (0)	361-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	190019-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:44.157337904 CEST	1.1.1.1	192.168.2.16	0x82af	No error (0)	190019-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	190019-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:45.090485096 CEST	1.1.1.1	192.168.2.16	0xed3c	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:45.090526104 CEST	1.1.1.1	192.168.2.16	0xdaf7	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:45.312616110 CEST	1.1.1.1	192.168.2.16	0xdb25	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:45.312616110 CEST	1.1.1.1	192.168.2.16	0xdb25	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:45.312616110 CEST	1.1.1.1	192.168.2.16	0xdb25	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:30:45.313698053 CEST	1.1.1.1	192.168.2.16	0x644c	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:45.313698053 CEST	1.1.1.1	192.168.2.16	0x644c	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:58.696794987 CEST	1.1.1.1	192.168.2.16	0x892f	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:30:58.698329926 CEST	1.1.1.1	192.168.2.16	0x3c23	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.442693949 CEST	1.1.1.1	192.168.2.16	0xe6a9	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.442693949 CEST	1.1.1.1	192.168.2.16	0xe6a9	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.442693949 CEST	1.1.1.1	192.168.2.16	0xe6a9	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:09.443504095 CEST	1.1.1.1	192.168.2.16	0x87d9	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.443504095 CEST	1.1.1.1	192.168.2.16	0x87d9	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:09.443538904 CEST	1.1.1.1	192.168.2.16	0x6b9d	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.443538904 CEST	1.1.1.1	192.168.2.16	0x6b9d	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.443876982 CEST	1.1.1.1	192.168.2.16	0xa4b4	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.443876982 CEST	1.1.1.1	192.168.2.16	0xa4b4	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.443876982 CEST	1.1.1.1	192.168.2.16	0xa4b4	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:09.444760084 CEST	1.1.1.1	192.168.2.16	0x9877	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.444760084 CEST	1.1.1.1	192.168.2.16	0x9877	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.460635900 CEST	1.1.1.1	192.168.2.16	0xc660	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.460635900 CEST	1.1.1.1	192.168.2.16	0xc660	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:09.461154938 CEST	1.1.1.1	192.168.2.16	0x8170	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.461266994 CEST	1.1.1.1	192.168.2.16	0xa696	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.461266994 CEST	1.1.1.1	192.168.2.16	0xa696	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:09.461642027 CEST	1.1.1.1	192.168.2.16	0x2954	No error (0)	shed.dual-low.s-part-0023.t-0009.t-msedge.net	s-part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.461642027 CEST	1.1.1.1	192.168.2.16	0x2954	No error (0)	s-part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:09.470354080 CEST	1.1.1.1	192.168.2.16	0x4274	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.470354080 CEST	1.1.1.1	192.168.2.16	0x4274	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:09.470427990 CEST	1.1.1.1	192.168.2.16	0x64d5	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.471534014 CEST	1.1.1.1	192.168.2.16	0x805f	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:09.471534014 CEST	1.1.1.1	192.168.2.16	0x805f	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:11.672666073 CEST	1.1.1.1	192.168.2.16	0x2396	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:11.672666073 CEST	1.1.1.1	192.168.2.16	0x2396	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:11.673894882 CEST	1.1.1.1	192.168.2.16	0x54e	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:11.673894882 CEST	1.1.1.1	192.168.2.16	0x54e	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:11.673894882 CEST	1.1.1.1	192.168.2.16	0x54e	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:12.122320890 CEST	1.1.1.1	192.168.2.16	0x22bc	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:12.144068003 CEST	1.1.1.1	192.168.2.16	0xc62c	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:14.115550995 CEST	1.1.1.1	192.168.2.16	0xedf6	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:14.115799904 CEST	1.1.1.1	192.168.2.16	0x309b	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:36.809230089 CEST	1.1.1.1	192.168.2.16	0x324d	No error (0)	account.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:36.830374956 CEST	1.1.1.1	192.168.2.16	0xf47d	No error (0)	account.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:43.312203884 CEST	1.1.1.1	192.168.2.16	0xb7ff	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:43.312203884 CEST	1.1.1.1	192.168.2.16	0xb7ff	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:31:43.541297913 CEST	1.1.1.1	192.168.2.16	0x86df	No error (0)	account.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:43.542157888 CEST	1.1.1.1	192.168.2.16	0x4804	No error (0)	account.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:45.102308989 CEST	1.1.1.1	192.168.2.16	0x88d2	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:45.102790117 CEST	1.1.1.1	192.168.2.16	0xa666	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:45.425082922 CEST	1.1.1.1	192.168.2.16	0x4d0a	No error (0)	shed.dual-low.s-part-0023.t-0009.t-msedge.net	s-part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:31:45.425082922 CEST	1.1.1.1	192.168.2.16	0x4d0a	No error (0)	s-part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:32:12.988940954 CEST	1.1.1.1	192.168.2.16	0x32e7	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:32:12.988940954 CEST	1.1.1.1	192.168.2.16	0x32e7	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:32:12.988953114 CEST	1.1.1.1	192.168.2.16	0x1efc	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:32:12.988953114 CEST	1.1.1.1	192.168.2.16	0x1efc	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:32:12.988953114 CEST	1.1.1.1	192.168.2.16	0x1efc	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:32:12.988960028 CEST	1.1.1.1	192.168.2.16	0x1d15	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:32:12.988960028 CEST	1.1.1.1	192.168.2.16	0x1d15	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:32:13.001246929 CEST	1.1.1.1	192.168.2.16	0xcc43	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:32:13.001246929 CEST	1.1.1.1	192.168.2.16	0xcc43	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:32:13.005613089 CEST	1.1.1.1	192.168.2.16	0xc3b7	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:32:13.005613089 CEST	1.1.1.1	192.168.2.16	0xc3b7	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:32:13.010288000 CEST	1.1.1.1	192.168.2.16	0x6fd3	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:32:13.010288000 CEST	1.1.1.1	192.168.2.16	0x6fd3	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 4, 2024 09:32:15.259223938 CEST	1.1.1.1	192.168.2.16	0x7b21	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 09:32:15.259254932 CEST	1.1.1.1	192.168.2.16	0x5c65	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

antiphishing.vadesecure.com

https:

chantiersdelatlantique-my.sharepoint.com

aadcdn.msauth.net

logincdn.msftauth.net

logincdn.msauth.net

acctcdn.msauth.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49708	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:24 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 07:30:24 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=206089 Date: Fri, 04 Oct 2024 07:30:24 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49710	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:25 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 07:30:25 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=206163 Date: Fri, 04 Oct 2024 07:30:25 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-04 07:30:25 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49712	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:26 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=M22rboTO7a4X5or&MD=RnNXoG6v HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-04 07:30:27 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: f62f9ebf-9d4d-463f-8d65-0b80cd18602f MS-RequestId: 93c90ecd-385f-4c75-ba4e-c0fd58ff4480 MS-CV: PSL8RlVjgU20Wd0l.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 07:30:26 GMT Connection: close Content-Length: 24490
2024-10-04 07:30:27 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-04 07:30:27 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49719	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:33 UTC	1474	OUT	GET /v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:33 UTC	157	IN	HTTP/1.1 200 OK vary: Origin date: Fri, 04 Oct 2024 07:30:33 GMT content-type: text/html; charset=utf-8 transfer-encoding: chunked connection: close
2024-10-04 07:30:33 UTC	3033	IN	Data Raw: 42 43 44 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 6c 6f 67 6f 3d 22 69 6d 61 67 65 73 2f 6c 6f 67 6f 2d 63 6c 6f 75 64 2e 70 6e 67 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 20 69 64 3d 22 74 65 78 74 2d 74 69 74 6c 65 22 3e 41 6e 74 69 2d 70 68 69 73 68 69 6e 67 20 61 6e 61 6c 79 73 69 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6e 74 69 70 68 69 73 68 69 6e 67 2e 76 61 64 65 73 65 63 75 72 65 2e 63 6f 6d 2f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 73 63 2d 61 6e 74 69 70 68 69 73 68 69 6e 67 22 20 63 6f Data Ascii: BCD<!doctype html><html lang="en" data-logo="images/logo-cloud.png"><head> <title id="text-title">Anti-phishing analysis</title> <base href="https://antiphishing.vadesecure.com/"> <meta charset="UTF-8"> <meta name="vsc-antiphishing" co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49720	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:34 UTC	1388	OUT	GET /styles.16be3c9519762a3240e8.css HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:34 UTC	277	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 94555 content-type: text/css; charset=utf-8 etag: W/"94555-b57396b0c9a0611707f0a2fe6d250edefa3b2281" last-modified: Fri, 04 Oct 2024 07:30:34 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:34 GMT connection: close
2024-10-04 07:30:34 UTC	14983	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 62 6f 64 79 2c 62 75 74 74 6f 6e 2c 64 69 76 2c 66 69 65 6c 64 73 65 74 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 65 61 64 65 72 2c 68 74 6d 6c 2c 69 66 72 61 6d 65 2c 6c 61 62 65 6c 2c 6c 69 2c 6e 61 76 2c 6f 62 6a 65 63 74 2c 70 2c 73 65 63 74 69 6f 6e 2c 75 6c 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 36 31 66 32 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 3a 73 Data Ascii: @charset "utf-8";*,:after,:before{box-sizing:border-box}body,button,div,fieldset,figure,footer,form,h1,h2,h3,h4,header,html,iframe,label,li,nav,object,p,section,ul{border:none;outline:0;margin:0;padding:0}::-moz-selection{background:#d61f29;color:#fff}::s
2024-10-04 07:30:34 UTC	1095	IN	Data Raw: 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 66 61 2d 6c 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 33 33 33 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 37 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 2e 30 36 36 37 65 6d 7d 2e 66 61 2d 78 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 2e 66 61 2d 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 66 61 2d 31 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 66 61 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 Data Ascii: :inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 73 74 65 70 73 28 38 29 20 69 6e 66 69 6e 69 74 65 20 66 61 2d 73 70 69 6e 3b 61 6e 69 6d 61 74 69 6f 6e 3a 31 73 20 73 74 65 70 73 28 38 29 20 69 6e 66 69 6e 69 74 65 20 66 61 2d 73 70 69 6e 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 Data Ascii: steps(8) infinite fa-spin;animation:1s steps(8) infinite fa-spin}@-webkit-keyframes fa-spin{0%{transform:rotate(0)}to{transform:rotate(1turn)}}@keyframes fa-spin{0%{transform:rotate(0)}to{transform:rotate(1turn)}}.fa-rotate-90{-ms-filter:"progid:DXImageTr
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 6e 74 3a 22 5c 66 32 34 64 22 7d 2e 66 61 2d 63 6c 6f 73 65 64 2d 63 61 70 74 69 6f 6e 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 61 22 7d 2e 66 61 2d 63 6c 6f 75 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 32 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 38 31 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 72 69 7a 7a 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 33 38 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 68 61 69 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 33 39 22 Data Ascii: nt:"\f24d"}.fa-closed-captioning:before{content:"\f20a"}.fa-cloud:before{content:"\f0c2"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-download-alt:before{content:"\f381"}.fa-cloud-drizzle:before{content:"\f738"}.fa-cloud-hail:before{content:"\f739"
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 61 2d 67 6c 6f 62 65 2d 61 6d 65 72 69 63 61 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 64 22 7d 2e 66 61 2d 67 6c 6f 62 65 2d 61 73 69 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 65 22 7d 2e 66 61 2d 67 6c 6f 62 65 2d 65 75 72 6f 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 61 32 22 7d 2e 66 61 2d 67 6c 6f 62 65 2d 73 6e 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 61 33 22 7d 2e 66 61 2d 67 6c 6f 62 65 2d 73 74 61 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 66 36 22 7d 2e 66 61 2d 67 6f 66 6f 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 61 37 22 7d 2e 66 61 2d 67 6f 6c 66 2d 62 61 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: a-globe-americas:before{content:"\f57d"}.fa-globe-asia:before{content:"\f57e"}.fa-globe-europe:before{content:"\f7a2"}.fa-globe-snow:before{content:"\f7a3"}.fa-globe-stand:before{content:"\f5f6"}.fa-gofore:before{content:"\f3a7"}.fa-golf-ball:before{conte
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 70 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 64 22 7d 2e 66 61 2d 70 61 72 6b 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 34 30 22 7d 2e 66 61 2d 70 61 72 6b 69 6e 67 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 31 35 22 7d 2e 66 61 2d 70 61 72 6b 69 6e 67 2d 63 69 72 63 6c 65 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 31 36 22 7d 2e 66 61 2d 70 61 72 6b 69 6e 67 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 31 37 22 7d 2e 66 61 2d 70 61 73 73 70 6f 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 61 62 22 7d 2e 66 61 2d 70 61 73 74 61 66 61 72 69 61 6e 69 73 6d 3a 62 65 66 6f 72 65 7b 63 Data Ascii: ph:before{content:"\f1dd"}.fa-parking:before{content:"\f540"}.fa-parking-circle:before{content:"\f615"}.fa-parking-circle-slash:before{content:"\f616"}.fa-parking-slash:before{content:"\f617"}.fa-passport:before{content:"\f5ab"}.fa-pastafarianism:before{c
2024-10-04 07:30:34 UTC	13197	IN	Data Raw: 2e 66 61 2d 74 61 67 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 63 22 7d 2e 66 61 2d 74 61 6c 6c 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 39 63 22 7d 2e 66 61 2d 74 61 6e 61 6b 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 32 37 22 7d 2e 66 61 2d 74 61 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 64 62 22 7d 2e 66 61 2d 74 61 73 6b 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 65 22 7d 2e 66 61 2d 74 61 73 6b 73 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 32 38 22 7d 2e 66 61 2d 74 61 78 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 61 22 7d 2e 66 61 2d 74 65 61 6d 73 70 65 61 6b 3a 62 65 66 6f 72 65 7b 63 Data Ascii: .fa-tags:before{content:"\f02c"}.fa-tally:before{content:"\f69c"}.fa-tanakh:before{content:"\f827"}.fa-tape:before{content:"\f4db"}.fa-tasks:before{content:"\f0ae"}.fa-tasks-alt:before{content:"\f828"}.fa-taxi:before{content:"\f1ba"}.fa-teamspeak:before{c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49722	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:34 UTC	1374	OUT	GET /runtime.3847a57210e62cb7ac86.js HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:34 UTC	282	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 2232 content-type: text/javascript; charset=utf-8 etag: W/"2232-fa77c8816341af1aa93a73f40acecf7804cade1f" last-modified: Fri, 04 Oct 2024 07:30:34 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:34 GMT connection: close
2024-10-04 07:30:34 UTC	512	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 69 2c 61 3d 72 5b 30 5d 2c 66 3d 72 5b 31 5d 2c 63 3d 72 5b 32 5d 2c 70 3d 30 2c 73 3d 5b 5d 3b 70 3c 61 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 69 3d 61 5b 70 5d 2c 6f 5b 69 5d 26 26 73 2e 70 75 73 68 28 6f 5b 69 5d 5b 30 5d 29 2c 6f 5b 69 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 66 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 66 2c 6e 29 26 26 28 65 5b 6e 5d 3d 66 5b 6e 5d 29 3b 66 6f 72 28 6c 26 26 6c 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 69 66 74 28 29 28 29 3b 72 65 74 75 72 6e 20 75 2e 70 75 73 68 2e 61 70 70 6c 79 28 75 2c 63 7c 7c 5b 5d 29 2c 74 28 29 7d 66 75 Data Ascii: !function(e){function r(r){for(var n,i,a=r[0],f=r[1],c=r[2],p=0,s=[];p<a.length;p++)i=a[p],o[i]&&s.push(o[i][0]),o[i]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(l&&l(r);s.length;)s.shift()();return u.push.apply(u,c\|\|[]),t()}fu
2024-10-04 07:30:34 UTC	1720	IN	Data Raw: 65 5b 72 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 69 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 5b 5d 2c 74 3d 6f 5b 65 5d 3b 69 66 28 30 21 3d 3d 74 29 69 66 28 74 29 72 2e 70 75 73 68 28 74 5b 32 5d 29 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 74 3d 6f 5b 65 5d 3d 5b 72 2c 6e 5d 7d 29 3b 72 2e 70 75 73 68 28 74 5b 32 5d 3d 6e 29 3b 76 61 72 20 75 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 61 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 69 2e 6e 63 Data Ascii: e[r].call(t.exports,t,t.exports,i),t.l=!0,t.exports}i.e=function(e){var r=[],t=o[e];if(0!==t)if(t)r.push(t[2]);else{var n=new Promise(function(r,n){t=o[e]=[r,n]});r.push(t[2]=n);var u,a=document.createElement("script");a.charset="utf-8",a.timeout=120,i.nc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49721	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:34 UTC	1376	OUT	GET /polyfills.2daf523d1a5fc162c0c2.js HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:34 UTC	286	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 106404 content-type: text/javascript; charset=utf-8 etag: W/"106404-9f6b8b0e38cd21ed64ba6efc98db8dd2755d220c" last-modified: Fri, 04 Oct 2024 07:30:34 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:34 GMT connection: close
2024-10-04 07:30:34 UTC	14974	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 22 2b 61 75 4f 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 58 4b 46 55 22 29 2c 6f 3d 6e 28 22 6c 76 74 6d 22 29 3b 72 28 72 2e 53 2c 22 4d 61 74 68 22 2c 7b 63 62 72 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 3d 2b 74 29 2a 4d 61 74 68 2e 70 6f 77 28 4d 61 74 68 2e 61 62 73 28 74 29 2c 31 2f 33 29 7d 7d 29 7d 2c 22 2b 6c 76 46 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 56 54 65 72 22 29 28 22 6e 61 74 69 76 65 2d 66 75 6e 63 74 69 6f 6e 2d 74 6f 2d 73 74 72 69 6e 67 22 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"+auO":function(t,e,n){var r=n("XKFU"),o=n("lvtm");r(r.S,"Math",{cbrt:function(t){return o(t=+t)*Math.pow(Math.abs(t),1/3)}})},"+lvF":function(t,e,n){t.exports=n("VTer")("native-function-to-string",
2024-10-04 07:30:34 UTC	1095	IN	Data Raw: 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 75 73 74 20 62 65 20 61 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 50 72 6f 6d 69 73 65 2e 22 29 3b 74 68 69 73 5b 67 5d 3d 78 2c 74 68 69 73 5b 79 5d 3d 5b 5d 3b 74 72 79 7b 74 26 26 74 28 45 28 74 68 69 73 2c 53 29 2c 45 28 74 68 69 73 2c 77 29 29 7d 63 61 74 63 68 28 6e 29 7b 4d 28 74 68 69 73 2c 21 31 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 20 5a 6f 6e 65 41 77 61 72 65 50 72 6f 6d 69 73 65 28 29 20 7b 20 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 20 7d 22 7d 2c 65 2e 72 65 Data Ascii: on(){function e(t){if(!(this instanceof e))throw new Error("Must be an instanceof Promise.");this[g]=x,this[y]=[];try{t&&t(E(this,S),E(this,w))}catch(n){M(this,!1,n)}}return e.toString=function(){return"function ZoneAwarePromise() { [native code] }"},e.re
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6e 75 6c 6c 29 2c 6f 3d 6e 2e 63 75 72 72 65 6e 74 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 67 5d 3d 3d 78 3f 74 68 69 73 5b 79 5d 2e 70 75 73 68 28 6f 2c 72 2c 74 2c 65 29 3a 49 28 74 68 69 73 2c 6f 2c 72 2c 74 2c 65 29 2c 72 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 6e 75 6c 6c 2c 74 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 61 6c 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6e 75 6c 6c 29 3b 65 5b 6d 5d 3d 6d 3b 76 61 72 20 72 3d 6e 2e 63 75 72 72 65 6e 74 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 67 5d 3d 3d 78 3f 74 68 Data Ascii: s.constructor(null),o=n.current;return this[g]==x?this[y].push(o,r,t,e):I(this,o,r,t,e),r},e.prototype.catch=function(t){return this.then(null,t)},e.prototype.finally=function(t){var e=new this.constructor(null);e[m]=m;var r=n.current;return this[g]==x?th
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 61 6e 69 6d 61 74 69 6f 6e 73 74 61 72 74 22 2c 22 73 65 61 72 63 68 22 2c 22 74 72 61 6e 73 69 74 69 6f 6e 72 75 6e 22 2c 22 74 72 61 6e 73 69 74 69 6f 6e 73 74 61 72 74 22 2c 22 77 65 62 6b 69 74 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 22 2c 22 77 65 62 6b 69 74 61 6e 69 6d 61 74 69 6f 6e 69 74 65 72 61 74 69 6f 6e 22 2c 22 77 65 62 6b 69 74 61 6e 69 6d 61 74 69 6f 6e 73 74 61 72 74 22 2c 22 77 65 62 6b 69 74 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 5d 2c 5b 22 61 63 74 69 76 61 74 65 22 2c 22 61 66 74 65 72 75 70 64 61 74 65 22 2c 22 61 72 69 61 72 65 71 75 65 73 74 22 2c 22 62 65 66 6f 72 65 61 63 74 69 76 61 74 65 22 2c 22 62 65 66 6f 72 65 64 65 61 63 74 69 76 61 74 65 22 2c 22 62 65 66 6f 72 65 65 64 69 74 66 6f 63 75 73 22 2c 22 62 65 66 6f 72 65 75 Data Ascii: animationstart","search","transitionrun","transitionstart","webkitanimationend","webkitanimationiteration","webkitanimationstart","webkittransitionend"],["activate","afterupdate","ariarequest","beforeactivate","beforedeactivate","beforeeditfocus","beforeu
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 69 6e 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 28 74 68 69 73 29 2c 6e 3d 61 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 6e 2e 63 6f 6e 63 61 74 28 61 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 66 28 21 28 65 20 69 6e 20 75 29 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 72 5b 6f 5d 3d 22 61 5b 22 2b 6f 2b 22 5d 22 3b 75 5b 65 5d 3d 46 75 6e 63 74 69 6f 6e 28 22 46 2c 61 22 2c 22 72 65 74 75 72 6e 20 6e 65 77 20 46 28 22 2b 72 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 29 22 29 7d 72 65 74 75 72 6e Data Ascii: ind\|\|function(t){var e=r(this),n=a.call(arguments,1),c=function(){var r=n.concat(a.call(arguments));return this instanceof c?function(t,e,n){if(!(e in u)){for(var r=[],o=0;o<e;o++)r[o]="a["+o+"]";u[e]=Function("F,a","return new F("+r.join(",")+")")}return
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 72 20 72 3d 6e 28 22 58 4b 46 55 22 29 2c 6f 3d 6e 28 22 30 73 68 2b 22 29 3b 72 28 72 2e 50 2b 72 2e 46 2a 6e 28 22 55 55 65 57 22 29 28 22 69 6e 63 6c 75 64 65 73 22 29 2c 22 53 74 72 69 6e 67 22 2c 7b 69 6e 63 6c 75 64 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 21 7e 6f 28 74 68 69 73 2c 74 2c 22 69 6e 63 6c 75 64 65 73 22 29 2e 69 6e 64 65 78 4f 66 28 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 7d 29 7d 2c 4c 4b 38 46 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 58 4b 46 55 22 29 3b 72 28 72 2e 53 2c 22 41 72 72 61 79 22 2c 7b 69 73 41 72 72 61 79 3a 6e 28 22 45 57 6d 43 22 29 7d 29 7d 2c 4c 51 41 63 3a 66 75 6e 63 Data Ascii: r r=n("XKFU"),o=n("0sh+");r(r.P+r.F*n("UUeW")("includes"),"String",{includes:function(t){return!!~o(this,t,"includes").indexOf(t,arguments.length>1?arguments[1]:void 0)}})},LK8F:function(t,e,n){var r=n("XKFU");r(r.S,"Array",{isArray:n("EWmC")})},LQAc:func
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 2c 22 66 6f 6e 74 22 2c 22 63 6f 6c 6f 72 22 2c 65 29 7d 7d 29 7d 2c 62 48 74 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 58 4b 46 55 22 29 3b 72 28 72 2e 50 2c 22 41 72 72 61 79 22 2c 7b 66 69 6c 6c 3a 6e 28 22 4e 72 31 38 22 29 7d 29 2c 6e 28 22 6e 47 79 75 22 29 28 22 66 69 6c 6c 22 29 7d 2c 62 57 66 78 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 58 4b 46 55 22 29 2c 6f 3d 6e 28 22 43 6b 6b 54 22 29 28 31 29 3b 72 28 72 2e 50 2b 72 2e 46 2a 21 6e 28 22 4c 79 45 38 22 29 28 5b 5d 2e 6d 61 70 2c 21 30 29 2c 22 41 72 72 61 79 22 2c 7b 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 Data Ascii: tion(e){return t(this,"font","color",e)}})},bHtr:function(t,e,n){var r=n("XKFU");r(r.P,"Array",{fill:n("Nr18")}),n("nGyu")("fill")},bWfx:function(t,e,n){"use strict";var r=n("XKFU"),o=n("CkkT")(1);r(r.P+r.F*!n("LyE8")([].map,!0),"Array",{map:function(t){r
2024-10-04 07:30:34 UTC	8735	IN	Data Raw: 20 4d 61 74 68 2e 6c 6f 67 28 74 29 2f 4d 61 74 68 2e 4c 4e 32 7d 7d 29 7d 2c 71 4b 73 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 28 22 42 74 76 74 22 29 2c 6e 28 22 58 66 4f 33 22 29 2c 6e 28 22 72 47 71 6f 22 29 2c 6e 28 22 39 41 41 6e 22 29 2c 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 67 33 67 35 22 29 2e 4d 61 70 7d 2c 71 6e 63 42 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 58 4b 46 55 22 29 2c 6f 3d 6e 28 22 76 68 50 55 22 29 2c 69 3d 6e 28 22 65 65 56 71 22 29 2c 61 3d 6e 28 22 2f 65 38 38 22 29 2c 75 3d 22 5b 22 2b 61 2b 22 5d 22 2c 63 3d 52 65 67 45 78 70 28 22 5e 22 2b 75 2b 75 2b 22 2a 22 29 2c 73 3d 52 65 67 45 78 70 28 75 2b 75 2b 22 2a 24 22 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 Data Ascii: Math.log(t)/Math.LN2}})},qKs0:function(t,e,n){n("Btvt"),n("XfO3"),n("rGqo"),n("9AAn"),t.exports=n("g3g5").Map},qncB:function(t,e,n){var r=n("XKFU"),o=n("vhPU"),i=n("eeVq"),a=n("/e88"),u="["+a+"]",c=RegExp("^"+u+u+""),s=RegExp(u+u+"$"),f=function(t,e,n)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49723	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:34 UTC	1371	OUT	GET /main.3791483c41ff7549eac3.js HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:34 UTC	286	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 559431 content-type: text/javascript; charset=utf-8 etag: W/"559431-c7882ae94c0850c9fb0108002fe4c71001b51d08" last-modified: Fri, 04 Oct 2024 07:30:34 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:34 GMT connection: close
2024-10-04 07:30:34 UTC	14974	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 74 4a 34 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 26 26 21 65 2e 63 6c 6f 73 65 64 3b 6e 2b 2b 29 65 2e 6e 65 78 74 28 74 5b 6e 5d 29 3b 65 2e 63 6c 6f 73 65 64 7c 7c 65 2e 63 6f 6d 70 6c 65 74 65 28 29 7d 7d 7d 2c 22 2b 75 6d 4b 22 3a 66 75 6e 63 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+tJ4":function(t,e,n){"use strict";n.d(e,"a",function(){return r});var r=function(t){return function(e){for(var n=0,r=t.length;n<r&&!e.closed;n++)e.next(t[n]);e.closed\|\|e.complete()}}},"+umK":funct
2024-10-04 07:30:34 UTC	1095	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 47 28 74 2e 64 65 63 6f 72 61 74 6f 72 73 29 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 7a 69 70 54 79 70 65 73 41 6e 64 41 6e 6e 6f 74 61 74 69 6f 6e 73 28 69 2c 61 29 7d 76 61 72 20 73 3d 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 74 5b 66 5d 2c 75 3d 74 68 69 73 2e 5f 72 65 66 6c 65 63 74 26 26 74 68 69 73 2e 5f 72 65 66 6c 65 63 74 2e 67 65 74 4f 77 6e 4d 65 74 61 64 61 74 61 26 26 74 68 69 73 2e 5f 72 65 66 6c 65 63 74 2e 67 65 74 4f 77 6e 4d 65 74 61 64 61 74 61 28 22 64 65 73 69 67 6e 3a 70 61 72 61 6d 74 79 70 65 73 22 2c 74 29 3b 72 65 74 75 72 6e 20 75 7c 7c 73 3f 74 68 69 73 2e 5f 7a 69 70 54 79 70 65 73 41 6e 64 41 6e 6e 6f 74 61 74 69 6f 6e 73 28 75 2c 73 29 Data Ascii: nction(t){return t&&G(t.decorators)});return this._zipTypesAndAnnotations(i,a)}var s=t.hasOwnProperty(f)&&t[f],u=this._reflect&&this._reflect.getOwnMetadata&&this._reflect.getOwnMetadata("design:paramtypes",t);return u\|\|s?this._zipTypesAndAnnotations(u,s)
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 20 72 3d 74 2e 70 72 6f 70 44 65 63 6f 72 61 74 6f 72 73 2c 6f 3d 7b 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 5b 74 5d 3d 47 28 72 5b 74 5d 29 7d 29 2c 6f 7d 72 65 74 75 72 6e 20 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 68 29 3f 74 5b 68 5d 3a 6e 75 6c 6c 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 70 4d 65 74 61 64 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 50 28 74 29 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 65 3d 51 28 74 29 2c 6e 3d 7b 7d 3b 69 66 28 65 21 3d 3d 4f 62 6a 65 63 74 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 70 72 6f 70 4d 65 74 61 64 61 74 61 28 65 29 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 2e 66 6f 72 45 61 Data Ascii: r=t.propDecorators,o={};return Object.keys(r).forEach(function(t){o[t]=G(r[t])}),o}return t.hasOwnProperty(h)?t[h]:null},t.prototype.propMetadata=function(t){if(!P(t))return{};var e=Q(t),n={};if(e!==Object){var o=this.propMetadata(e);Object.keys(o).forEa
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 4b 65 79 49 64 28 74 2e 69 64 29 3b 72 65 74 75 72 6e 20 6e 21 3d 3d 69 65 3f 6e 3a 74 68 69 73 2e 5f 74 68 72 6f 77 4f 72 4e 75 6c 6c 28 74 2c 65 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 67 65 74 42 79 4b 65 79 44 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 76 61 72 20 6f 3b 66 6f 72 28 6f 3d 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 58 3f 74 68 69 73 2e 70 61 72 65 6e 74 3a 74 68 69 73 3b 6f 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 3b 29 7b 76 61 72 20 69 3d 6f 2c 61 3d 69 2e 5f 67 65 74 4f 62 6a 42 79 4b 65 79 49 64 28 65 2e 69 64 29 3b 69 66 28 61 21 3d 3d 69 65 29 72 65 74 75 72 6e 20 61 3b 6f 3d 69 2e 70 61 72 65 6e 74 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 6f 3f 6f 2e 67 65 74 28 65 2e 74 6f 6b 65 6e 2c 6e 29 3a 74 Data Ascii: KeyId(t.id);return n!==ie?n:this._throwOrNull(t,e)},t.prototype._getByKeyDefault=function(e,n,r){var o;for(o=r instanceof X?this.parent:this;o instanceof t;){var i=o,a=i._getObjByKeyId(e.id);if(a!==ie)return a;o=i.parent}return null!==o?o.get(e.token,n):t
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 67 75 6c 61 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 6f 6e 45 72 72 6f 72 2e 73 75 62 73 63 72 69 62 65 28 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 74 29 7d 7d 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 74 72 79 7b 76 61 72 20 72 3d 6e 28 29 3b 72 65 74 75 72 6e 20 62 65 28 72 29 3f 72 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 72 6f 77 20 65 2e 72 75 6e 4f 75 74 73 69 64 65 41 6e 67 75 6c 61 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 6e 29 7d 29 2c 6e 7d 29 3a 72 7d 63 61 74 63 68 28 6f 29 7b 74 68 72 6f 77 20 65 2e 72 75 6e 4f 75 74 73 69 64 65 41 6e 67 75 6c 61 72 28 66 75 6e 63 Data Ascii: gular(function(){return r.onError.subscribe({next:function(t){a.handleError(t)}})}),function(t,e,n){try{var r=n();return be(r)?r.catch(function(n){throw e.runOutsideAngular(function(){return t.handleError(n)}),n}):r}catch(o){throw e.runOutsideAngular(func
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 20 65 72 29 2c 74 68 69 73 2e 5f 6c 69 6e 6b 65 64 52 65 63 6f 72 64 73 2e 70 75 74 28 74 29 2c 74 2e 63 75 72 72 65 6e 74 49 6e 64 65 78 3d 6e 2c 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 64 64 54 6f 52 65 6d 6f 76 61 6c 73 28 74 68 69 73 2e 5f 75 6e 6c 69 6e 6b 28 74 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 75 6e 6c 69 6e 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 5f 6c 69 6e 6b 65 64 52 65 63 6f 72 64 73 26 26 74 68 69 73 2e 5f 6c 69 6e 6b 65 64 52 65 63 6f 72 64 73 2e 72 65 6d 6f 76 65 28 74 29 3b 76 61 72 20 65 3d 74 2e 5f 70 72 65 76 2c 6e 3d 74 2e 5f 6e 65 78 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d Data Ascii: er),this._linkedRecords.put(t),t.currentIndex=n,t},t.prototype._remove=function(t){return this._addToRemovals(this._unlink(t))},t.prototype._unlink=function(t){null!==this._linkedRecords&&this._linkedRecords.remove(t);var e=t._prev,n=t._next;return null=
2024-10-04 07:30:34 UTC	1019	IN	Data Raw: 77 3a 76 6f 69 64 20 30 2c 63 68 65 63 6b 4e 6f 43 68 61 6e 67 65 73 56 69 65 77 3a 76 6f 69 64 20 30 2c 64 65 73 74 72 6f 79 56 69 65 77 3a 76 6f 69 64 20 30 2c 72 65 73 6f 6c 76 65 44 65 70 3a 76 6f 69 64 20 30 2c 63 72 65 61 74 65 44 65 62 75 67 43 6f 6e 74 65 78 74 3a 76 6f 69 64 20 30 2c 68 61 6e 64 6c 65 45 76 65 6e 74 3a 76 6f 69 64 20 30 2c 75 70 64 61 74 65 44 69 72 65 63 74 69 76 65 73 3a 76 6f 69 64 20 30 2c 75 70 64 61 74 65 52 65 6e 64 65 72 65 72 3a 76 6f 69 64 20 30 2c 64 69 72 74 79 50 61 72 65 6e 74 51 75 65 72 69 65 73 3a 76 6f 69 64 20 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 6f 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 6f 3d 22 45 78 70 72 65 73 73 69 6f 6e 43 68 61 6e 67 65 64 41 66 74 65 72 49 74 48 61 73 42 65 65 6e 43 68 65 63 6b 65 Data Ascii: w:void 0,checkNoChangesView:void 0,destroyView:void 0,resolveDep:void 0,createDebugContext:void 0,handleEvent:void 0,updateDirectives:void 0,updateRenderer:void 0,dirtyParentQueries:void 0};function ro(t,e,n,r){var o="ExpressionChangedAfterItHasBeenChecke
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 63 74 69 6f 6e 20 66 6f 28 74 29 7b 72 65 74 75 72 6e 7b 69 64 3a 6c 6f 2c 73 74 79 6c 65 73 3a 74 2e 73 74 79 6c 65 73 2c 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 3a 74 2e 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 2c 64 61 74 61 3a 74 2e 64 61 74 61 7d 7d 76 61 72 20 68 6f 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 79 6f 28 74 29 7b 69 66 28 74 26 26 74 2e 69 64 3d 3d 3d 6c 6f 29 7b 76 61 72 20 65 3d 6e 75 6c 6c 21 3d 74 2e 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 26 26 74 2e 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 21 3d 3d 6b 74 2e 4e 6f 6e 65 7c 7c 74 2e 73 74 79 6c 65 73 2e 6c 65 6e 67 74 68 7c 7c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 2e 64 61 74 61 29 2e 6c 65 6e 67 74 68 3b 74 2e 69 64 3d 65 3f 22 63 22 2b 68 6f 2b 2b 3a 70 6f 7d 72 65 74 75 72 6e 20 74 26 26 74 Data Ascii: ction fo(t){return{id:lo,styles:t.styles,encapsulation:t.encapsulation,data:t.data}}var ho=0;function yo(t){if(t&&t.id===lo){var e=null!=t.encapsulation&&t.encapsulation!==kt.None\|\|t.styles.length\|\|Object.keys(t.data).length;t.id=e?"c"+ho++:po}return t&&t
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 76 69 28 6e 6f 2e 63 72 65 61 74 65 45 6d 62 65 64 64 65 64 56 69 65 77 28 74 68 69 73 2e 5f 70 61 72 65 6e 74 56 69 65 77 2c 74 68 69 73 2e 5f 64 65 66 2c 74 68 69 73 2e 5f 64 65 66 2e 65 6c 65 6d 65 6e 74 2e 74 65 6d 70 6c 61 74 65 2c 74 29 29 7d 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6c 65 6d 65 6e 74 52 65 66 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 44 6e 28 4a 72 28 74 68 69 73 2e 5f 70 61 72 65 6e 74 56 69 65 77 2c 74 68 69 73 2e 5f 64 65 66 2e 6e 6f 64 65 49 6e 64 65 78 29 2e 72 65 6e 64 65 72 45 6c 65 6d 65 6e 74 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c Data Ascii: function(t){return new vi(no.createEmbeddedView(this._parentView,this._def,this._def.element.template,t))},Object.defineProperty(e.prototype,"elementRef",{get:function(){return new Dn(Jr(this._parentView,this._def.nodeIndex).renderElement)},enumerable:!0,
2024-10-04 07:30:34 UTC	16320	IN	Data Raw: 7a 69 2e 43 68 65 63 6b 4e 6f 43 68 61 6e 67 65 73 29 2c 6e 6f 2e 75 70 64 61 74 65 52 65 6e 64 65 72 65 72 28 74 2c 31 29 2c 6a 61 28 74 2c 7a 69 2e 43 68 65 63 6b 4e 6f 43 68 61 6e 67 65 73 29 2c 74 2e 73 74 61 74 65 26 3d 2d 39 37 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 28 74 29 7b 31 26 74 2e 73 74 61 74 65 3f 28 74 2e 73 74 61 74 65 26 3d 2d 32 2c 74 2e 73 74 61 74 65 7c 3d 32 29 3a 74 2e 73 74 61 74 65 26 3d 2d 33 2c 5a 72 28 74 2c 30 2c 32 35 36 29 2c 5f 61 28 74 29 2c 6e 6f 2e 75 70 64 61 74 65 44 69 72 65 63 74 69 76 65 73 28 74 2c 30 29 2c 45 61 28 74 2c 7a 69 2e 43 68 65 63 6b 41 6e 64 55 70 64 61 74 65 29 2c 41 61 28 74 2c 36 37 31 30 38 38 36 34 2c 35 33 36 38 37 30 39 31 32 2c 30 29 3b 76 61 72 20 65 3d 5a 72 28 74 2c 32 35 36 2c 35 31 32 29 3b Data Ascii: zi.CheckNoChanges),no.updateRenderer(t,1),ja(t,zi.CheckNoChanges),t.state&=-97}function ma(t){1&t.state?(t.state&=-2,t.state\|=2):t.state&=-3,Zr(t,0,256),_a(t),no.updateDirectives(t,0),Ea(t,zi.CheckAndUpdate),Aa(t,67108864,536870912,0);var e=Zr(t,256,512);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49725	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:35 UTC	382	OUT	GET /runtime.3847a57210e62cb7ac86.js HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:35 UTC	282	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 2232 content-type: text/javascript; charset=utf-8 etag: W/"2232-fa77c8816341af1aa93a73f40acecf7804cade1f" last-modified: Fri, 04 Oct 2024 07:30:35 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:35 GMT connection: close
2024-10-04 07:30:35 UTC	2232	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 69 2c 61 3d 72 5b 30 5d 2c 66 3d 72 5b 31 5d 2c 63 3d 72 5b 32 5d 2c 70 3d 30 2c 73 3d 5b 5d 3b 70 3c 61 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 69 3d 61 5b 70 5d 2c 6f 5b 69 5d 26 26 73 2e 70 75 73 68 28 6f 5b 69 5d 5b 30 5d 29 2c 6f 5b 69 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 66 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 66 2c 6e 29 26 26 28 65 5b 6e 5d 3d 66 5b 6e 5d 29 3b 66 6f 72 28 6c 26 26 6c 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 69 66 74 28 29 28 29 3b 72 65 74 75 72 6e 20 75 2e 70 75 73 68 2e 61 70 70 6c 79 28 75 2c 63 7c 7c 5b 5d 29 2c 74 28 29 7d 66 75 Data Ascii: !function(e){function r(r){for(var n,i,a=r[0],f=r[1],c=r[2],p=0,s=[];p<a.length;p++)i=a[p],o[i]&&s.push(o[i][0]),o[i]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(l&&l(r);s.length;)s.shift()();return u.push.apply(u,c\|\|[]),t()}fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49727	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:35 UTC	384	OUT	GET /polyfills.2daf523d1a5fc162c0c2.js HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:35 UTC	286	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 106404 content-type: text/javascript; charset=utf-8 etag: W/"106404-9f6b8b0e38cd21ed64ba6efc98db8dd2755d220c" last-modified: Fri, 04 Oct 2024 07:30:35 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:35 GMT connection: close
2024-10-04 07:30:35 UTC	14974	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 22 2b 61 75 4f 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 58 4b 46 55 22 29 2c 6f 3d 6e 28 22 6c 76 74 6d 22 29 3b 72 28 72 2e 53 2c 22 4d 61 74 68 22 2c 7b 63 62 72 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 3d 2b 74 29 2a 4d 61 74 68 2e 70 6f 77 28 4d 61 74 68 2e 61 62 73 28 74 29 2c 31 2f 33 29 7d 7d 29 7d 2c 22 2b 6c 76 46 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 56 54 65 72 22 29 28 22 6e 61 74 69 76 65 2d 66 75 6e 63 74 69 6f 6e 2d 74 6f 2d 73 74 72 69 6e 67 22 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"+auO":function(t,e,n){var r=n("XKFU"),o=n("lvtm");r(r.S,"Math",{cbrt:function(t){return o(t=+t)*Math.pow(Math.abs(t),1/3)}})},"+lvF":function(t,e,n){t.exports=n("VTer")("native-function-to-string",
2024-10-04 07:30:35 UTC	1095	IN	Data Raw: 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 75 73 74 20 62 65 20 61 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 50 72 6f 6d 69 73 65 2e 22 29 3b 74 68 69 73 5b 67 5d 3d 78 2c 74 68 69 73 5b 79 5d 3d 5b 5d 3b 74 72 79 7b 74 26 26 74 28 45 28 74 68 69 73 2c 53 29 2c 45 28 74 68 69 73 2c 77 29 29 7d 63 61 74 63 68 28 6e 29 7b 4d 28 74 68 69 73 2c 21 31 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 20 5a 6f 6e 65 41 77 61 72 65 50 72 6f 6d 69 73 65 28 29 20 7b 20 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 20 7d 22 7d 2c 65 2e 72 65 Data Ascii: on(){function e(t){if(!(this instanceof e))throw new Error("Must be an instanceof Promise.");this[g]=x,this[y]=[];try{t&&t(E(this,S),E(this,w))}catch(n){M(this,!1,n)}}return e.toString=function(){return"function ZoneAwarePromise() { [native code] }"},e.re
2024-10-04 07:30:35 UTC	16320	IN	Data Raw: 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6e 75 6c 6c 29 2c 6f 3d 6e 2e 63 75 72 72 65 6e 74 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 67 5d 3d 3d 78 3f 74 68 69 73 5b 79 5d 2e 70 75 73 68 28 6f 2c 72 2c 74 2c 65 29 3a 49 28 74 68 69 73 2c 6f 2c 72 2c 74 2c 65 29 2c 72 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 6e 75 6c 6c 2c 74 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 61 6c 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6e 75 6c 6c 29 3b 65 5b 6d 5d 3d 6d 3b 76 61 72 20 72 3d 6e 2e 63 75 72 72 65 6e 74 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 67 5d 3d 3d 78 3f 74 68 Data Ascii: s.constructor(null),o=n.current;return this[g]==x?this[y].push(o,r,t,e):I(this,o,r,t,e),r},e.prototype.catch=function(t){return this.then(null,t)},e.prototype.finally=function(t){var e=new this.constructor(null);e[m]=m;var r=n.current;return this[g]==x?th
2024-10-04 07:30:35 UTC	16320	IN	Data Raw: 61 6e 69 6d 61 74 69 6f 6e 73 74 61 72 74 22 2c 22 73 65 61 72 63 68 22 2c 22 74 72 61 6e 73 69 74 69 6f 6e 72 75 6e 22 2c 22 74 72 61 6e 73 69 74 69 6f 6e 73 74 61 72 74 22 2c 22 77 65 62 6b 69 74 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 22 2c 22 77 65 62 6b 69 74 61 6e 69 6d 61 74 69 6f 6e 69 74 65 72 61 74 69 6f 6e 22 2c 22 77 65 62 6b 69 74 61 6e 69 6d 61 74 69 6f 6e 73 74 61 72 74 22 2c 22 77 65 62 6b 69 74 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 5d 2c 5b 22 61 63 74 69 76 61 74 65 22 2c 22 61 66 74 65 72 75 70 64 61 74 65 22 2c 22 61 72 69 61 72 65 71 75 65 73 74 22 2c 22 62 65 66 6f 72 65 61 63 74 69 76 61 74 65 22 2c 22 62 65 66 6f 72 65 64 65 61 63 74 69 76 61 74 65 22 2c 22 62 65 66 6f 72 65 65 64 69 74 66 6f 63 75 73 22 2c 22 62 65 66 6f 72 65 75 Data Ascii: animationstart","search","transitionrun","transitionstart","webkitanimationend","webkitanimationiteration","webkitanimationstart","webkittransitionend"],["activate","afterupdate","ariarequest","beforeactivate","beforedeactivate","beforeeditfocus","beforeu
2024-10-04 07:30:35 UTC	16320	IN	Data Raw: 69 6e 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 28 74 68 69 73 29 2c 6e 3d 61 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 6e 2e 63 6f 6e 63 61 74 28 61 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 66 28 21 28 65 20 69 6e 20 75 29 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 72 5b 6f 5d 3d 22 61 5b 22 2b 6f 2b 22 5d 22 3b 75 5b 65 5d 3d 46 75 6e 63 74 69 6f 6e 28 22 46 2c 61 22 2c 22 72 65 74 75 72 6e 20 6e 65 77 20 46 28 22 2b 72 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 29 22 29 7d 72 65 74 75 72 6e Data Ascii: ind\|\|function(t){var e=r(this),n=a.call(arguments,1),c=function(){var r=n.concat(a.call(arguments));return this instanceof c?function(t,e,n){if(!(e in u)){for(var r=[],o=0;o<e;o++)r[o]="a["+o+"]";u[e]=Function("F,a","return new F("+r.join(",")+")")}return
2024-10-04 07:30:35 UTC	16320	IN	Data Raw: 72 20 72 3d 6e 28 22 58 4b 46 55 22 29 2c 6f 3d 6e 28 22 30 73 68 2b 22 29 3b 72 28 72 2e 50 2b 72 2e 46 2a 6e 28 22 55 55 65 57 22 29 28 22 69 6e 63 6c 75 64 65 73 22 29 2c 22 53 74 72 69 6e 67 22 2c 7b 69 6e 63 6c 75 64 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 21 7e 6f 28 74 68 69 73 2c 74 2c 22 69 6e 63 6c 75 64 65 73 22 29 2e 69 6e 64 65 78 4f 66 28 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 7d 29 7d 2c 4c 4b 38 46 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 58 4b 46 55 22 29 3b 72 28 72 2e 53 2c 22 41 72 72 61 79 22 2c 7b 69 73 41 72 72 61 79 3a 6e 28 22 45 57 6d 43 22 29 7d 29 7d 2c 4c 51 41 63 3a 66 75 6e 63 Data Ascii: r r=n("XKFU"),o=n("0sh+");r(r.P+r.F*n("UUeW")("includes"),"String",{includes:function(t){return!!~o(this,t,"includes").indexOf(t,arguments.length>1?arguments[1]:void 0)}})},LK8F:function(t,e,n){var r=n("XKFU");r(r.S,"Array",{isArray:n("EWmC")})},LQAc:func
2024-10-04 07:30:35 UTC	16320	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 2c 22 66 6f 6e 74 22 2c 22 63 6f 6c 6f 72 22 2c 65 29 7d 7d 29 7d 2c 62 48 74 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 58 4b 46 55 22 29 3b 72 28 72 2e 50 2c 22 41 72 72 61 79 22 2c 7b 66 69 6c 6c 3a 6e 28 22 4e 72 31 38 22 29 7d 29 2c 6e 28 22 6e 47 79 75 22 29 28 22 66 69 6c 6c 22 29 7d 2c 62 57 66 78 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 58 4b 46 55 22 29 2c 6f 3d 6e 28 22 43 6b 6b 54 22 29 28 31 29 3b 72 28 72 2e 50 2b 72 2e 46 2a 21 6e 28 22 4c 79 45 38 22 29 28 5b 5d 2e 6d 61 70 2c 21 30 29 2c 22 41 72 72 61 79 22 2c 7b 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 Data Ascii: tion(e){return t(this,"font","color",e)}})},bHtr:function(t,e,n){var r=n("XKFU");r(r.P,"Array",{fill:n("Nr18")}),n("nGyu")("fill")},bWfx:function(t,e,n){"use strict";var r=n("XKFU"),o=n("CkkT")(1);r(r.P+r.F*!n("LyE8")([].map,!0),"Array",{map:function(t){r
2024-10-04 07:30:35 UTC	8735	IN	Data Raw: 20 4d 61 74 68 2e 6c 6f 67 28 74 29 2f 4d 61 74 68 2e 4c 4e 32 7d 7d 29 7d 2c 71 4b 73 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 28 22 42 74 76 74 22 29 2c 6e 28 22 58 66 4f 33 22 29 2c 6e 28 22 72 47 71 6f 22 29 2c 6e 28 22 39 41 41 6e 22 29 2c 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 67 33 67 35 22 29 2e 4d 61 70 7d 2c 71 6e 63 42 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 58 4b 46 55 22 29 2c 6f 3d 6e 28 22 76 68 50 55 22 29 2c 69 3d 6e 28 22 65 65 56 71 22 29 2c 61 3d 6e 28 22 2f 65 38 38 22 29 2c 75 3d 22 5b 22 2b 61 2b 22 5d 22 2c 63 3d 52 65 67 45 78 70 28 22 5e 22 2b 75 2b 75 2b 22 2a 22 29 2c 73 3d 52 65 67 45 78 70 28 75 2b 75 2b 22 2a 24 22 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 Data Ascii: Math.log(t)/Math.LN2}})},qKs0:function(t,e,n){n("Btvt"),n("XfO3"),n("rGqo"),n("9AAn"),t.exports=n("g3g5").Map},qncB:function(t,e,n){var r=n("XKFU"),o=n("vhPU"),i=n("eeVq"),a=n("/e88"),u="["+a+"]",c=RegExp("^"+u+u+""),s=RegExp(u+u+"$"),f=function(t,e,n)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49728	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:35 UTC	379	OUT	GET /main.3791483c41ff7549eac3.js HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:35 UTC	286	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 559431 content-type: text/javascript; charset=utf-8 etag: W/"559431-c7882ae94c0850c9fb0108002fe4c71001b51d08" last-modified: Fri, 04 Oct 2024 07:30:35 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:35 GMT connection: close
2024-10-04 07:30:35 UTC	14974	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 74 4a 34 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 26 26 21 65 2e 63 6c 6f 73 65 64 3b 6e 2b 2b 29 65 2e 6e 65 78 74 28 74 5b 6e 5d 29 3b 65 2e 63 6c 6f 73 65 64 7c 7c 65 2e 63 6f 6d 70 6c 65 74 65 28 29 7d 7d 7d 2c 22 2b 75 6d 4b 22 3a 66 75 6e 63 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+tJ4":function(t,e,n){"use strict";n.d(e,"a",function(){return r});var r=function(t){return function(e){for(var n=0,r=t.length;n<r&&!e.closed;n++)e.next(t[n]);e.closed\|\|e.complete()}}},"+umK":funct
2024-10-04 07:30:35 UTC	1095	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 47 28 74 2e 64 65 63 6f 72 61 74 6f 72 73 29 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 7a 69 70 54 79 70 65 73 41 6e 64 41 6e 6e 6f 74 61 74 69 6f 6e 73 28 69 2c 61 29 7d 76 61 72 20 73 3d 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 74 5b 66 5d 2c 75 3d 74 68 69 73 2e 5f 72 65 66 6c 65 63 74 26 26 74 68 69 73 2e 5f 72 65 66 6c 65 63 74 2e 67 65 74 4f 77 6e 4d 65 74 61 64 61 74 61 26 26 74 68 69 73 2e 5f 72 65 66 6c 65 63 74 2e 67 65 74 4f 77 6e 4d 65 74 61 64 61 74 61 28 22 64 65 73 69 67 6e 3a 70 61 72 61 6d 74 79 70 65 73 22 2c 74 29 3b 72 65 74 75 72 6e 20 75 7c 7c 73 3f 74 68 69 73 2e 5f 7a 69 70 54 79 70 65 73 41 6e 64 41 6e 6e 6f 74 61 74 69 6f 6e 73 28 75 2c 73 29 Data Ascii: nction(t){return t&&G(t.decorators)});return this._zipTypesAndAnnotations(i,a)}var s=t.hasOwnProperty(f)&&t[f],u=this._reflect&&this._reflect.getOwnMetadata&&this._reflect.getOwnMetadata("design:paramtypes",t);return u\|\|s?this._zipTypesAndAnnotations(u,s)
2024-10-04 07:30:35 UTC	16320	IN	Data Raw: 20 72 3d 74 2e 70 72 6f 70 44 65 63 6f 72 61 74 6f 72 73 2c 6f 3d 7b 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 5b 74 5d 3d 47 28 72 5b 74 5d 29 7d 29 2c 6f 7d 72 65 74 75 72 6e 20 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 68 29 3f 74 5b 68 5d 3a 6e 75 6c 6c 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 70 4d 65 74 61 64 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 50 28 74 29 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 65 3d 51 28 74 29 2c 6e 3d 7b 7d 3b 69 66 28 65 21 3d 3d 4f 62 6a 65 63 74 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 70 72 6f 70 4d 65 74 61 64 61 74 61 28 65 29 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 2e 66 6f 72 45 61 Data Ascii: r=t.propDecorators,o={};return Object.keys(r).forEach(function(t){o[t]=G(r[t])}),o}return t.hasOwnProperty(h)?t[h]:null},t.prototype.propMetadata=function(t){if(!P(t))return{};var e=Q(t),n={};if(e!==Object){var o=this.propMetadata(e);Object.keys(o).forEa
2024-10-04 07:30:36 UTC	16320	IN	Data Raw: 4b 65 79 49 64 28 74 2e 69 64 29 3b 72 65 74 75 72 6e 20 6e 21 3d 3d 69 65 3f 6e 3a 74 68 69 73 2e 5f 74 68 72 6f 77 4f 72 4e 75 6c 6c 28 74 2c 65 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 67 65 74 42 79 4b 65 79 44 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 76 61 72 20 6f 3b 66 6f 72 28 6f 3d 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 58 3f 74 68 69 73 2e 70 61 72 65 6e 74 3a 74 68 69 73 3b 6f 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 3b 29 7b 76 61 72 20 69 3d 6f 2c 61 3d 69 2e 5f 67 65 74 4f 62 6a 42 79 4b 65 79 49 64 28 65 2e 69 64 29 3b 69 66 28 61 21 3d 3d 69 65 29 72 65 74 75 72 6e 20 61 3b 6f 3d 69 2e 70 61 72 65 6e 74 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 6f 3f 6f 2e 67 65 74 28 65 2e 74 6f 6b 65 6e 2c 6e 29 3a 74 Data Ascii: KeyId(t.id);return n!==ie?n:this._throwOrNull(t,e)},t.prototype._getByKeyDefault=function(e,n,r){var o;for(o=r instanceof X?this.parent:this;o instanceof t;){var i=o,a=i._getObjByKeyId(e.id);if(a!==ie)return a;o=i.parent}return null!==o?o.get(e.token,n):t
2024-10-04 07:30:36 UTC	16320	IN	Data Raw: 67 75 6c 61 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 6f 6e 45 72 72 6f 72 2e 73 75 62 73 63 72 69 62 65 28 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 74 29 7d 7d 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 74 72 79 7b 76 61 72 20 72 3d 6e 28 29 3b 72 65 74 75 72 6e 20 62 65 28 72 29 3f 72 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 72 6f 77 20 65 2e 72 75 6e 4f 75 74 73 69 64 65 41 6e 67 75 6c 61 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 6e 29 7d 29 2c 6e 7d 29 3a 72 7d 63 61 74 63 68 28 6f 29 7b 74 68 72 6f 77 20 65 2e 72 75 6e 4f 75 74 73 69 64 65 41 6e 67 75 6c 61 72 28 66 75 6e 63 Data Ascii: gular(function(){return r.onError.subscribe({next:function(t){a.handleError(t)}})}),function(t,e,n){try{var r=n();return be(r)?r.catch(function(n){throw e.runOutsideAngular(function(){return t.handleError(n)}),n}):r}catch(o){throw e.runOutsideAngular(func
2024-10-04 07:30:36 UTC	16320	IN	Data Raw: 20 65 72 29 2c 74 68 69 73 2e 5f 6c 69 6e 6b 65 64 52 65 63 6f 72 64 73 2e 70 75 74 28 74 29 2c 74 2e 63 75 72 72 65 6e 74 49 6e 64 65 78 3d 6e 2c 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 64 64 54 6f 52 65 6d 6f 76 61 6c 73 28 74 68 69 73 2e 5f 75 6e 6c 69 6e 6b 28 74 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 75 6e 6c 69 6e 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 5f 6c 69 6e 6b 65 64 52 65 63 6f 72 64 73 26 26 74 68 69 73 2e 5f 6c 69 6e 6b 65 64 52 65 63 6f 72 64 73 2e 72 65 6d 6f 76 65 28 74 29 3b 76 61 72 20 65 3d 74 2e 5f 70 72 65 76 2c 6e 3d 74 2e 5f 6e 65 78 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d Data Ascii: er),this._linkedRecords.put(t),t.currentIndex=n,t},t.prototype._remove=function(t){return this._addToRemovals(this._unlink(t))},t.prototype._unlink=function(t){null!==this._linkedRecords&&this._linkedRecords.remove(t);var e=t._prev,n=t._next;return null=
2024-10-04 07:30:36 UTC	16320	IN	Data Raw: 77 3a 76 6f 69 64 20 30 2c 63 68 65 63 6b 4e 6f 43 68 61 6e 67 65 73 56 69 65 77 3a 76 6f 69 64 20 30 2c 64 65 73 74 72 6f 79 56 69 65 77 3a 76 6f 69 64 20 30 2c 72 65 73 6f 6c 76 65 44 65 70 3a 76 6f 69 64 20 30 2c 63 72 65 61 74 65 44 65 62 75 67 43 6f 6e 74 65 78 74 3a 76 6f 69 64 20 30 2c 68 61 6e 64 6c 65 45 76 65 6e 74 3a 76 6f 69 64 20 30 2c 75 70 64 61 74 65 44 69 72 65 63 74 69 76 65 73 3a 76 6f 69 64 20 30 2c 75 70 64 61 74 65 52 65 6e 64 65 72 65 72 3a 76 6f 69 64 20 30 2c 64 69 72 74 79 50 61 72 65 6e 74 51 75 65 72 69 65 73 3a 76 6f 69 64 20 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 6f 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 6f 3d 22 45 78 70 72 65 73 73 69 6f 6e 43 68 61 6e 67 65 64 41 66 74 65 72 49 74 48 61 73 42 65 65 6e 43 68 65 63 6b 65 Data Ascii: w:void 0,checkNoChangesView:void 0,destroyView:void 0,resolveDep:void 0,createDebugContext:void 0,handleEvent:void 0,updateDirectives:void 0,updateRenderer:void 0,dirtyParentQueries:void 0};function ro(t,e,n,r){var o="ExpressionChangedAfterItHasBeenChecke
2024-10-04 07:30:36 UTC	16320	IN	Data Raw: 6f 2e 63 68 65 63 6b 4e 6f 43 68 61 6e 67 65 73 56 69 65 77 28 74 68 69 73 2e 5f 76 69 65 77 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 74 74 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 76 69 65 77 2e 73 74 61 74 65 7c 3d 34 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 44 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 76 69 65 77 2e 64 69 73 70 6f 73 61 62 6c 65 73 7c 7c 28 74 68 69 73 2e 5f 76 69 65 77 2e 64 69 73 70 6f 73 61 62 6c 65 73 3d 5b 5d 29 2c 74 68 69 73 2e 5f 76 69 65 77 2e 64 69 73 70 6f 73 61 62 6c 65 73 2e 70 75 73 68 28 74 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 61 70 70 52 65 66 3f 74 68 69 73 2e 5f Data Ascii: o.checkNoChangesView(this._view)},t.prototype.reattach=function(){this._view.state\|=4},t.prototype.onDestroy=function(t){this._view.disposables\|\|(this._view.disposables=[]),this._view.disposables.push(t)},t.prototype.destroy=function(){this._appRef?this._
2024-10-04 07:30:36 UTC	16320	IN	Data Raw: 74 29 7b 76 61 72 20 65 3b 69 66 28 45 6f 28 74 29 29 7b 76 61 72 20 6e 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 44 65 66 3b 65 3d 4a 72 28 74 2e 70 61 72 65 6e 74 2c 6e 2e 70 61 72 65 6e 74 2e 6e 6f 64 65 49 6e 64 65 78 29 2e 72 65 6e 64 65 72 45 6c 65 6d 65 6e 74 7d 66 6f 72 28 76 61 72 20 72 3d 74 2e 64 65 66 2c 6f 3d 74 2e 6e 6f 64 65 73 2c 69 3d 30 3b 69 3c 72 2e 6e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 61 3d 72 2e 6e 6f 64 65 73 5b 69 5d 3b 6e 6f 2e 73 65 74 43 75 72 72 65 6e 74 4e 6f 64 65 28 74 2c 69 29 3b 76 61 72 20 73 3d 76 6f 69 64 20 30 3b 73 77 69 74 63 68 28 32 30 31 33 34 37 30 36 37 26 61 2e 66 6c 61 67 73 29 7b 63 61 73 65 20 31 3a 76 61 72 20 75 3d 71 6f 28 74 2c 65 2c 61 29 2c 63 3d 76 6f 69 64 20 30 3b 69 66 28 Data Ascii: t){var e;if(Eo(t)){var n=t.parentNodeDef;e=Jr(t.parent,n.parent.nodeIndex).renderElement}for(var r=t.def,o=t.nodes,i=0;i<r.nodes.length;i++){var a=r.nodes[i];no.setCurrentNode(t,i);var s=void 0;switch(201347067&a.flags){case 1:var u=qo(t,e,a),c=void 0;if(
2024-10-04 07:30:36 UTC	16320	IN	Data Raw: 66 2e 6e 6f 64 65 49 6e 64 65 78 2b 74 68 69 73 2e 65 6c 44 65 66 2e 63 68 69 6c 64 43 6f 75 6e 74 3b 65 2b 2b 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 65 6c 56 69 65 77 2e 64 65 66 2e 6e 6f 64 65 73 5b 65 5d 3b 32 30 32 32 34 26 6e 2e 66 6c 61 67 73 26 26 70 73 28 74 68 69 73 2e 65 6c 56 69 65 77 2c 6e 2c 74 29 2c 65 2b 3d 6e 2e 63 68 69 6c 64 43 6f 75 6e 74 7d 7d 72 65 74 75 72 6e 20 74 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 6f 6d 70 6f 6e 65 6e 74 52 65 6e 64 65 72 45 6c 65 6d 65 6e 74 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: f.nodeIndex+this.elDef.childCount;e++){var n=this.elView.def.nodes[e];20224&n.flags&&ps(this.elView,n,t),e+=n.childCount}}return t},enumerable:!0,configurable:!0}),Object.defineProperty(t.prototype,"componentRenderElement",{get:function(){var t=function(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49729	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:35 UTC	1380	OUT	GET /app/config/config.json HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:35 UTC	264	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 50 content-type: application/json etag: W/"50-b381f3445730fefd66485a85e761cf6323d59ad9" last-modified: Fri, 04 Oct 2024 07:30:35 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:35 GMT connection: close
2024-10-04 07:30:35 UTC	50	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 22 73 65 72 76 69 63 65 55 72 6c 22 3a 20 22 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 34 32 32 30 22 0a 7d 0a Data Ascii: { "serviceUrl": "http://localhost:4220"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49730	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:35 UTC	1368	OUT	GET /4.efcb4f36899adf4857d1.js HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:36 UTC	284	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 32915 content-type: text/javascript; charset=utf-8 etag: W/"32915-08da04e6068b3fef9b70b7e689b05f1a1fdce411" last-modified: Fri, 04 Oct 2024 07:30:35 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:35 GMT connection: close
2024-10-04 07:30:36 UTC	14976	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 4a 36 36 68 3a 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 76 61 72 20 5f 5f 57 45 42 50 41 43 4b 5f 41 4d 44 5f 44 45 46 49 4e 45 5f 41 52 52 41 59 5f 5f 2c 5f 5f 57 45 42 50 41 43 4b 5f 41 4d 44 5f 44 45 46 49 4e 45 5f 52 45 53 55 4c 54 5f 5f 3b 21 66 75 6e 63 74 69 6f 6e 28 6c 2c 6e 29 7b 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6e 28 6c 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{J66h:function(module,exports,__webpack_require__){var __WEBPACK_AMD_DEFINE_ARRAY__,__WEBPACK_AMD_DEFINE_RESULT__;!function(l,n){module.exports=n(l)}("undefined"!=typeof self?self:"undefined"!=typeof
2024-10-04 07:30:36 UTC	1095	IN	Data Raw: 72 65 74 75 72 6e 20 75 2e 53 62 28 30 2c 5b 28 6c 28 29 28 29 2c 75 2e 43 62 28 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 2c 22 64 69 76 22 2c 5b 5b 22 63 6c 61 73 73 22 2c 22 62 75 74 74 6f 6e 73 2d 68 6f 6c 64 65 72 22 5d 2c 5b 22 69 64 22 2c 22 73 68 6f 77 50 68 69 73 68 69 6e 67 22 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 29 2c 28 6c 28 29 28 29 2c 75 2e 43 62 28 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 33 2c 22 61 22 2c 5b 5b 22 68 72 65 66 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 3b 22 5d 5d 2c 6e 75 6c 6c 2c 5b 5b 6e 75 6c 6c 2c 22 63 6c 69 63 6b 22 5d 5d 2c 66 75 6e 63 74 69 6f 6e 28 6c 2c 6e 2c 74 29 7b 76 61 72 20 75 3d 21 30 2c 65 3d 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 3b 22 63 6c 69 63 6b 22 3d 3d Data Ascii: return u.Sb(0,[(l()(),u.Cb(0,0,null,null,4,"div",[["class","buttons-holder"],["id","showPhishing"]],null,null,null,null,null)),(l()(),u.Cb(1,0,null,null,3,"a",[["href","javascript:;"]],null,[[null,"click"]],function(l,n,t){var u=!0,e=l.component;"click"==
2024-10-04 07:30:36 UTC	16320	IN	Data Raw: 22 61 22 2c 5b 5b 22 63 6c 61 73 73 22 2c 22 62 61 73 69 63 2d 74 65 78 74 22 5d 2c 5b 22 68 72 65 66 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 3b 22 5d 5d 2c 6e 75 6c 6c 2c 5b 5b 6e 75 6c 6c 2c 22 63 6c 69 63 6b 22 5d 5d 2c 66 75 6e 63 74 69 6f 6e 28 6c 2c 6e 2c 74 29 7b 76 61 72 20 75 3d 21 30 2c 65 3d 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 3b 22 63 6c 69 63 6b 22 3d 3d 3d 6e 26 26 28 75 3d 21 31 21 3d 3d 65 2e 6f 70 65 6e 54 72 61 69 6e 69 6e 67 50 61 67 65 28 29 26 26 75 29 3b 72 65 74 75 72 6e 20 75 7d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 29 2c 28 6c 28 29 28 29 2c 75 2e 43 62 28 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 32 2c 22 70 22 2c 5b 5b 22 63 6c 61 73 73 22 2c 22 62 6f 6c 64 22 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: "a",[["class","basic-text"],["href","javascript:;"]],null,[[null,"click"]],function(l,n,t){var u=!0,e=l.component;"click"===n&&(u=!1!==e.openTrainingPage()&&u);return u},null,null)),(l()(),u.Cb(1,0,null,null,2,"p",[["class","bold"]],null,null,null,null,nu
2024-10-04 07:30:36 UTC	524	IN	Data Raw: 6c 65 4e 67 46 61 63 74 6f 72 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 7d 29 3b 76 61 72 20 7a 3d 75 2e 7a 62 28 65 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 75 2e 4a 62 28 5b 75 2e 4b 62 28 35 31 32 2c 75 2e 6c 2c 75 2e 6f 62 2c 5b 5b 38 2c 5b 69 2e 61 2c 44 5d 5d 2c 5b 33 2c 75 2e 6c 5d 2c 75 2e 46 5d 29 2c 75 2e 4b 62 28 34 36 30 38 2c 72 2e 6b 2c 72 2e 6a 2c 5b 75 2e 42 2c 5b 32 2c 72 2e 71 5d 5d 29 2c 75 2e 4b 62 28 34 36 30 38 2c 4e 2e 65 2c 4e 2e 65 2c 5b 5d 29 2c 75 2e 4b 62 28 34 36 30 38 2c 4e 2e 61 2c 4e 2e 61 2c 5b 5d 29 2c 75 2e 4b 62 28 34 36 30 38 2c 63 2c 63 2c 5b 54 2e 63 5d 29 2c 75 2e 4b 62 28 31 30 37 33 37 34 32 33 33 36 2c 72 2e 62 2c 72 2e 62 2c 5b 5d 29 2c 75 2e 4b 62 28 31 30 37 Data Ascii: leNgFactory",function(){return z});var z=u.zb(e,[],function(l){return u.Jb([u.Kb(512,u.l,u.ob,[[8,[i.a,D]],[3,u.l],u.F]),u.Kb(4608,r.k,r.j,[u.B,[2,r.q]]),u.Kb(4608,N.e,N.e,[]),u.Kb(4608,N.a,N.a,[]),u.Kb(4608,c,c,[T.c]),u.Kb(1073742336,r.b,r.b,[]),u.Kb(107

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49732	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:36 UTC	373	OUT	GET /app/config/config.json HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:36 UTC	264	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 50 content-type: application/json etag: W/"50-b381f3445730fefd66485a85e761cf6323d59ad9" last-modified: Fri, 04 Oct 2024 07:30:36 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:36 GMT connection: close
2024-10-04 07:30:36 UTC	50	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 22 73 65 72 76 69 63 65 55 72 6c 22 3a 20 22 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 34 32 32 30 22 0a 7d 0a Data Ascii: { "serviceUrl": "http://localhost:4220"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49734	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:36 UTC	1372	OUT	GET /translations/en.json HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https:%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F:fl:%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:37 UTC	268	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 2444 content-type: application/json etag: W/"2444-38149f545c42265641af887951c02ac98c2bbda6" last-modified: Fri, 04 Oct 2024 07:30:37 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:37 GMT connection: close
2024-10-04 07:30:37 UTC	2444	IN	Data Raw: 7b 0a 20 20 20 20 22 43 41 4e 54 5f 46 49 4e 44 5f 57 41 59 5f 42 41 43 4b 22 3a 20 22 43 61 6e 27 74 20 66 69 6e 64 20 79 6f 75 72 20 77 61 79 20 62 61 63 6b 3f 22 2c 0a 20 20 20 20 22 63 6c 65 61 6e 22 3a 20 22 54 68 65 20 73 69 74 65 20 69 73 20 63 6c 65 61 6e 2e 22 2c 0a 20 20 20 20 22 63 6c 65 61 6e 52 65 64 69 72 65 63 74 22 3a 20 22 59 6f 75 20 77 69 6c 6c 20 62 65 20 72 65 64 69 72 65 63 74 65 64 2e 22 2c 0a 20 20 20 20 22 65 78 69 74 50 61 67 65 22 3a 20 22 4c 65 61 76 65 20 74 68 65 20 70 61 67 65 22 2c 0a 20 20 20 20 22 66 6f 6c 6c 6f 77 54 68 65 54 72 61 69 6e 69 6e 67 43 6c 61 73 73 22 3a 20 22 53 74 6f 70 20 66 61 6c 6c 69 6e 67 20 66 6f 72 20 70 68 69 73 68 69 6e 67 22 2c 0a 20 20 20 20 22 67 6f 41 6e 79 77 61 79 22 3a 20 22 50 72 6f 63 65 Data Ascii: { "CANT_FIND_WAY_BACK": "Can't find your way back?", "clean": "The site is clean.", "cleanRedirect": "You will be redirected.", "exitPage": "Leave the page", "followTheTrainingClass": "Stop falling for phishing", "goAnyway": "Proce

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49737	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:36 UTC	1426	OUT	POST /analyse HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive Content-Length: 651 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://antiphishing.vadesecure.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https:%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F:fl:%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:36 UTC	651	OUT	Data Raw: 7b 22 65 6d 61 69 6c 46 72 6f 6d 22 3a 22 6e 6f 72 65 70 6c 79 40 70 6c 61 6e 6e 65 72 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 22 2c 22 65 6d 61 69 6c 54 6f 22 3a 22 43 68 61 72 6c 6f 74 74 65 2e 47 61 67 6c 69 6f 6c 6f 40 63 68 61 6e 74 69 65 72 73 2d 61 74 6c 61 6e 74 69 71 75 65 2e 63 6f 6d 22 2c 22 6c 6f 67 69 6e 22 3a 22 56 52 43 31 39 38 31 34 38 22 2c 22 74 69 6d 65 22 3a 22 22 2c 22 61 63 74 69 6f 6e 22 3a 22 22 2c 22 49 49 50 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 68 61 6e 74 69 65 72 73 64 65 6c 61 74 6c 61 6e 74 69 71 75 65 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 3a 66 6c 3a 2f 72 2f 70 65 72 73 6f 6e 61 6c 2f 70 61 73 63 61 6c 5f 72 65 6e 69 65 72 5f 63 68 61 6e 74 69 65 72 73 2d 61 74 6c 61 6e 74 69 71 75 Data Ascii: {"emailFrom":"noreply@planner.office365.com","emailTo":"Charlotte.Gagliolo@chantiers-atlantique.com","login":"VRC198148","time":"","action":"","IIP":{"url":"https://chantiersdelatlantique-my.sharepoint.com/:fl:/r/personal/pascal_renier_chantiers-atlantiqu
2024-10-04 07:30:38 UTC	189	IN	HTTP/1.1 200 OK access-control-allow-origin: * content-type: application/json, charset=UTF-8 vary: Origin date: Fri, 04 Oct 2024 07:30:38 GMT content-length: 681 connection: close
2024-10-04 07:30:38 UTC	681	IN	Data Raw: 7b 22 65 6d 61 69 6c 46 72 6f 6d 22 3a 22 6e 6f 72 65 70 6c 79 40 70 6c 61 6e 6e 65 72 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 22 2c 22 65 6d 61 69 6c 54 6f 22 3a 22 43 68 61 72 6c 6f 74 74 65 2e 47 61 67 6c 69 6f 6c 6f 40 63 68 61 6e 74 69 65 72 73 2d 61 74 6c 61 6e 74 69 71 75 65 2e 63 6f 6d 22 2c 22 6c 6f 67 69 6e 22 3a 22 56 52 43 31 39 38 31 34 38 22 2c 22 74 69 6d 65 22 3a 22 22 2c 22 61 63 74 69 6f 6e 22 3a 22 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 49 49 50 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 68 61 6e 74 69 65 72 73 64 65 6c 61 74 6c 61 6e 74 69 71 75 65 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 3a 66 6c 3a 2f 72 2f 70 65 72 73 6f 6e 61 6c 2f 70 61 73 63 61 6c 5f 72 65 6e 69 65 72 5f 63 68 61 6e 74 69 65 72 73 Data Ascii: {"emailFrom":"noreply@planner.office365.com","emailTo":"Charlotte.Gagliolo@chantiers-atlantique.com","login":"VRC198148","time":"","action":"authorized","IIP":{"url":"https://chantiersdelatlantique-my.sharepoint.com/:fl:/r/personal/pascal_renier_chantiers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49733	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:36 UTC	376	OUT	GET /4.efcb4f36899adf4857d1.js HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:37 UTC	284	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 32915 content-type: text/javascript; charset=utf-8 etag: W/"32915-08da04e6068b3fef9b70b7e689b05f1a1fdce411" last-modified: Fri, 04 Oct 2024 07:30:37 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:37 GMT connection: close
2024-10-04 07:30:37 UTC	512	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 4a 36 36 68 3a 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 76 61 72 20 5f 5f 57 45 42 50 41 43 4b 5f 41 4d 44 5f 44 45 46 49 4e 45 5f 41 52 52 41 59 5f 5f 2c 5f 5f 57 45 42 50 41 43 4b 5f 41 4d 44 5f 44 45 46 49 4e 45 5f 52 45 53 55 4c 54 5f 5f 3b 21 66 75 6e 63 74 69 6f 6e 28 6c 2c 6e 29 7b 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6e 28 6c 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{J66h:function(module,exports,__webpack_require__){var __WEBPACK_AMD_DEFINE_ARRAY__,__WEBPACK_AMD_DEFINE_RESULT__;!function(l,n){module.exports=n(l)}("undefined"!=typeof self?self:"undefined"!=typeof
2024-10-04 07:30:37 UTC	16320	IN	Data Raw: 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 22 2c 62 36 34 74 61 62 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 66 6f 72 28 76 61 72 20 6e 3d 7b 7d 2c 74 3d 30 2c 75 3d 6c 2e 6c 65 6e 67 74 68 3b 74 3c 75 3b 74 2b 2b 29 6e 5b 6c 2e 63 68 61 72 41 74 28 74 29 5d 3d 74 3b 72 65 74 75 72 6e 20 6e 7d 28 62 36 34 63 68 61 72 73 29 2c 66 72 6f 6d 43 68 61 72 43 6f 64 65 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 63 62 5f 75 74 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 6c 2e 6c 65 6e 67 74 68 3c 32 29 72 65 74 75 72 6e 28 6e 3d 6c 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 29 3c 31 32 38 3f 6c 3a 6e 3c 32 Data Ascii: FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",b64tab=function(l){for(var n={},t=0,u=l.length;t<u;t++)n[l.charAt(t)]=t;return n}(b64chars),fromCharCode=String.fromCharCode,cb_utob=function(l){if(l.length<2)return(n=l.charCodeAt(0))<128?l:n<2
2024-10-04 07:30:37 UTC	16083	IN	Data Raw: 26 75 29 3b 72 65 74 75 72 6e 20 75 7d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 29 2c 28 6c 28 29 28 29 2c 75 2e 43 62 28 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 32 2c 22 70 22 2c 5b 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 29 2c 28 6c 28 29 28 29 2c 75 2e 51 62 28 32 2c 6e 75 6c 6c 2c 5b 22 22 2c 22 22 5d 29 29 2c 75 2e 4d 62 28 31 33 31 30 37 32 2c 6f 2e 69 2c 5b 6f 2e 6a 2c 75 2e 69 5d 29 5d 2c 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 28 6c 2c 6e 29 7b 6c 28 6e 2c 32 2c 30 2c 75 2e 52 62 28 6e 2c 32 2c 30 2c 75 2e 4c 62 28 6e 2c 33 29 2e 74 72 61 6e 73 66 6f 72 6d 28 22 6c 65 74 73 54 61 6b 65 54 68 65 50 68 69 73 68 69 6e 67 43 6c 61 73 73 22 29 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 6c 29 7b 72 65 74 75 72 6e Data Ascii: &u);return u},null,null)),(l()(),u.Cb(1,0,null,null,2,"p",[],null,null,null,null,null)),(l()(),u.Qb(2,null,["",""])),u.Mb(131072,o.i,[o.j,u.i])],null,function(l,n){l(n,2,0,u.Rb(n,2,0,u.Lb(n,3).transform("letsTakeThePhishingClass")))})}function I(l){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49735	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:36 UTC	1412	OUT	GET /images/load.svg HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https:%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F:fl:%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:37 UTC	265	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 5316 content-type: image/svg+xml etag: W/"5316-247bf3960ef481d0bd127ccfa962cefc680b9d50" last-modified: Fri, 04 Oct 2024 07:30:37 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:37 GMT connection: close
2024-10-04 07:30:37 UTC	512	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 35 2e 34 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 6c 71 75 65 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 25.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Calque_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=
2024-10-04 07:30:37 UTC	4804	IN	Data Raw: 33 44 32 44 38 3b 73 74 72 6f 6b 65 3a 23 33 44 35 30 35 42 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 2e 73 74 33 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 33 44 35 30 35 42 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 2e 73 74 34 7b 66 69 6c 6c 3a 23 36 41 30 30 46 34 3b 73 74 72 6f 6b 65 3a 23 35 35 30 30 43 33 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 2e 73 74 35 7b 66 69 6c 6c 3a 23 41 35 34 39 46 46 3b 73 74 72 6f 6b 65 3a 23 35 35 30 30 43 33 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 2e 73 74 36 7b 66 69 6c 6c 3a 23 36 41 30 30 46 34 3b 73 74 72 6f 6b 65 3a 23 35 35 30 30 43 33 3b 73 74 72 6f 6b 65 2d 77 69 Data Ascii: 3D2D8;stroke:#3D505B;stroke-miterlimit:10;}.st3{fill:none;stroke:#3D505B;stroke-miterlimit:10;}.st4{fill:#6A00F4;stroke:#5500C3;stroke-miterlimit:10;}.st5{fill:#A549FF;stroke:#5500C3;stroke-miterlimit:10;}.st6{fill:#6A00F4;stroke:#5500C3;stroke-wi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49736	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:36 UTC	1418	OUT	GET /images/logo-cloud.png HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https:%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F:fl:%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:37 UTC	261	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 8965 content-type: image/png etag: W/"8965-47208516db1d05f93eee566cdee9ddc8721a2db2" last-modified: Fri, 04 Oct 2024 07:30:37 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:37 GMT connection: close
2024-10-04 07:30:37 UTC	8965	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 78 08 06 00 00 00 48 15 cf 20 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 22 9a 49 44 41 54 78 01 ed 9d 6d 8c 1c d9 55 f7 ff b7 5e da f6 da 9b b4 b3 cf cb 12 7b 77 7b 9e 87 17 11 01 9e de 55 48 c2 07 b6 67 bd 0e da 04 c9 63 14 10 af 71 0f 10 b1 1b 40 9e 09 08 29 48 68 7a f2 01 10 12 cc 58 0a 9b 05 84 dc 13 90 40 10 c9 e3 0f 61 21 bb 9b 69 f3 92 2c 84 a4 7b e0 03 82 08 b9 9d b5 d9 48 28 71 7b e3 5d db d3 5d 75 39 e7 56 d5 74 4d bf 54 57 f5 f4 cc 74 d7 dc df ee b8 bb ab aa eb 56 57 77 fd eb 9c 73 cf 3d 17 d0 68 34 9a 09 41 60 cc 79 b1 8a 9c e5 66 8a 48 21 06 64 dd 75 65 fd 8e d5 Data Ascii: PNGIHDR,xH pHYs%%IR$sRGBgAMAa"IDATxmU^{w{UHgcq@)HhzX@a!i,{H(q{]]u9VtMTWtVWws=h4A`yfH!due

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49740	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:37 UTC	371	OUT	GET /translations/en.json HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:38 UTC	268	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 2444 content-type: application/json etag: W/"2444-38149f545c42265641af887951c02ac98c2bbda6" last-modified: Fri, 04 Oct 2024 07:30:38 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:38 GMT connection: close
2024-10-04 07:30:38 UTC	2444	IN	Data Raw: 7b 0a 20 20 20 20 22 43 41 4e 54 5f 46 49 4e 44 5f 57 41 59 5f 42 41 43 4b 22 3a 20 22 43 61 6e 27 74 20 66 69 6e 64 20 79 6f 75 72 20 77 61 79 20 62 61 63 6b 3f 22 2c 0a 20 20 20 20 22 63 6c 65 61 6e 22 3a 20 22 54 68 65 20 73 69 74 65 20 69 73 20 63 6c 65 61 6e 2e 22 2c 0a 20 20 20 20 22 63 6c 65 61 6e 52 65 64 69 72 65 63 74 22 3a 20 22 59 6f 75 20 77 69 6c 6c 20 62 65 20 72 65 64 69 72 65 63 74 65 64 2e 22 2c 0a 20 20 20 20 22 65 78 69 74 50 61 67 65 22 3a 20 22 4c 65 61 76 65 20 74 68 65 20 70 61 67 65 22 2c 0a 20 20 20 20 22 66 6f 6c 6c 6f 77 54 68 65 54 72 61 69 6e 69 6e 67 43 6c 61 73 73 22 3a 20 22 53 74 6f 70 20 66 61 6c 6c 69 6e 67 20 66 6f 72 20 70 68 69 73 68 69 6e 67 22 2c 0a 20 20 20 20 22 67 6f 41 6e 79 77 61 79 22 3a 20 22 50 72 6f 63 65 Data Ascii: { "CANT_FIND_WAY_BACK": "Can't find your way back?", "clean": "The site is clean.", "cleanRedirect": "You will be redirected.", "exitPage": "Leave the page", "followTheTrainingClass": "Stop falling for phishing", "goAnyway": "Proce

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49739	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:37 UTC	1416	OUT	GET /vadesecure-logo.png HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https:%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F:fl:%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:38 UTC	190	IN	HTTP/1.1 404 Not Found content-type: text/plain; charset=utf-8 vary: Origin x-content-type-options: nosniff date: Fri, 04 Oct 2024 07:30:38 GMT content-length: 19 connection: close
2024-10-04 07:30:38 UTC	19	IN	Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49742	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:37 UTC	366	OUT	GET /images/load.svg HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:38 UTC	265	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 5316 content-type: image/svg+xml etag: W/"5316-247bf3960ef481d0bd127ccfa962cefc680b9d50" last-modified: Fri, 04 Oct 2024 07:30:38 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:38 GMT connection: close
2024-10-04 07:30:38 UTC	5316	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 35 2e 34 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 6c 71 75 65 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 25.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Calque_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49741	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:37 UTC	372	OUT	GET /images/logo-cloud.png HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:38 UTC	261	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 8965 content-type: image/png etag: W/"8965-47208516db1d05f93eee566cdee9ddc8721a2db2" last-modified: Fri, 04 Oct 2024 07:30:38 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:38 GMT connection: close
2024-10-04 07:30:38 UTC	512	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 78 08 06 00 00 00 48 15 cf 20 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 22 9a 49 44 41 54 78 01 ed 9d 6d 8c 1c d9 55 f7 ff b7 5e da f6 da 9b b4 b3 cf cb 12 7b 77 7b 9e 87 17 11 01 9e de 55 48 c2 07 b6 67 bd 0e da 04 c9 63 14 10 af 71 0f 10 b1 1b 40 9e 09 08 29 48 68 7a f2 01 10 12 cc 58 0a 9b 05 84 dc 13 90 40 10 c9 e3 0f 61 21 bb 9b 69 f3 92 2c 84 a4 7b e0 03 82 08 b9 9d b5 d9 48 28 71 7b e3 5d db d3 5d 75 39 e7 56 d5 74 4d bf 54 57 f5 f4 cc 74 d7 dc df ee b8 bb ab aa eb 56 57 77 fd eb 9c 73 cf 3d 17 d0 68 34 9a 09 41 60 cc 79 b1 8a 9c e5 66 8a 48 21 06 64 dd 75 65 fd 8e d5 Data Ascii: PNGIHDR,xH pHYs%%IR$sRGBgAMAa"IDATxmU^{w{UHgcq@)HhzX@a!i,{H(q{]]u9VtMTWtVWws=h4A`yfH!due
2024-10-04 07:30:38 UTC	8453	IN	Data Raw: ff e2 a0 7d 2d 63 3d 47 bf 8c 45 12 98 62 20 3a 6c 25 d9 4a fc 58 c4 e8 b9 d7 0e 5b 54 42 89 92 bf 3e 68 cb 7b 8f b7 dc 7b af 77 1c 87 65 6b ea c8 84 5b 59 13 21 58 69 e7 a5 ea e1 82 e1 3a d3 ae 30 66 85 90 4f 86 56 d5 9b d8 9c 79 26 cf d6 97 66 1c 99 c6 1b 45 1b e2 12 8b 14 5b 55 24 12 9e 65 c4 96 90 6f 69 05 a2 63 c2 29 95 f1 5d 4b 71 f6 fb fb 78 a5 68 09 b9 48 ef cf 05 56 14 5b 4e 24 84 d2 e4 47 65 6d b9 9e 40 c9 b6 40 d9 4a 2c 1d 58 21 b1 f4 ac 3d e7 ea 3b f0 6b 05 4c 38 5a b0 c6 8c c0 9a a4 6f e6 7c b0 4c c0 2d 9d ce b7 62 fd d0 35 7b cb 34 de bc 46 42 a1 44 c5 6a 5b 41 ca 95 b3 25 c7 92 24 bb 85 b4 4c 2a 11 a3 d8 d2 c2 1f e2 5d 2b 71 f7 ff c7 78 b1 44 fb 58 cc 08 25 78 4a 9c 02 8b ca 24 b7 50 c5 ae 7c 81 0a 5c 43 3b 24 54 b6 6a df 61 6b fe 67 ff 17 Data Ascii: }-c=GEb :l%JX[TB>h{{wek[Y!Xi:0fOVy&fE[U$eoic)]KqxhHV[N$Gem@@J,X!=;kL8Zo\|L-b5{4FBDj[A%$L*]+qxDX%xJ$P\|\C;$Tjakg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49743	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:38 UTC	1408	OUT	GET /favicon.ico HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https:%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F:fl:%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:39 UTC	276	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 4286 content-type: image/vnd.microsoft.icon etag: W/"4286-2cb4a55b8ff777073b6f3c73e2aa3bcd00a4903b" last-modified: Fri, 04 Oct 2024 07:30:38 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:38 GMT connection: close
2024-10-04 07:30:39 UTC	512	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c Data Ascii: ( @ LpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGL
2024-10-04 07:30:39 UTC	3774	IN	Data Raw: 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 dc 00 8b 03 b0 00 c4 12 bd Data Ascii: GLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49744	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:38 UTC	1451	OUT	POST /redirect HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive Content-Length: 950 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://antiphishing.vadesecure.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https:%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F:fl:%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:38 UTC	950	OUT	Data Raw: 7b 22 65 6d 61 69 6c 46 72 6f 6d 22 3a 22 6e 6f 72 65 70 6c 79 40 70 6c 61 6e 6e 65 72 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 22 2c 22 65 6d 61 69 6c 54 6f 22 3a 22 43 68 61 72 6c 6f 74 74 65 2e 47 61 67 6c 69 6f 6c 6f 40 63 68 61 6e 74 69 65 72 73 2d 61 74 6c 61 6e 74 69 71 75 65 2e 63 6f 6d 22 2c 22 6c 6f 67 69 6e 22 3a 22 56 52 43 31 39 38 31 34 38 22 2c 22 74 69 6d 65 22 3a 22 22 2c 22 61 63 74 69 6f 6e 22 3a 22 22 2c 22 49 49 50 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 68 61 6e 74 69 65 72 73 64 65 6c 61 74 6c 61 6e 74 69 71 75 65 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 3a 66 6c 3a 2f 72 2f 70 65 72 73 6f 6e 61 6c 2f 70 61 73 63 61 6c 5f 72 65 6e 69 65 72 5f 63 68 61 6e 74 69 65 72 73 2d 61 74 6c 61 6e 74 69 71 75 Data Ascii: {"emailFrom":"noreply@planner.office365.com","emailTo":"Charlotte.Gagliolo@chantiers-atlantique.com","login":"VRC198148","time":"","action":"","IIP":{"url":"https://chantiersdelatlantique-my.sharepoint.com/:fl:/r/personal/pascal_renier_chantiers-atlantiqu
2024-10-04 07:30:39 UTC	189	IN	HTTP/1.1 200 OK access-control-allow-origin: * content-type: application/json, charset=UTF-8 vary: Origin date: Fri, 04 Oct 2024 07:30:38 GMT content-length: 671 connection: close
2024-10-04 07:30:39 UTC	671	IN	Data Raw: 7b 22 65 6d 61 69 6c 46 72 6f 6d 22 3a 22 6e 6f 72 65 70 6c 79 40 70 6c 61 6e 6e 65 72 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 22 2c 22 65 6d 61 69 6c 54 6f 22 3a 22 43 68 61 72 6c 6f 74 74 65 2e 47 61 67 6c 69 6f 6c 6f 40 63 68 61 6e 74 69 65 72 73 2d 61 74 6c 61 6e 74 69 71 75 65 2e 63 6f 6d 22 2c 22 6c 6f 67 69 6e 22 3a 22 56 52 43 31 39 38 31 34 38 22 2c 22 74 69 6d 65 22 3a 22 22 2c 22 61 63 74 69 6f 6e 22 3a 22 22 2c 22 49 49 50 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 68 61 6e 74 69 65 72 73 64 65 6c 61 74 6c 61 6e 74 69 71 75 65 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 3a 66 6c 3a 2f 72 2f 70 65 72 73 6f 6e 61 6c 2f 70 61 73 63 61 6c 5f 72 65 6e 69 65 72 5f 63 68 61 6e 74 69 65 72 73 2d 61 74 6c 61 6e 74 69 71 75 Data Ascii: {"emailFrom":"noreply@planner.office365.com","emailTo":"Charlotte.Gagliolo@chantiers-atlantique.com","login":"VRC198148","time":"","action":"","IIP":{"url":"https://chantiersdelatlantique-my.sharepoint.com/:fl:/r/personal/pascal_renier_chantiers-atlantiqu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49745	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:38 UTC	358	OUT	GET /analyse HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:39 UTC	190	IN	HTTP/1.1 404 Not Found content-type: text/plain; charset=utf-8 vary: Origin x-content-type-options: nosniff date: Fri, 04 Oct 2024 07:30:39 GMT content-length: 19 connection: close
2024-10-04 07:30:39 UTC	19	IN	Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49747	52.105.56.39	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:39 UTC	1146	OUT	GET /:fl:/r/personal/pascal_renier_chantiers-atlantique_com/Documents/OneNote%20Loop%20Files/Tasklist.loop?d=w47ee182453764abcbb60c50db6a52f3c&csf=1&web=1&nav=cz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy HTTP/1.1 Host: chantiersdelatlantique-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://antiphishing.vadesecure.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:39 UTC	1215	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/plain Location: https://chantiersdelatlantique-my.sharepoint.com/personal/pascal_renier_chantiers-atlantique_com/Documents/OneNote%20Loop%20Files/Tasklist.loop?d=w47ee182453764abcbb60c50db6a52f3c&csf=1&web=1&nav=cz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy&CID=8fac216c-369e-4f91-adb9-936d18901f9f Server: Microsoft-IIS/10.0 X-NetworkStatistics: 0,262656,0,0,636,0,24954,83 SPRequestGuid: ce8956a1-d0e0-a000-077a-858ec5a42d8f request-id: ce8956a1-d0e0-a000-077a-858ec5a42d8f MS-CV: oVaJzuDQAKAHeoWOxaQtjw.0 Strict-Transport-Security: max-age=31536000 SPRequestDuration: 9 SPIisLatency: 17 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25311 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Date: Fri, 04 Oct 2024 07:30:38 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49746	52.105.56.39	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:39 UTC	1180	OUT	GET /personal/pascal_renier_chantiers-atlantique_com/Documents/OneNote%20Loop%20Files/Tasklist.loop?d=w47ee182453764abcbb60c50db6a52f3c&csf=1&web=1&nav=cz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy&CID=8fac216c-369e-4f91-adb9-936d18901f9f HTTP/1.1 Host: chantiersdelatlantique-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://antiphishing.vadesecure.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:39 UTC	1477	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://chantiersdelatlantique-my.sharepoint.com/personal/pascal_renier_chantiers-atlantique_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Fpascal%5Frenier%5Fchantiers%2Datlantique%5Fcom%2FDocuments%2FOneNote%20Loop%20Files%2FTasklist%2Eloop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy%26CID%3D8fac216c%2D369e%2D4f91%2Dadb9%2D936d18901f9f Server: Microsoft-IIS/10.0 X-NetworkStatistics: 0,262656,0,0,954,0,24954,89 X-SharePointHealthScore: 3 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: ce8956a1-f0f5-a000-00bf-996a2f9932e8 request-id: ce8956a1-f0f5-a000-00bf-996a2f9932e8 MS-CV: oVaJzvXwAKAAv5lqL5ky6A.0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25311 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Date: Fri, 04 Oct 2024 07:30:39 GMT Connection: close Content-Length: 764
2024-10-04 07:30:39 UTC	764	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6e 74 69 65 72 73 64 65 6c 61 74 6c 61 6e 74 69 71 75 65 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 2f 70 61 73 63 61 6c 5f 72 65 6e 69 65 72 5f 63 68 61 6e 74 69 65 72 73 2d 61 74 6c 61 6e 74 69 71 75 65 5f 63 6f 6d 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 3f 53 6f 75 72 63 65 3d 25 32 46 70 65 72 73 6f 6e 61 6c 25 32 46 70 61 73 63 61 6c 25 35 46 72 65 6e 69 65 72 25 35 46 63 68 61 6e 74 69 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://chantiersdelatlantique-my.sharepoint.com/personal/pascal_renier_chantiers-atlantique_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Fpascal%5Frenier%5Fchanti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49749	163.172.240.109	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:39 UTC	362	OUT	GET /favicon.ico HTTP/1.1 Host: antiphishing.vadesecure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:39 UTC	276	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 4286 content-type: image/vnd.microsoft.icon etag: W/"4286-2cb4a55b8ff777073b6f3c73e2aa3bcd00a4903b" last-modified: Fri, 04 Oct 2024 07:30:39 GMT vary: Origin date: Fri, 04 Oct 2024 07:30:39 GMT connection: close
2024-10-04 07:30:39 UTC	512	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c Data Ascii: ( @ LpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGL
2024-10-04 07:30:39 UTC	3774	IN	Data Raw: 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 4c 70 47 00 dc 00 8b 03 b0 00 c4 12 bd Data Ascii: GLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpGLpG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49750	52.105.56.39	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:40 UTC	1314	OUT	GET /personal/pascal_renier_chantiers-atlantique_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Fpascal%5Frenier%5Fchantiers%2Datlantique%5Fcom%2FDocuments%2FOneNote%20Loop%20Files%2FTasklist%2Eloop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy%26CID%3D8fac216c%2D369e%2D4f91%2Dadb9%2D936d18901f9f HTTP/1.1 Host: chantiersdelatlantique-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://antiphishing.vadesecure.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:40 UTC	2822	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: /_forms/default.aspx?ReturnUrl=%2fpersonal%2fpascal_renier_chantiers-atlantique_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Fpascal%255Frenier%255Fchantiers%252Datlantique%255Fcom%252FDocuments%252FOneNote%2520Loop%2520Files%252FTasklist%252Eloop%253Fd%253Dw47ee182453764abcbb60c50db6a52f3c%2526csf%253D1%2526web%253D1%2526nav%253Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy%2526CID%253D8fac216c%252D369e%252D4f91%252Dadb9%252D936d18901f9f&Source=cookie Server: Microsoft-IIS/10.0 X-NetworkStatistics: 0,262656,0,0,617,0,24954,83 X-SharePointHealthScore: 1 X-AspNet-Version: 4.0.30319 Set-Cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGcGFzY2FsJTVGcmVuaWVyJTVGY2hhbnRpZXJzJTJEYXRsYW50aXF1ZSU1RmNvbSUyRkRvY3VtZW50cyUyRk9uZU5vdGUlMjBMb29wJTIwRmlsZXMlMkZUYXNrbGlzdCUyRWxvb3AlM0ZkJTNEdzQ3ZWUxODI0NTM3NjRhYmNiYjYwYzUwZGI2YTUyZjNjJTI2Y3NmJTNEMSUyNndlYiUzRDElMjZuYXYlM0RjejBsTWtad1pYSnpiMjVoYkNVeVJuQmhjMk5oYkY5eVpXNXBaWEpmWTJoaGJuUnBaWEp6TFdGMGJHRnVkR2x4ZFdWZlkyOXRKbVE5WWlGNGNWTTRjVUY1YVd3d1N6RllTVkZmYUdzeFVXbGFORTVZU1VKa1ZXWmFRV3RTYVU5WGJrd3pSbFJ6VG5OMmNYSkhhazl2VkdGMFQwVmZPWE5sTnpkbkptWTlNREV5TWtrMVZsTlNSVVJFV0VWUE5WTlVXRkpHVEZkWlIwWkNWek5MUzB4YU5DWmpQU1V5UmlabWJIVnBaRDB4Sm5BOUpUUXdiWE1sTWtadlptWnBZMlV0Wm14MWFXUXRZMjl1ZEdGcGJtVnklMjZDSUQlM0Q4ZmFjMjE2YyUyRDM2OWUlMkQ0ZjkxJTJEYWRiOSUyRDkzNmQxODkwMWY5Zg==; expires=Fri, 04-Oct-2024 07:40:40 GMT; path=/; SameSite=None; secure; HttpOnly X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: cf8956a1-e040-a000-23c9-f5173a0e38af request-id: cf8956a1-e040-a000-23c9-f5173a0e38af MS-CV: oVaJz0DgAKAjyfUXOg44rw.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=190019&frontEnd=FarmDirect&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 27 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25311 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Date: Fri, 04 Oct 2024 07:30:39 GMT Connection: close Content-Length: 831
2024-10-04 07:30:40 UTC	831	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 5f 66 6f 72 6d 73 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 52 65 74 75 72 6e 55 72 6c 3d 25 32 66 70 65 72 73 6f 6e 61 6c 25 32 66 70 61 73 63 61 6c 5f 72 65 6e 69 65 72 5f 63 68 61 6e 74 69 65 72 73 2d 61 74 6c 61 6e 74 69 71 75 65 5f 63 6f 6d 25 32 66 5f 6c 61 79 6f 75 74 73 25 32 66 31 35 25 32 66 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 25 33 66 53 6f 75 72 63 65 25 33 64 25 32 35 32 46 70 65 72 73 6f 6e 61 6c 25 32 35 32 46 70 61 73 63 61 6c 25 32 35 35 46 72 65 6e 69 65 72 25 32 35 35 46 63 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/_forms/default.aspx?ReturnUrl=%2fpersonal%2fpascal_renier_chantiers-atlantique_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Fpascal%255Frenier%255Fc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49751	52.105.56.39	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:41 UTC	2148	OUT	GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2fpascal_renier_chantiers-atlantique_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Fpascal%255Frenier%255Fchantiers%252Datlantique%255Fcom%252FDocuments%252FOneNote%2520Loop%2520Files%252FTasklist%252Eloop%253Fd%253Dw47ee182453764abcbb60c50db6a52f3c%2526csf%253D1%2526web%253D1%2526nav%253Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy%2526CID%253D8fac216c%252D369e%252D4f91%252Dadb9%252D936d18901f9f&Source=cookie HTTP/1.1 Host: chantiersdelatlantique-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://antiphishing.vadesecure.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RpsContextCookie=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
2024-10-04 07:30:41 UTC	4941	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://login.microsoftonline.com:443/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71%2D4612A137C727D307E5BED479852B564F6D7455AB141630DD79759CA55ED49166&redirect%5Furi=https%3A%2F%2Fchantiersdelatlantique%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=cf8956a1%2Da080%2Da000%2D077a%2D8ffd4e235bc5 Server: Microsoft-IIS/10.0 X-NetworkStatistics: 0,262656,0,0,534,0,24851,83 X-SharePointHealthScore: 1 X-AspNet-Version: 4.0.30319 Set-Cookie: nSGt-E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71=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; expires=Fri, 04-Oct-2024 07:34:41 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: nSGt-E8F00A70DEA0C81E5C4ADCE5617B0930004AB07000A78B71=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly Set-Cookie: RpsContextCookie=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 [TRUNCATED] Set-Cookie: RpsContextCookie=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: cf8956a1-a080-a000-077a-8ffd4e235bc5 request-id: cf8956a1-a080-a000-077a-8ffd4e235bc5 MS-CV: oVaJz4CgAKAHeo/9TiNbxQ.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=f763396b-da0e-42fe-aa30-08e090082a6a&destinationEndpoint=190019&frontEnd=FarmDirect&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 59 SPIisLatency: 0 Include-Referred-Token-Binding-ID: true X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25311 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Date: Fri, 04 Oct 2024 07:30:41 GMT Connection: close Content-Length: 898
2024-10-04 07:30:41 UTC	898	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 3a 34 34 33 2f 66 37 36 33 33 39 36 62 2d 64 61 30 65 2d 34 32 66 65 2d 61 61 33 30 2d 30 38 65 30 39 30 30 38 32 61 36 61 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 25 35 46 69 64 3d 30 30 30 30 30 30 30 33 25 32 44 30 30 30 30 25 32 44 30 66 66 31 25 32 44 63 65 30 30 25 32 44 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 25 35 46 6d 6f 64 65 3d 66 6f 72 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.microsoftonline.com:443/f763396b-da0e-42fe-aa30-08e090082a6a/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=for

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49753	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:43 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:43 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:43 GMT Content-Type: application/x-javascript Content-Length: 49804 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:28 GMT ETag: 0x8DCB563D09FF90F x-ms-request-id: e10fc963-b01e-001c-0ed7-109136000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073043Z-15767c5fc55852fxfeh7csa2dn0000000c0g00000000av44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:43 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a e8 6e 66 80 30 04 66 66 17 58 2e 27 56 c0 dd c1 ce da 0e 34 13 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 c1 45 ef fc a2 d2 ff 58 b9 f8 7c 74 7e 50 39 83 b7 7f 54 4e fb 17 47 fb 87 3f 5e 0f 7e 14 ff bf b8 f7 e3 ca d8 9f 88 0a fc 0e dd 58 78 95 30 a8 84 51 c5 0f 46 61 34 0d 23 37 11 71 e5 01 fe 46 be 3b a9 8c a3 f0 a1 92 dc 8b ca 34 0a bf 88 51 12 57 26 7e 9c 40 a1 a1 98 84 4f 95 2a 54 17 79 95 33 37 4a 9e 2b 47 67 66 1d ea 17 50 9b 7f e7 07 50 7a 14 4e 9f e1 f9 3e a9 04 61 e2 8f 44 c5 0d 3c aa 6d 02 2f 41 2c 2a b3 c0 13 51 e5 e9 de 1f dd 57 4e fc 51 14 c6 e1 38 a9 44 62 24 Data Ascii: m[80OL;wnf0ffX.'V4r~=,JUT~l?EX\|t~P9TNG?^~Xx0QFa4#7qF;4QW&~@OTy37J+GgfPPzN>aD<m/A,QWNQ8Db$
2024-10-04 07:30:44 UTC	16384	IN	Data Raw: 27 1c c8 cc 3b 47 70 68 d3 97 de 38 51 da 2b 6d ae c3 c3 92 66 30 2c c7 e2 0e a7 d6 2d 0d 94 23 88 9f 19 2d 1f 22 de b2 95 e2 e1 43 fe ba 22 db f8 db c7 de c7 bd 8f bb 46 5e a9 e2 79 8b bb 39 80 f2 13 69 1c da 46 ac bd 01 17 40 95 be ca 7a c8 5e 78 9e 4e f0 34 2a 49 07 20 d2 55 18 4e aa f9 a9 79 19 46 01 fd be 74 21 2c 48 25 ed 0b d8 5c e1 21 97 5b fb 1f fa e7 08 c5 f1 db 24 52 d4 24 94 ea 86 a0 ac 71 9b a5 70 df 6e 64 32 7d bb 49 7e 1c 3a 35 86 3a 0b bc 11 b9 bc 63 53 13 db b6 21 b2 17 b6 8c 6c 3a de c8 b0 48 30 1a 78 e1 93 b1 f2 84 d9 a0 da 32 3b 49 9d 0e a3 ba 0c c0 20 f1 60 44 0e bf e1 b1 1f 00 db 07 eb f8 0b 93 7a ee 80 51 71 65 d0 f1 46 c6 4d b5 e4 80 4a d1 c1 db 33 01 93 60 94 84 63 3e bb 8d 4e f6 d7 4e 72 4b bf 55 91 07 da 56 22 f5 25 bb 62 d4 f0 Data Ascii: ';Gph8Q+mf0,-#-"C"F^y9iF@z^xN4*I UNyFt!,H%\![$R$qpnd2}I~:5:cS!l:H0x2;I `DzQqeFMJ3`c>NNrKUV"%b
2024-10-04 07:30:44 UTC	16384	IN	Data Raw: 4f f2 d1 5f e3 49 57 25 53 20 30 da 2c 5f 9e fb be 25 d9 53 ac e2 06 6d fc 67 4d 28 10 b5 f0 53 88 c0 7e 3e c3 5e b0 96 88 a4 6a 56 81 ac 3c e2 4c 74 3e 79 ed bb 38 fd f9 09 7e 74 9f 32 42 c7 41 04 97 ac e7 a6 59 52 fe 59 8b 9a b4 f3 4a 8b b4 d6 10 bd d9 0f af 84 78 1b c9 34 c0 e1 99 a8 cd 23 a0 ce 8d b4 0e 00 99 43 46 38 aa 5e e1 a4 f2 b1 1e 2b 7f d5 16 32 3e 8d f2 99 ec b5 f7 ea 3d de 6a 55 6b ab 45 a6 da 10 6c 86 da dd 41 0a 35 3a 57 9c 6d af f8 17 dd 86 fe 9a 8f 67 27 ed 3a 5b 96 b7 fe 68 25 95 d8 2b b0 d4 b5 c8 c6 c9 ae 2d 62 2a 76 b4 6a a4 5b 48 7c 83 75 29 d5 f1 80 c1 6d 15 f3 46 e2 9d 67 bd 75 10 d5 0f fa 52 85 d6 65 ac 67 bd 66 c1 72 a4 33 6d ea 5c 99 93 86 6e a9 fd 34 e0 24 b4 0d 56 b1 61 56 94 05 d2 f1 9b 06 fa d6 bf 56 69 91 4c 38 d2 41 5f b8 Data Ascii: O_IW%S 0,_%SmgM(S~>^jV<Lt>y8~t2BAYRYJx4#CF8^+2>=jUkElA5:Wmg':[h%+-b*vj[H\|u)mFguRegfr3m\n4$VaVViL8A_
2024-10-04 07:30:44 UTC	1443	IN	Data Raw: 0e d0 f4 68 6c d8 37 44 70 d3 c6 9c 6a 8d 33 2e 82 62 3b 12 9c f1 56 32 89 89 b7 1c f8 4d 92 80 1d 13 a3 81 6b 0f 74 b0 f6 84 70 e9 e9 2c 49 af 92 78 a0 74 57 ec ad 25 df 18 38 c3 d4 53 29 e6 ae 8e 8b 93 b1 d2 56 e2 b7 bf 85 b6 94 6e 6e da cf 4a 54 d6 75 6d ac a3 fc 6d 23 e6 09 04 32 6d 06 4d 28 cf 16 35 28 24 8a d7 e3 11 0c 87 53 1f 83 11 24 c4 fc c3 89 41 42 39 c4 98 16 56 9e 4f 6d b3 c6 ef 84 26 af d9 dd a3 84 63 8c fa 7b eb 2a bd af dc 00 b7 88 03 05 8e ec fa fd 82 bd 9f 8c 0b 40 5f cc ab 16 c9 2c 13 c1 24 45 9b f2 c5 95 32 0f ac 16 0c f7 e9 05 a9 ed 10 12 2b 87 10 71 c9 25 6e 4c d0 b4 d8 26 e3 b3 13 af d7 74 bb 7d 5f d3 95 83 db 5b 37 ea 39 ca bb f7 00 bc c7 7d 71 70 80 36 07 87 17 11 46 47 79 ad 8b 01 fd 00 09 4b 55 8e 3a 38 8f 1e 84 6f dd b5 0c 51 Data Ascii: hl7Dpj3.b;V2Mktp,IxtW%8S)VnnJTumm#2mM(5($S$AB9VOm&c{*@_,$E2+q%nL&t}_[79}qp6FGyKU:8oQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49757	13.107.246.44	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:44 UTC	408	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:44 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:44 GMT Content-Type: application/x-javascript Content-Length: 49804 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:28 GMT ETag: 0x8DCB563D09FF90F x-ms-request-id: e10fc963-b01e-001c-0ed7-109136000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073044Z-15767c5fc55sdcjq8ksxt4n9mc00000001dg00000000b834 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:44 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a e8 6e 66 80 30 04 66 66 17 58 2e 27 56 c0 dd c1 ce da 0e 34 13 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 c1 45 ef fc a2 d2 ff 58 b9 f8 7c 74 7e 50 39 83 b7 7f 54 4e fb 17 47 fb 87 3f 5e 0f 7e 14 ff bf b8 f7 e3 ca d8 9f 88 0a fc 0e dd 58 78 95 30 a8 84 51 c5 0f 46 61 34 0d 23 37 11 71 e5 01 fe 46 be 3b a9 8c a3 f0 a1 92 dc 8b ca 34 0a bf 88 51 12 57 26 7e 9c 40 a1 a1 98 84 4f 95 2a 54 17 79 95 33 37 4a 9e 2b 47 67 66 1d ea 17 50 9b 7f e7 07 50 7a 14 4e 9f e1 f9 3e a9 04 61 e2 8f 44 c5 0d 3c aa 6d 02 2f 41 2c 2a b3 c0 13 51 e5 e9 de 1f dd 57 4e fc 51 14 c6 e1 38 a9 44 62 24 Data Ascii: m[80OL;wnf0ffX.'V4r~=,JUT~l?EX\|t~P9TNG?^~Xx0QFa4#7qF;4QW&~@OTy37J+GgfPPzN>aD<m/A,QWNQ8Db$
2024-10-04 07:30:44 UTC	16384	IN	Data Raw: 27 1c c8 cc 3b 47 70 68 d3 97 de 38 51 da 2b 6d ae c3 c3 92 66 30 2c c7 e2 0e a7 d6 2d 0d 94 23 88 9f 19 2d 1f 22 de b2 95 e2 e1 43 fe ba 22 db f8 db c7 de c7 bd 8f bb 46 5e a9 e2 79 8b bb 39 80 f2 13 69 1c da 46 ac bd 01 17 40 95 be ca 7a c8 5e 78 9e 4e f0 34 2a 49 07 20 d2 55 18 4e aa f9 a9 79 19 46 01 fd be 74 21 2c 48 25 ed 0b d8 5c e1 21 97 5b fb 1f fa e7 08 c5 f1 db 24 52 d4 24 94 ea 86 a0 ac 71 9b a5 70 df 6e 64 32 7d bb 49 7e 1c 3a 35 86 3a 0b bc 11 b9 bc 63 53 13 db b6 21 b2 17 b6 8c 6c 3a de c8 b0 48 30 1a 78 e1 93 b1 f2 84 d9 a0 da 32 3b 49 9d 0e a3 ba 0c c0 20 f1 60 44 0e bf e1 b1 1f 00 db 07 eb f8 0b 93 7a ee 80 51 71 65 d0 f1 46 c6 4d b5 e4 80 4a d1 c1 db 33 01 93 60 94 84 63 3e bb 8d 4e f6 d7 4e 72 4b bf 55 91 07 da 56 22 f5 25 bb 62 d4 f0 Data Ascii: ';Gph8Q+mf0,-#-"C"F^y9iF@z^xN4*I UNyFt!,H%\![$R$qpnd2}I~:5:cS!l:H0x2;I `DzQqeFMJ3`c>NNrKUV"%b
2024-10-04 07:30:45 UTC	16384	IN	Data Raw: 4f f2 d1 5f e3 49 57 25 53 20 30 da 2c 5f 9e fb be 25 d9 53 ac e2 06 6d fc 67 4d 28 10 b5 f0 53 88 c0 7e 3e c3 5e b0 96 88 a4 6a 56 81 ac 3c e2 4c 74 3e 79 ed bb 38 fd f9 09 7e 74 9f 32 42 c7 41 04 97 ac e7 a6 59 52 fe 59 8b 9a b4 f3 4a 8b b4 d6 10 bd d9 0f af 84 78 1b c9 34 c0 e1 99 a8 cd 23 a0 ce 8d b4 0e 00 99 43 46 38 aa 5e e1 a4 f2 b1 1e 2b 7f d5 16 32 3e 8d f2 99 ec b5 f7 ea 3d de 6a 55 6b ab 45 a6 da 10 6c 86 da dd 41 0a 35 3a 57 9c 6d af f8 17 dd 86 fe 9a 8f 67 27 ed 3a 5b 96 b7 fe 68 25 95 d8 2b b0 d4 b5 c8 c6 c9 ae 2d 62 2a 76 b4 6a a4 5b 48 7c 83 75 29 d5 f1 80 c1 6d 15 f3 46 e2 9d 67 bd 75 10 d5 0f fa 52 85 d6 65 ac 67 bd 66 c1 72 a4 33 6d ea 5c 99 93 86 6e a9 fd 34 e0 24 b4 0d 56 b1 61 56 94 05 d2 f1 9b 06 fa d6 bf 56 69 91 4c 38 d2 41 5f b8 Data Ascii: O_IW%S 0,_%SmgM(S~>^jV<Lt>y8~t2BAYRYJx4#CF8^+2>=jUkElA5:Wmg':[h%+-b*vj[H\|u)mFguRegfr3m\n4$VaVViL8A_
2024-10-04 07:30:45 UTC	1443	IN	Data Raw: 0e d0 f4 68 6c d8 37 44 70 d3 c6 9c 6a 8d 33 2e 82 62 3b 12 9c f1 56 32 89 89 b7 1c f8 4d 92 80 1d 13 a3 81 6b 0f 74 b0 f6 84 70 e9 e9 2c 49 af 92 78 a0 74 57 ec ad 25 df 18 38 c3 d4 53 29 e6 ae 8e 8b 93 b1 d2 56 e2 b7 bf 85 b6 94 6e 6e da cf 4a 54 d6 75 6d ac a3 fc 6d 23 e6 09 04 32 6d 06 4d 28 cf 16 35 28 24 8a d7 e3 11 0c 87 53 1f 83 11 24 c4 fc c3 89 41 42 39 c4 98 16 56 9e 4f 6d b3 c6 ef 84 26 af d9 dd a3 84 63 8c fa 7b eb 2a bd af dc 00 b7 88 03 05 8e ec fa fd 82 bd 9f 8c 0b 40 5f cc ab 16 c9 2c 13 c1 24 45 9b f2 c5 95 32 0f ac 16 0c f7 e9 05 a9 ed 10 12 2b 87 10 71 c9 25 6e 4c d0 b4 d8 26 e3 b3 13 af d7 74 bb 7d 5f d3 95 83 db 5b 37 ea 39 ca bb f7 00 bc c7 7d 71 70 80 36 07 87 17 11 46 47 79 ad 8b 01 fd 00 09 4b 55 8e 3a 38 8f 1e 84 6f dd b5 0c 51 Data Ascii: hl7Dpj3.b;V2Mktp,IxtW%8S)VnnJTumm#2mM(5($S$AB9VOm&c{*@_,$E2+q%nL&t}_[79}qp6FGyKU:8oQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49760	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:45 UTC	658	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:46 UTC	781	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:45 GMT Content-Type: text/css Content-Length: 20414 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 03 Jul 2024 21:48:08 GMT ETag: 0x8DC9BA9D4131BFD x-ms-request-id: 4bf48da9-e01e-0012-6dec-0f872b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073045Z-15767c5fc554w2fgapsyvy8ua00000000bq0000000006ckb x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:46 UTC	15603	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-10-04 07:30:46 UTC	4811	IN	Data Raw: e7 bc b1 e2 92 61 7d df b0 68 ac ab 2c aa b1 88 da cb c6 22 89 f4 a2 b1 42 53 1e da 58 e7 55 1e b5 fb a5 96 31 c6 85 9c 5c 95 58 0f 77 34 04 a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e 2b 17 af 8a ce 37 c9 36 db ed 73 c6 5e f7 a6 Data Ascii: a}h,"BSXU1\Xw4bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44pRd,+B"&}Ynedep_e~,1G3<@.+76s^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49761	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:45 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:47 UTC	792	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:47 GMT Content-Type: application/x-javascript Content-Length: 122193 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 01:33:09 GMT ETag: 0x8DCCC8188A08D46 x-ms-request-id: 862f0cf9-b01e-000f-590a-138a97000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073047Z-15767c5fc554l9xf959gp9cb1s000000069g00000000a1pf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:47 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 51 58 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 ef c8 8e 99 5b 0a 83 52 18 95 bc c0 09 a3 59 18 d9 09 8b 4b 53 f8 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsQXOix)NK7KW`G/.=[RYKS7l4i)ydY$.^@R%oJgP7(70Vj#Yi,*<zcs0I)b
2024-10-04 07:30:47 UTC	16384	IN	Data Raw: 7e fe 9d 70 17 86 b2 5a 68 c6 d8 53 99 2b af 38 61 68 21 9b ce f0 76 06 77 2f b1 8a f6 1c e0 29 00 38 c8 06 c3 b2 0a 2b df 30 39 1d 64 f6 0d 4f 7a e2 7e 34 6d 3a 9a 00 0c 34 01 08 95 1f a4 6f 71 e1 37 9b b1 78 a5 1c ea ef e8 81 02 0a d3 b1 1d 3d 65 57 f3 d1 f7 33 e7 1d 77 84 3e 5b e4 6f 88 37 0e 56 73 7f 47 df 2d 25 77 ad 3e cb 46 b1 09 fd 59 e9 9a c6 25 5e 69 86 3d a4 ea 02 54 96 92 e8 0a dd c2 1a 8f 36 b8 e8 31 2b aa 16 b9 42 96 2b 1f f5 5b f8 9d e1 36 fa d1 00 84 23 1a 82 2d d1 a8 e4 55 1d 39 d3 31 2c 3a 0c 18 07 db b4 66 53 10 09 0c e7 b8 eb e1 00 b8 8f 67 e8 6b fa e2 d9 63 2f 68 1b f4 cd 05 5f 49 5f d2 84 a2 d5 ed ad f3 4c d4 f3 44 d8 0b 44 4c 5c 78 f3 82 ab 26 01 e4 a3 c7 f5 32 bb 60 81 8c 06 67 3a 21 1f 45 b4 1c 02 ad c9 fa cc a4 dc 68 35 2a 3a ba Data Ascii: ~pZhS+8ah!vw/)8+09dOz~4m:4oq7x=eW3w>[o7VsG-%w>FY%^i=T61+B+[6#-U91,:fSgkc/h_I_LDDL\x&2`g:!Eh5*:
2024-10-04 07:30:47 UTC	16384	IN	Data Raw: 0d e2 04 ad c1 bb 90 2b c3 9b df 13 1b 27 31 62 9a df 88 b4 22 90 79 9f bc 0f 9c 27 11 fb 1f b8 72 a6 d3 af de 87 e3 dd 83 c3 37 64 0e c5 fd 5c 9d 61 05 a8 a8 c7 32 2f 55 dd 9b 53 55 9e d8 44 8b 91 7e 0a 94 60 d1 1a 25 3d 4c a7 67 62 6e 14 d4 3d c4 dd 94 09 78 03 83 b1 98 8c 98 fa 44 64 c2 09 39 8c 7b 11 12 01 b7 84 d2 68 0b 3f 42 3a 43 9e 37 ea 66 1f 11 96 d2 99 0b de 60 31 6c 06 7e 1f 60 2f e5 2b 1b 5c 43 6a dd 95 0d ee cc 69 5c a5 09 1f 25 9d b5 6c f7 bc 62 11 b4 c2 84 82 a9 45 99 57 f5 2c 9d e8 c5 38 e0 86 3e a7 79 15 8b 8b 56 aa 40 4d 64 ec bc 31 ab ab 6d 1e 6e 1b c3 dc 45 ef e1 4c 03 88 3c c8 3e b0 fe 39 35 52 5e c9 79 43 d9 d1 ca d5 54 a3 b6 ee c4 5d a8 6b 63 07 30 7d a6 73 b4 dd 65 ba 72 a1 7a df 6c a7 fe fe d6 5e 4e e4 90 95 6e 23 32 12 c4 1a 55 Data Ascii: +'1b"y'r7d\a2/USUD~`%=Lgbn=xDd9{h?B:C7f`1l~`/+\Cji\%lbEW,8>yV@Md1mnEL<>95R^yCT]kc0}serzl^Nn#2U
2024-10-04 07:30:47 UTC	16384	IN	Data Raw: ce f2 fe e8 1a b9 e3 49 f2 26 1c 0f 1f 45 ee 29 dd dd b3 30 20 25 b2 3c 1f 46 65 59 b4 27 33 de a0 d8 84 6d 8d 13 e9 7b 19 fd 2c 29 1a f9 07 fb 09 37 13 1e 81 af e3 38 d7 1a 8a bf c1 36 cf d0 b6 42 7c 9d 14 e0 d0 ef c9 18 43 4d c5 77 71 59 77 8e 86 e0 a6 ee b8 6d 25 93 bb 6e 34 d6 c5 bd 30 36 1f 71 7d 0a 29 8b 9e fd d3 20 11 52 2b a4 a9 df a3 6b 09 78 22 6a b0 e5 b4 03 2f 7f 92 e6 f1 e0 f1 f3 4d 94 b0 19 60 76 9a a7 23 28 93 76 42 3f c6 88 36 5d bb 46 a9 01 63 8f b8 42 99 64 e6 92 d1 19 60 eb 35 2a 5c 4d f2 80 57 d1 4d fa 51 56 f9 b1 c1 12 09 54 6e 43 94 2a ec a1 e3 f3 ac 01 44 68 83 84 57 8d 1f d1 6f d0 8f 2e e0 09 bd 70 82 4f 6d de 88 b3 06 4a 70 95 cf 7f 44 bc d8 56 9c 5a 0d 87 8d 74 00 d3 43 f9 aa 30 27 f7 48 f1 e7 7d 97 ec 41 df 0b ab 6f 63 6a 6a 99 Data Ascii: I&E)0 %<FeY'3m{,)786B\|CMwqYwm%n406q}) R+kx"j/M`v#(vB?6]FcBd`5\MWMQVTnCDhWo.pOmJpDVZtC0'H}Aocjj
2024-10-04 07:30:47 UTC	16384	IN	Data Raw: ac b0 72 18 98 1e 26 58 4c 56 0d f0 06 7e 5a ea ad 15 59 17 96 6f 16 b5 36 49 01 f9 99 3e cf 46 45 9c df 70 be 0d 1e 85 fe 33 ed 87 06 bf 78 64 42 a2 03 be a2 0f 92 e1 4a 73 fa 08 1a 35 fe 39 bf 8e 9c 9a 34 94 48 08 3d 8d b1 ad 19 96 66 3b 2a ab ae 60 84 ac bf 74 3a b2 04 69 0e a4 71 ea 6c 6a f6 bc a2 fa 6a e1 19 28 41 f3 40 09 7f 2b b7 21 10 05 39 0d 1d 7c e6 ed f6 2e 69 dc 7f 12 45 d1 08 f8 1d b0 cb 41 22 66 e0 e6 cc 3b 69 60 1c 9a 87 30 93 c0 11 da 2c 85 94 58 61 06 19 8a 3d 84 c3 a8 44 19 66 35 9d e2 26 23 96 13 55 97 30 19 53 44 9b 78 fa 7c 5f ca ac 66 f2 68 83 f3 b8 08 91 50 70 67 01 e8 36 d0 56 81 59 a7 1e f1 da 42 be c7 d0 f5 cb a1 83 f4 1b 8c 78 5c 7d a4 db 2b 40 c2 64 41 45 d3 8e 38 d9 b4 4d 48 3b 4f 45 41 18 a2 c3 86 1a c5 b9 2f 25 1d b1 44 20 Data Ascii: r&XLV~ZYo6I>FEp3xdBJs594H=f;*`t:iqljj(A@+!9\|.iEA"f;i`0,Xa=Df5&#U0SDx\|_fhPpg6VYBx\}+@dAE8MH;OEA/%D
2024-10-04 07:30:47 UTC	16384	IN	Data Raw: 94 45 81 eb 67 71 e4 c5 d2 96 22 49 58 94 cb 4c b0 28 ce 61 62 f1 fc 6e 96 f3 6a 37 35 07 4d 19 90 0e 36 3a f0 0d 9c 2a 81 1d 2d 19 4f 04 de 40 c0 62 26 f7 83 e6 5e 0a 2c 13 20 cd dc e3 81 4c 30 87 8e 93 db 32 0b 5c 91 c7 5e 1e 7a fb c1 bd 9a e3 a7 7e 22 5d df 49 b8 cb 58 2c 3d c7 97 b6 cd 93 2c 70 02 11 db 98 d7 fd 90 93 9f 3a 09 d8 4d e0 fb 22 4f a2 38 08 12 4c 58 96 44 61 92 24 79 c0 c1 25 f6 d2 4d 2d a1 52 1b 24 94 3b ae 00 c5 e6 5e 62 fb 89 1b 78 18 4e 90 88 3c b0 59 76 37 ef d3 5a 67 69 ec 70 16 b9 3c 70 d5 bf be c7 38 88 2a 89 73 df 06 52 38 ee dd 1c 76 ab dd 84 86 47 64 11 b8 76 9e 81 ab 4a 3b b4 c1 29 64 ec 05 22 64 36 13 3e 8f f7 43 bc 61 9a f0 50 d8 e0 a2 b6 90 49 06 8e 0a 36 94 83 b5 63 f1 42 3f 12 c1 7e ba 89 0c ee b9 81 88 3c 96 b9 b1 0b 29 Data Ascii: Egq"IXL(abnj75M6:-O@b&^, L02\^z~"]IX,=,p:M"O8LXDa$y%M-R$;^bxN<Yv7Zgip<p8sR8vGdvJ;)d"d6>CaPI6cB?~<)
2024-10-04 07:30:47 UTC	16384	IN	Data Raw: 8f d8 ea d9 9b bf ec dc 0e b2 86 d1 dd cf 1b 69 ae d2 87 20 3b f3 54 bf dc e8 39 98 92 df 9b e9 ad fa 56 bd f6 87 4d fd d5 09 2b 7f 60 b4 19 bd 5c 57 63 fe 76 e1 f8 44 e1 4d eb 56 ce cf ca 85 e1 99 6b 46 fe fa e7 2f c7 e3 f0 f9 bc 2a 5f a6 2f 43 db cb df 2e 09 6d 93 6d fc ed 27 a8 4e 67 a6 55 fb 42 bd 32 7c f9 79 ff 5e 15 95 06 f7 79 b3 cf de f6 6c d6 2f ff de 4c d0 b2 e0 66 95 e4 1b c6 df 68 75 5a 49 b2 b6 4b 7e 29 f3 3b 45 7e 35 f5 e6 d3 86 c8 49 f5 b7 f9 e3 52 c8 e7 05 26 bd de 5c da c9 00 69 9a fb 8d 94 9f 7f 52 40 81 90 87 74 8b d8 97 a5 ff fc 53 cd cc 93 55 2e bc 7c 7d 07 9a df 99 8e ee 84 bf bf be 46 ad 7d da 44 8b bf 2a 5a 69 99 a1 14 ea 2f 0c 99 ee a4 4c cf 2a 96 cb f4 2e 3a 75 5d f5 ee aa f5 ae aa eb dd 94 bb a2 7a c9 2e 49 ce cd 95 5e fa 53 55 Data Ascii: i ;T9VM+`\WcvDMVkF/_/C.mm'NgUB2\|y^yl/LfhuZIK~);E~5IR&\iR@tSU.\|}F}DZi/L*.:u]z.I^SU
2024-10-04 07:30:47 UTC	8297	IN	Data Raw: 44 5d 0b 2d 94 1e 42 c1 d7 11 0b b1 0e 2a 15 3c 8f e9 63 3a 55 74 59 09 2e b5 00 1f e3 aa bd 03 35 07 6f 63 52 84 e7 2f 6d 92 c1 e9 10 89 6f ae 45 64 ba b3 43 a5 af 97 81 17 65 a6 74 2d 26 19 e0 80 9e a0 b0 1d df 68 09 61 20 c0 85 83 29 61 48 2a cd e5 cf 7e 0c d2 57 4b 07 9f 78 e2 49 14 5d ce 09 3e 99 f3 27 2f 6d 97 38 30 1e 7c b6 e4 cf 4e 38 0a 33 4c d5 40 bd e9 d0 e1 50 24 7f 1e c3 bf b1 06 0f 4e 81 10 48 7c 90 24 91 1b 20 ed 03 48 60 11 18 c0 df 52 33 97 8f 0d 06 a7 3c 12 12 8f 96 45 c9 f6 12 df 00 07 55 bc 63 54 71 cd 81 80 87 c9 0c c9 f0 fc 90 cd e8 24 9c df 9c 84 58 fe 14 b4 11 18 8c a3 2c 8c d0 3b 09 05 72 21 3d 3f 79 c2 e0 8a 58 f5 91 88 53 0a 1e 03 57 fb 24 b5 72 e2 fb 78 24 c9 09 e7 35 b1 e3 10 7d 02 b4 2b ba f2 ef 43 7b 99 5e 89 cc e2 2f b4 19 Data Ascii: D]-B<c:UtY.5ocR/moEdCet-&ha )aH~WKxI]>'/m80\|N83L@P$NH\|$ H`R3<EUcTq$X,;r!=?yXSW$rx$5}+C{^/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49762	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:45 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:46 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:46 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: 7f0ef5b1-b01e-0004-6fab-0f39ee000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073046Z-15767c5fc55qdcd62bsn50hd6s0000000c10000000004429 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:46 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-04 07:30:46 UTC	733	IN	Data Raw: c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 1c b1 69 b0 ed 3a Data Ascii: ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!i:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49765	13.107.246.44	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:46 UTC	429	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:46 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:46 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: a5d0e249-001e-000a-643c-13584c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073046Z-15767c5fc55n4msds84xh4z67w00000005wg000000005zv3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:46 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-04 07:30:46 UTC	733	IN	Data Raw: c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 1c b1 69 b0 ed 3a Data Ascii: ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!i:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49756	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:47 UTC	618	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:48 UTC	813	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:47 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: 81b58fb2-b01e-0059-76aa-0f336a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073047Z-15767c5fc55kg97hfq5uqyxxaw0000000c600000000066ea x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:48 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-10-04 07:30:48 UTC	16384	IN	Data Raw: c6 f1 60 48 76 39 a2 ca 7d 0a c4 6c 46 7b 28 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 Data Ascii: `Hv9}lF{(rH)Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUF
2024-10-04 07:30:48 UTC	16384	IN	Data Raw: d6 d6 bf a7 c9 82 82 ed 58 a9 a7 1e 3e d1 2c 29 8c 92 ca 92 96 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 Data Ascii: X>,)i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9
2024-10-04 07:30:48 UTC	16384	IN	Data Raw: a4 ca a6 93 a3 67 05 69 b4 c6 7e c4 d9 e3 39 43 68 1e b4 61 d1 c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 Data Ascii: gi~9Chajuh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7
2024-10-04 07:30:48 UTC	16384	IN	Data Raw: 41 1f ce 63 f8 7c 38 cb 6e 62 8c 3e 56 eb 18 50 d0 d5 39 aa fa b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 Data Ascii: Ac\|8nb>VP9^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{
2024-10-04 07:30:48 UTC	16384	IN	Data Raw: 6f 8f 8c 3d a0 b1 ba b9 56 ed db 8d 94 af 1a 74 72 fb 31 53 f0 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 Data Ascii: o=Vtr1SojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$s
2024-10-04 07:30:48 UTC	16384	IN	Data Raw: 28 6a 74 56 53 66 c5 fe cf 72 5c d8 9f 15 29 63 4d 91 32 d6 52 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc Data Ascii: (jtVSfr\)cM2R6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3
2024-10-04 07:30:48 UTC	2490	IN	Data Raw: 76 68 98 bc a0 3f 40 4a 03 1c b3 42 1d 27 14 de 2c 30 3f 34 26 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f Data Ascii: vh?@JB',0?4&x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49767	13.107.246.44	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:48 UTC	410	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:48 UTC	798	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:48 GMT Content-Type: application/x-javascript Content-Length: 122193 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 01:33:09 GMT ETag: 0x8DCCC8188A08D46 x-ms-request-id: a6e6408e-701e-003f-0d12-103458000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073048Z-15767c5fc55d6fcl6x6bw8cpdc0000000c30000000006fuv x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:48 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 51 58 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 ef c8 8e 99 5b 0a 83 52 18 95 bc c0 09 a3 59 18 d9 09 8b 4b 53 f8 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsQXOix)NK7KW`G/.=[RYKS7l4i)ydY$.^@R%oJgP7(70Vj#Yi,*<zcs0I)b
2024-10-04 07:30:48 UTC	16384	IN	Data Raw: 5a 40 01 48 3f 65 7e fe 9d 70 17 86 b2 5a 68 c6 d8 53 99 2b af 38 61 68 21 9b ce f0 76 06 77 2f b1 8a f6 1c e0 29 00 38 c8 06 c3 b2 0a 2b df 30 39 1d 64 f6 0d 4f 7a e2 7e 34 6d 3a 9a 00 0c 34 01 08 95 1f a4 6f 71 e1 37 9b b1 78 a5 1c ea ef e8 81 02 0a d3 b1 1d 3d 65 57 f3 d1 f7 33 e7 1d 77 84 3e 5b e4 6f 88 37 0e 56 73 7f 47 df 2d 25 77 ad 3e cb 46 b1 09 fd 59 e9 9a c6 25 5e 69 86 3d a4 ea 02 54 96 92 e8 0a dd c2 1a 8f 36 b8 e8 31 2b aa 16 b9 42 96 2b 1f f5 5b f8 9d e1 36 fa d1 00 84 23 1a 82 2d d1 a8 e4 55 1d 39 d3 31 2c 3a 0c 18 07 db b4 66 53 10 09 0c e7 b8 eb e1 00 b8 8f 67 e8 6b fa e2 d9 63 2f 68 1b f4 cd 05 5f 49 5f d2 84 a2 d5 ed ad f3 4c d4 f3 44 d8 0b 44 4c 5c 78 f3 82 ab 26 01 e4 a3 c7 f5 32 bb 60 81 8c 06 67 3a 21 1f 45 b4 1c 02 ad c9 fa cc a4 Data Ascii: Z@H?e~pZhS+8ah!vw/)8+09dOz~4m:4oq7x=eW3w>[o7VsG-%w>FY%^i=T61+B+[6#-U91,:fSgkc/h_I_LDDL\x&2`g:!E
2024-10-04 07:30:48 UTC	16384	IN	Data Raw: 77 01 ab 86 93 13 0d e2 04 ad c1 bb 90 2b c3 9b df 13 1b 27 31 62 9a df 88 b4 22 90 79 9f bc 0f 9c 27 11 fb 1f b8 72 a6 d3 af de 87 e3 dd 83 c3 37 64 0e c5 fd 5c 9d 61 05 a8 a8 c7 32 2f 55 dd 9b 53 55 9e d8 44 8b 91 7e 0a 94 60 d1 1a 25 3d 4c a7 67 62 6e 14 d4 3d c4 dd 94 09 78 03 83 b1 98 8c 98 fa 44 64 c2 09 39 8c 7b 11 12 01 b7 84 d2 68 0b 3f 42 3a 43 9e 37 ea 66 1f 11 96 d2 99 0b de 60 31 6c 06 7e 1f 60 2f e5 2b 1b 5c 43 6a dd 95 0d ee cc 69 5c a5 09 1f 25 9d b5 6c f7 bc 62 11 b4 c2 84 82 a9 45 99 57 f5 2c 9d e8 c5 38 e0 86 3e a7 79 15 8b 8b 56 aa 40 4d 64 ec bc 31 ab ab 6d 1e 6e 1b c3 dc 45 ef e1 4c 03 88 3c c8 3e b0 fe 39 35 52 5e c9 79 43 d9 d1 ca d5 54 a3 b6 ee c4 5d a8 6b 63 07 30 7d a6 73 b4 dd 65 ba 72 a1 7a df 6c a7 fe fe d6 5e 4e e4 90 95 6e Data Ascii: w+'1b"y'r7d\a2/USUD~`%=Lgbn=xDd9{h?B:C7f`1l~`/+\Cji\%lbEW,8>yV@Md1mnEL<>95R^yCT]kc0}serzl^Nn
2024-10-04 07:30:48 UTC	16384	IN	Data Raw: 30 09 f5 14 35 60 ce f2 fe e8 1a b9 e3 49 f2 26 1c 0f 1f 45 ee 29 dd dd b3 30 20 25 b2 3c 1f 46 65 59 b4 27 33 de a0 d8 84 6d 8d 13 e9 7b 19 fd 2c 29 1a f9 07 fb 09 37 13 1e 81 af e3 38 d7 1a 8a bf c1 36 cf d0 b6 42 7c 9d 14 e0 d0 ef c9 18 43 4d c5 77 71 59 77 8e 86 e0 a6 ee b8 6d 25 93 bb 6e 34 d6 c5 bd 30 36 1f 71 7d 0a 29 8b 9e fd d3 20 11 52 2b a4 a9 df a3 6b 09 78 22 6a b0 e5 b4 03 2f 7f 92 e6 f1 e0 f1 f3 4d 94 b0 19 60 76 9a a7 23 28 93 76 42 3f c6 88 36 5d bb 46 a9 01 63 8f b8 42 99 64 e6 92 d1 19 60 eb 35 2a 5c 4d f2 80 57 d1 4d fa 51 56 f9 b1 c1 12 09 54 6e 43 94 2a ec a1 e3 f3 ac 01 44 68 83 84 57 8d 1f d1 6f d0 8f 2e e0 09 bd 70 82 4f 6d de 88 b3 06 4a 70 95 cf 7f 44 bc d8 56 9c 5a 0d 87 8d 74 00 d3 43 f9 aa 30 27 f7 48 f1 e7 7d 97 ec 41 df 0b Data Ascii: 05`I&E)0 %<FeY'3m{,)786B\|CMwqYwm%n406q}) R+kx"j/M`v#(vB?6]FcBd`5\MWMQVTnCDhWo.pOmJpDVZtC0'H}A
2024-10-04 07:30:48 UTC	16384	IN	Data Raw: 92 03 92 9f b2 90 ac b0 72 18 98 1e 26 58 4c 56 0d f0 06 7e 5a ea ad 15 59 17 96 6f 16 b5 36 49 01 f9 99 3e cf 46 45 9c df 70 be 0d 1e 85 fe 33 ed 87 06 bf 78 64 42 a2 03 be a2 0f 92 e1 4a 73 fa 08 1a 35 fe 39 bf 8e 9c 9a 34 94 48 08 3d 8d b1 ad 19 96 66 3b 2a ab ae 60 84 ac bf 74 3a b2 04 69 0e a4 71 ea 6c 6a f6 bc a2 fa 6a e1 19 28 41 f3 40 09 7f 2b b7 21 10 05 39 0d 1d 7c e6 ed f6 2e 69 dc 7f 12 45 d1 08 f8 1d b0 cb 41 22 66 e0 e6 cc 3b 69 60 1c 9a 87 30 93 c0 11 da 2c 85 94 58 61 06 19 8a 3d 84 c3 a8 44 19 66 35 9d e2 26 23 96 13 55 97 30 19 53 44 9b 78 fa 7c 5f ca ac 66 f2 68 83 f3 b8 08 91 50 70 67 01 e8 36 d0 56 81 59 a7 1e f1 da 42 be c7 d0 f5 cb a1 83 f4 1b 8c 78 5c 7d a4 db 2b 40 c2 64 41 45 d3 8e 38 d9 b4 4d 48 3b 4f 45 41 18 a2 c3 86 1a c5 b9 Data Ascii: r&XLV~ZYo6I>FEp3xdBJs594H=f;*`t:iqljj(A@+!9\|.iEA"f;i`0,Xa=Df5&#U0SDx\|_fhPpg6VYBx\}+@dAE8MH;OEA
2024-10-04 07:30:48 UTC	16384	IN	Data Raw: 18 b5 fc df b9 b3 94 45 81 eb 67 71 e4 c5 d2 96 22 49 58 94 cb 4c b0 28 ce 61 62 f1 fc 6e 96 f3 6a 37 35 07 4d 19 90 0e 36 3a f0 0d 9c 2a 81 1d 2d 19 4f 04 de 40 c0 62 26 f7 83 e6 5e 0a 2c 13 20 cd dc e3 81 4c 30 87 8e 93 db 32 0b 5c 91 c7 5e 1e 7a fb c1 bd 9a e3 a7 7e 22 5d df 49 b8 cb 58 2c 3d c7 97 b6 cd 93 2c 70 02 11 db 98 d7 fd 90 93 9f 3a 09 d8 4d e0 fb 22 4f a2 38 08 12 4c 58 96 44 61 92 24 79 c0 c1 25 f6 d2 4d 2d a1 52 1b 24 94 3b ae 00 c5 e6 5e 62 fb 89 1b 78 18 4e 90 88 3c b0 59 76 37 ef d3 5a 67 69 ec 70 16 b9 3c 70 d5 bf be c7 38 88 2a 89 73 df 06 52 38 ee dd 1c 76 ab dd 84 86 47 64 11 b8 76 9e 81 ab 4a 3b b4 c1 29 64 ec 05 22 64 36 13 3e 8f f7 43 bc 61 9a f0 50 d8 e0 a2 b6 90 49 06 8e 0a 36 94 83 b5 63 f1 42 3f 12 c1 7e ba 89 0c ee b9 81 88 Data Ascii: Egq"IXL(abnj75M6:-O@b&^, L02\^z~"]IX,=,p:M"O8LXDa$y%M-R$;^bxN<Yv7Zgip<p8sR8vGdvJ;)d"d6>CaPI6cB?~
2024-10-04 07:30:48 UTC	16384	IN	Data Raw: 12 cf 7f 7a f2 a0 8f d8 ea d9 9b bf ec dc 0e b2 86 d1 dd cf 1b 69 ae d2 87 20 3b f3 54 bf dc e8 39 98 92 df 9b e9 ad fa 56 bd f6 87 4d fd d5 09 2b 7f 60 b4 19 bd 5c 57 63 fe 76 e1 f8 44 e1 4d eb 56 ce cf ca 85 e1 99 6b 46 fe fa e7 2f c7 e3 f0 f9 bc 2a 5f a6 2f 43 db cb df 2e 09 6d 93 6d fc ed 27 a8 4e 67 a6 55 fb 42 bd 32 7c f9 79 ff 5e 15 95 06 f7 79 b3 cf de f6 6c d6 2f ff de 4c d0 b2 e0 66 95 e4 1b c6 df 68 75 5a 49 b2 b6 4b 7e 29 f3 3b 45 7e 35 f5 e6 d3 86 c8 49 f5 b7 f9 e3 52 c8 e7 05 26 bd de 5c da c9 00 69 9a fb 8d 94 9f 7f 52 40 81 90 87 74 8b d8 97 a5 ff fc 53 cd cc 93 55 2e bc 7c 7d 07 9a df 99 8e ee 84 bf bf be 46 ad 7d da 44 8b bf 2a 5a 69 99 a1 14 ea 2f 0c 99 ee a4 4c cf 2a 96 cb f4 2e 3a 75 5d f5 ee aa f5 ae aa eb dd 94 bb a2 7a c9 2e 49 ce Data Ascii: zi ;T9VM+`\WcvDMVkF/_/C.mm'NgUB2\|y^yl/LfhuZIK~);E~5IR&\iR@tSU.\|}F}DZi/L*.:u]z.I
2024-10-04 07:30:48 UTC	8303	IN	Data Raw: 60 d5 08 91 5e b1 44 5d 0b 2d 94 1e 42 c1 d7 11 0b b1 0e 2a 15 3c 8f e9 63 3a 55 74 59 09 2e b5 00 1f e3 aa bd 03 35 07 6f 63 52 84 e7 2f 6d 92 c1 e9 10 89 6f ae 45 64 ba b3 43 a5 af 97 81 17 65 a6 74 2d 26 19 e0 80 9e a0 b0 1d df 68 09 61 20 c0 85 83 29 61 48 2a cd e5 cf 7e 0c d2 57 4b 07 9f 78 e2 49 14 5d ce 09 3e 99 f3 27 2f 6d 97 38 30 1e 7c b6 e4 cf 4e 38 0a 33 4c d5 40 bd e9 d0 e1 50 24 7f 1e c3 bf b1 06 0f 4e 81 10 48 7c 90 24 91 1b 20 ed 03 48 60 11 18 c0 df 52 33 97 8f 0d 06 a7 3c 12 12 8f 96 45 c9 f6 12 df 00 07 55 bc 63 54 71 cd 81 80 87 c9 0c c9 f0 fc 90 cd e8 24 9c df 9c 84 58 fe 14 b4 11 18 8c a3 2c 8c d0 3b 09 05 72 21 3d 3f 79 c2 e0 8a 58 f5 91 88 53 0a 1e 03 57 fb 24 b5 72 e2 fb 78 24 c9 09 e7 35 b1 e3 10 7d 02 b4 2b ba f2 ef 43 7b 99 5e Data Ascii: `^D]-B<c:UtY.5ocR/moEdCet-&ha )aH~WKxI]>'/m80\|N83L@P$NH\|$ H`R3<EUcTq$X,;r!=?yXSW$rx$5}+C{^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49768	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:48 UTC	649	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:48 UTC	738	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:48 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 20de5975-101e-003a-5fe7-0fd92e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073048Z-15767c5fc55lghvzbxktxfqntw0000000c000000000013xf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:48 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-04 07:30:48 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49769	13.107.246.44	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:48 UTC	433	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:48 UTC	792	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:48 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: 81b58fb2-b01e-0059-76aa-0f336a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073048Z-15767c5fc554w2fgapsyvy8ua00000000br00000000052kb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:48 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-10-04 07:30:49 UTC	16384	IN	Data Raw: 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 ae d0 47 c2 99 47 5b 6a a1 db c9 ce 2d d0 71 08 5a 64 11 58 a4 Data Ascii: Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUFGG[j-qZdX
2024-10-04 07:30:49 UTC	16384	IN	Data Raw: 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 5e a0 b7 cf f0 f1 eb 15 f7 97 49 1a 67 29 5a 32 4a cf 61 c8 54 Data Ascii: i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9^Ig)Z2JaT
2024-10-04 07:30:49 UTC	16384	IN	Data Raw: c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 22 bf 58 45 07 fb 68 b5 36 b5 cb 52 b6 2d b7 eb c7 d3 70 f8 10 Data Ascii: juh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7"XEh6R-p
2024-10-04 07:30:49 UTC	16384	IN	Data Raw: b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 02 d4 b7 02 3a c1 61 cd 3d bd 16 ca 31 da 5e 8c 95 df 45 cb 01 Data Ascii: ^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{:a=1^E
2024-10-04 07:30:49 UTC	16384	IN	Data Raw: 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 b4 02 92 4b d5 b1 75 17 96 0e b3 72 50 0e 90 16 c6 12 14 96 41 Data Ascii: ojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$sKurPA
2024-10-04 07:30:49 UTC	16384	IN	Data Raw: 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc 62 0c f8 da ff d2 10 b6 5d 8b f8 dd ff 09 a0 f2 fc 73 ab 3f de Data Ascii: 6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3 b]s?
2024-10-04 07:30:49 UTC	2469	IN	Data Raw: 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f e7 bf 94 24 d3 33 bf ed be 46 3e eb 7b 14 3a 2b 1d a6 4f fa be Data Ascii: x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC$3F>{:+O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49772	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:48 UTC	662	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:49 UTC	784	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:48 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 9c7b4821-901e-0045-01cb-0f2918000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073048Z-15767c5fc55xsgnlxyxy40f4m00000000c6g0000000018ug x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:49 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49770	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:48 UTC	663	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:49 UTC	806	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:49 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: adf1d5ec-d01e-002d-0381-10079a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073049Z-15767c5fc55472x4k7dmphmadg0000000bt000000000acwa x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-04 07:30:49 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49771	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:48 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:49 UTC	812	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:48 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: b9620ef8-901e-0037-449c-112e57000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073048Z-15767c5fc55whfstvfw43u8fp40000000c7g00000000b91u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-04 07:30:49 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-10-04 07:30:49 UTC	16384	IN	Data Raw: 19 bb cd 17 f0 ef de f3 f6 f9 b2 b5 d7 7c 4e 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c Data Ascii: \|N6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x
2024-10-04 07:30:49 UTC	3212	IN	Data Raw: 38 5d 1d 96 55 52 b0 ee 65 51 a5 80 82 a6 5f a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 Data Ascii: 8]UReQ_-av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49774	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:49 UTC	663	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:49 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:49 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 73ae05e7-d01e-0057-22bd-116d65000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073049Z-15767c5fc55gs96cphvgp5f5vc0000000c2g000000007gxk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:49 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49775	13.107.246.44	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:49 UTC	404	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:49 UTC	738	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:49 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 72d544b4-901e-0079-6c3f-123f72000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073049Z-15767c5fc55kg97hfq5uqyxxaw0000000cag000000000dbx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:49 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-04 07:30:49 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49777	13.107.246.44	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:49 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:49 UTC	805	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:49 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 9c7b4821-901e-0045-01cb-0f2918000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073049Z-15767c5fc55rg5b7sh1vuv8t7n0000000cf0000000008wca x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-04 07:30:49 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49776	13.107.246.44	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:49 UTC	418	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:49 UTC	785	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:49 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: adf1d5ec-d01e-002d-0381-10079a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073049Z-15767c5fc55dtdv4d4saq7t47n0000000bwg00000000a8t2 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:49 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49778	13.107.246.44	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:49 UTC	439	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:49 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:49 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: b9620ef8-901e-0037-449c-112e57000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073049Z-15767c5fc55472x4k7dmphmadg0000000bz0000000001v0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:49 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-10-04 07:30:50 UTC	16384	IN	Data Raw: 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c cb 13 7e 4b 7f b3 f5 a0 bd 18 b0 9c 02 ae 84 ce 0c ce 0e 98 ef Data Ascii: }L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x~K
2024-10-04 07:30:50 UTC	3191	IN	Data Raw: 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 23 de 14 2a 36 0a d3 69 66 72 2e 59 04 99 e6 f2 d3 c0 28 c8 74 Data Ascii: -av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x#*6ifr.Y(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49779	13.107.246.44	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:50 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:50 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:50 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 73ae05e7-d01e-0057-22bd-116d65000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073050Z-15767c5fc55tsfp92w7yna557w0000000c3g00000000bek4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:50 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49781	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:57 UTC	668	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:57 UTC	740	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:57 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: 48845bf4-101e-0022-5767-1571f6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073057Z-15767c5fc55whfstvfw43u8fp40000000ccg000000002sn1 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:57 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49780	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:57 UTC	662	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:57 UTC	734	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:57 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: e982a800-401e-007a-2a28-15de16000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073057Z-15767c5fc55d6fcl6x6bw8cpdc0000000c500000000038mn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:57 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49784	13.107.246.44	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:58 UTC	423	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:58 UTC	740	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:58 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: 9f37b09b-401e-0072-2bf1-0fb3a6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073058Z-15767c5fc554wklc0x4mc5pq0w0000000ce000000000ahms x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:58 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49783	13.107.246.44	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:58 UTC	417	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:58 UTC	740	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:58 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: 1bdbb6f5-801e-005a-4707-10a5b1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073058Z-15767c5fc55tsfp92w7yna557w0000000c7g000000004q5b x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:30:58 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49785	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:30:59 UTC	616	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:30:59 UTC	797	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:30:59 GMT Content-Type: application/x-javascript Content-Length: 2419 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD53179165EC x-ms-request-id: f9a6c225-301e-002e-282f-16aeec000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073059Z-15767c5fc55sdcjq8ksxt4n9mc00000001fg000000007m54 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-04 07:30:59 UTC	2419	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 58 6d 6f db 38 12 fe de 5f 41 6b 81 44 da ca b2 9d f7 38 55 8b ac 93 6c b3 d7 26 39 db dd c5 a1 29 0c 5a a2 2d d6 12 29 90 94 1d 5f e2 ff 7e 43 bd d8 96 5f 92 b4 f7 e5 f6 0c 24 92 a8 e1 cc 70 e6 79 86 43 d5 7e ad bc 41 bf a2 ea eb 7f a8 d3 3d 6f 77 d1 ed 15 ea 7e bc 6e 5f a0 3b 78 fa 17 ba b9 ed 5e b7 2e 5f af 47 1b d5 7f dd 80 4a 34 a0 21 41 70 ed 63 49 7c c4 19 e2 02 51 e6 71 11 73 81 15 91 28 82 ff 82 e2 10 0d 04 8f 90 0a 08 8a 05 ff 4e 3c 25 51 48 a5 82 49 7d 12 f2 09 32 41 9d f0 d1 1d 16 6a 8a ae ef 2c 07 f4 13 d0 46 87 94 c1 6c 8f c7 53 b8 0f 14 62 5c 51 8f 20 cc fc 54 5b 08 0f 4c 12 94 30 9f 08 34 09 a8 17 a0 cf d4 13 5c f2 81 42 82 78 84 8e c1 88 4c 60 bc 6c c2 46 58 10 24 89 42 03 2e 54 90 f9 e1 a0 8e 96 cc b5 ca Data Ascii: Xmo8_AkD8Ul&9)Z-)_~C_$pyC~A=ow~n_;x^._GJ4!ApcI\|Qqs(N<%QHI}2Aj,FlSb\Q T[L04\BxL`lFX$B.T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49787	13.107.246.44	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:00 UTC	431	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:00 UTC	817	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:00 GMT Content-Type: application/x-javascript Content-Length: 2419 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD53179165EC x-ms-request-id: f9a6c225-301e-002e-282f-16aeec000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073100Z-15767c5fc55d6fcl6x6bw8cpdc0000000c30000000006g37 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-04 07:31:00 UTC	2419	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 58 6d 6f db 38 12 fe de 5f 41 6b 81 44 da ca b2 9d f7 38 55 8b ac 93 6c b3 d7 26 39 db dd c5 a1 29 0c 5a a2 2d d6 12 29 90 94 1d 5f e2 ff 7e 43 bd d8 96 5f 92 b4 f7 e5 f6 0c 24 92 a8 e1 cc 70 e6 79 86 43 d5 7e ad bc 41 bf a2 ea eb 7f a8 d3 3d 6f 77 d1 ed 15 ea 7e bc 6e 5f a0 3b 78 fa 17 ba b9 ed 5e b7 2e 5f af 47 1b d5 7f dd 80 4a 34 a0 21 41 70 ed 63 49 7c c4 19 e2 02 51 e6 71 11 73 81 15 91 28 82 ff 82 e2 10 0d 04 8f 90 0a 08 8a 05 ff 4e 3c 25 51 48 a5 82 49 7d 12 f2 09 32 41 9d f0 d1 1d 16 6a 8a ae ef 2c 07 f4 13 d0 46 87 94 c1 6c 8f c7 53 b8 0f 14 62 5c 51 8f 20 cc fc 54 5b 08 0f 4c 12 94 30 9f 08 34 09 a8 17 a0 cf d4 13 5c f2 81 42 82 78 84 8e c1 88 4c 60 bc 6c c2 46 58 10 24 89 42 03 2e 54 90 f9 e1 a0 8e 96 cc b5 ca Data Ascii: Xmo8_AkD8Ul&9)Z-)_~C_$pyC~A=ow~n_;x^._GJ4!ApcI\|Qqs(N<%QHI}2Aj,FlSb\Q T[L04\BxL`lFX$B.T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49789	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:00 UTC	667	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:00 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:00 GMT Content-Type: image/svg+xml Content-Length: 628 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4963155C x-ms-request-id: bf0722b0-801e-0042-3c26-150d69000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073100Z-15767c5fc55472x4k7dmphmadg0000000bx0000000003sw5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:31:00 UTC	628	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 3b 1d 07 0b 36 Data Ascii: mMo0]%F6rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49788	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:00 UTC	667	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:00 UTC	806	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:00 GMT Content-Type: image/svg+xml Content-Length: 254 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F496CFFA1 x-ms-request-id: 451f5e04-301e-004f-2613-16b202000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073100Z-15767c5fc55fdfx81a30vtr1fw0000000ce000000000brxm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-04 07:31:00 UTC	254	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 50 cb 6e c3 20 10 fc 15 44 af 78 59 30 06 5c d9 96 d2 7b 7f 20 37 cb a1 06 c9 79 c8 46 21 fd fb 9a 90 f6 54 0d 9a 59 98 59 ad 96 6e bb cf e4 71 5e 2e 5b 4f 7d 8c b7 77 ce 53 4a 90 6a b8 ae 33 97 88 c8 f7 04 25 29 9c a2 ef a9 b2 94 78 17 66 1f 4b 7d 0f 2e 7d 5c 1f 3d 45 82 44 d9 fd d0 a1 8b 21 2e 6e 18 b7 cd c5 ad e3 e5 d6 4d 61 9d 16 47 a6 3d 2b 15 25 d3 77 d1 b5 c8 57 58 96 9e be 39 9d 41 f9 d0 dd c6 e8 c9 a9 a7 9f a2 06 a5 58 ad bd 80 56 8e 16 b4 62 4f 42 26 32 0c 48 cb b0 98 02 a1 31 35 7b 09 66 54 1a 1a dd 56 2d 18 23 98 01 6d 0b e5 66 ac 0c b4 56 32 3c fc d3 c7 7e c7 1e cf 0a 6c 25 34 d4 f2 d0 80 d1 ec 49 65 b8 54 4c 36 39 96 df f4 8b b1 98 16 76 57 b4 fb b0 e3 df 76 0a 33 f2 76 f9 4f 87 1f 7d d7 81 14 7b 01 00 00 Data Ascii: mPn DxY0\{ 7yF!TYYnq^.[O}wSJj3%)xfK}.}\=ED!.nMaG=+%wWX9AXVbOB&2H15{fTV-#mfV2<~l%4IeTL69vWv3vO}{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49790	13.107.246.44	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:01 UTC	422	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:01 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:01 GMT Content-Type: image/svg+xml Content-Length: 628 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4963155C x-ms-request-id: bf0722b0-801e-0042-3c26-150d69000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073101Z-15767c5fc55xsgnlxyxy40f4m00000000c4g0000000043gh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:31:01 UTC	628	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 3b 1d 07 0b 36 Data Ascii: mMo0]%F6rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49791	13.107.246.44	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:01 UTC	422	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:01 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:01 GMT Content-Type: image/svg+xml Content-Length: 254 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F496CFFA1 x-ms-request-id: 451f5e04-301e-004f-2613-16b202000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073101Z-15767c5fc55ncqdn59ub6rndq00000000by0000000002v5h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:31:01 UTC	254	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 50 cb 6e c3 20 10 fc 15 44 af 78 59 30 06 5c d9 96 d2 7b 7f 20 37 cb a1 06 c9 79 c8 46 21 fd fb 9a 90 f6 54 0d 9a 59 98 59 ad 96 6e bb cf e4 71 5e 2e 5b 4f 7d 8c b7 77 ce 53 4a 90 6a b8 ae 33 97 88 c8 f7 04 25 29 9c a2 ef a9 b2 94 78 17 66 1f 4b 7d 0f 2e 7d 5c 1f 3d 45 82 44 d9 fd d0 a1 8b 21 2e 6e 18 b7 cd c5 ad e3 e5 d6 4d 61 9d 16 47 a6 3d 2b 15 25 d3 77 d1 b5 c8 57 58 96 9e be 39 9d 41 f9 d0 dd c6 e8 c9 a9 a7 9f a2 06 a5 58 ad bd 80 56 8e 16 b4 62 4f 42 26 32 0c 48 cb b0 98 02 a1 31 35 7b 09 66 54 1a 1a dd 56 2d 18 23 98 01 6d 0b e5 66 ac 0c b4 56 32 3c fc d3 c7 7e c7 1e cf 0a 6c 25 34 d4 f2 d0 80 d1 ec 49 65 b8 54 4c 36 39 96 df f4 8b b1 98 16 76 57 b4 fb b0 e3 df 76 0a 33 f2 76 f9 4f 87 1f 7d d7 81 14 7b 01 00 00 Data Ascii: mPn DxY0\{ 7yF!TYYnq^.[O}wSJj3%)xfK}.}\=ED!.nMaG=+%wWX9AXVbOB&2H15{fTV-#mfV2<~l%4IeTL69vWv3vO}{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49792	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:04 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=M22rboTO7a4X5or&MD=RnNXoG6v HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-04 07:31:04 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: f8b7c9f3-5516-43c6-9a3d-09c3a4608b26 MS-RequestId: e276ad70-55c6-4d47-83a7-76ab2992ab1b MS-CV: qf7XRvoDh0Se+xlT.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 07:31:03 GMT Connection: close Content-Length: 30005
2024-10-04 07:31:04 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-04 07:31:04 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49796	152.199.21.175	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:10 UTC	595	OUT	GET /shared/5/js/login_en_aoiK-OIF0h_hqcPcffI9dw2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:10 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 306118 Cache-Control: public, max-age=31536000 Content-MD5: hJPa+mgHJONLVbTgVeb3Eg== Content-Type: application/x-javascript Date: Fri, 04 Oct 2024 07:31:10 GMT Etag: 0x8DCDF85522574BC Last-Modified: Sat, 28 Sep 2024 06:18:08 GMT Server: ECAcc (lhc/7951) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 37bb8f72-401e-0082-5666-138b92000000 x-ms-version: 2009-09-19 Content-Length: 945160 Connection: close
2024-10-04 07:31:10 UTC	15653	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6c 6f 67 69 6e 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 3d 7b 35 31 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 39 35 31 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 67 65 74 44 65 72 69 Data Ascii: /! For license information please see login_en.js.LICENSE.txt /!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDeri
2024-10-04 07:31:10 UTC	16383	IN	Data Raw: 22 21 3d 3d 28 6e 3d 65 2e 6e 61 6d 65 29 26 26 28 65 2e 6e 61 6d 65 3d 22 22 29 2c 65 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3d 21 21 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 43 68 65 63 6b 65 64 2c 22 22 21 3d 3d 6e 26 26 28 65 2e 6e 61 6d 65 3d 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 45 65 28 65 2c 74 2c 6e 29 7b 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 3d 3d 65 7c 7c 28 6e 75 6c 6c 3d 3d 6e 3f 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 22 22 2b 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 3a 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 21 3d 3d 22 22 2b 6e 26 26 28 65 2e 64 65 66 61 75 6c 74 56 Data Ascii: "!==(n=e.name)&&(e.name=""),e.defaultChecked=!!e._wrapperState.initialChecked,""!==n&&(e.name=n)}function Ee(e,t,n){"number"===t&&e.ownerDocument.activeElement===e\|\|(null==n?e.defaultValue=""+e._wrapperState.initialValue:e.defaultValue!==""+n&&(e.defaultV
2024-10-04 07:31:10 UTC	16383	IN	Data Raw: 7c 7c 33 3d 3d 3d 74 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 6e 28 65 29 7b 65 3d 65 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 65 3b 29 7b 69 66 28 38 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 6e 3d 65 2e 64 61 74 61 3b 69 66 28 22 24 22 3d 3d 3d 6e 7c 7c 6e 3d 3d 3d 77 6e 7c 7c 6e 3d 3d 3d 76 6e 29 7b 69 66 28 30 3d 3d 3d 74 29 72 65 74 75 72 6e 20 65 3b 74 2d 2d 7d 65 6c 73 65 22 2f 24 22 3d 3d 3d 6e 26 26 74 2b 2b 7d 65 3d 65 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 76 61 72 20 45 6e 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 73 6c 69 63 65 28 32 29 2c 54 6e 3d 22 5f 5f Data Ascii: \|\|3===t)break}return e}function An(e){e=e.previousSibling;for(var t=0;e;){if(8===e.nodeType){var n=e.data;if("$"===n\|\|n===wn\|\|n===vn){if(0===t)return e;t--}else"/$"===n&&t++}e=e.previousSibling}return null}var En=Math.random().toString(36).slice(2),Tn="__
2024-10-04 07:31:10 UTC	16383	IN	Data Raw: 69 6c 64 43 6f 6e 74 65 78 74 3d 69 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 50 6f 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 28 65 3d 65 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 6f 28 29 7b 6d 6f 28 76 6f 29 2c 6d 6f 28 79 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 78 6f 28 65 2c 74 2c 6e 29 7b 69 66 28 79 6f 2e 63 75 72 72 65 6e 74 21 3d 3d 62 6f 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 31 36 38 29 29 3b 68 6f 28 79 6f 2c 74 29 2c 68 6f 28 76 6f 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6f 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 65 3d 74 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 2e Data Ascii: ildContext=i),i}function Po(e){return null!=(e=e.childContextTypes)}function Oo(){mo(vo),mo(yo)}function xo(e,t,n){if(yo.current!==bo)throw Error(l(168));ho(yo,t),ho(vo,n)}function _o(e,t,n){var r=e.stateNode;if(e=t.childContextTypes,"function"!=typeof r.
2024-10-04 07:31:10 UTC	16383	IN	Data Raw: 6d 6f 69 7a 65 64 53 74 61 74 65 3d 69 2c 6e 75 6c 6c 3d 3d 3d 74 2e 62 61 73 65 51 75 65 75 65 26 26 28 74 2e 62 61 73 65 53 74 61 74 65 3d 69 29 2c 6e 2e 6c 61 73 74 52 65 6e 64 65 72 65 64 53 74 61 74 65 3d 69 7d 72 65 74 75 72 6e 5b 69 2c 72 5d 7d 66 75 6e 63 74 69 6f 6e 20 61 61 28 65 29 7b 76 61 72 20 74 3d 74 61 28 29 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 65 28 29 29 2c 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 74 2e 62 61 73 65 53 74 61 74 65 3d 65 2c 65 3d 28 65 3d 74 2e 71 75 65 75 65 3d 7b 70 65 6e 64 69 6e 67 3a 6e 75 6c 6c 2c 64 69 73 70 61 74 63 68 3a 6e 75 6c 6c 2c 6c 61 73 74 52 65 6e 64 65 72 65 64 52 65 64 75 63 65 72 3a 72 61 2c 6c 61 73 74 52 65 6e 64 65 72 65 64 53 74 61 Data Ascii: moizedState=i,null===t.baseQueue&&(t.baseState=i),n.lastRenderedState=i}return[i,r]}function aa(e){var t=ta();return"function"==typeof e&&(e=e()),t.memoizedState=t.baseState=e,e=(e=t.queue={pending:null,dispatch:null,lastRenderedReducer:ra,lastRenderedSta
2024-10-04 07:31:10 UTC	16383	IN	Data Raw: 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 63 3d 72 7d 73 6e 28 6f 2c 63 29 3b 76 61 72 20 75 3d 63 3b 66 6f 72 28 61 20 69 6e 20 75 29 69 66 28 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 29 7b 76 61 72 20 64 3d 75 5b 61 5d 3b 22 73 74 79 6c 65 22 3d 3d 3d 61 3f 61 6e 28 65 2c 64 29 3a 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 3d 3d 3d 61 3f 6e 75 6c 6c 21 3d 28 64 3d 64 3f 64 2e 5f 5f 68 74 6d 6c 3a 76 6f 69 64 20 30 29 26 26 48 65 28 65 2c 64 29 3a 22 63 68 69 6c 64 72 65 6e 22 3d 3d 3d 61 3f 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 28 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6f 7c 7c 22 22 21 3d 3d 64 29 26 26 56 65 28 65 2c 64 29 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 64 26 26 Data Ascii: break;default:c=r}sn(o,c);var u=c;for(a in u)if(u.hasOwnProperty(a)){var d=u[a];"style"===a?an(e,d):"dangerouslySetInnerHTML"===a?null!=(d=d?d.__html:void 0)&&He(e,d):"children"===a?"string"==typeof d?("textarea"!==o\|\|""!==d)&&Ve(e,d):"number"==typeof d&&
2024-10-04 07:31:10 UTC	16383	IN	Data Raw: 61 73 74 50 69 6e 67 65 64 54 69 6d 65 3d 72 3b 62 72 65 61 6b 7d 69 66 28 31 30 37 33 37 34 31 38 32 33 21 3d 3d 4d 6c 3f 72 3d 31 30 2a 28 31 30 37 33 37 34 31 38 32 31 2d 4d 6c 29 2d 24 6f 28 29 3a 31 30 37 33 37 34 31 38 32 33 3d 3d 3d 55 6c 3f 72 3d 30 3a 28 72 3d 31 30 2a 28 31 30 37 33 37 34 31 38 32 31 2d 55 6c 29 2d 35 65 33 2c 30 3e 28 72 3d 28 6f 3d 24 6f 28 29 29 2d 72 29 26 26 28 72 3d 30 29 2c 28 6e 3d 31 30 2a 28 31 30 37 33 37 34 31 38 32 31 2d 6e 29 2d 6f 29 3c 28 72 3d 28 31 32 30 3e 72 3f 31 32 30 3a 34 38 30 3e 72 3f 34 38 30 3a 31 30 38 30 3e 72 3f 31 30 38 30 3a 31 39 32 30 3e 72 3f 31 39 32 30 3a 33 65 33 3e 72 3f 33 65 33 3a 34 33 32 30 3e 72 3f 34 33 32 30 3a 31 39 36 30 2a 5f 6c 28 72 2f 31 39 36 30 29 29 2d 72 29 26 26 28 72 3d Data Ascii: astPingedTime=r;break}if(1073741823!==Ml?r=10(1073741821-Ml)-$o():1073741823===Ul?r=0:(r=10(1073741821-Ul)-5e3,0>(r=(o=$o())-r)&&(r=0),(n=10(1073741821-n)-o)<(r=(120>r?120:480>r?480:1080>r?1080:1920>r?1920:3e3>r?3e3:4320>r?4320:1960_l(r/1960))-r)&&(r=
2024-10-04 07:31:10 UTC	16383	IN	Data Raw: 65 2c 65 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 61 2c 65 3b 63 61 73 65 20 64 65 3a 72 65 74 75 72 6e 28 65 3d 44 73 28 31 33 2c 6e 2c 74 2c 69 29 29 2e 74 79 70 65 3d 64 65 2c 65 2e 65 6c 65 6d 65 6e 74 54 79 70 65 3d 64 65 2c 65 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 61 2c 65 3b 63 61 73 65 20 70 65 3a 72 65 74 75 72 6e 28 65 3d 44 73 28 31 39 2c 6e 2c 74 2c 69 29 29 2e 65 6c 65 6d 65 6e 74 54 79 70 65 3d 70 65 2c 65 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 61 2c 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 28 65 29 26 26 6e 75 6c 6c 21 3d 3d 65 29 73 77 69 74 63 68 28 65 2e 24 24 74 79 70 65 6f 66 29 7b 63 61 73 65 20 6c 65 3a 73 3d 31 30 3b 62 72 65 61 6b 20 65 3b 63 61 73 65 20 73 65 3a 73 3d 39 Data Ascii: e,e.expirationTime=a,e;case de:return(e=Ds(13,n,t,i)).type=de,e.elementType=de,e.expirationTime=a,e;case pe:return(e=Ds(19,n,t,i)).elementType=pe,e.expirationTime=a,e;default:if("object"===r(e)&&null!==e)switch(e.$$typeof){case le:s=10;break e;case se:s=9
2024-10-04 07:31:10 UTC	16383	IN	Data Raw: 75 6c 6c 21 3d 3d 65 26 26 6e 75 6c 6c 21 3d 65 2e 6b 65 79 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 22 3d 22 3a 22 3d 30 22 2c 22 3a 22 3a 22 3d 32 22 7d 3b 72 65 74 75 72 6e 22 24 22 2b 28 22 22 2b 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 3a 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 29 7d 28 65 2e 6b 65 79 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 2c 74 29 7b 65 2e 66 75 6e 63 2e 63 61 6c 6c 28 65 2e 63 6f 6e 74 65 78 74 2c 74 2c 65 2e 63 6f 75 6e 74 2b 2b 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 72 65 73 75 6c 74 2c 6f 3d 65 2e 6b 65 79 50 72 65 66 69 78 3b 65 3d 65 2e 66 75 6e 63 2e 63 61 6c 6c 28 Data Ascii: ull!==e&&null!=e.key?function(e){var t={"=":"=0",":":"=2"};return"$"+(""+e).replace(/[=:]/g,(function(e){return t[e]}))}(e.key):t.toString(36)}function B(e,t){e.func.call(e.context,t,e.count++)}function F(e,t,n){var r=e.result,o=e.keyPrefix;e=e.func.call(
2024-10-04 07:31:10 UTC	16383	IN	Data Raw: 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 21 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 79 6d 62 6f 6c 28 29 3b 72 65 74 75 72 6e 21 53 74 72 69 6e 67 28 65 29 7c 7c 21 28 4f 62 6a 65 63 74 28 65 29 69 6e 73 74 61 6e 63 65 6f 66 20 53 79 6d 62 6f 6c 29 7c 7c 21 53 79 6d 62 6f 6c 2e 73 68 61 6d 26 26 72 26 26 72 3c 34 31 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 69 3d 6e 28 34 29 2c 61 3d 6e 28 32 37 29 2c 6c 3d 69 2e 70 72 6f 63 65 73 73 2c 73 3d 69 2e 44 65 6e 6f 2c 63 3d 6c 26 26 6c 2e 76 65 72 73 69 6f 6e 73 7c 7c 73 26 26 73 2e 76 65 72 73 69 6f 6e 2c 75 3d 63 26 26 63 2e 76 38 3b 75 26 26 28 6f 3d 28 72 3d 75 2e 73 70 6c 69 74 28 22 2e 22 29 29 5b 30 5d 3e Data Ascii: .getOwnPropertySymbols&&!o((function(){var e=Symbol();return!String(e)\|\|!(Object(e)instanceof Symbol)\|\|!Symbol.sham&&r&&r<41}))},function(e,t,n){var r,o,i=n(4),a=n(27),l=i.process,s=i.Deno,c=l&&l.versions\|\|s&&s.version,u=c&&c.v8;u&&(o=(r=u.split("."))[0]>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49798	152.199.21.175	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:12 UTC	392	OUT	GET /shared/5/js/login_en_aoiK-OIF0h_hqcPcffI9dw2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:12 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 306120 Cache-Control: public, max-age=31536000 Content-MD5: hJPa+mgHJONLVbTgVeb3Eg== Content-Type: application/x-javascript Date: Fri, 04 Oct 2024 07:31:12 GMT Etag: 0x8DCDF85522574BC Last-Modified: Sat, 28 Sep 2024 06:18:08 GMT Server: ECAcc (lhc/7951) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 37bb8f72-401e-0082-5666-138b92000000 x-ms-version: 2009-09-19 Content-Length: 945160 Connection: close
2024-10-04 07:31:12 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6c 6f 67 69 6e 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 3d 7b 35 31 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 39 35 31 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 67 65 74 44 65 72 69 Data Ascii: /! For license information please see login_en.js.LICENSE.txt /!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDeri
2024-10-04 07:31:12 UTC	16383	IN	Data Raw: 65 64 3d 21 30 2c 76 6f 69 64 28 72 26 26 28 65 5b 6f 5d 2e 64 65 66 61 75 6c 74 53 65 6c 65 63 74 65 64 3d 21 30 29 29 3b 6e 75 6c 6c 21 3d 3d 74 7c 7c 65 5b 6f 5d 2e 64 69 73 61 62 6c 65 64 7c 7c 28 74 3d 65 5b 6f 5d 29 7d 6e 75 6c 6c 21 3d 3d 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 3d 21 30 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 39 31 29 29 3b 72 65 74 75 72 6e 20 69 28 7b 7d 2c 74 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 76 6f 69 64 20 30 2c 63 68 69 6c 64 72 65 6e 3a 22 22 2b 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 Data Ascii: ed=!0,void(r&&(e[o].defaultSelected=!0));null!==t\|\|e[o].disabled\|\|(t=e[o])}null!==t&&(t.selected=!0)}}function Ie(e,t){if(null!=t.dangerouslySetInnerHTML)throw Error(l(91));return i({},t,{value:void 0,defaultValue:void 0,children:""+e._wrapperState.initia
2024-10-04 07:31:12 UTC	16383	IN	Data Raw: 45 72 72 6f 72 28 6c 28 33 33 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 6a 6e 5d 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 42 6e 28 65 29 7b 64 6f 7b 65 3d 65 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 65 26 26 35 21 3d 3d 65 2e 74 61 67 29 3b 72 65 74 75 72 6e 20 65 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 46 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6f 3d 6d 28 6e 29 3b 69 66 28 21 6f 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 6e 3d 6f 5b 74 5d 3b 65 3a 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 6f 6e 43 6c 69 63 6b 22 3a 63 61 73 65 22 6f 6e 43 6c 69 63 6b 43 61 70 74 75 72 65 22 3a 63 61 73 65 22 6f 6e 44 Data Ascii: Error(l(33))}function Nn(e){return e[jn]\|\|null}function Bn(e){do{e=e.return}while(e&&5!==e.tag);return e\|\|null}function Fn(e,t){var n=e.stateNode;if(!n)return null;var o=m(n);if(!o)return null;n=o[t];e:switch(t){case"onClick":case"onClickCapture":case"onD
2024-10-04 07:31:12 UTC	16383	IN	Data Raw: 6c 65 5f 73 63 68 65 64 75 6c 65 43 61 6c 6c 62 61 63 6b 2c 54 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 63 61 6e 63 65 6c 43 61 6c 6c 62 61 63 6b 2c 6a 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 72 65 71 75 65 73 74 50 61 69 6e 74 2c 49 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 2c 4c 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 67 65 74 43 75 72 72 65 6e 74 50 72 69 6f 72 69 74 79 4c 65 76 65 6c 2c 44 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 49 6d 6d 65 64 69 61 74 65 50 72 69 6f 72 69 74 79 2c 52 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 55 73 65 72 42 6c 6f 63 6b 69 6e 67 50 72 69 6f 72 69 74 79 2c 4e 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 4e 6f 72 6d 61 6c 50 72 69 6f 72 69 74 79 2c 42 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 4c 6f 77 50 72 69 6f 72 69 74 79 2c 46 Data Ascii: le_scheduleCallback,To=a.unstable_cancelCallback,jo=a.unstable_requestPaint,Io=a.unstable_now,Lo=a.unstable_getCurrentPriorityLevel,Do=a.unstable_ImmediatePriority,Ro=a.unstable_UserBlockingPriority,No=a.unstable_NormalPriority,Bo=a.unstable_LowPriority,F
2024-10-04 07:31:12 UTC	16383	IN	Data Raw: 61 28 29 3b 72 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 6e 75 6c 6c 3a 72 3b 76 61 72 20 69 3d 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 21 3d 3d 51 69 29 7b 76 61 72 20 61 3d 51 69 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 69 66 28 69 3d 61 2e 64 65 73 74 72 6f 79 2c 6e 75 6c 6c 21 3d 3d 72 26 26 5a 69 28 72 2c 61 2e 64 65 70 73 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6c 61 28 74 2c 6e 2c 69 2c 72 29 7d 4b 69 2e 65 66 66 65 63 74 54 61 67 7c 3d 65 2c 6f 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6c 61 28 31 7c 74 2c 6e 2c 69 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 64 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 63 61 28 35 31 36 2c 34 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 61 28 35 31 36 2c 34 2c 65 2c Data Ascii: a();r=void 0===r?null:r;var i=void 0;if(null!==Qi){var a=Qi.memoizedState;if(i=a.destroy,null!==r&&Zi(r,a.deps))return void la(t,n,i,r)}Ki.effectTag\|=e,o.memoizedState=la(1\|t,n,i,r)}function da(e,t){return ca(516,4,e,t)}function pa(e,t){return ua(516,4,e,
2024-10-04 07:31:12 UTC	16383	IN	Data Raw: 65 6f 66 20 63 2e 6f 6e 43 6c 69 63 6b 26 26 28 65 2e 6f 6e 63 6c 69 63 6b 3d 70 6e 29 7d 4f 6e 28 6f 2c 72 29 26 26 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 34 29 7d 6e 75 6c 6c 21 3d 3d 74 2e 72 65 66 26 26 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 31 32 38 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 61 73 65 20 36 3a 69 66 28 65 26 26 6e 75 6c 6c 21 3d 74 2e 73 74 61 74 65 4e 6f 64 65 29 4b 61 28 30 2c 74 2c 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2c 72 29 3b 65 6c 73 65 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 72 26 26 6e 75 6c 6c 3d 3d 3d 74 2e 73 74 61 74 65 4e 6f 64 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 31 36 36 29 29 3b 6e 3d 42 69 28 4e 69 2e 63 75 72 72 65 6e 74 29 2c 42 69 28 44 69 2e 63 75 72 72 65 6e 74 Data Ascii: eof c.onClick&&(e.onclick=pn)}On(o,r)&&(t.effectTag\|=4)}null!==t.ref&&(t.effectTag\|=128)}return null;case 6:if(e&&null!=t.stateNode)Ka(0,t,e.memoizedProps,r);else{if("string"!=typeof r&&null===t.stateNode)throw Error(l(166));n=Bi(Ni.current),Bi(Di.current
2024-10-04 07:31:12 UTC	6	IN	Data Raw: 68 72 6f 77 20 45 Data Ascii: hrow E
2024-10-04 07:31:12 UTC	16383	IN	Data Raw: 72 72 6f 72 28 6c 28 33 32 37 29 29 3b 69 66 28 5f 73 28 29 2c 65 3d 3d 3d 44 6c 26 26 74 3d 3d 3d 4e 6c 7c 7c 70 73 28 65 2c 74 29 2c 6e 75 6c 6c 21 3d 3d 52 6c 29 7b 76 61 72 20 6e 3d 4c 6c 3b 4c 6c 7c 3d 41 6c 3b 66 6f 72 28 76 61 72 20 72 3d 67 73 28 29 3b 3b 29 74 72 79 7b 62 73 28 29 3b 62 72 65 61 6b 7d 63 61 74 63 68 28 6f 29 7b 66 73 28 65 2c 6f 29 7d 69 66 28 61 69 28 29 2c 4c 6c 3d 6e 2c 43 6c 2e 63 75 72 72 65 6e 74 3d 72 2c 31 3d 3d 3d 42 6c 29 74 68 72 6f 77 20 6e 3d 46 6c 2c 70 73 28 65 2c 74 29 2c 56 73 28 65 2c 74 29 2c 6c 73 28 65 29 2c 6e 3b 69 66 28 6e 75 6c 6c 21 3d 3d 52 6c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 32 36 31 29 29 3b 65 2e 66 69 6e 69 73 68 65 64 57 6f 72 6b 3d 65 2e 63 75 72 72 65 6e 74 2e 61 6c 74 65 72 6e 61 74 Data Ascii: rror(l(327));if(_s(),e===Dl&&t===Nl\|\|ps(e,t),null!==Rl){var n=Ll;Ll\|=Al;for(var r=gs();;)try{bs();break}catch(o){fs(e,o)}if(ai(),Ll=n,Cl.current=r,1===Bl)throw n=Fl,ps(e,t),Vs(e,t),ls(e),n;if(null!==Rl)throw Error(l(261));e.finishedWork=e.current.alternat
2024-10-04 07:31:13 UTC	16383	IN	Data Raw: 75 6c 6c 2c 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 3a 65 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 7d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 7a 73 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 74 61 67 3d 74 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 3d 65 2c 74 68 69 73 2e 70 69 6e 67 43 61 63 68 65 3d 74 68 69 73 2e 70 65 6e 64 69 6e 67 43 68 69 6c 64 72 65 6e 3d 6e 75 6c 6c 2c 74 68 69 73 2e 66 69 6e 69 73 68 65 64 45 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 30 2c 74 68 69 73 2e 66 69 6e 69 73 68 65 64 57 6f 72 6b 3d 6e 75 6c 6c 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 3d 2d 31 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 Data Ascii: ull,implementation:e.implementation},t}function zs(e,t,n){this.tag=t,this.current=null,this.containerInfo=e,this.pingCache=this.pendingChildren=null,this.finishedExpirationTime=0,this.finishedWork=null,this.timeoutHandle=-1,this.pendingContext=this.contex
2024-10-04 07:31:13 UTC	16383	IN	Data Raw: 72 3a 4d 2c 52 65 61 63 74 43 75 72 72 65 6e 74 42 61 74 63 68 43 6f 6e 66 69 67 3a 7b 73 75 73 70 65 6e 73 65 3a 6e 75 6c 6c 7d 2c 52 65 61 63 74 43 75 72 72 65 6e 74 4f 77 6e 65 72 3a 5f 2c 49 73 53 6f 6d 65 52 65 6e 64 65 72 65 72 41 63 74 69 6e 67 3a 7b 63 75 72 72 65 6e 74 3a 21 31 7d 2c 61 73 73 69 67 6e 3a 6f 7d 3b 74 2e 43 68 69 6c 64 72 65 6e 3d 7b 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 55 28 65 2c 72 2c 6e 75 6c 6c 2c 74 2c 6e 29 2c 72 7d 2c 66 6f 72 45 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 52 28 65 2c 42 2c 74 3d 49 28 6e 75 6c 6c 2c 6e Data Ascii: r:M,ReactCurrentBatchConfig:{suspense:null},ReactCurrentOwner:_,IsSomeRendererActing:{current:!1},assign:o};t.Children={map:function(e,t,n){if(null==e)return e;var r=[];return U(e,r,null,t,n),r},forEach:function(e,t,n){if(null==e)return e;R(e,B,t=I(null,n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49799	152.199.21.175	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:12 UTC	606	OUT	GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:12 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4487421 Cache-Control: public, max-age=31536000 Content-MD5: Lih+tBiUAIS5IVkMbmcsng== Content-Type: application/x-javascript Date: Fri, 04 Oct 2024 07:31:12 GMT Etag: 0x8DCB8B8BCF38323 Last-Modified: Fri, 09 Aug 2024 21:17:56 GMT Server: ECAcc (lhc/7922) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 85390ee5-001e-0062-515f-ed96e9000000 x-ms-version: 2009-09-19 Content-Length: 90677 Connection: close
2024-10-04 07:31:12 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6f 6e 65 64 73 2d 61 6e 61 6c 79 74 69 63 73 2d 6a 73 5f 30 37 37 32 31 37 37 34 30 63 38 35 33 62 35 64 34 66 65 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 31 5d 2c 7b 32 32 37 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 7b 41 70 70 49 6e 73 69 67 68 74 73 43 6f 72 65 Data Ascii: /! For license information please see oneds-analytics-js_077217740c853b5d4fe8.js.LICENSE.txt /"use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[471],{2278:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore
2024-10-04 07:31:12 UTC	16383	IN	Data Raw: 72 69 6e 67 22 2c 61 74 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 75 74 3d 22 65 78 70 69 72 65 73 22 2c 63 74 3d 6e 75 6c 6c 2c 73 74 3d 6e 75 6c 6c 2c 6c 74 3d 6e 75 6c 6c 2c 66 74 3d 44 65 28 29 2c 64 74 3d 7b 7d 2c 76 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 74 28 6e 2c 65 29 7b 76 61 72 20 74 3d 6d 74 2e 5f 63 6b 4d 67 72 7c 7c 76 74 2e 5f 63 6b 4d 67 72 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 6d 74 2e 5f 63 6b 4d 67 72 3d 6d 74 28 6e 2c 65 29 2c 76 74 2e 5f 63 6b 4d 67 72 3d 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 6e 29 7b 72 65 74 75 72 6e 21 6e 7c 7c 6e 2e 69 73 45 6e 61 62 6c 65 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 6e 2c 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 6e 26 26 42 6e 28 6e 2e 69 67 6e 6f 72 65 43 6f 6f Data Ascii: ring",at="toUTCString",ut="expires",ct=null,st=null,lt=null,ft=De(),dt={},vt={};function pt(n,e){var t=mt._ckMgr\|\|vt._ckMgr;return t\|\|(t=mt._ckMgr=mt(n,e),vt._ckMgr=t),t}function gt(n){return!n\|\|n.isEnabled()}function yt(n,e){return!!(e&&n&&Bn(n.ignoreCoo
2024-10-04 07:31:12 UTC	16383	IN	Data Raw: 20 74 65 28 75 29 7d 28 6e 2c 65 2c 74 29 3b 69 7c 7c 28 69 3d 75 29 2c 61 26 26 61 2e 5f 73 65 74 4e 65 78 74 28 75 29 2c 61 3d 75 7d 7d 29 29 7d 72 65 74 75 72 6e 20 72 26 26 21 69 3f 6c 69 28 5b 72 5d 2c 65 2c 74 29 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 6e 2e 70 75 73 68 28 65 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 57 6e 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6e 28 65 2c 74 29 7d 63 61 74 63 68 28 72 29 7b 72 74 28 65 2e 64 69 61 67 4c 6f 67 28 29 2c 32 2c 37 33 2c 22 55 6e 65 78 70 65 63 74 65 64 20 65 72 72 6f 72 20 63 61 6c 6c 69 6e 67 20 75 6e 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 2d 20 Data Ascii: te(u)}(n,e,t);i\|\|(i=u),a&&a._setNext(u),a=u}}))}return r&&!i?li([r],e,t):i}function fi(){var n=[];return{add:function(e){e&&n.push(e)},run:function(e,t){Wn(n,(function(n){try{n(e,t)}catch(r){rt(e.diagLog(),2,73,"Unexpected error calling unload handler -
2024-10-04 07:31:12 UTC	16383	IN	Data Raw: 3d 72 2e 72 6f 6c 65 56 65 72 2c 74 29 2c 64 29 7d 2c 6e 2e 61 70 70 6c 79 41 49 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3b 69 66 28 74 2e 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 54 72 61 63 65 29 7b 76 61 72 20 72 3d 70 28 29 3b 72 26 26 54 6f 28 32 2c 6e 2c 44 69 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 72 2e 67 65 74 54 72 61 63 65 49 64 28 29 2c 65 5b 31 5d 3d 72 2e 67 65 74 4e 61 6d 65 28 29 2c 65 5b 32 5d 3d 72 2e 67 65 74 53 70 61 6e 49 64 28 29 2c 65 29 2c 21 31 29 7d 7d 2c 6e 2e 61 70 70 6c 79 44 69 73 74 72 69 62 75 74 65 64 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3d 70 28 29 3b 69 66 28 74 29 7b 76 61 72 20 72 Data Ascii: =r.roleVer,t),d)},n.applyAITraceContext=function(n){var e;if(t.enableApplicationInsightsTrace){var r=p();r&&To(2,n,Di,((e={})[0]=r.getTraceId(),e[1]=r.getName(),e[2]=r.getSpanId(),e),!1)}},n.applyDistributedTraceContext=function(n){var e,t=p();if(t){var r
2024-10-04 07:31:12 UTC	16383	IN	Data Raw: 65 45 78 63 65 65 64 3a 5b 5d 2c 66 61 69 6c 65 64 45 76 74 73 3a 5b 5d 2c 62 61 74 63 68 65 73 3a 5b 5d 2c 6e 75 6d 45 76 65 6e 74 73 3a 30 2c 72 65 74 72 79 43 6e 74 3a 6e 2c 69 73 54 65 61 72 64 6f 77 6e 3a 65 2c 69 73 53 79 6e 63 3a 74 2c 69 73 42 65 61 63 6f 6e 3a 72 2c 73 65 6e 64 54 79 70 65 3a 6f 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 69 7d 7d 2c 6e 2e 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 74 26 26 72 26 26 21 74 2e 6f 76 65 72 66 6c 6f 77 3b 72 65 74 75 72 6e 20 6f 26 26 47 72 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 53 65 72 69 61 6c 69 7a 65 72 3a 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 Data Ascii: eExceed:[],failedEvts:[],batches:[],numEvents:0,retryCnt:n,isTeardown:e,isSync:t,isBeacon:r,sendType:o,sendReason:i}},n.appendPayload=function(t,r,i){var o=t&&r&&!t.overflow;return o&&Gr(e,(function(){return"Serializer:appendPayload"}),(function(){for(var
2024-10-04 07:31:12 UTC	8762	IN	Data Raw: 28 29 7b 28 62 3d 7b 7d 29 5b 6a 6f 5d 3d 5b 32 2c 31 2c 30 5d 2c 62 5b 57 6f 5d 3d 5b 36 2c 33 2c 30 5d 2c 62 5b 56 6f 5d 3d 5b 31 38 2c 39 2c 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 6b 3b 50 26 26 28 69 3d 4e 29 2c 57 6e 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 63 6f 75 6e 74 28 29 3e 30 26 26 57 6e 28 65 2e 65 76 65 6e 74 73 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 28 65 2e 73 79 6e 63 26 26 28 65 2e 6c 61 74 65 6e 63 79 3d 34 2c 65 2e 73 79 6e 63 3d 21 31 29 2c 65 2e 73 65 6e 64 41 74 74 65 6d 70 74 3c 69 3f 28 7a 72 28 65 2c 6e 2e 69 64 65 6e 74 69 66 69 65 72 29 2c 41 28 65 2c 21 31 29 29 3a 72 2e 70 75 73 68 28 65 29 29 7d 29 29 7d 29 29 2c 72 2e 6c 65 6e 67 74 Data Ascii: (){(b={})[jo]=[2,1,0],b[Wo]=[6,3,0],b[Vo]=[18,9,0]}function G(e,t){var r=[],i=k;P&&(i=N),Wn(e,(function(e){e&&e.count()>0&&Wn(e.events(),(function(e){e&&(e.sync&&(e.latency=4,e.sync=!1),e.sendAttempt<i?(zr(e,n.identifier),A(e,!1)):r.push(e))}))})),r.lengt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49801	152.199.21.175	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:12 UTC	634	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:12 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16768441 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 04 Oct 2024 07:31:12 GMT Etag: 0x8DB77257FFE6B4E Last-Modified: Tue, 27 Jun 2023 15:45:14 GMT Server: ECAcc (lhc/793D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e98d5e21-301e-0028-71ad-7d9304000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-10-04 07:31:12 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49800	152.199.21.175	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:12 UTC	621	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:12 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16768404 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 04 Oct 2024 07:31:12 GMT Etag: 0x8DB77257C91B168 Last-Modified: Tue, 27 Jun 2023 15:45:09 GMT Server: ECAcc (lhc/7913) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5a38ddb4-801e-0053-2bad-7d4413000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-10-04 07:31:12 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49806	152.199.21.175	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:13 UTC	400	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:13 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16768442 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 04 Oct 2024 07:31:13 GMT Etag: 0x8DB77257FFE6B4E Last-Modified: Tue, 27 Jun 2023 15:45:14 GMT Server: ECAcc (lhc/793D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e98d5e21-301e-0028-71ad-7d9304000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-10-04 07:31:13 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49805	152.199.21.175	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:13 UTC	387	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:13 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16768405 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 04 Oct 2024 07:31:13 GMT Etag: 0x8DB77257C91B168 Last-Modified: Tue, 27 Jun 2023 15:45:09 GMT Server: ECAcc (lhc/7913) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5a38ddb4-801e-0053-2bad-7d4413000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-10-04 07:31:13 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49807	152.199.21.175	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:13 UTC	403	OUT	GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:14 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4487422 Cache-Control: public, max-age=31536000 Content-MD5: Lih+tBiUAIS5IVkMbmcsng== Content-Type: application/x-javascript Date: Fri, 04 Oct 2024 07:31:13 GMT Etag: 0x8DCB8B8BCF38323 Last-Modified: Fri, 09 Aug 2024 21:17:56 GMT Server: ECAcc (lhc/7922) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 85390ee5-001e-0062-515f-ed96e9000000 x-ms-version: 2009-09-19 Content-Length: 90677 Connection: close
2024-10-04 07:31:14 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6f 6e 65 64 73 2d 61 6e 61 6c 79 74 69 63 73 2d 6a 73 5f 30 37 37 32 31 37 37 34 30 63 38 35 33 62 35 64 34 66 65 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 31 5d 2c 7b 32 32 37 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 7b 41 70 70 49 6e 73 69 67 68 74 73 43 6f 72 65 Data Ascii: /! For license information please see oneds-analytics-js_077217740c853b5d4fe8.js.LICENSE.txt /"use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[471],{2278:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore
2024-10-04 07:31:14 UTC	1	IN	Data Raw: 72 Data Ascii: r
2024-10-04 07:31:14 UTC	16383	IN	Data Raw: 69 6e 67 22 2c 61 74 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 75 74 3d 22 65 78 70 69 72 65 73 22 2c 63 74 3d 6e 75 6c 6c 2c 73 74 3d 6e 75 6c 6c 2c 6c 74 3d 6e 75 6c 6c 2c 66 74 3d 44 65 28 29 2c 64 74 3d 7b 7d 2c 76 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 74 28 6e 2c 65 29 7b 76 61 72 20 74 3d 6d 74 2e 5f 63 6b 4d 67 72 7c 7c 76 74 2e 5f 63 6b 4d 67 72 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 6d 74 2e 5f 63 6b 4d 67 72 3d 6d 74 28 6e 2c 65 29 2c 76 74 2e 5f 63 6b 4d 67 72 3d 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 6e 29 7b 72 65 74 75 72 6e 21 6e 7c 7c 6e 2e 69 73 45 6e 61 62 6c 65 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 6e 2c 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 6e 26 26 42 6e 28 6e 2e 69 67 6e 6f 72 65 43 6f 6f 6b Data Ascii: ing",at="toUTCString",ut="expires",ct=null,st=null,lt=null,ft=De(),dt={},vt={};function pt(n,e){var t=mt._ckMgr\|\|vt._ckMgr;return t\|\|(t=mt._ckMgr=mt(n,e),vt._ckMgr=t),t}function gt(n){return!n\|\|n.isEnabled()}function yt(n,e){return!!(e&&n&&Bn(n.ignoreCook
2024-10-04 07:31:14 UTC	16383	IN	Data Raw: 74 65 28 75 29 7d 28 6e 2c 65 2c 74 29 3b 69 7c 7c 28 69 3d 75 29 2c 61 26 26 61 2e 5f 73 65 74 4e 65 78 74 28 75 29 2c 61 3d 75 7d 7d 29 29 7d 72 65 74 75 72 6e 20 72 26 26 21 69 3f 6c 69 28 5b 72 5d 2c 65 2c 74 29 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 6e 2e 70 75 73 68 28 65 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 57 6e 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6e 28 65 2c 74 29 7d 63 61 74 63 68 28 72 29 7b 72 74 28 65 2e 64 69 61 67 4c 6f 67 28 29 2c 32 2c 37 33 2c 22 55 6e 65 78 70 65 63 74 65 64 20 65 72 72 6f 72 20 63 61 6c 6c 69 6e 67 20 75 6e 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 2d 20 22 Data Ascii: te(u)}(n,e,t);i\|\|(i=u),a&&a._setNext(u),a=u}}))}return r&&!i?li([r],e,t):i}function fi(){var n=[];return{add:function(e){e&&n.push(e)},run:function(e,t){Wn(n,(function(n){try{n(e,t)}catch(r){rt(e.diagLog(),2,73,"Unexpected error calling unload handler - "
2024-10-04 07:31:14 UTC	2	IN	Data Raw: 72 2e Data Ascii: r.
2024-10-04 07:31:14 UTC	16383	IN	Data Raw: 72 6f 6c 65 56 65 72 2c 74 29 2c 64 29 7d 2c 6e 2e 61 70 70 6c 79 41 49 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3b 69 66 28 74 2e 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 54 72 61 63 65 29 7b 76 61 72 20 72 3d 70 28 29 3b 72 26 26 54 6f 28 32 2c 6e 2c 44 69 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 72 2e 67 65 74 54 72 61 63 65 49 64 28 29 2c 65 5b 31 5d 3d 72 2e 67 65 74 4e 61 6d 65 28 29 2c 65 5b 32 5d 3d 72 2e 67 65 74 53 70 61 6e 49 64 28 29 2c 65 29 2c 21 31 29 7d 7d 2c 6e 2e 61 70 70 6c 79 44 69 73 74 72 69 62 75 74 65 64 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3d 70 28 29 3b 69 66 28 74 29 7b 76 61 72 20 72 3d 28 28 Data Ascii: roleVer,t),d)},n.applyAITraceContext=function(n){var e;if(t.enableApplicationInsightsTrace){var r=p();r&&To(2,n,Di,((e={})[0]=r.getTraceId(),e[1]=r.getName(),e[2]=r.getSpanId(),e),!1)}},n.applyDistributedTraceContext=function(n){var e,t=p();if(t){var r=((
2024-10-04 07:31:14 UTC	16383	IN	Data Raw: 63 65 65 64 3a 5b 5d 2c 66 61 69 6c 65 64 45 76 74 73 3a 5b 5d 2c 62 61 74 63 68 65 73 3a 5b 5d 2c 6e 75 6d 45 76 65 6e 74 73 3a 30 2c 72 65 74 72 79 43 6e 74 3a 6e 2c 69 73 54 65 61 72 64 6f 77 6e 3a 65 2c 69 73 53 79 6e 63 3a 74 2c 69 73 42 65 61 63 6f 6e 3a 72 2c 73 65 6e 64 54 79 70 65 3a 6f 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 69 7d 7d 2c 6e 2e 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 74 26 26 72 26 26 21 74 2e 6f 76 65 72 66 6c 6f 77 3b 72 65 74 75 72 6e 20 6f 26 26 47 72 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 53 65 72 69 61 6c 69 7a 65 72 3a 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d Data Ascii: ceed:[],failedEvts:[],batches:[],numEvents:0,retryCnt:n,isTeardown:e,isSync:t,isBeacon:r,sendType:o,sendReason:i}},n.appendPayload=function(t,r,i){var o=t&&r&&!t.overflow;return o&&Gr(e,(function(){return"Serializer:appendPayload"}),(function(){for(var e=
2024-10-04 07:31:14 UTC	8759	IN	Data Raw: 28 62 3d 7b 7d 29 5b 6a 6f 5d 3d 5b 32 2c 31 2c 30 5d 2c 62 5b 57 6f 5d 3d 5b 36 2c 33 2c 30 5d 2c 62 5b 56 6f 5d 3d 5b 31 38 2c 39 2c 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 6b 3b 50 26 26 28 69 3d 4e 29 2c 57 6e 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 63 6f 75 6e 74 28 29 3e 30 26 26 57 6e 28 65 2e 65 76 65 6e 74 73 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 28 65 2e 73 79 6e 63 26 26 28 65 2e 6c 61 74 65 6e 63 79 3d 34 2c 65 2e 73 79 6e 63 3d 21 31 29 2c 65 2e 73 65 6e 64 41 74 74 65 6d 70 74 3c 69 3f 28 7a 72 28 65 2c 6e 2e 69 64 65 6e 74 69 66 69 65 72 29 2c 41 28 65 2c 21 31 29 29 3a 72 2e 70 75 73 68 28 65 29 29 7d 29 29 7d 29 29 2c 72 2e 6c 65 6e 67 74 68 3e 30 Data Ascii: (b={})[jo]=[2,1,0],b[Wo]=[6,3,0],b[Vo]=[18,9,0]}function G(e,t){var r=[],i=k;P&&(i=N),Wn(e,(function(e){e&&e.count()>0&&Wn(e.events(),(function(e){e&&(e.sync&&(e.latency=4,e.sync=!1),e.sendAttempt<i?(zr(e,n.identifier),A(e,!1)):r.push(e))}))})),r.length>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49811	152.199.21.175	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:15 UTC	612	OUT	GET /16.000.30374.3/images/favicon.ico HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:15 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 823770 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Fri, 04 Oct 2024 07:31:15 GMT Etag: 0x8DCDC2164BD5DC4 Last-Modified: Mon, 23 Sep 2024 22:45:16 GMT Server: ECAcc (lhc/790E) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ded21bf7-901e-002d-27b1-0ee7bd000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-10-04 07:31:15 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-04 07:31:15 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49813	152.199.21.175	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:16 UTC	378	OUT	GET /16.000.30374.3/images/favicon.ico HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:16 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 823771 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Fri, 04 Oct 2024 07:31:16 GMT Etag: 0x8DCDC2164BD5DC4 Last-Modified: Mon, 23 Sep 2024 22:45:16 GMT Server: ECAcc (lhc/790E) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ded21bf7-901e-002d-27b1-0ee7bd000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-10-04 07:31:16 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-04 07:31:16 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49833	13.107.246.51	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:42 UTC	617	OUT	GET /shared/5/js/reset-password-signinname_en_JOEV9q8F85e8zIrr9TrzjA2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:43 UTC	800	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:42 GMT Content-Type: application/x-javascript Content-Length: 170691 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 23 Sep 2024 18:45:12 GMT ETag: 0x8DCDBFFDB7574C1 x-ms-request-id: 733de844-901e-0034-622f-16f09e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073142Z-15767c5fc55852fxfeh7csa2dn0000000c1g0000000090p5 x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-04 07:31:43 UTC	15584	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 6b 77 db b8 b2 20 fa fd fe 0a 5b 37 4b 8b 3c 86 15 c9 ce 93 0a 5b 93 c4 76 27 dd 79 75 1e dd e9 f6 f6 78 d1 12 64 33 91 48 85 a4 ec 38 b6 fe fb ad 07 9e 24 e5 24 fb cc 99 39 77 b2 56 2c 10 04 81 42 a1 00 54 15 aa 0a b7 ff 63 73 e3 20 2f 36 66 e9 58 66 a5 dc 48 b3 69 5e cc 93 2a cd b3 8d c5 4c 26 90 55 4a b9 51 c8 52 56 db 8b a4 2c 2f f2 62 b2 5d a6 a7 59 9a 65 c9 5c 1e cb ac f7 a9 ec bd 78 fe 74 ff d5 bb fd 5e f5 b5 da f8 8f db ff cf e6 74 99 8d b1 8e 20 bc 3a 4f 8a 0d 29 2a 91 89 42 e4 22 8d af ee 0e 76 ef 46 a6 00 bd 0a af 3a 4b 6c a9 2a d2 71 d5 19 e2 27 45 9c 05 3b 0f ef 0e 42 91 c7 57 e3 b3 74 36 79 9a 67 95 fc 5a bd bf 5c c8 32 da ec 8b b1 7d ae 3d d2 eb 89 9c 26 cb 59 f5 a6 c8 17 fc 9c 96 8b 59 72 f9 0a 80 c6 c7 Data Ascii: kw [7K<[v'yuxd3H8$$9wV,BTcs /6fXfHi^L&UJQRV,/b]Ye\xt^t :O)B"vF:Kl*q'E;BWt6ygZ\2}=&YYr
2024-10-04 07:31:43 UTC	16384	IN	Data Raw: bf c1 68 4f 1d b1 d3 8f 30 08 57 c9 90 ec dc b7 48 db dd 21 74 ed ee 62 d9 53 b4 bd 17 bb 77 38 cd 68 d8 bd 8b 2d 02 33 b6 0b ed 3d cb e7 f8 cd 7d 0f b3 bb 0f 1c cc ee 3e f4 d1 7a a7 ef 21 f5 0e d4 f6 3c 2b 25 da 5a dc b9 67 f1 3b c0 3e 1e 0c 30 01 90 1c ec 60 02 c0 38 d8 c5 04 7c 73 70 07 13 f0 c1 c1 5d 4c 00 00 07 f7 30 01 4d 1f dc c7 04 34 7b f0 00 51 05 ed 1d 3c c4 c4 00 2b ec 63 8a aa c6 ba 77 b0 ee 01 56 7e 07 2a 7f b5 9c 33 3e 06 08 95 3b 54 3b 3b f0 1a 55 84 30 2c 89 37 13 80 ba eb 5a 1c 22 79 4d ff 79 7e 48 cf e8 c9 82 bf c4 f1 79 03 ed dd f5 a2 96 09 7b 48 69 95 38 1c 61 55 c6 34 bb c2 91 1a f5 a8 ed 38 51 d6 8e d4 b5 3e d7 ea f6 b9 ca 54 01 87 1f 1d d1 1d f2 0e 5c 51 07 3a ab 5d 28 ff 7d 7d 60 01 4c 57 a2 34 3e 7c 50 b9 5e 4f a8 17 81 b6 b5 ab Data Ascii: hO0WH!tbSw8h-3=}>z!<+%Zg;>0`8\|sp]L0M4{Q<+cwV~*3>;T;;U0,7Z"yMy~Hy{Hi8aU48Q>T\Q:](}}`LW4>\|P^O
2024-10-04 07:31:43 UTC	16384	IN	Data Raw: 18 5c 14 b1 f1 26 57 75 6a 31 59 06 2b 6f e7 38 52 8e 1e d6 5d f3 a7 99 77 a5 da a9 15 e5 60 75 0d 9b f1 d2 dc ae e6 4f 0d 57 7f c8 af 4e a7 fa 31 cf 5b 56 2a 46 00 34 e4 09 02 b8 36 54 58 79 97 ba db 2f 98 b9 be 95 15 6b 0a d9 a8 70 ae 66 8d 1f 97 66 2c 5d 69 f4 fe 21 5c db 18 e9 54 1f 24 2b 7b d8 8e 48 61 a3 0e c6 99 a5 09 a8 24 d4 97 1f 78 e5 ae 48 a8 e4 0d 4b 13 25 8d 8c ce c8 16 29 3a c0 e0 a4 7d f6 ad ea 57 52 1d cb 37 81 d1 e0 84 a2 22 c1 9e d1 af 89 d4 75 af d3 41 48 c9 d3 14 57 29 d2 b5 59 56 35 e3 18 aa 19 c9 fe 9c cc 4b 0a 4a 25 c4 55 1d ef 5e 50 d1 fa ff 80 cd 86 ad d2 74 76 45 6e 74 d8 cf d4 93 c3 b7 6d 69 41 c6 f2 97 4d 1a d4 a1 68 6b dd 6c 6a b8 ca b4 16 74 7d ea b9 de 8b 86 78 bb a3 fc 59 cf d3 a3 d1 3a 52 85 08 0c b5 69 d7 68 69 a8 a9 34 Data Ascii: \&Wuj1Y+o8R]w`uOWN1[V*F46TXy/kpff,]i!\T$+{Ha$xHK%):}WR7"uAHW)YV5KJ%U^PtvEntmiAMhkljt}xY:Rihi4
2024-10-04 07:31:43 UTC	16384	IN	Data Raw: 8c 1b 79 34 8e e2 db 28 67 1b 54 54 80 aa c2 c6 b9 c1 45 6e f0 5a 38 8f 08 65 f2 10 6e 73 8b 95 82 42 d3 84 1a 02 62 7b 9e 52 a6 b2 0d ac 7e f0 bc 53 46 45 09 d2 61 b8 8e dd db 12 96 df ad 7d 61 35 c4 18 d0 15 86 ad 46 5d 51 93 3d d8 54 9f 3c ac 99 dd d6 0b fe f1 9d 1d 3e bd 1d 21 6f 6d ad 60 f7 78 c2 1a e1 c2 9c d0 0e 50 9a a8 29 96 f3 80 7f 79 c2 f4 44 46 98 16 32 eb f3 34 48 ce 8b 8b 41 4e 46 b7 c5 02 f8 75 54 3e e2 25 1a bd e0 6d b7 84 5f 6b cd ac 68 64 ca 04 92 a1 a1 ee f2 b1 ee 0a d9 70 7b 87 3b 76 9d 63 e4 64 0a 34 af a2 18 3f 8d a6 09 b2 bf cc c9 ee d2 9f 69 8d 4d a5 88 d4 05 22 b7 88 f6 62 f4 25 87 79 29 20 19 8e d1 04 83 0f fc 75 1a 9a 1d b1 a0 bb db 9e 18 86 ab 18 00 d3 3d 82 04 d0 46 0a 85 31 32 85 3d 32 65 fa 8f 30 2b cd 13 d4 43 d2 f4 df e7 Data Ascii: y4(gTTEnZ8ensBb{R~SFEa}a5F]Q=T<>!om`xP)yDF24HANFuT>%m_khdp{;vcd4?iM"b%y) u=F12=2e0+C
2024-10-04 07:31:43 UTC	16384	IN	Data Raw: 0d b7 25 a9 2f ac ec b3 d8 06 d4 42 68 d0 0a 71 08 fc 43 07 ff 74 56 7c 98 fd b3 9b 9b 26 0c 89 bd 60 35 f8 7e 73 83 7c c7 07 64 b4 2a c8 95 1f 22 c0 a0 07 dc 58 03 4e 81 d0 31 ba 67 37 49 c9 07 0a 51 b0 d0 c6 00 a4 fd de b9 07 c0 ab 56 fb 3e d5 79 6f 20 be 74 e0 8b b1 0f 34 c4 70 ae cc 8d 08 b7 85 0b 60 0b 79 e6 ea cc 43 8d 8d 01 4c c4 07 9c b6 0f ee da c9 98 69 01 39 ee 88 82 2b 52 4b b5 31 f3 08 70 be ba 4a 4b e1 0c c6 09 20 19 3d 68 b7 ba e7 31 0c c1 da 01 76 13 e0 31 46 02 ed 78 90 46 b5 c1 c0 b0 2e ed 73 8b 81 4c 9f 1c e8 33 8e 76 c7 92 83 07 24 83 da 4f fd 11 54 4d 60 9e bb 33 c0 f3 89 fb 1e b0 b5 d7 07 74 85 7f c6 18 3a 02 fe 00 5c d0 9e 0e 2d 28 b0 8b 33 67 ca 4a 9d c2 ff 97 b0 36 c6 50 ee c8 21 d5 93 0a 07 ca f6 36 ea c0 ae ae 36 89 5d 20 1c 6e Data Ascii: %/BhqCtV\|&`5~s\|d*"XN1g7IQV>yo t4p`yCLi9+RK1pJK =h1v1FxF.sL3v$OTM`3t:\-(3gJ6P!66] n
2024-10-04 07:31:43 UTC	16384	IN	Data Raw: 05 1c 12 2a 1f 00 25 38 c0 b6 38 86 17 b5 d6 a4 15 a8 77 41 88 13 13 25 16 a8 14 b6 1d 79 96 cd 3f b6 d2 81 bb 26 8e 9d c8 b2 7d c7 34 63 72 70 e5 8b 1d 58 e8 c0 d9 90 82 30 08 6d 14 9a 08 b4 01 db c1 64 5c e2 54 ac bd 91 1f db 18 c7 89 9d e1 2c b3 d3 d0 0b 9d 8c 7f 09 d5 1a ad 60 ee 05 7d 29 70 8c 92 04 af d7 4b b4 5e c3 fe 71 90 69 06 b1 65 7b a9 43 0e fa 92 84 f3 d2 d9 5e ed 43 18 24 88 8a cc 77 5d 0f d6 02 28 ce e3 c2 2d d9 ab 3d 17 21 99 13 c4 76 ea 3b ae 8b 41 81 8a 93 20 e4 4e af ed 57 f4 e2 a1 2c 70 93 38 06 05 02 f4 3e ca 72 f9 fe 5c ef e8 45 16 4a 24 38 18 81 b4 ce 82 20 89 4d d7 94 bc 43 d9 be 5d 64 66 80 b2 d8 0e 50 ea 59 c4 e9 18 7a 28 62 a3 58 ee db 85 d8 c9 b0 a5 82 24 8c 5d cb f1 40 da 80 60 17 a7 78 5f d7 11 a0 c5 8c ac 34 f0 6c d7 cf ac Data Ascii: *%88wA%y?&}4crpX0md\T,`})pK^qie{C^C$w](-=!v;A NW,p8>r\EJ$8 MC]dfPYz(bX$]@`x_4l
2024-10-04 07:31:43 UTC	16384	IN	Data Raw: ba 64 d7 db 98 fa b8 d5 8f 4b cf db 6a 02 2a bd 87 87 81 f4 30 91 f8 8e ca 3f 1c f1 e0 49 a2 4d f8 61 0f dc af cc df 21 27 e8 e0 09 09 bd ea 7d 04 8f 70 b7 4d 51 e6 21 72 1a 6f 27 5c 92 74 0f ca 60 ca 44 2f 4a fa 97 bf 77 88 a1 34 8e d0 ac 0d d2 52 06 49 c7 48 12 04 33 1a 69 e6 1c d8 2b 17 9f c4 24 27 df 37 93 9c 7e 1b 26 39 d9 8b 49 ce af 99 49 4e 6e 88 49 ce 6f 80 49 c6 53 e5 86 27 ac 33 fb db b0 9f 1e 4d f8 c1 f8 9b 49 f3 e0 a8 4a 20 70 43 d1 eb 3b c2 d2 a5 81 1b 7f e5 d6 ea 8e 4b 02 f0 89 9a ae 25 fe 4f f4 38 72 d0 68 74 e4 52 87 c5 a2 95 b1 f5 7f 6d 64 7b 4e 9e 1e 84 b6 bd fd 57 c2 11 99 63 dd f5 43 fd cb ff 52 de 01 b5 9a 8f bb b5 fe d5 34 4f 3e 2c f0 7a ad 1e cd aa 6f c4 77 a5 b7 d4 eb 4f a9 33 c9 d7 e6 02 d4 b6 64 cc 9b 39 13 69 6e 31 f6 fa be f6 Data Ascii: dKj*0?IMa!'}pMQ!ro'\t`D/Jw4RIH3i+$'7~&9IINnIoIS'3MIJ pC;K%O8rhtRmd{NWcCR4O>,zowO3d9in1
2024-10-04 07:31:43 UTC	16384	IN	Data Raw: ea b2 41 c0 ce 68 30 ac e3 c3 a9 94 f5 01 07 54 4b 78 6e f0 70 62 91 c9 1a b4 51 60 6f 10 7c e1 8b cf 0a 74 06 db 4a d1 c1 31 73 56 69 19 a5 38 93 6d 0b db 53 f4 6d f0 d7 39 f5 56 c4 cb 22 6c c4 ca 84 c4 a7 45 d7 21 60 ef ba ee bc fc de 11 0f 23 12 85 b2 8e fc 0e 2d 7f 7b cc 79 a5 6f 10 30 93 51 fd b8 a2 fa aa ba 06 25 58 30 96 ab 4f 31 63 2a 87 2f 9a 30 41 f1 5d 7b 32 20 d2 fa 31 91 36 2c 40 98 57 d1 77 c5 b2 5e bd 74 d8 58 d3 67 f8 e3 e3 8c 18 91 6c 7a ab 07 22 8d 79 a1 5d 71 f6 aa 7b 5a 98 a4 58 e9 11 82 95 e0 7b 66 27 b5 9f 39 0f fb 15 25 b7 9e e8 62 68 e9 b6 d9 b7 39 2c 12 ac 5f 53 e5 11 33 fa ca 1e 6d fd a1 66 92 52 66 b1 d2 ea a6 b7 57 5d 7c 45 ee 42 d9 95 99 ad 53 8e ae 55 15 9d c6 8a e7 00 c5 0a 45 12 be 3e e5 8c c5 02 96 f3 25 e4 e5 f5 50 5f 2e Data Ascii: Ah0TKxnpbQ`o\|tJ1sVi8mSm9V"lE!`#-{yo0Q%X0O1c*/0A]{2 16,@Ww^tXglz"y]q{ZX{f'9%bh9,_S3mfRfW]\|EBSUE>%P_.
2024-10-04 07:31:43 UTC	16384	IN	Data Raw: 38 c3 00 f7 b0 5a 52 49 83 31 18 03 16 eb b2 19 eb dc 70 59 71 58 92 15 b7 ec a4 59 39 e1 bc fd ce 20 70 86 43 a4 c2 56 e5 34 d4 43 b6 01 3e 0b 14 64 c3 de 10 97 56 05 09 b3 9b 6d 1e 15 f2 98 0a 34 47 c2 f6 09 b5 ea ee 1a 40 8e 5c a5 ac ca 73 68 ed 0e da 9d 7b 82 2c 11 12 49 ee c3 20 f6 c8 4a 0e a0 b0 ff ef ff ad dc 14 d0 45 66 55 2f 5c a1 55 aa bf 32 2f 5a 95 62 73 20 7d 3a bc 6b b1 d2 98 d0 0b b7 ac a5 2d 8e b0 c6 ba c6 6b a1 f7 4a d4 b8 83 f0 07 0d 81 99 72 f0 56 3b 01 70 19 aa d8 9e 5f 4b d0 28 a8 cf 4a 22 a4 d9 a8 f1 3a 83 5e ec cc e2 08 8e ce 8a 11 70 ad 9c 3f 64 54 2b aa 92 f1 00 9d 62 ed c0 8e 82 93 25 dc 11 2e ad 76 f0 39 1f d7 b5 45 ef 68 b0 f6 61 41 8d d9 8e a7 af ac 1d 27 74 77 60 d5 e3 69 14 7b 90 0a 6d a9 43 16 8f 4f e0 ce cc c7 e6 ee 3c dd Data Ascii: 8ZRI1pYqXY9 pCV4C>dVm4G@\sh{,I JEfU/\U2/Zbs }:k-kJrV;p_K(J":^p?dT+b%.v9EhaA'tw`i{mCO<
2024-10-04 07:31:43 UTC	16384	IN	Data Raw: ef a9 61 cd a3 15 88 d8 1b e2 f8 21 a9 b9 9a 86 68 8b a1 31 76 e2 db 3c 3f 6c b2 48 b0 ab 19 65 28 e7 41 07 c9 05 a0 05 24 e7 e0 a0 ce 7d 60 d4 52 52 68 82 b6 e3 d1 59 bf ef a3 e5 b5 3d 0b e8 7a a4 18 8a 89 1a 09 f6 28 33 2c 23 be 61 96 28 9b fd 54 08 8a 32 7e c1 e9 c5 d3 09 30 11 82 e9 a9 1f 50 b9 4f 2d 5f 66 65 5e cd ff 31 6c 3e d9 b7 80 d4 c4 f0 7b af c9 2f 0d ba dd 06 1c 39 67 ca c8 8a fb fc 89 b3 c0 e5 06 8c 99 b5 65 4a 7f 29 ea fd de c2 3f 15 2f 74 2b 56 d6 44 c8 36 a9 d1 9a 4c 71 ff b1 d2 52 40 59 05 cc 79 86 68 e5 20 23 91 16 6b 4b 19 58 5c 55 42 76 90 0a 94 0d a4 57 b1 36 e6 20 49 84 75 ee d3 1a 77 58 c0 2a 21 99 fb f5 94 a3 23 28 27 a2 a3 8f 52 39 35 3e 21 9c 5c 98 64 c8 f2 02 55 34 80 7a 90 b5 1f fa 5a cb 72 dd f9 35 3c 8a c4 be 15 0b 19 b6 0a Data Ascii: a!h1v<?lHe(A$}`RRhY=z(3,#a(T2~0PO-_fe^1l>{/9geJ)?/t+VD6LqR@Yyh #kKX\UBvW6 IuwX*!#('R95>!\dU4zZr5<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49835	13.107.246.51	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:44 UTC	608	OUT	GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:44 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:44 GMT Content-Type: application/x-javascript Content-Length: 32811 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 09 Aug 2024 21:16:17 GMT ETag: 0x8DCB8B881BE95D6 x-ms-request-id: 9329155b-501e-0014-082f-168b39000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073144Z-15767c5fc554l9xf959gp9cb1s00000006f0000000001qva x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-04 07:31:44 UTC	15585	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 69 77 db 38 b3 3f f8 7e 3e 85 c4 e9 f1 25 db b0 22 39 4b 27 52 18 9d c4 71 3a ce 66 77 ec 2c dd 6e 5f 1f 5a 82 6c b6 65 52 4d 52 5e 62 e9 bb 4f fd 0a 0b 41 8a 4e f2 9c ff 9d 79 71 fb 74 2c 62 21 08 14 0a 85 aa 42 55 e1 de af ed d6 ab 34 6b 4d e3 91 4c 72 d9 8a 93 49 9a 5d 44 45 9c 26 ad d9 54 46 94 95 4b d9 4a 13 39 ce 37 a2 24 9a de 14 f1 28 df f8 27 3f ee fe f6 db 66 ef b7 df 1e 74 47 8f 1f de 3f 79 38 7e 30 91 8f 3b ff e4 9d 77 3b 5b db 1f f6 b7 3b c5 75 d1 fa f5 de ff e5 cd d1 44 91 c5 a3 c2 1b f8 b9 9c 4e 3a 57 f2 64 16 8d ce b7 ce e6 c9 f9 f1 45 1e 8f 65 52 c4 c5 cd 71 1e e7 73 4a 47 e1 4f d5 5a 2c 0e 8f 82 ce 6c 9e 9f f9 87 87 0f 7e eb 1d 89 db cd cd df 1e f7 27 f3 64 84 ee fb 89 90 a2 08 6e 8b 4e e6 cb 40 14 9d Data Ascii: iw8?~>%"9K'Rq:fw,n_ZleRMR^bOANyqt,b!BU4kMLrI]DE&TFKJ97$('?ftG?y8~0;w;[;uDN:WdEeRqsJGOZ,l~'dnN@
2024-10-04 07:31:44 UTC	16384	IN	Data Raw: 06 af 71 1f 5f ed 9d 5c f7 74 ef 4c df cc 9e 34 fc 2b 3e c4 89 e7 91 7d e8 e3 6f a5 79 ea 98 eb ae 62 e3 88 d0 00 9e 6d f4 86 f4 db 77 72 8f 75 ee b1 a7 4e 0a 98 cd 48 c3 1a 17 45 db 40 3a 9b 4f 89 80 ef ce 60 76 4b 44 73 ff 26 27 f9 61 27 99 a4 06 ce bc e1 15 a1 09 a7 cf 1c a8 8d 8a 02 53 37 27 e1 79 30 3f 2d 73 10 b0 b4 52 45 65 a8 eb 33 32 c3 fd b8 bd aa 5e aa 26 53 f7 52 35 33 8b 70 46 e5 49 eb 30 03 ab 00 4d 09 1b 6a a3 e8 a4 ea ee e6 4e 5e 5e 4d a2 41 43 79 95 7a ee 8c 66 55 5e 8b c4 48 e5 6a 9c 92 9c 77 89 58 7b 29 6d ba 29 84 e3 84 b7 7a f5 8b e6 53 15 a3 24 ee 10 6e 15 b8 43 93 e3 c6 aa b7 9d 4c 92 18 23 22 8c f6 6a 3a e7 3e ba f2 ec 5e 9d 56 13 3f a4 2c 6b d3 1f 73 27 dd 3b 38 13 6d 43 d7 31 d7 d3 eb 53 9c 5d 1a 0b 2e de 1d 80 53 f9 37 cc 70 05 Data Ascii: q_\tL4+>}oybmwruNHE@:O`vKDs&'a'S7'y0?-sREe32^&SR53pFI0MjN^^MACyzfU^HjwX{)m)zS$nCL#"j:>^V?,ks';8mC1S].S7p
2024-10-04 07:31:44 UTC	842	IN	Data Raw: e1 7b 76 1b 9d a4 e9 6e 9a 5c c9 36 df 14 3a a1 47 d0 e6 00 88 d8 cb a3 30 41 78 cf 37 25 ca 2b 3e 60 ed a5 aa 8d 3e b1 ad 34 e9 15 75 67 50 a0 46 bb a6 5f ba e2 9b cb 04 07 93 40 5c 16 9d 00 ca 3e 80 25 94 2b 0d 7d a7 b8 f2 7b 9c 0f 81 b6 e6 a4 42 2b 4d 67 df ad 1c c2 6a 6a 2b c5 1d da d0 1a 13 bc 76 0c 6f b0 01 2d cd 69 36 32 b3 b1 61 89 73 7e d1 48 48 ae 58 07 06 be 0e 9a 29 24 b4 42 eb b3 33 30 e3 ac 59 a7 95 73 92 ac 5a 37 c8 01 f1 6e 70 24 b9 ea 6b 78 a5 f0 eb 4e 72 99 1e 24 a7 f4 2b 86 71 68 49 38 c1 ae 39 36 72 95 d6 c2 f6 d1 b0 ea 68 19 8e 93 78 3c 86 7b db cf e2 31 10 22 e1 00 a7 32 cd 00 81 da 73 9d 15 11 a1 5b 69 f1 d5 88 84 a3 8d 18 bd ae f9 f2 f9 75 df ea be c5 3e cb 14 48 d9 af 37 0a d8 03 eb b8 41 d4 97 0d e3 fc ba 75 ed 19 13 6f 01 39 9f Data Ascii: {vn\6:G0Ax7%+>`>4ugPF_@\>%+}{B+Mgjj+vo-i62as~HHX)$B30YsZ7np$kxNr$+qhI896rhx<{1"2s[iu>H7Auo9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49834	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:44 UTC	410	OUT	GET /shared/5/js/reset-password-signinname_en_JOEV9q8F85e8zIrr9TrzjA2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:44 UTC	820	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:44 GMT Content-Type: application/x-javascript Content-Length: 170691 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 23 Sep 2024 18:45:12 GMT ETag: 0x8DCDBFFDB7574C1 x-ms-request-id: 733de844-901e-0034-622f-16f09e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073144Z-15767c5fc55rv8zjq9dg0musxg0000000c6g000000005wpf x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-04 07:31:44 UTC	15564	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 6b 77 db b8 b2 20 fa fd fe 0a 5b 37 4b 8b 3c 86 15 c9 ce 93 0a 5b 93 c4 76 27 dd 79 75 1e dd e9 f6 f6 78 d1 12 64 33 91 48 85 a4 ec 38 b6 fe fb ad 07 9e 24 e5 24 fb cc 99 39 77 b2 56 2c 10 04 81 42 a1 00 54 15 aa 0a b7 ff 63 73 e3 20 2f 36 66 e9 58 66 a5 dc 48 b3 69 5e cc 93 2a cd b3 8d c5 4c 26 90 55 4a b9 51 c8 52 56 db 8b a4 2c 2f f2 62 b2 5d a6 a7 59 9a 65 c9 5c 1e cb ac f7 a9 ec bd 78 fe 74 ff d5 bb fd 5e f5 b5 da f8 8f db ff cf e6 74 99 8d b1 8e 20 bc 3a 4f 8a 0d 29 2a 91 89 42 e4 22 8d af ee 0e 76 ef 46 a6 00 bd 0a af 3a 4b 6c a9 2a d2 71 d5 19 e2 27 45 9c 05 3b 0f ef 0e 42 91 c7 57 e3 b3 74 36 79 9a 67 95 fc 5a bd bf 5c c8 32 da ec 8b b1 7d ae 3d d2 eb 89 9c 26 cb 59 f5 a6 c8 17 fc 9c 96 8b 59 72 f9 0a 80 c6 c7 Data Ascii: kw [7K<[v'yuxd3H8$$9wV,BTcs /6fXfHi^L&UJQRV,/b]Ye\xt^t :O)B"vF:Kl*q'E;BWt6ygZ\2}=&YYr
2024-10-04 07:31:44 UTC	16384	IN	Data Raw: 70 0f ea 47 25 0d 24 ef 73 fb d0 18 3c 40 25 8f 67 98 0b df bf c1 68 4f 1d b1 d3 8f 30 08 57 c9 90 ec dc b7 48 db dd 21 74 ed ee 62 d9 53 b4 bd 17 bb 77 38 cd 68 d8 bd 8b 2d 02 33 b6 0b ed 3d cb e7 f8 cd 7d 0f b3 bb 0f 1c cc ee 3e f4 d1 7a a7 ef 21 f5 0e d4 f6 3c 2b 25 da 5a dc b9 67 f1 3b c0 3e 1e 0c 30 01 90 1c ec 60 02 c0 38 d8 c5 04 7c 73 70 07 13 f0 c1 c1 5d 4c 00 00 07 f7 30 01 4d 1f dc c7 04 34 7b f0 00 51 05 ed 1d 3c c4 c4 00 2b ec 63 8a aa c6 ba 77 b0 ee 01 56 7e 07 2a 7f b5 9c 33 3e 06 08 95 3b 54 3b 3b f0 1a 55 84 30 2c 89 37 13 80 ba eb 5a 1c 22 79 4d ff 79 7e 48 cf e8 c9 82 bf c4 f1 79 03 ed dd f5 a2 96 09 7b 48 69 95 38 1c 61 55 c6 34 bb c2 91 1a f5 a8 ed 38 51 d6 8e d4 b5 3e d7 ea f6 b9 ca 54 01 87 1f 1d d1 1d f2 0e 5c 51 07 3a ab 5d 28 ff Data Ascii: pG%$s<@%ghO0WH!tbSw8h-3=}>z!<+%Zg;>0`8\|sp]L0M4{Q<+cwV~*3>;T;;U0,7Z"yMy~Hy{Hi8aU48Q>T\Q:](
2024-10-04 07:31:44 UTC	16384	IN	Data Raw: 57 2b 51 ce 04 4a b5 2e 5d 2f b8 89 88 e6 1d d9 47 56 79 4f 18 5c 14 b1 f1 26 57 75 6a 31 59 06 2b 6f e7 38 52 8e 1e d6 5d f3 a7 99 77 a5 da a9 15 e5 60 75 0d 9b f1 d2 dc ae e6 4f 0d 57 7f c8 af 4e a7 fa 31 cf 5b 56 2a 46 00 34 e4 09 02 b8 36 54 58 79 97 ba db 2f 98 b9 be 95 15 6b 0a d9 a8 70 ae 66 8d 1f 97 66 2c 5d 69 f4 fe 21 5c db 18 e9 54 1f 24 2b 7b d8 8e 48 61 a3 0e c6 99 a5 09 a8 24 d4 97 1f 78 e5 ae 48 a8 e4 0d 4b 13 25 8d 8c ce c8 16 29 3a c0 e0 a4 7d f6 ad ea 57 52 1d cb 37 81 d1 e0 84 a2 22 c1 9e d1 af 89 d4 75 af d3 41 48 c9 d3 14 57 29 d2 b5 59 56 35 e3 18 aa 19 c9 fe 9c cc 4b 0a 4a 25 c4 55 1d ef 5e 50 d1 fa ff 80 cd 86 ad d2 74 76 45 6e 74 d8 cf d4 93 c3 b7 6d 69 41 c6 f2 97 4d 1a d4 a1 68 6b dd 6c 6a b8 ca b4 16 74 7d ea b9 de 8b 86 78 bb Data Ascii: W+QJ.]/GVyO\&Wuj1Y+o8R]w`uOWN1[V*F46TXy/kpff,]i!\T$+{Ha$xHK%):}WR7"uAHW)YV5KJ%U^PtvEntmiAMhkljt}x
2024-10-04 07:31:44 UTC	16384	IN	Data Raw: 68 df 45 6f 24 80 8e 96 ce 9b 78 e3 3a c7 29 25 51 2b 63 38 8c 1b 79 34 8e e2 db 28 67 1b 54 54 80 aa c2 c6 b9 c1 45 6e f0 5a 38 8f 08 65 f2 10 6e 73 8b 95 82 42 d3 84 1a 02 62 7b 9e 52 a6 b2 0d ac 7e f0 bc 53 46 45 09 d2 61 b8 8e dd db 12 96 df ad 7d 61 35 c4 18 d0 15 86 ad 46 5d 51 93 3d d8 54 9f 3c ac 99 dd d6 0b fe f1 9d 1d 3e bd 1d 21 6f 6d ad 60 f7 78 c2 1a e1 c2 9c d0 0e 50 9a a8 29 96 f3 80 7f 79 c2 f4 44 46 98 16 32 eb f3 34 48 ce 8b 8b 41 4e 46 b7 c5 02 f8 75 54 3e e2 25 1a bd e0 6d b7 84 5f 6b cd ac 68 64 ca 04 92 a1 a1 ee f2 b1 ee 0a d9 70 7b 87 3b 76 9d 63 e4 64 0a 34 af a2 18 3f 8d a6 09 b2 bf cc c9 ee d2 9f 69 8d 4d a5 88 d4 05 22 b7 88 f6 62 f4 25 87 79 29 20 19 8e d1 04 83 0f fc 75 1a 9a 1d b1 a0 bb db 9e 18 86 ab 18 00 d3 3d 82 04 d0 46 Data Ascii: hEo$x:)%Q+c8y4(gTTEnZ8ensBb{R~SFEa}a5F]Q=T<>!om`xP)yDF24HANFuT>%m_khdp{;vcd4?iM"b%y) u=F
2024-10-04 07:31:44 UTC	16384	IN	Data Raw: d6 0a e2 36 d0 10 c0 79 94 e4 44 b1 e0 3a 80 c0 f2 41 ff ac 0d b7 25 a9 2f ac ec b3 d8 06 d4 42 68 d0 0a 71 08 fc 43 07 ff 74 56 7c 98 fd b3 9b 9b 26 0c 89 bd 60 35 f8 7e 73 83 7c c7 07 64 b4 2a c8 95 1f 22 c0 a0 07 dc 58 03 4e 81 d0 31 ba 67 37 49 c9 07 0a 51 b0 d0 c6 00 a4 fd de b9 07 c0 ab 56 fb 3e d5 79 6f 20 be 74 e0 8b b1 0f 34 c4 70 ae cc 8d 08 b7 85 0b 60 0b 79 e6 ea cc 43 8d 8d 01 4c c4 07 9c b6 0f ee da c9 98 69 01 39 ee 88 82 2b 52 4b b5 31 f3 08 70 be ba 4a 4b e1 0c c6 09 20 19 3d 68 b7 ba e7 31 0c c1 da 01 76 13 e0 31 46 02 ed 78 90 46 b5 c1 c0 b0 2e ed 73 8b 81 4c 9f 1c e8 33 8e 76 c7 92 83 07 24 83 da 4f fd 11 54 4d 60 9e bb 33 c0 f3 89 fb 1e b0 b5 d7 07 74 85 7f c6 18 3a 02 fe 00 5c d0 9e 0e 2d 28 b0 8b 33 67 ca 4a 9d c2 ff 97 b0 36 c6 50 Data Ascii: 6yD:A%/BhqCtV\|&`5~s\|d*"XN1g7IQV>yo t4p`yCLi9+RK1pJK =h1v1FxF.sL3v$OTM`3t:\-(3gJ6P
2024-10-04 07:31:44 UTC	16384	IN	Data Raw: a1 15 c6 b6 1b 38 26 09 f8 8c 83 80 3b 10 37 7b b4 86 16 c0 05 1c 12 2a 1f 00 25 38 c0 b6 38 86 17 b5 d6 a4 15 a8 77 41 88 13 13 25 16 a8 14 b6 1d 79 96 cd 3f b6 d2 81 bb 26 8e 9d c8 b2 7d c7 34 63 72 70 e5 8b 1d 58 e8 c0 d9 90 82 30 08 6d 14 9a 08 b4 01 db c1 64 5c e2 54 ac bd 91 1f db 18 c7 89 9d e1 2c b3 d3 d0 0b 9d 8c 7f 09 d5 1a ad 60 ee 05 7d 29 70 8c 92 04 af d7 4b b4 5e c3 fe 71 90 69 06 b1 65 7b a9 43 0e fa 92 84 f3 d2 d9 5e ed 43 18 24 88 8a cc 77 5d 0f d6 02 28 ce e3 c2 2d d9 ab 3d 17 21 99 13 c4 76 ea 3b ae 8b 41 81 8a 93 20 e4 4e af ed 57 f4 e2 a1 2c 70 93 38 06 05 02 f4 3e ca 72 f9 fe 5c ef e8 45 16 4a 24 38 18 81 b4 ce 82 20 89 4d d7 94 bc 43 d9 be 5d 64 66 80 b2 d8 0e 50 ea 59 c4 e9 18 7a 28 62 a3 58 ee db 85 d8 c9 b0 a5 82 24 8c 5d cb f1 Data Ascii: 8&;7{*%88wA%y?&}4crpX0md\T,`})pK^qie{C^C$w](-=!v;A NW,p8>r\EJ$8 MC]dfPYz(bX$]
2024-10-04 07:31:44 UTC	16384	IN	Data Raw: 7b 28 26 52 44 4d 24 25 81 d2 46 58 bb 2c 37 53 b7 b4 03 77 ba 64 d7 db 98 fa b8 d5 8f 4b cf db 6a 02 2a bd 87 87 81 f4 30 91 f8 8e ca 3f 1c f1 e0 49 a2 4d f8 61 0f dc af cc df 21 27 e8 e0 09 09 bd ea 7d 04 8f 70 b7 4d 51 e6 21 72 1a 6f 27 5c 92 74 0f ca 60 ca 44 2f 4a fa 97 bf 77 88 a1 34 8e d0 ac 0d d2 52 06 49 c7 48 12 04 33 1a 69 e6 1c d8 2b 17 9f c4 24 27 df 37 93 9c 7e 1b 26 39 d9 8b 49 ce af 99 49 4e 6e 88 49 ce 6f 80 49 c6 53 e5 86 27 ac 33 fb db b0 9f 1e 4d f8 c1 f8 9b 49 f3 e0 a8 4a 20 70 43 d1 eb 3b c2 d2 a5 81 1b 7f e5 d6 ea 8e 4b 02 f0 89 9a ae 25 fe 4f f4 38 72 d0 68 74 e4 52 87 c5 a2 95 b1 f5 7f 6d 64 7b 4e 9e 1e 84 b6 bd fd 57 c2 11 99 63 dd f5 43 fd cb ff 52 de 01 b5 9a 8f bb b5 fe d5 34 4f 3e 2c f0 7a ad 1e cd aa 6f c4 77 a5 b7 d4 eb 4f Data Ascii: {(&RDM$%FX,7SwdKj*0?IMa!'}pMQ!ro'\t`D/Jw4RIH3i+$'7~&9IINnIoIS'3MIJ pC;K%O8rhtRmd{NWcCR4O>,zowO
2024-10-04 07:31:44 UTC	16384	IN	Data Raw: ae 3c dd 80 64 ca b0 51 cc bf cf 6e 7e 3e 8d 63 a2 59 1b d8 ea b2 41 c0 ce 68 30 ac e3 c3 a9 94 f5 01 07 54 4b 78 6e f0 70 62 91 c9 1a b4 51 60 6f 10 7c e1 8b cf 0a 74 06 db 4a d1 c1 31 73 56 69 19 a5 38 93 6d 0b db 53 f4 6d f0 d7 39 f5 56 c4 cb 22 6c c4 ca 84 c4 a7 45 d7 21 60 ef ba ee bc fc de 11 0f 23 12 85 b2 8e fc 0e 2d 7f 7b cc 79 a5 6f 10 30 93 51 fd b8 a2 fa aa ba 06 25 58 30 96 ab 4f 31 63 2a 87 2f 9a 30 41 f1 5d 7b 32 20 d2 fa 31 91 36 2c 40 98 57 d1 77 c5 b2 5e bd 74 d8 58 d3 67 f8 e3 e3 8c 18 91 6c 7a ab 07 22 8d 79 a1 5d 71 f6 aa 7b 5a 98 a4 58 e9 11 82 95 e0 7b 66 27 b5 9f 39 0f fb 15 25 b7 9e e8 62 68 e9 b6 d9 b7 39 2c 12 ac 5f 53 e5 11 33 fa ca 1e 6d fd a1 66 92 52 66 b1 d2 ea a6 b7 57 5d 7c 45 ee 42 d9 95 99 ad 53 8e ae 55 15 9d c6 8a e7 Data Ascii: <dQn~>cYAh0TKxnpbQ`o\|tJ1sVi8mSm9V"lE!`#-{yo0Q%X0O1c*/0A]{2 16,@Ww^tXglz"y]q{ZX{f'9%bh9,_S3mfRfW]\|EBSU
2024-10-04 07:31:44 UTC	16384	IN	Data Raw: 72 04 6a 4b 13 67 cd 96 42 61 a9 c3 d4 1a 87 58 36 fa b7 a7 38 c3 00 f7 b0 5a 52 49 83 31 18 03 16 eb b2 19 eb dc 70 59 71 58 92 15 b7 ec a4 59 39 e1 bc fd ce 20 70 86 43 a4 c2 56 e5 34 d4 43 b6 01 3e 0b 14 64 c3 de 10 97 56 05 09 b3 9b 6d 1e 15 f2 98 0a 34 47 c2 f6 09 b5 ea ee 1a 40 8e 5c a5 ac ca 73 68 ed 0e da 9d 7b 82 2c 11 12 49 ee c3 20 f6 c8 4a 0e a0 b0 ff ef ff ad dc 14 d0 45 66 55 2f 5c a1 55 aa bf 32 2f 5a 95 62 73 20 7d 3a bc 6b b1 d2 98 d0 0b b7 ac a5 2d 8e b0 c6 ba c6 6b a1 f7 4a d4 b8 83 f0 07 0d 81 99 72 f0 56 3b 01 70 19 aa d8 9e 5f 4b d0 28 a8 cf 4a 22 a4 d9 a8 f1 3a 83 5e ec cc e2 08 8e ce 8a 11 70 ad 9c 3f 64 54 2b aa 92 f1 00 9d 62 ed c0 8e 82 93 25 dc 11 2e ad 76 f0 39 1f d7 b5 45 ef 68 b0 f6 61 41 8d d9 8e a7 af ac 1d 27 74 77 60 d5 Data Ascii: rjKgBaX68ZRI1pYqXY9 pCV4C>dVm4G@\sh{,I JEfU/\U2/Zbs }:k-kJrV;p_K(J":^p?dT+b%.v9EhaA'tw`
2024-10-04 07:31:44 UTC	16384	IN	Data Raw: c3 c9 37 a7 5d 85 76 1b 1c ce 42 a4 de f1 c8 09 87 de 46 1f ef a9 61 cd a3 15 88 d8 1b e2 f8 21 a9 b9 9a 86 68 8b a1 31 76 e2 db 3c 3f 6c b2 48 b0 ab 19 65 28 e7 41 07 c9 05 a0 05 24 e7 e0 a0 ce 7d 60 d4 52 52 68 82 b6 e3 d1 59 bf ef a3 e5 b5 3d 0b e8 7a a4 18 8a 89 1a 09 f6 28 33 2c 23 be 61 96 28 9b fd 54 08 8a 32 7e c1 e9 c5 d3 09 30 11 82 e9 a9 1f 50 b9 4f 2d 5f 66 65 5e cd ff 31 6c 3e d9 b7 80 d4 c4 f0 7b af c9 2f 0d ba dd 06 1c 39 67 ca c8 8a fb fc 89 b3 c0 e5 06 8c 99 b5 65 4a 7f 29 ea fd de c2 3f 15 2f 74 2b 56 d6 44 c8 36 a9 d1 9a 4c 71 ff b1 d2 52 40 59 05 cc 79 86 68 e5 20 23 91 16 6b 4b 19 58 5c 55 42 76 90 0a 94 0d a4 57 b1 36 e6 20 49 84 75 ee d3 1a 77 58 c0 2a 21 99 fb f5 94 a3 23 28 27 a2 a3 8f 52 39 35 3e 21 9c 5c 98 64 c8 f2 02 55 34 80 Data Ascii: 7]vBFa!h1v<?lHe(A$}`RRhY=z(3,#a(T2~0PO-_fe^1l>{/9geJ)?/t+VD6LqR@Yyh #kKX\UBvW6 IuwX*!#('R95>!\dU4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49837	13.107.246.51	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:44 UTC	634	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:44 UTC	807	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:44 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: 69dfc4c0-101e-002a-2920-161c46000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073144Z-15767c5fc55rg5b7sh1vuv8t7n0000000ceg000000009hzf x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-04 07:31:44 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49836	13.107.246.51	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:44 UTC	621	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:44 UTC	786	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:44 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: 98c9e143-d01e-0025-5f2f-166a2a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073144Z-15767c5fc55gs96cphvgp5f5vc0000000c6g000000001p7s x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-04 07:31:44 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49840	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:44 UTC	398	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:44 UTC	807	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:44 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: 69dfc4c0-101e-002a-2920-161c46000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073144Z-15767c5fc55v7j95gq2uzq37a00000000cbg000000008x05 x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-04 07:31:44 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49842	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:45 UTC	385	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:45 UTC	806	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:45 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: 98c9e143-d01e-0025-5f2f-166a2a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073145Z-15767c5fc552g4w83buhsr3htc0000000c7g000000004kxh x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-04 07:31:45 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49843	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:45 UTC	401	OUT	GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:45 UTC	819	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:45 GMT Content-Type: application/x-javascript Content-Length: 32811 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 09 Aug 2024 21:16:17 GMT ETag: 0x8DCB8B881BE95D6 x-ms-request-id: 9329155b-501e-0014-082f-168b39000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073145Z-15767c5fc552g4w83buhsr3htc0000000c5g000000007wgv x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-04 07:31:45 UTC	15565	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 69 77 db 38 b3 3f f8 7e 3e 85 c4 e9 f1 25 db b0 22 39 4b 27 52 18 9d c4 71 3a ce 66 77 ec 2c dd 6e 5f 1f 5a 82 6c b6 65 52 4d 52 5e 62 e9 bb 4f fd 0a 0b 41 8a 4e f2 9c ff 9d 79 71 fb 74 2c 62 21 08 14 0a 85 aa 42 55 e1 de af ed d6 ab 34 6b 4d e3 91 4c 72 d9 8a 93 49 9a 5d 44 45 9c 26 ad d9 54 46 94 95 4b d9 4a 13 39 ce 37 a2 24 9a de 14 f1 28 df f8 27 3f ee fe f6 db 66 ef b7 df 1e 74 47 8f 1f de 3f 79 38 7e 30 91 8f 3b ff e4 9d 77 3b 5b db 1f f6 b7 3b c5 75 d1 fa f5 de ff e5 cd d1 44 91 c5 a3 c2 1b f8 b9 9c 4e 3a 57 f2 64 16 8d ce b7 ce e6 c9 f9 f1 45 1e 8f 65 52 c4 c5 cd 71 1e e7 73 4a 47 e1 4f d5 5a 2c 0e 8f 82 ce 6c 9e 9f f9 87 87 0f 7e eb 1d 89 db cd cd df 1e f7 27 f3 64 84 ee fb 89 90 a2 08 6e 8b 4e e6 cb 40 14 9d Data Ascii: iw8?~>%"9K'Rq:fw,n_ZleRMR^bOANyqt,b!BU4kMLrI]DE&TFKJ97$('?ftG?y8~0;w;[;uDN:WdEeRqsJGOZ,l~'dnN@
2024-10-04 07:31:45 UTC	16384	IN	Data Raw: 7d ed 52 dc 70 af e6 f3 3f e8 25 f5 f0 ff d7 fe 25 ce 31 b8 06 af 71 1f 5f ed 9d 5c f7 74 ef 4c df cc 9e 34 fc 2b 3e c4 89 e7 91 7d e8 e3 6f a5 79 ea 98 eb ae 62 e3 88 d0 00 9e 6d f4 86 f4 db 77 72 8f 75 ee b1 a7 4e 0a 98 cd 48 c3 1a 17 45 db 40 3a 9b 4f 89 80 ef ce 60 76 4b 44 73 ff 26 27 f9 61 27 99 a4 06 ce bc e1 15 a1 09 a7 cf 1c a8 8d 8a 02 53 37 27 e1 79 30 3f 2d 73 10 b0 b4 52 45 65 a8 eb 33 32 c3 fd b8 bd aa 5e aa 26 53 f7 52 35 33 8b 70 46 e5 49 eb 30 03 ab 00 4d 09 1b 6a a3 e8 a4 ea ee e6 4e 5e 5e 4d a2 41 43 79 95 7a ee 8c 66 55 5e 8b c4 48 e5 6a 9c 92 9c 77 89 58 7b 29 6d ba 29 84 e3 84 b7 7a f5 8b e6 53 15 a3 24 ee 10 6e 15 b8 43 93 e3 c6 aa b7 9d 4c 92 18 23 22 8c f6 6a 3a e7 3e ba f2 ec 5e 9d 56 13 3f a4 2c 6b d3 1f 73 27 dd 3b 38 13 6d 43 Data Ascii: }Rp?%%1q_\tL4+>}oybmwruNHE@:O`vKDs&'a'S7'y0?-sREe32^&SR53pFI0MjN^^MACyzfU^HjwX{)m)zS$nCL#"j:>^V?,ks';8mC
2024-10-04 07:31:45 UTC	862	IN	Data Raw: 0b 1f 65 9b 96 67 0f 20 14 80 06 f7 e2 b5 db d6 c5 b4 c6 5f e1 7b 76 1b 9d a4 e9 6e 9a 5c c9 36 df 14 3a a1 47 d0 e6 00 88 d8 cb a3 30 41 78 cf 37 25 ca 2b 3e 60 ed a5 aa 8d 3e b1 ad 34 e9 15 75 67 50 a0 46 bb a6 5f ba e2 9b cb 04 07 93 40 5c 16 9d 00 ca 3e 80 25 94 2b 0d 7d a7 b8 f2 7b 9c 0f 81 b6 e6 a4 42 2b 4d 67 df ad 1c c2 6a 6a 2b c5 1d da d0 1a 13 bc 76 0c 6f b0 01 2d cd 69 36 32 b3 b1 61 89 73 7e d1 48 48 ae 58 07 06 be 0e 9a 29 24 b4 42 eb b3 33 30 e3 ac 59 a7 95 73 92 ac 5a 37 c8 01 f1 6e 70 24 b9 ea 6b 78 a5 f0 eb 4e 72 99 1e 24 a7 f4 2b 86 71 68 49 38 c1 ae 39 36 72 95 d6 c2 f6 d1 b0 ea 68 19 8e 93 78 3c 86 7b db cf e2 31 10 22 e1 00 a7 32 cd 00 81 da 73 9d 15 11 a1 5b 69 f1 d5 88 84 a3 8d 18 bd ae f9 f2 f9 75 df ea be c5 3e cb 14 48 d9 af 37 Data Ascii: eg _{vn\6:G0Ax7%+>`>4ugPF_@\>%+}{B+Mgjj+vo-i62as~HHX)$B30YsZ7np$kxNr$+qhI896rhx<{1"2s[iu>H7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49844	13.107.246.67	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:45 UTC	600	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:45 UTC	743	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:45 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Thu, 03 Oct 2024 04:52:12 GMT ETag: 0x8DCE36724F133AE x-ms-request-id: 769c6fb8-601e-006f-7a75-15de72000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073145Z-15767c5fc55kg97hfq5uqyxxaw0000000ca00000000010ad x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:31:45 UTC	15641	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-04 07:31:45 UTC	1533	IN	Data Raw: 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49846	13.107.246.51	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:46 UTC	364	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:46 UTC	743	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:46 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Thu, 03 Oct 2024 04:52:12 GMT ETag: 0x8DCE36724F133AE x-ms-request-id: 769c6fb8-601e-006f-7a75-15de72000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073146Z-15767c5fc55fdfx81a30vtr1fw0000000cn0000000001p8x x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 07:31:46 UTC	15641	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-04 07:31:46 UTC	1533	IN	Data Raw: 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49855	13.107.246.51	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:54 UTC	613	OUT	GET /shared/5/js/reset-password-fabric_en_NEoXnGfR1XTSRZBK3ucL0g2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:55 UTC	800	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 07:31:55 GMT Content-Type: application/x-javascript Content-Length: 208709 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 23 Sep 2024 18:45:01 GMT ETag: 0x8DCDBFFD4A82174 x-ms-request-id: 208eddb8-501e-003b-482f-1686f2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241004T073154Z-15767c5fc55xsgnlxyxy40f4m00000000c6g0000000019v5 x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-04 07:31:55 UTC	15584	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd f9 77 db 38 b3 20 fa fb fb 2b 6c bd 1c 1f f2 1a 56 24 3b 2b 15 b6 26 f1 d2 49 77 f6 a5 d3 69 7f 1e 1f 5a 82 2d 26 12 a9 90 94 1d c7 d6 ff fe 6a c1 4a 52 4e f2 dd b9 33 f7 4d ce 89 05 82 20 50 28 14 80 aa 42 55 e1 f6 7f ac af 1d e4 c5 da 34 1d c9 ac 94 6b 69 76 9a 17 b3 a4 4a f3 6c 6d 3e 95 09 64 95 52 ae 15 b2 94 d5 d6 3c 29 cb 8b bc 18 6f 9d 26 27 45 3a 3a 96 59 f7 73 d9 7d fe 6c 77 ff e5 bb fd 6e f5 ad 5a fb 8f db ff cf fa e9 22 1b e1 f7 41 78 75 9e 14 6b 52 54 22 13 85 c8 45 1a 5f dd ed ef dc 8d 4c 01 7a 15 5e 75 16 d8 4a 05 35 56 9d 01 7e 52 c4 59 b0 fd f0 6e 3f 14 79 7c 35 9a a4 d3 f1 6e 9e 55 f2 5b f5 fe 72 2e cb 68 bd 27 46 f6 b9 f6 48 af c7 f2 34 59 4c ab d7 45 3e e7 e7 b4 9c 4f 93 cb 97 c9 8c 8a 9f c9 6a af 56 Data Ascii: w8 +lV$;+&IwiZ-&jJRN3M P(BU4kivJlm>dR<)o&'E::Ys}lwnZ"AxukRT"E_Lz^uJ5V~RYn?y\|5nU[r.h'FH4YLE>OjV
2024-10-04 07:31:55 UTC	16384	IN	Data Raw: 10 ae 92 21 d9 be 6f 91 b6 b3 4d e8 da d9 c1 b2 67 68 7b 2f 76 ee 70 9a d1 b0 73 17 5b 04 66 6c 07 da 7b 9a cf f0 9b fb 1e 66 77 1e 38 98 dd 79 e8 a3 f5 4e cf 43 ea 1d a8 ed 59 56 4a b4 b5 b8 73 cf e2 b7 8f 7d 3c e8 63 02 20 39 d8 c6 04 80 71 b0 83 09 f8 e6 e0 0e 26 e0 83 83 bb 98 00 00 0e ee 61 02 9a 3e b8 8f 09 68 f6 e0 01 a2 0a da 3b 78 88 89 3e 56 d8 c3 14 55 8d 75 6f 63 dd 7d ac fc 0e 54 fe 72 31 63 7c f4 11 2a 77 a8 b6 b7 e1 35 aa 08 61 58 12 6f 26 00 75 d7 b5 38 44 f2 9a fe f3 fc 90 9e d1 93 05 7f 89 e3 f3 06 da bb eb 45 2d 13 f6 90 d2 2a 71 38 c2 aa 8c 69 76 85 43 35 ea 51 db 71 a2 ac 1d a9 6b 7d ae d5 ed 73 95 a9 02 0e 3f 3a a2 3b e4 1d b8 a2 0e 74 56 bb 50 fe fb fa c0 02 98 ae 44 69 7c f8 a0 72 b5 9e 50 2f 02 6d 6b 57 0b 46 08 13 30 f9 85 ea c2 Data Ascii: !oMgh{/vps[fl{fw8yNCYVJs}<c 9q&a>h;x>VUuoc}Tr1c\|w5aXo&u8DE-q8ivC5Qqk}s?:;tVPDi\|rP/mkWF0
2024-10-04 07:31:55 UTC	16384	IN	Data Raw: 77 ed 9f 76 de 95 7a a7 4e 94 83 d3 35 6c c6 73 7b bb da 3f 35 5e fe a1 a0 3e 9d fa c7 7c 7f 51 ab 18 01 d0 50 a4 08 e0 c6 50 e1 e4 5d ea 6f 3d 13 f6 fa d6 56 ac 2d 64 a3 c6 b9 da 35 7e 3c 9a b1 72 a5 31 fb 87 70 ed 62 a4 37 e6 20 39 d9 c3 b6 65 0a 1b 7d 30 8e 1d 4d 40 2d a1 be fa c0 0b 6f 49 42 25 7f 5c d9 28 e9 d0 ea 8c 6c 91 b2 03 0c 4e da 13 df ea 7e 25 f5 b1 7c 93 18 0d 4e 28 2a 12 dc 19 fd 9e 2a 5d f7 2a 1d 84 92 3c 6d 71 95 22 5d db 65 55 3b 8e a1 9e 91 ec cf c9 bc a4 a0 d4 42 5c dd f1 ee 19 15 ad ff 37 d8 6c c4 32 4d 67 5f e6 46 87 fd cc 7c 35 7c d7 96 16 e6 a2 78 de a6 41 1d cb b6 ce cd b6 86 cb 4c 6b 61 3f a0 9e 9b bd 18 88 77 3b 2a 9e 0c 7c 33 1a a3 23 d5 88 c0 52 9b f6 ad 96 96 9a ca e0 0c 73 8f 6a 49 4b f5 13 9c ca f0 9d e5 d2 81 e8 c1 0a 36 Data Ascii: wvzN5ls{?5^>\|QPP]o=V-d5~<r1pb7 9e}0M@-oIB%\(lN~%\|N(*]<mq"]eU;B\7l2Mg_F\|5\|xALka?w;*\|3#RsjIK6
2024-10-04 07:31:55 UTC	16384	IN	Data Raw: 55 d8 a4 b0 b8 c8 35 ae 85 f3 1d a1 4c 1d c2 2d b6 58 69 28 b4 4d a8 11 20 b6 a7 19 65 2a 5b c3 ea 07 4f 7b 55 5c 56 20 1d 46 ab d8 bd 4d 69 f9 dd dc 93 56 43 8c 01 5d 62 d8 6a d5 15 b5 d9 83 6d f5 c9 c3 8a d9 6d 3e e3 8f 6f 6f f3 f4 b6 a5 bc b5 b9 84 dd e3 84 35 d2 85 39 a5 1d a0 34 51 17 58 ce 03 fe e5 84 e9 a9 8a 30 9d a9 ac cf d3 30 3d 99 9d 8e 0a 32 ba cd e7 c0 af a3 f2 11 2f d1 e8 35 15 b0 a7 f0 6b a5 99 15 8d 4c b9 44 32 34 d4 1d 1e eb 8e 94 0d b7 b6 d9 b1 eb 04 23 27 33 a0 79 35 c5 f8 51 7c 91 22 fb 2b ba f9 5d f6 0b ad b1 ad 14 51 ba 40 e4 16 d1 5e 8c be e4 30 2f 0d 24 e3 09 9a 60 f0 41 b0 4a 43 b3 2d 17 74 67 cb 97 c3 f0 34 03 60 bb 47 90 00 da 4a a1 30 46 a6 74 47 a6 4d ff 31 66 a5 79 84 7a 48 99 fe 87 bc 44 db c0 67 26 58 43 eb e3 05 2d d5 b6 Data Ascii: U5L-Xi(M e*[O{U\V FMiVC]bjmm>oo594QX00=2/5kLD24#'3y5Q\|"+]Q@^0/$`AJC-tg4`GJ0FtGM1fyzHDg&XC-
2024-10-04 07:31:55 UTC	16384	IN	Data Raw: 17 bb f3 3f 66 39 2a 13 65 56 44 8c fe 13 06 89 df 46 02 a9 95 a1 62 c5 53 05 20 e2 38 20 14 be 31 48 b2 70 3b 7e 89 ba 27 a9 ff 0c 41 8b b1 0c f8 28 e9 f7 07 cc 88 36 a9 a8 36 71 56 0a 91 b2 fe d7 80 c4 46 41 4f 19 ed 82 d4 f1 00 32 71 b9 dd 19 e9 70 b8 dd e2 e1 76 ab c9 c3 6e c0 77 2f ca 70 d1 bc 09 d1 2a dd 7a 1c 31 86 27 3a b2 3e 4f ba e3 6c 6b 80 f6 b3 98 62 fd 05 4d 09 36 1b ce f2 04 41 a2 ec 23 c4 e1 64 62 08 df 9a 81 b2 c5 85 80 c1 0c 27 85 9e 52 5f 61 49 db f1 ab 24 41 f9 44 4c 82 71 c0 c9 65 f3 ba 47 ef d6 57 b2 9c 4c 8c d2 ec 64 41 b5 b3 e6 e0 8a 57 48 fa d2 40 d2 a1 34 3b 20 f5 8e 51 18 4c 29 21 c3 09 b0 9f d7 df c2 31 21 e3 d0 3f ab f8 f6 58 7a cf 48 c7 d7 7d ae 8b 78 ac 17 5a 88 d3 cb 2e 24 61 15 85 28 bd a6 22 34 6a 5c cb 0e 6e e9 1d 74 99 Data Ascii: ?f9eVDFbS 8 1Hp;~'A(66qVFAO2qpvnw/pz1':>OlkbM6A#db'R_aI$ADLqeGWLdAWH@4; QL)!1!?XzH}xZ.$a("4j\nt
2024-10-04 07:31:55 UTC	16384	IN	Data Raw: 30 bb d0 3f 93 fa fb 3e cd d5 77 b5 24 3b 05 c3 65 b1 3a df 4a f9 9d d5 7d c5 9b 7c 73 01 83 c5 a5 f8 4e 7b 43 a3 8f ec 7e b5 27 f9 17 f8 f7 99 f6 1e 88 6d 92 34 aa cb d5 4a df ad 6c a6 85 ae ed 2a 6f bb f7 f8 2b df 85 6a b6 d4 47 ca 28 f0 b6 c0 86 a8 6f 58 6e 0f b2 39 28 7e e7 07 fc c9 5f 9a 88 93 36 d7 cc 9b 7c e4 da 68 74 c4 41 46 18 34 0c b2 15 ef 50 84 fa 8a 27 8c 60 60 e2 d1 22 01 27 9d 10 54 33 60 14 80 bb 7a 76 3e 99 e6 53 96 07 a8 ec e1 75 89 95 72 33 ca 9e 5e 60 81 d6 a0 59 6a 80 f2 6e 53 d5 d7 d8 0d 9d 13 ce 5a f3 19 12 f7 6c f7 10 a7 6d 91 3f ce cf 80 ed 91 39 ed f6 60 f8 09 fd fc 2c ed 6a 34 39 a4 f1 18 9d a3 bf 6b bd 7f ee 98 fc 72 bd 6b a6 f4 0c 03 7e 5d ae d0 fa 6c 1d 71 80 5a 2d 28 63 7e fb fc 25 39 c4 99 e9 6a 18 68 a9 f5 d8 29 b8 56 3a Data Ascii: 0?>w$;e:J}\|sN{C~'m4Jl*o+jG(oXn9(~_6\|htAF4P'``"'T3`zv>Sur3^`YjnSZlm?9`,j49krk~]lqZ-(c~%9jh)V:
2024-10-04 07:31:55 UTC	16384	IN	Data Raw: f2 3d a1 27 a0 f7 70 bf e8 71 e9 7d 94 02 1a 56 58 fb e1 31 0d ad a3 51 02 a7 81 21 c7 31 9d b3 78 69 d6 4f 1e ae d1 12 bd b1 64 a3 12 17 c3 7d 38 54 e3 69 8b 36 10 84 dd 50 29 46 da 04 d3 d0 35 5e 0c 44 a7 5c ac 0d 07 cd 37 fd 88 10 56 f9 30 a3 29 df 41 58 5e 81 62 4b 89 e2 0c 50 c3 cd 84 66 f3 13 09 d2 01 a7 be e1 f6 4a 91 5a 1e 79 f9 b6 e3 40 1e fe dc 6c 28 55 a9 76 29 9f 9a 5f d7 27 f4 14 a8 6e 57 53 72 bb ae 1c b4 46 d5 15 9b 90 f9 11 65 ce e4 d5 a6 dc da 96 ec 1e 73 dc 4a 92 ed c5 cf 2d d9 1e ff 18 c9 f6 62 2b c9 76 f7 92 25 db 8b 2b 92 6c 77 af 40 b2 dd 96 24 1b 4c f2 e3 ff 4b c4 5a 9b 98 11 43 f8 8f 8e 9b fb fb 82 e7 f1 5a c1 03 12 44 0c 7f ed 08 6b 47 42 ff bf 48 f9 cf 14 29 4f 7f 6e 91 b2 f7 63 44 ca d3 ad 44 ca 97 4b 16 29 4f af 48 a4 7c b9 02 Data Ascii: ='pq}VX1Q!1xiOd}8Ti6P)F5^D\7V0)AX^bKPfJZy@l(Uv)_'nWSrFesJ-b+v%+lw@$LKZCZDkGBH)OncDDK)OH\|
2024-10-04 07:31:55 UTC	16384	IN	Data Raw: 0a 00 bd 54 d2 0a f0 51 30 4c 59 ad 50 0d 67 a2 94 ac 68 64 d5 a9 53 93 69 30 0b 08 37 0b 6b 43 69 88 2b 46 30 53 39 8c 0c 53 b8 c8 e4 57 7b 53 2b e3 cc 7d 1e 53 eb 6a be 6a 3c 83 6d 71 87 5e 0f 36 8c 3e b5 09 03 44 c8 2f 41 db 5f ca 96 94 78 f3 08 e3 c9 56 2f ea d6 de fa 31 5b 95 9c c6 09 73 19 b2 ef 63 85 a4 92 15 c8 b7 92 f4 f1 f1 41 19 a3 68 a4 ab 6c a3 6a 2c b1 82 e6 e3 b6 96 b3 d9 14 b9 68 08 8d 0b a7 51 05 36 da 3e 5b d2 b0 8f a1 a3 02 36 4b fe 87 b0 31 a8 06 e8 8a 94 0d 54 26 04 5e c8 a7 33 eb 7f be d6 aa 55 43 36 f4 74 0a db a1 ef 42 72 a6 08 9f ac 4a 29 11 45 4c 5b d3 b0 1b 55 e8 03 c7 04 e6 4a 06 04 ea 23 0e 16 a2 4e 87 21 ea 5c 23 30 60 1d f6 30 01 a6 1d 9a 37 d4 8b 0c f8 26 b1 10 d0 ee 67 45 2b 84 b9 a3 24 73 37 a6 66 1f d9 c8 64 11 ef fb 5e Data Ascii: TQ0LYPghdSi07kCi+F0S9SW{S+}Sjj<mq^6>D/A_xV/1[scAhlj,hQ6>[6K1T&^3UC6tBrJ)EL[UJ#N!\#0`07&gE+$s7fd^
2024-10-04 07:31:55 UTC	16384	IN	Data Raw: 4b 77 d8 e0 21 90 f7 64 d2 d1 70 08 38 b6 91 33 d7 e0 61 85 2c 00 8b e4 4a 88 a0 cb 85 94 12 60 60 a1 8b 26 77 f1 95 e4 22 0a 21 78 25 00 a0 93 29 c6 5b 8b e1 33 1d 36 76 6c 0e eb f5 19 b4 55 78 a2 45 1d 85 f4 76 6b c5 b7 6f 25 87 44 f7 33 96 3d 22 5f 2a ef c5 e8 66 ac 06 25 b5 65 c5 d3 ac 78 7e c6 9e f8 42 96 ba 91 c9 fc 5d dd e6 db 81 1a 03 9a d2 df 69 c5 93 79 5c d1 3a 6d 93 5a f1 2c ab f8 76 ae ac 00 54 86 1f a9 de ca 7d 56 ea 18 fd f4 6c c5 ad 0d 8a f6 a1 e0 d6 6d 6e 5d bd 1e bb 4f 42 c3 01 ee a0 a7 70 3c 0d 46 63 4c 22 4a d2 72 2b 29 1f 44 ca c4 a0 0c 26 b9 48 9a 07 ee c8 0b 2e f8 1b a0 cb e2 70 16 d9 ae 71 80 aa 42 b0 56 04 02 8d 92 44 5c a8 d2 c8 08 96 f7 e2 09 91 7c d0 45 9c b9 c3 75 a3 07 55 0d 9f e6 73 8b fc 0f b7 d9 5b 34 f4 3b 3c 4b 1d 9c 68 Data Ascii: Kw!dp83a,J``&w"!x%)[36vlUxEvko%D3="_*f%ex~B]iy\:mZ,vT}Vlmn]OBp<FcL"Jr+)D&H.pqBVD\\|EuUs[4;<Kh
2024-10-04 07:31:55 UTC	16384	IN	Data Raw: ad 28 c6 15 3c 2d c6 15 0c 1e d5 7e c3 96 25 c8 7c 66 23 cc d4 72 51 d8 aa c1 e9 8a 19 a6 fd e4 b5 cf 7e e3 2b bf 35 ca a5 5e f2 d4 ab 5c e2 8b 39 25 ee 2b 89 f9 55 c0 ed 10 eb 5f 5a 8b 3c 24 d7 8a d1 e4 aa a0 bc b2 36 33 d5 ad d7 31 0d ee 3a 55 a7 9b e4 46 f9 ae 0f 83 51 75 b8 51 9d 48 55 d9 36 b6 f4 ad 5e bd be d5 85 eb 36 67 52 a5 d0 98 70 c7 52 dc b6 64 22 55 cb 53 2b 15 91 2d b5 29 27 52 e3 3c 1d 85 9f 1b 85 d5 65 f7 29 d0 36 a6 4c 60 18 89 5c 0c 8f 85 02 dd a0 a3 88 92 19 8b 45 e1 6c 6d 7d cb 47 2b 96 bc a5 c7 f9 e7 ad b7 f7 ea c3 e8 ed 9d 6f a4 b7 77 f2 c4 7a 7b e7 1f 49 6f ef e4 89 f5 f6 d2 8e 5f 7f 65 d9 3f 45 96 fd cd 97 c3 b2 bf f9 3c 58 f6 37 4f c2 b2 bf a8 b6 de 8a b3 68 db 15 f1 d3 52 c6 ab 8a 13 a2 70 6a 2a 37 e4 17 be 6d d3 2f 31 2f 31 a4 Data Ascii: (<-~%\|f#rQ~+5^\9%+U_Z<$631:UFQuQHU6^6gRpRd"US+-)'R<e)6L`\Elm}G+owz{Io_e?E<X7OhRpj*7m/1/1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49820	152.199.21.175	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:55 UTC	615	OUT	GET /shared/5/js/reset-password-fabric_en_NEoXnGfR1XTSRZBK3ucL0g2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:56 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 418138 Cache-Control: public, max-age=31536000 Content-MD5: JjmuRy/Vf2wbNwYssYOGbg== Content-Type: application/x-javascript Date: Fri, 04 Oct 2024 07:31:55 GMT Etag: 0x8DCDBFF13E7DABB Last-Modified: Mon, 23 Sep 2024 18:39:37 GMT Server: ECAcc (lhc/788C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d86df1ea-301e-007c-7361-12e4d3000000 x-ms-version: 2009-09-19 Content-Length: 809542 Connection: close
2024-10-04 07:31:56 UTC	15653	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 72 65 73 65 74 2d 70 61 73 73 77 6f 72 64 2d 66 61 62 72 69 63 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 3d 7b 35 31 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 39 35 31 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 Data Ascii: /! For license information please see reset-password-fabric_en.js.LICENSE.txt /!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefault
2024-10-04 07:31:56 UTC	16383	IN	Data Raw: 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 74 7d 22 22 21 3d 3d 28 6e 3d 65 2e 6e 61 6d 65 29 26 26 28 65 2e 6e 61 6d 65 3d 22 22 29 2c 65 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3d 21 21 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 43 68 65 63 6b 65 64 2c 22 22 21 3d 3d 6e 26 26 28 65 2e 6e 61 6d 65 3d 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 74 2c 6e 29 7b 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 3d 3d 65 7c 7c 28 6e 75 6c 6c 3d 3d 6e 3f 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 22 22 2b 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 3a 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 21 3d 3d 22 Data Ascii: defaultValue=t}""!==(n=e.name)&&(e.name=""),e.defaultChecked=!!e._wrapperState.initialChecked,""!==n&&(e.name=n)}function Ae(e,t,n){"number"===t&&e.ownerDocument.activeElement===e\|\|(null==n?e.defaultValue=""+e._wrapperState.initialValue:e.defaultValue!=="
2024-10-04 07:31:56 UTC	16383	IN	Data Raw: 6f 64 65 54 79 70 65 3b 69 66 28 31 3d 3d 3d 74 7c 7c 33 3d 3d 3d 74 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 45 6e 28 65 29 7b 65 3d 65 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 65 3b 29 7b 69 66 28 38 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 6e 3d 65 2e 64 61 74 61 3b 69 66 28 22 24 22 3d 3d 3d 6e 7c 7c 6e 3d 3d 3d 77 6e 7c 7c 6e 3d 3d 3d 76 6e 29 7b 69 66 28 30 3d 3d 3d 74 29 72 65 74 75 72 6e 20 65 3b 74 2d 2d 7d 65 6c 73 65 22 2f 24 22 3d 3d 3d 6e 26 26 74 2b 2b 7d 65 3d 65 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 76 61 72 20 41 6e 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 Data Ascii: odeType;if(1===t\|\|3===t)break}return e}function En(e){e=e.previousSibling;for(var t=0;e;){if(8===e.nodeType){var n=e.data;if("$"===n\|\|n===wn\|\|n===vn){if(0===t)return e;t--}else"/$"===n&&t++}e=e.previousSibling}return null}var An=Math.random().toString(36)
2024-10-04 07:31:56 UTC	16383	IN	Data Raw: 4d 65 6d 6f 69 7a 65 64 4d 61 73 6b 65 64 43 68 69 6c 64 43 6f 6e 74 65 78 74 3d 69 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 50 6f 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 28 65 3d 65 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 29 7d 66 75 6e 63 74 69 6f 6e 20 78 6f 28 29 7b 62 6f 28 76 6f 29 2c 62 6f 28 79 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6f 28 65 2c 74 2c 6e 29 7b 69 66 28 79 6f 2e 63 75 72 72 65 6e 74 21 3d 3d 6d 6f 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 31 36 38 29 29 3b 68 6f 28 79 6f 2c 74 29 2c 68 6f 28 76 6f 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 6f 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 65 3d 74 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 2c 22 66 75 6e 63 Data Ascii: MemoizedMaskedChildContext=i),i}function Po(e){return null!=(e=e.childContextTypes)}function xo(){bo(vo),bo(yo)}function _o(e,t,n){if(yo.current!==mo)throw Error(l(168));ho(yo,t),ho(vo,n)}function Oo(e,t,n){var r=e.stateNode;if(e=t.childContextTypes,"func
2024-10-04 07:31:56 UTC	16383	IN	Data Raw: 65 29 7c 7c 28 42 61 3d 21 30 29 2c 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 69 2c 6e 75 6c 6c 3d 3d 3d 74 2e 62 61 73 65 51 75 65 75 65 26 26 28 74 2e 62 61 73 65 53 74 61 74 65 3d 69 29 2c 6e 2e 6c 61 73 74 52 65 6e 64 65 72 65 64 53 74 61 74 65 3d 69 7d 72 65 74 75 72 6e 5b 69 2c 72 5d 7d 66 75 6e 63 74 69 6f 6e 20 61 61 28 65 29 7b 76 61 72 20 74 3d 74 61 28 29 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 65 28 29 29 2c 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 74 2e 62 61 73 65 53 74 61 74 65 3d 65 2c 65 3d 28 65 3d 74 2e 71 75 65 75 65 3d 7b 70 65 6e 64 69 6e 67 3a 6e 75 6c 6c 2c 64 69 73 70 61 74 63 68 3a 6e 75 6c 6c 2c 6c 61 73 74 52 65 6e 64 65 72 65 64 52 65 64 75 63 65 72 3a 72 61 Data Ascii: e)\|\|(Ba=!0),t.memoizedState=i,null===t.baseQueue&&(t.baseState=i),n.lastRenderedState=i}return[i,r]}function aa(e){var t=ta();return"function"==typeof e&&(e=e()),t.memoizedState=t.baseState=e,e=(e=t.queue={pending:null,dispatch:null,lastRenderedReducer:ra
2024-10-04 07:31:56 UTC	16383	IN	Data Raw: 6e 28 6e 2c 22 6f 6e 43 68 61 6e 67 65 22 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 73 3d 72 7d 63 6e 28 6f 2c 73 29 3b 76 61 72 20 75 3d 73 3b 66 6f 72 28 61 20 69 6e 20 75 29 69 66 28 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 29 7b 76 61 72 20 64 3d 75 5b 61 5d 3b 22 73 74 79 6c 65 22 3d 3d 3d 61 3f 61 6e 28 65 2c 64 29 3a 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 3d 3d 3d 61 3f 6e 75 6c 6c 21 3d 28 64 3d 64 3f 64 2e 5f 5f 68 74 6d 6c 3a 76 6f 69 64 20 30 29 26 26 48 65 28 65 2c 64 29 3a 22 63 68 69 6c 64 72 65 6e 22 3d 3d 3d 61 3f 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 28 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6f 7c 7c 22 22 21 3d 3d 64 29 26 26 56 65 28 65 2c 64 29 3a 22 6e 75 6d Data Ascii: n(n,"onChange");break;default:s=r}cn(o,s);var u=s;for(a in u)if(u.hasOwnProperty(a)){var d=u[a];"style"===a?an(e,d):"dangerouslySetInnerHTML"===a?null!=(d=d?d.__html:void 0)&&He(e,d):"children"===a?"string"==typeof d?("textarea"!==o\|\|""!==d)&&Ve(e,d):"num
2024-10-04 07:31:56 UTC	16383	IN	Data Raw: 21 3d 3d 72 26 26 72 21 3d 3d 6e 29 7b 65 2e 6c 61 73 74 50 69 6e 67 65 64 54 69 6d 65 3d 72 3b 62 72 65 61 6b 7d 69 66 28 31 30 37 33 37 34 31 38 32 33 21 3d 3d 4d 6c 3f 72 3d 31 30 2a 28 31 30 37 33 37 34 31 38 32 31 2d 4d 6c 29 2d 4b 6f 28 29 3a 31 30 37 33 37 34 31 38 32 33 3d 3d 3d 7a 6c 3f 72 3d 30 3a 28 72 3d 31 30 2a 28 31 30 37 33 37 34 31 38 32 31 2d 7a 6c 29 2d 35 65 33 2c 30 3e 28 72 3d 28 6f 3d 4b 6f 28 29 29 2d 72 29 26 26 28 72 3d 30 29 2c 28 6e 3d 31 30 2a 28 31 30 37 33 37 34 31 38 32 31 2d 6e 29 2d 6f 29 3c 28 72 3d 28 31 32 30 3e 72 3f 31 32 30 3a 34 38 30 3e 72 3f 34 38 30 3a 31 30 38 30 3e 72 3f 31 30 38 30 3a 31 39 32 30 3e 72 3f 31 39 32 30 3a 33 65 33 3e 72 3f 33 65 33 3a 34 33 32 30 3e 72 3f 34 33 32 30 3a 31 39 36 30 2a 4f 6c 28 Data Ascii: !==r&&r!==n){e.lastPingedTime=r;break}if(1073741823!==Ml?r=10(1073741821-Ml)-Ko():1073741823===zl?r=0:(r=10(1073741821-zl)-5e3,0>(r=(o=Ko())-r)&&(r=0),(n=10(1073741821-n)-o)<(r=(120>r?120:480>r?480:1080>r?1080:1920>r?1920:3e3>r?3e3:4320>r?4320:1960Ol(
2024-10-04 07:31:56 UTC	16383	IN	Data Raw: 54 79 70 65 3d 61 65 2c 65 2e 74 79 70 65 3d 61 65 2c 65 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 61 2c 65 3b 63 61 73 65 20 64 65 3a 72 65 74 75 72 6e 28 65 3d 4c 63 28 31 33 2c 6e 2c 74 2c 69 29 29 2e 74 79 70 65 3d 64 65 2c 65 2e 65 6c 65 6d 65 6e 74 54 79 70 65 3d 64 65 2c 65 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 61 2c 65 3b 63 61 73 65 20 66 65 3a 72 65 74 75 72 6e 28 65 3d 4c 63 28 31 39 2c 6e 2c 74 2c 69 29 29 2e 65 6c 65 6d 65 6e 74 54 79 70 65 3d 66 65 2c 65 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 61 2c 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 28 65 29 26 26 6e 75 6c 6c 21 3d 3d 65 29 73 77 69 74 63 68 28 65 2e 24 24 74 79 70 65 6f 66 29 7b 63 61 73 65 20 6c 65 3a 63 3d 31 30 3b 62 72 65 Data Ascii: Type=ae,e.type=ae,e.expirationTime=a,e;case de:return(e=Lc(13,n,t,i)).type=de,e.elementType=de,e.expirationTime=a,e;case fe:return(e=Lc(19,n,t,i)).elementType=fe,e.expirationTime=a,e;default:if("object"===r(e)&&null!==e)switch(e.$$typeof){case le:c=10;bre
2024-10-04 07:31:56 UTC	16383	IN	Data Raw: 62 6a 65 63 74 22 3d 3d 3d 72 28 65 29 26 26 6e 75 6c 6c 21 3d 3d 65 26 26 6e 75 6c 6c 21 3d 65 2e 6b 65 79 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 22 3d 22 3a 22 3d 30 22 2c 22 3a 22 3a 22 3d 32 22 7d 3b 72 65 74 75 72 6e 22 24 22 2b 28 22 22 2b 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 3a 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 29 7d 28 65 2e 6b 65 79 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 74 29 7b 65 2e 66 75 6e 63 2e 63 61 6c 6c 28 65 2e 63 6f 6e 74 65 78 74 2c 74 2c 65 2e 63 6f 75 6e 74 2b 2b 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 72 65 73 75 6c 74 2c 6f 3d 65 2e 6b 65 79 50 72 65 66 69 Data Ascii: bject"===r(e)&&null!==e&&null!=e.key?function(e){var t={"=":"=0",":":"=2"};return"$"+(""+e).replace(/[=:]/g,(function(e){return t[e]}))}(e.key):t.toString(36)}function N(e,t){e.func.call(e.context,t,e.count++)}function F(e,t,n){var r=e.result,o=e.keyPrefi
2024-10-04 07:31:56 UTC	16383	IN	Data Raw: 65 78 70 6f 72 74 73 3d 21 21 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 21 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 79 6d 62 6f 6c 28 29 3b 72 65 74 75 72 6e 21 53 74 72 69 6e 67 28 65 29 7c 7c 21 28 4f 62 6a 65 63 74 28 65 29 69 6e 73 74 61 6e 63 65 6f 66 20 53 79 6d 62 6f 6c 29 7c 7c 21 53 79 6d 62 6f 6c 2e 73 68 61 6d 26 26 72 26 26 72 3c 34 31 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 69 3d 6e 28 34 29 2c 61 3d 6e 28 32 37 29 2c 6c 3d 69 2e 70 72 6f 63 65 73 73 2c 63 3d 69 2e 44 65 6e 6f 2c 73 3d 6c 26 26 6c 2e 76 65 72 73 69 6f 6e 73 7c 7c 63 26 26 63 2e 76 65 72 73 69 6f 6e 2c 75 3d 73 26 26 73 2e 76 38 3b 75 26 26 28 6f 3d 28 72 3d 75 Data Ascii: exports=!!Object.getOwnPropertySymbols&&!o((function(){var e=Symbol();return!String(e)\|\|!(Object(e)instanceof Symbol)\|\|!Symbol.sham&&r&&r<41}))},function(e,t,n){var r,o,i=n(4),a=n(27),l=i.process,c=i.Deno,s=l&&l.versions\|\|c&&c.version,u=s&&s.v8;u&&(o=(r=u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49856	152.199.21.175	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:31:57 UTC	408	OUT	GET /shared/5/js/reset-password-fabric_en_NEoXnGfR1XTSRZBK3ucL0g2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:31:57 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 418140 Cache-Control: public, max-age=31536000 Content-MD5: JjmuRy/Vf2wbNwYssYOGbg== Content-Type: application/x-javascript Date: Fri, 04 Oct 2024 07:31:57 GMT Etag: 0x8DCDBFF13E7DABB Last-Modified: Mon, 23 Sep 2024 18:39:37 GMT Server: ECAcc (lhc/788C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d86df1ea-301e-007c-7361-12e4d3000000 x-ms-version: 2009-09-19 Content-Length: 809542 Connection: close
2024-10-04 07:31:57 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 72 65 73 65 74 2d 70 61 73 73 77 6f 72 64 2d 66 61 62 72 69 63 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 3d 7b 35 31 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 39 35 31 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 Data Ascii: /! For license information please see reset-password-fabric_en.js.LICENSE.txt /!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefault
2024-10-04 07:31:57 UTC	1	IN	Data Raw: 74 Data Ascii: t
2024-10-04 07:31:57 UTC	16383	IN	Data Raw: 75 72 6e 20 65 5b 6f 5d 2e 73 65 6c 65 63 74 65 64 3d 21 30 2c 76 6f 69 64 28 72 26 26 28 65 5b 6f 5d 2e 64 65 66 61 75 6c 74 53 65 6c 65 63 74 65 64 3d 21 30 29 29 3b 6e 75 6c 6c 21 3d 3d 74 7c 7c 65 5b 6f 5d 2e 64 69 73 61 62 6c 65 64 7c 7c 28 74 3d 65 5b 6f 5d 29 7d 6e 75 6c 6c 21 3d 3d 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 3d 21 30 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 39 31 29 29 3b 72 65 74 75 72 6e 20 69 28 7b 7d 2c 74 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 76 6f 69 64 20 30 2c 63 68 69 6c 64 72 65 6e 3a 22 22 2b 65 2e 5f 77 72 61 70 Data Ascii: urn e[o].selected=!0,void(r&&(e[o].defaultSelected=!0));null!==t\|\|e[o].disabled\|\|(t=e[o])}null!==t&&(t.selected=!0)}}function Ie(e,t){if(null!=t.dangerouslySetInnerHTML)throw Error(l(91));return i({},t,{value:void 0,defaultValue:void 0,children:""+e._wrap
2024-10-04 07:31:57 UTC	16383	IN	Data Raw: 74 61 74 65 4e 6f 64 65 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 33 33 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 54 6e 5d 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4e 6e 28 65 29 7b 64 6f 7b 65 3d 65 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 65 26 26 35 21 3d 3d 65 2e 74 61 67 29 3b 72 65 74 75 72 6e 20 65 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 46 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6f 3d 62 28 6e 29 3b 69 66 28 21 6f 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 6e 3d 6f 5b 74 5d 3b 65 3a 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 6f 6e 43 6c 69 63 6b 22 3a 63 61 73 65 22 6f 6e 43 6c 69 63 6b 43 61 Data Ascii: tateNode;throw Error(l(33))}function Bn(e){return e[Tn]\|\|null}function Nn(e){do{e=e.return}while(e&&5!==e.tag);return e\|\|null}function Fn(e,t){var n=e.stateNode;if(!n)return null;var o=b(n);if(!o)return null;n=o[t];e:switch(t){case"onClick":case"onClickCa
2024-10-04 07:31:57 UTC	16383	IN	Data Raw: 69 74 79 2c 41 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 73 63 68 65 64 75 6c 65 43 61 6c 6c 62 61 63 6b 2c 6a 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 63 61 6e 63 65 6c 43 61 6c 6c 62 61 63 6b 2c 54 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 72 65 71 75 65 73 74 50 61 69 6e 74 2c 49 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 2c 52 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 67 65 74 43 75 72 72 65 6e 74 50 72 69 6f 72 69 74 79 4c 65 76 65 6c 2c 4c 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 49 6d 6d 65 64 69 61 74 65 50 72 69 6f 72 69 74 79 2c 44 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 55 73 65 72 42 6c 6f 63 6b 69 6e 67 50 72 69 6f 72 69 74 79 2c 42 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 4e 6f 72 6d 61 6c 50 72 69 6f 72 69 74 79 2c 4e 6f 3d 61 2e 75 6e 73 74 61 62 6c Data Ascii: ity,Ao=a.unstable_scheduleCallback,jo=a.unstable_cancelCallback,To=a.unstable_requestPaint,Io=a.unstable_now,Ro=a.unstable_getCurrentPriorityLevel,Lo=a.unstable_ImmediatePriority,Do=a.unstable_UserBlockingPriority,Bo=a.unstable_NormalPriority,No=a.unstabl
2024-10-04 07:31:57 UTC	16383	IN	Data Raw: 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 3d 6e 61 28 29 3b 72 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 6e 75 6c 6c 3a 72 3b 76 61 72 20 69 3d 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 21 3d 3d 51 69 29 7b 76 61 72 20 61 3d 51 69 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 69 66 28 69 3d 61 2e 64 65 73 74 72 6f 79 2c 6e 75 6c 6c 21 3d 3d 72 26 26 5a 69 28 72 2c 61 2e 64 65 70 73 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6c 61 28 74 2c 6e 2c 69 2c 72 29 7d 71 69 2e 65 66 66 65 63 74 54 61 67 7c 3d 65 2c 6f 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6c 61 28 31 7c 74 2c 6e 2c 69 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 64 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 73 61 28 35 31 36 2c 34 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 66 61 28 65 2c 74 29 7b 72 65 74 Data Ascii: ,t,n,r){var o=na();r=void 0===r?null:r;var i=void 0;if(null!==Qi){var a=Qi.memoizedState;if(i=a.destroy,null!==r&&Zi(r,a.deps))return void la(t,n,i,r)}qi.effectTag\|=e,o.memoizedState=la(1\|t,n,i,r)}function da(e,t){return sa(516,4,e,t)}function fa(e,t){ret
2024-10-04 07:31:57 UTC	16383	IN	Data Raw: 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 6f 6e 43 6c 69 63 6b 26 26 28 65 2e 6f 6e 63 6c 69 63 6b 3d 66 6e 29 7d 78 6e 28 6f 2c 72 29 26 26 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 34 29 7d 6e 75 6c 6c 21 3d 3d 74 2e 72 65 66 26 26 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 31 32 38 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 61 73 65 20 36 3a 69 66 28 65 26 26 6e 75 6c 6c 21 3d 74 2e 73 74 61 74 65 4e 6f 64 65 29 71 61 28 30 2c 74 2c 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2c 72 29 3b 65 6c 73 65 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 72 26 26 6e 75 6c 6c 3d 3d 3d 74 2e 73 74 61 74 65 4e 6f 64 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 31 36 36 29 29 3b 6e 3d 4e 69 28 42 69 2e 63 75 72 72 65 6e 74 Data Ascii: "function"==typeof s.onClick&&(e.onclick=fn)}xn(o,r)&&(t.effectTag\|=4)}null!==t.ref&&(t.effectTag\|=128)}return null;case 6:if(e&&null!=t.stateNode)qa(0,t,e.memoizedProps,r);else{if("string"!=typeof r&&null===t.stateNode)throw Error(l(166));n=Ni(Bi.current
2024-10-04 07:31:57 UTC	16383	IN	Data Raw: 32 33 2c 30 21 3d 28 34 38 26 52 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 33 32 37 29 29 3b 69 66 28 4f 63 28 29 2c 65 3d 3d 3d 4c 6c 26 26 74 3d 3d 3d 42 6c 7c 7c 66 63 28 65 2c 74 29 2c 6e 75 6c 6c 21 3d 3d 44 6c 29 7b 76 61 72 20 6e 3d 52 6c 3b 52 6c 7c 3d 45 6c 3b 66 6f 72 28 76 61 72 20 72 3d 67 63 28 29 3b 3b 29 74 72 79 7b 6d 63 28 29 3b 62 72 65 61 6b 7d 63 61 74 63 68 28 6f 29 7b 70 63 28 65 2c 6f 29 7d 69 66 28 61 69 28 29 2c 52 6c 3d 6e 2c 43 6c 2e 63 75 72 72 65 6e 74 3d 72 2c 31 3d 3d 3d 4e 6c 29 74 68 72 6f 77 20 6e 3d 46 6c 2c 66 63 28 65 2c 74 29 2c 56 63 28 65 2c 74 29 2c 6c 63 28 65 29 2c 6e 3b 69 66 28 6e 75 6c 6c 21 3d 3d 44 6c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 32 36 31 29 29 3b 65 2e 66 69 6e 69 73 68 65 64 57 6f Data Ascii: 23,0!=(48&Rl))throw Error(l(327));if(Oc(),e===Ll&&t===Bl\|\|fc(e,t),null!==Dl){var n=Rl;Rl\|=El;for(var r=gc();;)try{mc();break}catch(o){pc(e,o)}if(ai(),Rl=n,Cl.current=r,1===Nl)throw n=Fl,fc(e,t),Vc(e,t),lc(e),n;if(null!==Dl)throw Error(l(261));e.finishedWo
2024-10-04 07:31:58 UTC	16383	IN	Data Raw: 6e 66 6f 2c 70 65 6e 64 69 6e 67 43 68 69 6c 64 72 65 6e 3a 6e 75 6c 6c 2c 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 3a 65 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 7d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 55 63 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 74 61 67 3d 74 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 3d 65 2c 74 68 69 73 2e 70 69 6e 67 43 61 63 68 65 3d 74 68 69 73 2e 70 65 6e 64 69 6e 67 43 68 69 6c 64 72 65 6e 3d 6e 75 6c 6c 2c 74 68 69 73 2e 66 69 6e 69 73 68 65 64 45 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 30 2c 74 68 69 73 2e 66 69 6e 69 73 68 65 64 57 6f 72 6b 3d 6e 75 6c 6c 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 3d 2d 31 2c 74 68 69 73 2e 70 65 6e 64 69 Data Ascii: nfo,pendingChildren:null,implementation:e.implementation},t}function Uc(e,t,n){this.tag=t,this.current=null,this.containerInfo=e,this.pingCache=this.pendingChildren=null,this.finishedExpirationTime=0,this.finishedWork=null,this.timeoutHandle=-1,this.pendi
2024-10-04 07:31:58 UTC	16383	IN	Data Raw: 52 65 61 63 74 43 75 72 72 65 6e 74 44 69 73 70 61 74 63 68 65 72 3a 4d 2c 52 65 61 63 74 43 75 72 72 65 6e 74 42 61 74 63 68 43 6f 6e 66 69 67 3a 7b 73 75 73 70 65 6e 73 65 3a 6e 75 6c 6c 7d 2c 52 65 61 63 74 43 75 72 72 65 6e 74 4f 77 6e 65 72 3a 4f 2c 49 73 53 6f 6d 65 52 65 6e 64 65 72 65 72 41 63 74 69 6e 67 3a 7b 63 75 72 72 65 6e 74 3a 21 31 7d 2c 61 73 73 69 67 6e 3a 6f 7d 3b 74 2e 43 68 69 6c 64 72 65 6e 3d 7b 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 7a 28 65 2c 72 2c 6e 75 6c 6c 2c 74 2c 6e 29 2c 72 7d 2c 66 6f 72 45 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 Data Ascii: ReactCurrentDispatcher:M,ReactCurrentBatchConfig:{suspense:null},ReactCurrentOwner:O,IsSomeRendererActing:{current:!1},assign:o};t.Children={map:function(e,t,n){if(null==e)return e;var r=[];return z(e,r,null,t,n),r},forEach:function(e,t,n){if(null==e)retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49867	152.199.21.175	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:32:13 UTC	595	OUT	GET /shared/5/js/login_en_aPH1MdAMytMMq1WvwJPhJA2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:32:14 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 775601 Cache-Control: public, max-age=31536000 Content-MD5: 1TOWxsOGVZoUoHLacM8TCg== Content-Type: application/x-javascript Date: Fri, 04 Oct 2024 07:32:13 GMT Etag: 0x8DCD972C3CDB0C7 Last-Modified: Fri, 20 Sep 2024 12:50:11 GMT Server: ECAcc (lhc/794A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 0295bd6c-001e-00b7-7e21-0faccd000000 x-ms-version: 2009-09-19 Content-Length: 946086 Connection: close
2024-10-04 07:32:14 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6c 6f 67 69 6e 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 3d 7b 35 31 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 39 35 31 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 67 65 74 44 65 72 69 Data Ascii: /! For license information please see login_en.js.LICENSE.txt /!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDeri
2024-10-04 07:32:14 UTC	1	IN	Data Raw: 65 Data Ascii: e
2024-10-04 07:32:14 UTC	16383	IN	Data Raw: 64 3d 21 30 2c 76 6f 69 64 28 72 26 26 28 65 5b 6f 5d 2e 64 65 66 61 75 6c 74 53 65 6c 65 63 74 65 64 3d 21 30 29 29 3b 6e 75 6c 6c 21 3d 3d 74 7c 7c 65 5b 6f 5d 2e 64 69 73 61 62 6c 65 64 7c 7c 28 74 3d 65 5b 6f 5d 29 7d 6e 75 6c 6c 21 3d 3d 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 3d 21 30 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 39 31 29 29 3b 72 65 74 75 72 6e 20 69 28 7b 7d 2c 74 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 76 6f 69 64 20 30 2c 63 68 69 6c 64 72 65 6e 3a 22 22 2b 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c Data Ascii: d=!0,void(r&&(e[o].defaultSelected=!0));null!==t\|\|e[o].disabled\|\|(t=e[o])}null!==t&&(t.selected=!0)}}function Ie(e,t){if(null!=t.dangerouslySetInnerHTML)throw Error(l(91));return i({},t,{value:void 0,defaultValue:void 0,children:""+e._wrapperState.initial
2024-10-04 07:32:14 UTC	16383	IN	Data Raw: 72 72 6f 72 28 6c 28 33 33 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 6a 6e 5d 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 42 6e 28 65 29 7b 64 6f 7b 65 3d 65 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 65 26 26 35 21 3d 3d 65 2e 74 61 67 29 3b 72 65 74 75 72 6e 20 65 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 46 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6f 3d 6d 28 6e 29 3b 69 66 28 21 6f 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 6e 3d 6f 5b 74 5d 3b 65 3a 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 6f 6e 43 6c 69 63 6b 22 3a 63 61 73 65 22 6f 6e 43 6c 69 63 6b 43 61 70 74 75 72 65 22 3a 63 61 73 65 22 6f 6e 44 6f Data Ascii: rror(l(33))}function Nn(e){return e[jn]\|\|null}function Bn(e){do{e=e.return}while(e&&5!==e.tag);return e\|\|null}function Fn(e,t){var n=e.stateNode;if(!n)return null;var o=m(n);if(!o)return null;n=o[t];e:switch(t){case"onClick":case"onClickCapture":case"onDo
2024-10-04 07:32:14 UTC	16383	IN	Data Raw: 65 5f 73 63 68 65 64 75 6c 65 43 61 6c 6c 62 61 63 6b 2c 54 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 63 61 6e 63 65 6c 43 61 6c 6c 62 61 63 6b 2c 6a 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 72 65 71 75 65 73 74 50 61 69 6e 74 2c 49 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 2c 4c 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 67 65 74 43 75 72 72 65 6e 74 50 72 69 6f 72 69 74 79 4c 65 76 65 6c 2c 44 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 49 6d 6d 65 64 69 61 74 65 50 72 69 6f 72 69 74 79 2c 52 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 55 73 65 72 42 6c 6f 63 6b 69 6e 67 50 72 69 6f 72 69 74 79 2c 4e 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 4e 6f 72 6d 61 6c 50 72 69 6f 72 69 74 79 2c 42 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 4c 6f 77 50 72 69 6f 72 69 74 79 2c 46 6f Data Ascii: e_scheduleCallback,To=a.unstable_cancelCallback,jo=a.unstable_requestPaint,Io=a.unstable_now,Lo=a.unstable_getCurrentPriorityLevel,Do=a.unstable_ImmediatePriority,Ro=a.unstable_UserBlockingPriority,No=a.unstable_NormalPriority,Bo=a.unstable_LowPriority,Fo
2024-10-04 07:32:14 UTC	16383	IN	Data Raw: 28 29 3b 72 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 6e 75 6c 6c 3a 72 3b 76 61 72 20 69 3d 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 21 3d 3d 51 69 29 7b 76 61 72 20 61 3d 51 69 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 69 66 28 69 3d 61 2e 64 65 73 74 72 6f 79 2c 6e 75 6c 6c 21 3d 3d 72 26 26 5a 69 28 72 2c 61 2e 64 65 70 73 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6c 61 28 74 2c 6e 2c 69 2c 72 29 7d 4b 69 2e 65 66 66 65 63 74 54 61 67 7c 3d 65 2c 6f 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6c 61 28 31 7c 74 2c 6e 2c 69 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 64 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 63 61 28 35 31 36 2c 34 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 61 28 35 31 36 2c 34 2c 65 2c 74 Data Ascii: ();r=void 0===r?null:r;var i=void 0;if(null!==Qi){var a=Qi.memoizedState;if(i=a.destroy,null!==r&&Zi(r,a.deps))return void la(t,n,i,r)}Ki.effectTag\|=e,o.memoizedState=la(1\|t,n,i,r)}function da(e,t){return ca(516,4,e,t)}function pa(e,t){return ua(516,4,e,t
2024-10-04 07:32:14 UTC	16383	IN	Data Raw: 6f 66 20 63 2e 6f 6e 43 6c 69 63 6b 26 26 28 65 2e 6f 6e 63 6c 69 63 6b 3d 70 6e 29 7d 78 6e 28 6f 2c 72 29 26 26 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 34 29 7d 6e 75 6c 6c 21 3d 3d 74 2e 72 65 66 26 26 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 31 32 38 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 61 73 65 20 36 3a 69 66 28 65 26 26 6e 75 6c 6c 21 3d 74 2e 73 74 61 74 65 4e 6f 64 65 29 4b 61 28 30 2c 74 2c 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2c 72 29 3b 65 6c 73 65 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 72 26 26 6e 75 6c 6c 3d 3d 3d 74 2e 73 74 61 74 65 4e 6f 64 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 31 36 36 29 29 3b 6e 3d 42 69 28 4e 69 2e 63 75 72 72 65 6e 74 29 2c 42 69 28 44 69 2e 63 75 72 72 65 6e 74 29 Data Ascii: of c.onClick&&(e.onclick=pn)}xn(o,r)&&(t.effectTag\|=4)}null!==t.ref&&(t.effectTag\|=128)}return null;case 6:if(e&&null!=t.stateNode)Ka(0,t,e.memoizedProps,r);else{if("string"!=typeof r&&null===t.stateNode)throw Error(l(166));n=Bi(Ni.current),Bi(Di.current)
2024-10-04 07:32:14 UTC	5	IN	Data Raw: 72 6f 77 20 45 Data Ascii: row E
2024-10-04 07:32:14 UTC	16383	IN	Data Raw: 72 72 6f 72 28 6c 28 33 32 37 29 29 3b 69 66 28 5f 73 28 29 2c 65 3d 3d 3d 44 6c 26 26 74 3d 3d 3d 4e 6c 7c 7c 70 73 28 65 2c 74 29 2c 6e 75 6c 6c 21 3d 3d 52 6c 29 7b 76 61 72 20 6e 3d 4c 6c 3b 4c 6c 7c 3d 41 6c 3b 66 6f 72 28 76 61 72 20 72 3d 67 73 28 29 3b 3b 29 74 72 79 7b 62 73 28 29 3b 62 72 65 61 6b 7d 63 61 74 63 68 28 6f 29 7b 66 73 28 65 2c 6f 29 7d 69 66 28 61 69 28 29 2c 4c 6c 3d 6e 2c 6b 6c 2e 63 75 72 72 65 6e 74 3d 72 2c 31 3d 3d 3d 42 6c 29 74 68 72 6f 77 20 6e 3d 46 6c 2c 70 73 28 65 2c 74 29 2c 56 73 28 65 2c 74 29 2c 6c 73 28 65 29 2c 6e 3b 69 66 28 6e 75 6c 6c 21 3d 3d 52 6c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 32 36 31 29 29 3b 65 2e 66 69 6e 69 73 68 65 64 57 6f 72 6b 3d 65 2e 63 75 72 72 65 6e 74 2e 61 6c 74 65 72 6e 61 74 Data Ascii: rror(l(327));if(_s(),e===Dl&&t===Nl\|\|ps(e,t),null!==Rl){var n=Ll;Ll\|=Al;for(var r=gs();;)try{bs();break}catch(o){fs(e,o)}if(ai(),Ll=n,kl.current=r,1===Bl)throw n=Fl,ps(e,t),Vs(e,t),ls(e),n;if(null!==Rl)throw Error(l(261));e.finishedWork=e.current.alternat
2024-10-04 07:32:14 UTC	16383	IN	Data Raw: 75 6c 6c 2c 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 3a 65 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 7d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 7a 73 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 74 61 67 3d 74 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 3d 65 2c 74 68 69 73 2e 70 69 6e 67 43 61 63 68 65 3d 74 68 69 73 2e 70 65 6e 64 69 6e 67 43 68 69 6c 64 72 65 6e 3d 6e 75 6c 6c 2c 74 68 69 73 2e 66 69 6e 69 73 68 65 64 45 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 30 2c 74 68 69 73 2e 66 69 6e 69 73 68 65 64 57 6f 72 6b 3d 6e 75 6c 6c 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 3d 2d 31 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 Data Ascii: ull,implementation:e.implementation},t}function zs(e,t,n){this.tag=t,this.current=null,this.containerInfo=e,this.pingCache=this.pendingChildren=null,this.finishedExpirationTime=0,this.finishedWork=null,this.timeoutHandle=-1,this.pendingContext=this.contex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49870	152.199.21.175	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 07:32:15 UTC	392	OUT	GET /shared/5/js/login_en_aPH1MdAMytMMq1WvwJPhJA2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 07:32:15 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 775603 Cache-Control: public, max-age=31536000 Content-MD5: 1TOWxsOGVZoUoHLacM8TCg== Content-Type: application/x-javascript Date: Fri, 04 Oct 2024 07:32:15 GMT Etag: 0x8DCD972C3CDB0C7 Last-Modified: Fri, 20 Sep 2024 12:50:11 GMT Server: ECAcc (lhc/794A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 0295bd6c-001e-00b7-7e21-0faccd000000 x-ms-version: 2009-09-19 Content-Length: 946086 Connection: close
2024-10-04 07:32:15 UTC	15653	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6c 6f 67 69 6e 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 3d 7b 35 31 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 39 35 31 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 67 65 74 44 65 72 69 Data Ascii: /! For license information please see login_en.js.LICENSE.txt /!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDeri
2024-10-04 07:32:16 UTC	16383	IN	Data Raw: 22 21 3d 3d 28 6e 3d 65 2e 6e 61 6d 65 29 26 26 28 65 2e 6e 61 6d 65 3d 22 22 29 2c 65 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3d 21 21 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 43 68 65 63 6b 65 64 2c 22 22 21 3d 3d 6e 26 26 28 65 2e 6e 61 6d 65 3d 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 45 65 28 65 2c 74 2c 6e 29 7b 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 3d 3d 65 7c 7c 28 6e 75 6c 6c 3d 3d 6e 3f 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 22 22 2b 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 3a 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 21 3d 3d 22 22 2b 6e 26 26 28 65 2e 64 65 66 61 75 6c 74 56 Data Ascii: "!==(n=e.name)&&(e.name=""),e.defaultChecked=!!e._wrapperState.initialChecked,""!==n&&(e.name=n)}function Ee(e,t,n){"number"===t&&e.ownerDocument.activeElement===e\|\|(null==n?e.defaultValue=""+e._wrapperState.initialValue:e.defaultValue!==""+n&&(e.defaultV
2024-10-04 07:32:16 UTC	16383	IN	Data Raw: 7c 7c 33 3d 3d 3d 74 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 6e 28 65 29 7b 65 3d 65 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 65 3b 29 7b 69 66 28 38 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 6e 3d 65 2e 64 61 74 61 3b 69 66 28 22 24 22 3d 3d 3d 6e 7c 7c 6e 3d 3d 3d 77 6e 7c 7c 6e 3d 3d 3d 76 6e 29 7b 69 66 28 30 3d 3d 3d 74 29 72 65 74 75 72 6e 20 65 3b 74 2d 2d 7d 65 6c 73 65 22 2f 24 22 3d 3d 3d 6e 26 26 74 2b 2b 7d 65 3d 65 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 76 61 72 20 45 6e 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 73 6c 69 63 65 28 32 29 2c 54 6e 3d 22 5f 5f Data Ascii: \|\|3===t)break}return e}function An(e){e=e.previousSibling;for(var t=0;e;){if(8===e.nodeType){var n=e.data;if("$"===n\|\|n===wn\|\|n===vn){if(0===t)return e;t--}else"/$"===n&&t++}e=e.previousSibling}return null}var En=Math.random().toString(36).slice(2),Tn="__
2024-10-04 07:32:16 UTC	16383	IN	Data Raw: 69 6c 64 43 6f 6e 74 65 78 74 3d 69 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 50 6f 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 28 65 3d 65 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 29 7d 66 75 6e 63 74 69 6f 6e 20 78 6f 28 29 7b 6d 6f 28 76 6f 29 2c 6d 6f 28 79 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 6f 28 65 2c 74 2c 6e 29 7b 69 66 28 79 6f 2e 63 75 72 72 65 6e 74 21 3d 3d 62 6f 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 31 36 38 29 29 3b 68 6f 28 79 6f 2c 74 29 2c 68 6f 28 76 6f 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6f 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 65 3d 74 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 2e Data Ascii: ildContext=i),i}function Po(e){return null!=(e=e.childContextTypes)}function xo(){mo(vo),mo(yo)}function Oo(e,t,n){if(yo.current!==bo)throw Error(l(168));ho(yo,t),ho(vo,n)}function _o(e,t,n){var r=e.stateNode;if(e=t.childContextTypes,"function"!=typeof r.
2024-10-04 07:32:16 UTC	16383	IN	Data Raw: 6d 6f 69 7a 65 64 53 74 61 74 65 3d 69 2c 6e 75 6c 6c 3d 3d 3d 74 2e 62 61 73 65 51 75 65 75 65 26 26 28 74 2e 62 61 73 65 53 74 61 74 65 3d 69 29 2c 6e 2e 6c 61 73 74 52 65 6e 64 65 72 65 64 53 74 61 74 65 3d 69 7d 72 65 74 75 72 6e 5b 69 2c 72 5d 7d 66 75 6e 63 74 69 6f 6e 20 61 61 28 65 29 7b 76 61 72 20 74 3d 74 61 28 29 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 65 28 29 29 2c 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 74 2e 62 61 73 65 53 74 61 74 65 3d 65 2c 65 3d 28 65 3d 74 2e 71 75 65 75 65 3d 7b 70 65 6e 64 69 6e 67 3a 6e 75 6c 6c 2c 64 69 73 70 61 74 63 68 3a 6e 75 6c 6c 2c 6c 61 73 74 52 65 6e 64 65 72 65 64 52 65 64 75 63 65 72 3a 72 61 2c 6c 61 73 74 52 65 6e 64 65 72 65 64 53 74 61 Data Ascii: moizedState=i,null===t.baseQueue&&(t.baseState=i),n.lastRenderedState=i}return[i,r]}function aa(e){var t=ta();return"function"==typeof e&&(e=e()),t.memoizedState=t.baseState=e,e=(e=t.queue={pending:null,dispatch:null,lastRenderedReducer:ra,lastRenderedSta
2024-10-04 07:32:16 UTC	16383	IN	Data Raw: 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 63 3d 72 7d 73 6e 28 6f 2c 63 29 3b 76 61 72 20 75 3d 63 3b 66 6f 72 28 61 20 69 6e 20 75 29 69 66 28 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 29 7b 76 61 72 20 64 3d 75 5b 61 5d 3b 22 73 74 79 6c 65 22 3d 3d 3d 61 3f 61 6e 28 65 2c 64 29 3a 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 3d 3d 3d 61 3f 6e 75 6c 6c 21 3d 28 64 3d 64 3f 64 2e 5f 5f 68 74 6d 6c 3a 76 6f 69 64 20 30 29 26 26 48 65 28 65 2c 64 29 3a 22 63 68 69 6c 64 72 65 6e 22 3d 3d 3d 61 3f 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 28 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6f 7c 7c 22 22 21 3d 3d 64 29 26 26 56 65 28 65 2c 64 29 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 64 26 26 Data Ascii: break;default:c=r}sn(o,c);var u=c;for(a in u)if(u.hasOwnProperty(a)){var d=u[a];"style"===a?an(e,d):"dangerouslySetInnerHTML"===a?null!=(d=d?d.__html:void 0)&&He(e,d):"children"===a?"string"==typeof d?("textarea"!==o\|\|""!==d)&&Ve(e,d):"number"==typeof d&&
2024-10-04 07:32:16 UTC	16383	IN	Data Raw: 61 73 74 50 69 6e 67 65 64 54 69 6d 65 3d 72 3b 62 72 65 61 6b 7d 69 66 28 31 30 37 33 37 34 31 38 32 33 21 3d 3d 4d 6c 3f 72 3d 31 30 2a 28 31 30 37 33 37 34 31 38 32 31 2d 4d 6c 29 2d 24 6f 28 29 3a 31 30 37 33 37 34 31 38 32 33 3d 3d 3d 55 6c 3f 72 3d 30 3a 28 72 3d 31 30 2a 28 31 30 37 33 37 34 31 38 32 31 2d 55 6c 29 2d 35 65 33 2c 30 3e 28 72 3d 28 6f 3d 24 6f 28 29 29 2d 72 29 26 26 28 72 3d 30 29 2c 28 6e 3d 31 30 2a 28 31 30 37 33 37 34 31 38 32 31 2d 6e 29 2d 6f 29 3c 28 72 3d 28 31 32 30 3e 72 3f 31 32 30 3a 34 38 30 3e 72 3f 34 38 30 3a 31 30 38 30 3e 72 3f 31 30 38 30 3a 31 39 32 30 3e 72 3f 31 39 32 30 3a 33 65 33 3e 72 3f 33 65 33 3a 34 33 32 30 3e 72 3f 34 33 32 30 3a 31 39 36 30 2a 5f 6c 28 72 2f 31 39 36 30 29 29 2d 72 29 26 26 28 72 3d Data Ascii: astPingedTime=r;break}if(1073741823!==Ml?r=10(1073741821-Ml)-$o():1073741823===Ul?r=0:(r=10(1073741821-Ul)-5e3,0>(r=(o=$o())-r)&&(r=0),(n=10(1073741821-n)-o)<(r=(120>r?120:480>r?480:1080>r?1080:1920>r?1920:3e3>r?3e3:4320>r?4320:1960_l(r/1960))-r)&&(r=
2024-10-04 07:32:16 UTC	16383	IN	Data Raw: 65 2c 65 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 61 2c 65 3b 63 61 73 65 20 64 65 3a 72 65 74 75 72 6e 28 65 3d 44 73 28 31 33 2c 6e 2c 74 2c 69 29 29 2e 74 79 70 65 3d 64 65 2c 65 2e 65 6c 65 6d 65 6e 74 54 79 70 65 3d 64 65 2c 65 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 61 2c 65 3b 63 61 73 65 20 70 65 3a 72 65 74 75 72 6e 28 65 3d 44 73 28 31 39 2c 6e 2c 74 2c 69 29 29 2e 65 6c 65 6d 65 6e 74 54 79 70 65 3d 70 65 2c 65 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 61 2c 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 28 65 29 26 26 6e 75 6c 6c 21 3d 3d 65 29 73 77 69 74 63 68 28 65 2e 24 24 74 79 70 65 6f 66 29 7b 63 61 73 65 20 6c 65 3a 73 3d 31 30 3b 62 72 65 61 6b 20 65 3b 63 61 73 65 20 73 65 3a 73 3d 39 Data Ascii: e,e.expirationTime=a,e;case de:return(e=Ds(13,n,t,i)).type=de,e.elementType=de,e.expirationTime=a,e;case pe:return(e=Ds(19,n,t,i)).elementType=pe,e.expirationTime=a,e;default:if("object"===r(e)&&null!==e)switch(e.$$typeof){case le:s=10;break e;case se:s=9
2024-10-04 07:32:16 UTC	16383	IN	Data Raw: 75 6c 6c 21 3d 3d 65 26 26 6e 75 6c 6c 21 3d 65 2e 6b 65 79 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 22 3d 22 3a 22 3d 30 22 2c 22 3a 22 3a 22 3d 32 22 7d 3b 72 65 74 75 72 6e 22 24 22 2b 28 22 22 2b 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 3a 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 29 7d 28 65 2e 6b 65 79 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 2c 74 29 7b 65 2e 66 75 6e 63 2e 63 61 6c 6c 28 65 2e 63 6f 6e 74 65 78 74 2c 74 2c 65 2e 63 6f 75 6e 74 2b 2b 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 72 65 73 75 6c 74 2c 6f 3d 65 2e 6b 65 79 50 72 65 66 69 78 3b 65 3d 65 2e 66 75 6e 63 2e 63 61 6c 6c 28 Data Ascii: ull!==e&&null!=e.key?function(e){var t={"=":"=0",":":"=2"};return"$"+(""+e).replace(/[=:]/g,(function(e){return t[e]}))}(e.key):t.toString(36)}function B(e,t){e.func.call(e.context,t,e.count++)}function F(e,t,n){var r=e.result,o=e.keyPrefix;e=e.func.call(
2024-10-04 07:32:16 UTC	16383	IN	Data Raw: 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 21 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 79 6d 62 6f 6c 28 29 3b 72 65 74 75 72 6e 21 53 74 72 69 6e 67 28 65 29 7c 7c 21 28 4f 62 6a 65 63 74 28 65 29 69 6e 73 74 61 6e 63 65 6f 66 20 53 79 6d 62 6f 6c 29 7c 7c 21 53 79 6d 62 6f 6c 2e 73 68 61 6d 26 26 72 26 26 72 3c 34 31 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 69 3d 6e 28 34 29 2c 61 3d 6e 28 32 37 29 2c 6c 3d 69 2e 70 72 6f 63 65 73 73 2c 73 3d 69 2e 44 65 6e 6f 2c 63 3d 6c 26 26 6c 2e 76 65 72 73 69 6f 6e 73 7c 7c 73 26 26 73 2e 76 65 72 73 69 6f 6e 2c 75 3d 63 26 26 63 2e 76 38 3b 75 26 26 28 6f 3d 28 72 3d 75 2e 73 70 6c 69 74 28 22 2e 22 29 29 5b 30 5d 3e Data Ascii: .getOwnPropertySymbols&&!o((function(){var e=Symbol();return!String(e)\|\|!(Object(e)instanceof Symbol)\|\|!Symbol.sham&&r&&r<41}))},function(e,t,n){var r,o,i=n(4),a=n(27),l=i.process,s=i.Deno,c=l&&l.versions\|\|s&&s.version,u=c&&c.v8;u&&(o=(r=u.split("."))[0]>

Target ID:	0
Start time:	03:30:17
Start date:	04/10/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\You have late tasks (291Ko).msg"
Imagebase:	0xc60000
File size:	34'446'744 bytes
MD5 hash:	91A5292942864110ED734005B7E005C0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	03:30:24
Start date:	04/10/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "147BB6B8-C38F-4960-B5B0-AAFE9F02DEBF" "4E6B8628-15E5-4F56-9FB8-1D32CD1E329F" "6520" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Imagebase:	0x7ff729b80000
File size:	710'048 bytes
MD5 hash:	EC652BEDD90E089D9406AFED89A8A8BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	03:30:30
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://antiphishing.vadesecure.com/v4?f=V3p0eFlQOUZ4czh2enpJS7X8EsQ1GEgr3XiXNvrl_h0TFd1sJnKdpuJmO2B0vh4-&i=SHV0Y1JZQjNyckJFa3dUQgXEoh1tRXeVvWuRIPHp2UI&k=ZVd0&r=T0hnMlUyVEgwNmlmdHc1NQiaSQdkLBVLn4UMCKzPf4EHOIiUcv9zyd3YdOs9j_Dt0ElKTDeSdUhhf0axuX2euw&s=374fd3b8feffcb580a161121d69c816798e37d8b758cba3fb6985ad2e7e37c06&u=https%3A%2F%2Fchantiersdelatlantique-my.sharepoint.com%2F%3Afl%3A%2Fr%2Fpersonal%2Fpascal_renier_chantiers-atlantique_com%2FDocuments%2FOneNote%2520Loop%2520Files%2FTasklist.loop%3Fd%3Dw47ee182453764abcbb60c50db6a52f3c%26csf%3D1%26web%3D1%26nav%3Dcz0lMkZwZXJzb25hbCUyRnBhc2NhbF9yZW5pZXJfY2hhbnRpZXJzLWF0bGFudGlxdWVfY29tJmQ9YiF4cVM4cUF5aWwwSzFYSVFfaGsxUWlaNE5YSUJkVWZaQWtSaU9XbkwzRlRzTnN2cXJHak9vVGF0T0VfOXNlNzdnJmY9MDEyMkk1VlNSRUREWEVPNVNUWFJGTFdZR0ZCVzNLS0xaNCZjPSUyRiZmbHVpZD0xJnA9JTQwbXMlMkZvZmZpY2UtZmx1aWQtY29udGFpbmVy
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	03:30:30
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1968,i,15811105649717450159,8775413160418026291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report You have late tasks (291Ko).msg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml

C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\A843BD1E-2EAF-44B0-8588-510029B2B0DC

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\1C8D5C05.dat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\3A94F15B.dat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\5D3FC19F.dat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\BE92F14.dat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C254AA42.dat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\DADE4E96.dat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{B29B87F8-6960-44C6-A5B6-B7C6AEB953DB}.tmp

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728027023132735900_E7B650C9-51C0-42DB-BDEC-F0192B87EDC9.log

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728027023133566500_E7B650C9-51C0-42DB-BDEC-F0192B87EDC9.log

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241004T0330170624-6520.etl

C:\Users\user\AppData\Local\Temp\~DF55CEDDF862EEFE47.TMP

C:\Users\user\AppData\Local\Temp\~DFABE4F6AA711E68F2.TMP

C:\Users\user\AppData\Local\Temp\~DFBEC12CC2DF614C7F.TMP

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

C:\Users\user\AppData\Roaming\Microsoft\Outlook\NoEmail.srs

C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC

Windows Analysis Report
You have late tasks (291Ko).msg